$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa File: 3672d2f1-7991-40bd-afef-9cfaf5207b96.roa (raw, json) Hash identifier: TmHW1FTbGQkltp7+r4ZM+TGrxq4B8jj5ZPLvN8WAbEU= Subject key identifier: D4:52:6F:05:8D:E3:11:12:D5:EB:A6:38:03:79:27:0E:94:95:49:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A69247EF43FD77B49461F218BA6BAACA6AF568F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa Signing time: Mon 20 Jul 2026 00:11:01 +0000 ROA not before: Mon 20 Jul 2026 00:11:01 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:69:24:7e:f4:3f:d7:7b:49:46:1f:21:8b:a6:ba:ac:a6:af:56:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:11:01 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=d80bc2cf145d2426f0bcab50e5f683c400bd0b8ff35e4dad6576068c81f23177, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:10:26:7a:c3:00:00:16:48:34:cb:fd:1a: 26:51:9e:d5:60:b0:a3:c5:c9:e2:fc:80:8c:1b:88: 21:f2:4e:fc:ab:80:19:46:5f:19:10:39:d3:eb:48: 5e:ce:dc:9d:8d:7b:8b:7e:cc:19:f3:57:36:78:50: 3b:10:c6:21:76:0c:a0:0c:bb:8a:c9:36:a2:44:0e: 16:8b:39:a4:c5:26:be:f6:49:d0:34:e0:7d:47:d3: 43:45:38:be:f3:80:ee:ad:6a:da:de:46:0e:f8:4d: 69:f4:b6:70:44:91:c9:7f:df:4c:bb:52:86:7c:81: f1:39:5a:32:0d:26:12:aa:97:21:f8:1c:03:0c:09: ae:e1:72:6c:c4:a9:6a:6b:d8:33:19:90:ff:99:76: 2d:fe:26:d0:b5:c5:81:ae:56:39:ee:7a:69:2f:10: 66:61:4c:33:aa:52:ee:43:13:0d:6e:85:73:c8:76: 80:ec:82:31:2c:37:75:0c:7d:72:6c:78:1f:ac:cc: fa:5d:e7:34:0b:f5:7a:e8:a9:a3:92:7e:1a:5d:dc: 5e:07:c0:e3:52:05:79:4c:d3:04:0b:e8:b9:9b:26: fe:2f:38:76:37:8a:38:ec:ce:59:c5:cf:18:be:c7: 87:3f:8c:45:20:c6:80:74:0b:0e:18:19:8a:4c:1d: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:6F:05:8D:E3:11:12:D5:EB:A6:38:03:79:27:0E:94:95:49:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.96.0/22 Signature Algorithm: sha256WithRSAEncryption 61:4e:3b:a8:6e:a6:6c:e5:69:5f:a1:f6:f0:ea:12:70:e1:86: ba:df:02:6f:37:ad:08:82:f8:ee:0f:a3:72:89:b6:85:bc:d5: 10:31:1f:59:c4:31:ca:e2:e9:98:51:5a:8b:a5:45:e3:9a:6d: 83:d8:9a:c8:59:1f:94:30:49:01:51:7b:b7:c9:5a:a1:02:40: ca:a3:c2:03:09:33:1a:66:04:e5:39:b6:af:1f:bf:9f:78:7b: 83:97:8b:ab:ce:6e:5c:3b:20:c0:a0:48:11:c3:1f:6b:9b:95: a2:da:be:37:d9:c9:5d:36:55:07:4a:ec:4f:a7:dd:b6:5e:2c: dd:44:12:70:69:f0:09:20:1a:5e:ac:51:b8:e5:b1:ed:fb:f5: ab:53:c1:be:25:3a:c9:b8:8d:26:0d:98:52:bd:f2:dd:26:b2: 4e:6e:c2:5c:d4:99:4f:5b:dd:fe:43:3e:45:1b:77:c6:d5:3b: a4:83:a8:8c:c2:b2:57:ed:41:35:70:fa:97:5b:0d:66:a9:69: 17:82:de:df:08:df:84:1a:89:a8:05:e5:b5:d8:71:5c:0c:6d: 37:0b:ea:8b:16:0e:56:5b:13:80:2e:21:ec:bb:25:ec:e8:e4: 21:dc:54:b5:cf:87:4c:d6:d3:e2:a6:04:df:8e:3d:09:ea:28: 9e:79:1d:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUamkkfvQ/13tJRh8hi6a6rKavVo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAxMTAxWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODBiYzJjZjE0NWQyNDI2ZjBiY2FiNTBlNWY2ODNjNDAw YmQwYjhmZjM1ZTRkYWQ2NTc2MDY4YzgxZjIzMTc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGfhAmesMAABZINMv9GiZRntVgsKPFyeL8gIwbiCHyTvyr gBlGXxkQOdPrSF7O3J2Ne4t+zBnzVzZ4UDsQxiF2DKAMu4rJNqJEDhaLOaTFJr72 SdA04H1H00NFOL7zgO6tatreRg74TWn0tnBEkcl/30y7UoZ8gfE5WjINJhKqlyH4 HAMMCa7hcmzEqWpr2DMZkP+Zdi3+JtC1xYGuVjnuemkvEGZhTDOqUu5DEw1uhXPI doDsgjEsN3UMfXJseB+szPpd5zQL9XroqaOSfhpd3F4HwONSBXlM0wQL6LmbJv4v OHY3ijjszlnFzxi+x4c/jEUgxoB0Cw4YGYpMHSLhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1FJvBY3jERLV66Y4A3knDpSVSfEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2NzJkMmYxLTc5OTEtNDBiZC1hZmVmLTljZmFmNTIwN2I5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAGAwDQYJKoZIhvcNAQELBQADggEBAGFOO6hupmzlaV+h9vDqEnDhhrrf Am83rQiC+O4Po3KJtoW81RAxH1nEMcri6ZhRWoulReOabYPYmshZH5QwSQFRe7fJ WqECQMqjwgMJMxpmBOU5tq8fv594e4OXi6vOblw7IMCgSBHDH2ublaLavjfZyV02 VQdK7E+n3bZeLN1EEnBp8AkgGl6sUbjlse379atTwb4lOsm4jSYNmFK98t0msk5u wlzUmU9b3f5DPkUbd8bVO6SDqIzCslftQTVw+pdbDWapaReC3t8I34QaiagF5bXY cVwMbTcL6osWDlZbE4AuIey7Jezo5CHcVLXPh0zW0+KmBN+OPQnqKJ55HdE= -----END CERTIFICATE-----Generated at Thu Jul 23 22:49:03 2026 by rpki-client