$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a3aefdd-2281-4c50-a86b-248569ce3189.roa File: 2a3aefdd-2281-4c50-a86b-248569ce3189.roa (raw, json) Hash identifier: a9LnwtyH1BiLeb1qfGFqxrrmH1hg6rhw+600BoIejIA= Subject key identifier: 76:4C:E5:63:F4:87:7B:31:41:04:7C:47:16:06:82:5A:C9:FD:66:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 761D2A89E9C5BAD63EDC5F2658F055F4BA34B4FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a3aefdd-2281-4c50-a86b-248569ce3189.roa Signing time: Sat 18 Jul 2026 00:10:04 +0000 ROA not before: Sat 18 Jul 2026 00:10:04 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 72.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1d:2a:89:e9:c5:ba:d6:3e:dc:5f:26:58:f0:55:f4:ba:34:b4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:10:04 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=d2c90333b03cd333aca4791fc15f45ff76b96858b7fce508e3386ff4eb587f73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:c9:5f:98:95:38:33:8f:ef:11:3a:6b:f8: 3d:52:51:f4:ca:54:2c:e6:1d:1c:12:72:66:b2:67: 44:cb:94:47:46:52:7e:25:e2:c1:77:10:6a:5b:c9: 62:aa:dc:d3:fc:3c:f6:61:97:ba:f2:cf:d1:5b:36: c4:39:c0:9a:d2:ba:f0:52:4c:0d:ea:58:c4:58:8a: 58:38:c1:1e:e6:ce:78:df:06:cd:89:2b:d9:3c:ae: 3a:04:54:88:d7:2c:be:1a:04:b8:e8:06:d2:f7:6b: e0:b9:b9:a3:de:a6:93:f3:e9:7b:9d:b1:1b:d3:0e: 76:75:25:07:74:df:ca:96:8d:85:aa:5c:be:b0:e4: 37:c6:72:0c:0b:36:1c:69:52:52:76:09:da:09:8e: 88:d1:a4:5f:e0:bb:ad:28:13:5a:4e:a5:b3:fb:ad: b6:d6:72:3e:f3:9e:14:02:6e:0d:b9:2b:41:f0:37: d0:0b:ec:e3:5c:5d:b5:03:b3:56:41:5b:a6:c8:b2: ab:03:e6:93:23:e8:52:ac:7f:c4:b5:4a:a2:92:76: a9:49:f7:27:db:fc:38:b9:22:5d:d9:39:e3:30:58: 39:67:b7:d9:6d:04:ca:dc:fe:c2:52:8f:d2:21:17: 55:8a:ad:b4:14:7a:35:01:1c:7c:9c:d6:cf:c1:65: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:E5:63:F4:87:7B:31:41:04:7C:47:16:06:82:5A:C9:FD:66:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a3aefdd-2281-4c50-a86b-248569ce3189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:17:3e:c4:1c:63:10:15:53:5a:2d:52:21:fb:82:4a:5e:9c: 1c:48:6a:a5:87:e9:03:61:57:3d:fa:ee:fe:77:aa:09:f9:a2: d7:73:15:3f:9d:ca:89:9c:bb:9c:45:61:ab:c9:56:fe:05:96: 17:5c:d0:d7:d3:e8:94:b8:a7:93:cd:80:93:0a:76:5a:53:bd: e5:3c:52:34:d4:07:07:af:43:61:3f:31:f3:01:af:a6:80:a8: 52:36:88:72:01:d1:cd:d0:65:67:02:3f:c3:04:3d:36:e1:2e: 8f:f1:64:a4:e4:89:6c:5e:f2:ea:57:91:e0:91:f5:fb:82:6a: c8:47:af:f4:bb:78:6c:e6:c8:1e:fd:ed:50:36:9f:0b:36:dc: 81:65:12:40:94:aa:93:e9:b9:e3:3e:80:c3:a0:f9:91:6d:44: 50:91:03:83:25:ab:35:41:21:c7:81:99:48:d9:11:57:ab:06: 2a:f7:1c:7b:b8:61:d2:f4:b3:0e:c2:b9:e4:58:64:11:8c:96: 7a:41:1a:a0:2c:92:86:2d:33:7e:81:80:79:11:42:dc:fc:f7: fd:b7:a0:dc:40:32:38:f7:f1:a0:d5:e3:42:fe:81:fd:cf:da: d3:0e:1c:4e:2a:82:d0:bf:2e:a8:0d:b4:09:a0:1f:3e:a6:0d: 19:1e:3f:89 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdh0qienFutY+3F8mWPBV9Lo0tP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAxMDA0WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmM5MDMzM2IwM2NkMzMzYWNhNDc5MWZjMTVmNDVmZjc2 Yjk2ODU4YjdmY2U1MDhlMzM4NmZmNGViNTg3ZjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5fslfmJU4M4/vETpr+D1SUfTKVCzmHRwScmayZ0TLlEdG Un4l4sF3EGpbyWKq3NP8PPZhl7ryz9FbNsQ5wJrSuvBSTA3qWMRYilg4wR7mznjf Bs2JK9k8rjoEVIjXLL4aBLjoBtL3a+C5uaPeppPz6XudsRvTDnZ1JQd038qWjYWq XL6w5DfGcgwLNhxpUlJ2CdoJjojRpF/gu60oE1pOpbP7rbbWcj7znhQCbg25K0Hw N9AL7ONcXbUDs1ZBW6bIsqsD5pMj6FKsf8S1SqKSdqlJ9yfb/Di5Il3ZOeMwWDln t9ltBMrc/sJSj9IhF1WKrbQUejUBHHyc1s/BZaG7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdkzlY/SHezFBBHxHFgaCWsn9ZhkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhM2FlZmRkLTIyODEtNGM1MC1hODZiLTI0ODU2OWNlMzE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBIljANBgkqhkiG9w0BAQsFAAOCAQEAXhc+xBxjEBVTWi1SIfuCSl6cHEhq pYfpA2FXPfru/neqCfmi13MVP53KiZy7nEVhq8lW/gWWF1zQ19PolLink82Akwp2 WlO95TxSNNQHB69DYT8x8wGvpoCoUjaIcgHRzdBlZwI/wwQ9NuEuj/FkpOSJbF7y 6leR4JH1+4JqyEev9Lt4bObIHv3tUDafCzbcgWUSQJSqk+m54z6Aw6D5kW1EUJED gyWrNUEhx4GZSNkRV6sGKvcce7hh0vSzDsK55FhkEYyWekEaoCyShi0zfoGAeRFC 3Pz3/beg3EAyOPfxoNXjQv6B/c/a0w4cTiqC0L8uqA20CaAfPqYNGR4/iQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:18 2026 by rpki-client