$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24e285a2-ee70-4e7c-b415-984b31169af1.roa File: 24e285a2-ee70-4e7c-b415-984b31169af1.roa (raw, json) Hash identifier: oilIBWlD4TTgJURV39LfLaCWjIfUP7BUpJjn5iLUTKU= Subject key identifier: B1:8E:3E:90:DB:91:37:54:69:B2:CA:AB:04:3B:AC:E4:1D:C9:F4:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EF411528FCC365CF0387B14EB582FC6CFBE98A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24e285a2-ee70-4e7c-b415-984b31169af1.roa Signing time: Thu 16 Jul 2026 00:10:47 +0000 ROA not before: Thu 16 Jul 2026 00:10:47 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.193.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f4:11:52:8f:cc:36:5c:f0:38:7b:14:eb:58:2f:c6:cf:be:98:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:10:47 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=76a639a4f92af7937ed675447d87fe864c6930c4927cf6c1d367bf17706197a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:36:ee:78:cb:d1:82:73:db:a1:c2:e7:d9: 3b:bf:ce:be:03:57:01:f8:82:3d:b7:5a:f5:cb:ef: 96:4c:7d:a9:a5:f7:db:4c:e2:d3:c2:ab:1c:3c:17: be:44:86:cf:0a:db:ee:7d:f5:61:2d:1b:f9:1f:6e: b1:63:e0:15:1c:b3:ef:03:8d:8c:5f:41:a3:7a:df: c1:af:e0:25:31:d3:2b:bc:c1:0f:aa:6d:c2:b1:7d: 08:f2:a1:39:5f:27:8a:02:3a:a6:3a:39:75:5b:c5: 2c:de:ff:7b:3a:cd:d0:2c:4c:1b:db:b7:9e:95:8a: 51:10:a6:8c:38:0a:da:f2:31:a8:83:e6:ab:19:ef: 5b:9b:49:bb:13:d2:c8:87:07:12:a5:cd:e4:59:db: 1e:56:ff:dd:13:3d:e2:ff:d9:7d:05:08:5e:03:45: 79:12:a0:2b:f6:b7:fb:3d:ac:b4:d6:fa:ef:d1:17: 47:92:db:67:b8:b7:6c:94:39:02:05:27:9b:95:44: 96:49:e6:f1:c8:47:59:01:46:00:24:10:94:08:1f: a2:63:80:1f:3c:c1:54:e0:49:0c:4b:72:70:fb:a3: 31:81:63:8b:b0:6e:e0:8b:29:d3:f5:18:b9:d4:37: 9e:25:23:f6:bc:da:c5:2c:9f:60:a3:f9:32:bc:c5: 4c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8E:3E:90:DB:91:37:54:69:B2:CA:AB:04:3B:AC:E4:1D:C9:F4:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24e285a2-ee70-4e7c-b415-984b31169af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:79:0e:85:2d:ea:8d:ab:d8:0a:9a:36:4f:bc:16:3a:13:7f: f5:c7:b8:8a:df:00:45:13:2f:92:6a:a2:83:88:da:32:b6:ea: cc:af:47:3d:15:4c:3e:6d:bc:80:c9:db:3d:12:4f:2c:2e:b8: 13:a6:76:ed:21:6b:5d:ca:0a:95:39:c3:2e:77:72:6a:0b:7a: 71:9b:8b:07:c0:93:ac:37:ed:4d:9b:d0:b0:a2:e8:46:2a:26: 35:9c:b4:8a:99:91:e6:02:fa:b7:88:6a:23:2d:2f:9a:24:4d: 65:88:dc:c6:53:ea:6a:73:7c:71:d7:27:9e:7d:6a:90:d0:48: 95:18:14:9c:ca:5e:67:94:04:fd:dc:82:f7:03:18:9f:a0:a0: d4:46:b5:30:1a:09:82:2f:15:8a:f6:e8:53:f5:63:c9:65:0e: 5a:f7:e2:0e:93:04:cf:0d:e6:a6:de:c1:e8:2b:f5:98:c4:ff: 7d:df:49:8d:84:d4:aa:13:04:87:4b:74:6c:d9:14:a8:ef:ba: 93:41:09:c0:6b:09:2a:ab:ee:f1:4d:94:a2:6a:eb:2d:20:7d: 41:bb:4c:49:58:8b:77:05:43:b9:b4:5a:76:e4:fd:37:39:46: b3:62:a4:7d:65:bc:ad:46:d2:47:8d:a2:35:7e:a0:d4:9c:e7: 0a:ad:44:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULvQRUo/MNlzwOHsU61gvxs++mKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMDQ3WhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmE2MzlhNGY5MmFmNzkzN2VkNjc1NDQ3ZDg3ZmU4NjRj NjkzMGM0OTI3Y2Y2YzFkMzY3YmYxNzcwNjE5N2E2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHKjbueMvRgnPbocLn2Tu/zr4DVwH4gj23WvXL75ZMfaml 99tM4tPCqxw8F75Ehs8K2+599WEtG/kfbrFj4BUcs+8DjYxfQaN638Gv4CUx0yu8 wQ+qbcKxfQjyoTlfJ4oCOqY6OXVbxSze/3s6zdAsTBvbt56VilEQpow4CtryMaiD 5qsZ71ubSbsT0siHBxKlzeRZ2x5W/90TPeL/2X0FCF4DRXkSoCv2t/s9rLTW+u/R F0eS22e4t2yUOQIFJ5uVRJZJ5vHIR1kBRgAkEJQIH6JjgB88wVTgSQxLcnD7ozGB Y4uwbuCLKdP1GLnUN54lI/a82sUsn2Cj+TK8xUyBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsY4+kNuRN1RpssqrBDus5B3J9M8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0ZTI4NWEyLWVlNzAtNGU3Yy1iNDE1LTk4NGIzMTE2OWFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANwTANBgkqhkiG9w0BAQsFAAOCAQEAIHkOhS3qjavYCpo2T7wWOhN/9ce4 it8ARRMvkmqig4jaMrbqzK9HPRVMPm28gMnbPRJPLC64E6Z27SFrXcoKlTnDLndy agt6cZuLB8CTrDftTZvQsKLoRiomNZy0ipmR5gL6t4hqIy0vmiRNZYjcxlPqanN8 cdcnnn1qkNBIlRgUnMpeZ5QE/dyC9wMYn6Cg1Ea1MBoJgi8VivboU/VjyWUOWvfi DpMEzw3mpt7B6Cv1mMT/fd9JjYTUqhMEh0t0bNkUqO+6k0EJwGsJKqvu8U2Uomrr LSB9QbtMSViLdwVDubRaduT9NzlGs2KkfWW8rUbSR42iNX6g1JznCq1ERQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:57 2026 by rpki-client