$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe86e97-0ad2-42b7-acf0-3df980266ba5.roa File: 2fe86e97-0ad2-42b7-acf0-3df980266ba5.roa (raw, json) Hash identifier: RPKBJt/Pm1D0sv+aZe0hs0Wf2apS6vuW/4jO5lC1Nic= Subject key identifier: 40:B7:AA:AF:67:E5:E0:7C:53:4A:1F:53:6D:FF:65:1C:C8:85:B1:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AE874E0156835674DF34C996AEC8D2C1E7812BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe86e97-0ad2-42b7-acf0-3df980266ba5.roa Signing time: Thu 23 Jul 2026 01:00:13 +0000 ROA not before: Thu 23 Jul 2026 01:00:13 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.68.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e8:74:e0:15:68:35:67:4d:f3:4c:99:6a:ec:8d:2c:1e:78:12:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 01:00:13 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=8e5cd93fdc57625ab3348016d055d64240d1059202c298751825ecc4f8a87703, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:3c:ba:e9:63:99:50:c5:8c:09:6b:70:73: a6:b7:33:61:47:9d:52:b3:3d:b5:43:c9:53:de:23: b3:cf:8f:a0:c1:0b:19:2a:94:e7:51:18:aa:59:37: c5:d5:e3:98:7b:81:ab:bc:d8:7d:3a:f2:95:7b:50: 8e:f9:de:d5:af:28:0f:8d:72:c5:74:85:7f:6d:4b: f9:9c:9c:7f:4e:ac:3a:8d:0e:32:83:d7:c4:02:ae: 3c:63:80:be:9d:20:6a:32:bf:9c:a0:2a:b8:b8:85: 55:46:85:c2:a3:56:74:b1:78:dd:f6:44:0e:73:d5: 87:f0:b3:2f:78:93:44:ce:3b:08:e2:90:4e:39:97: 86:24:3a:4a:f9:5a:c8:44:68:ba:c5:a4:91:bb:02: 31:21:f9:4f:96:85:de:b9:96:18:62:1d:be:ef:59: b7:f3:11:2e:ad:b0:f0:81:af:81:2d:40:8f:3c:40: 14:e8:38:ec:d4:36:85:b0:d6:57:9c:d6:70:1a:e4: 06:37:de:40:4a:09:30:f4:b3:0d:af:2b:6b:ea:0a: 69:48:34:22:84:b0:9d:ac:f7:9f:a5:fc:2d:d8:ec: 10:2b:79:df:5e:83:fd:1e:0b:f9:96:3b:c0:08:be: e2:cc:f6:fc:24:e5:f2:cb:59:a5:4b:f8:a8:a5:ea: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:AA:AF:67:E5:E0:7C:53:4A:1F:53:6D:FF:65:1C:C8:85:B1:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe86e97-0ad2-42b7-acf0-3df980266ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.68.36.0/23 Signature Algorithm: sha256WithRSAEncryption c8:30:01:e7:e4:ac:05:4a:f4:f3:8a:bc:98:0e:be:27:87:2d: 71:1d:c1:24:34:00:3f:a0:5b:a4:51:6e:f3:24:e7:61:48:aa: c0:d9:75:4f:67:9d:74:41:c9:3b:be:8f:3c:72:86:0d:90:4a: ee:6b:4a:ac:36:74:85:36:5f:f0:bf:df:5e:87:36:c0:04:c7: 74:d7:24:f8:f1:f3:d4:e9:62:72:1c:d7:93:16:50:c2:ef:2a: ae:64:46:b8:ca:29:ea:f4:b6:3c:19:db:76:d6:6a:56:a8:86: e1:1d:95:28:bb:6a:70:af:2b:f6:8f:c2:7a:ae:ec:27:bb:4d: d9:87:a2:d8:5b:53:a0:4d:0e:18:2a:7b:43:4c:f1:50:d0:09: b2:0f:d9:2a:49:27:57:4f:6c:e4:ac:47:1b:3b:55:28:0a:e7: b7:49:05:df:86:a6:f3:62:4e:81:95:40:cb:a6:a6:cf:e5:0c: a3:fb:2b:f2:29:24:25:84:d4:ff:7c:fc:aa:85:06:62:69:c9: f8:7b:bb:12:e4:6e:f7:1f:3c:9d:a3:11:8e:dc:5f:45:98:0d: b5:16:34:3c:fd:c2:01:59:30:f0:6b:1d:3c:47:5a:44:42:24: 50:38:6c:7c:0c:0b:36:9f:e8:91:b9:98:f0:d7:26:3d:8a:40: 10:21:f2:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOuh04BVoNWdN80yZauyNLB54Er4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDEwMDEzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTVjZDkzZmRjNTc2MjVhYjMzNDgwMTZkMDU1ZDY0MjQw ZDEwNTkyMDJjMjk4NzUxODI1ZWNjNGY4YTg3NzAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRPjy66WOZUMWMCWtwc6a3M2FHnVKzPbVDyVPeI7PPj6DB CxkqlOdRGKpZN8XV45h7gau82H068pV7UI753tWvKA+NcsV0hX9tS/mcnH9OrDqN DjKD18QCrjxjgL6dIGoyv5ygKri4hVVGhcKjVnSxeN32RA5z1Yfwsy94k0TOOwji kE45l4YkOkr5WshEaLrFpJG7AjEh+U+Whd65lhhiHb7vWbfzES6tsPCBr4EtQI88 QBToOOzUNoWw1lec1nAa5AY33kBKCTD0sw2vK2vqCmlINCKEsJ2s95+l/C3Y7BAr ed9eg/0eC/mWO8AIvuLM9vwk5fLLWaVL+Kil6so7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQLeqr2fl4HxTSh9Tbf9lHMiFsRswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmZTg2ZTk3LTBhZDItNDJiNy1hY2YwLTNkZjk4MDI2NmJhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE4RCQwDQYJKoZIhvcNAQELBQADggEBAMgwAefkrAVK9POKvJgOvieHLXEd wSQ0AD+gW6RRbvMk52FIqsDZdU9nnXRByTu+jzxyhg2QSu5rSqw2dIU2X/C/316H NsAEx3TXJPjx89TpYnIc15MWUMLvKq5kRrjKKer0tjwZ23bWalaohuEdlSi7anCv K/aPwnqu7Ce7TdmHothbU6BNDhgqe0NM8VDQCbIP2SpJJ1dPbOSsRxs7VSgK57dJ Bd+GpvNiToGVQMumps/lDKP7K/IpJCWE1P98/KqFBmJpyfh7uxLkbvcfPJ2jEY7c X0WYDbUWNDz9wgFZMPBrHTxHWkRCJFA4bHwMCzaf6JG5mPDXJj2KQBAh8mI= -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:20 2026 by rpki-client