$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3819daa1-d9d8-4229-a37a-3c8fa9024396.roa File: 3819daa1-d9d8-4229-a37a-3c8fa9024396.roa (raw, json) Hash identifier: OTX5TQaPwPcNQi6gIsdLuspbQUReq+NZAoLRnALvhn8= Subject key identifier: 3F:DC:B0:02:95:29:5B:C6:3C:FD:CD:FE:24:89:29:79:6E:EE:40:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A68DF2187F7DE0ECB75130E1FC6860E06764157 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3819daa1-d9d8-4229-a37a-3c8fa9024396.roa Signing time: Thu 16 Jul 2026 00:10:42 +0000 ROA not before: Thu 16 Jul 2026 00:10:42 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.142.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:68:df:21:87:f7:de:0e:cb:75:13:0e:1f:c6:86:0e:06:76:41:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:10:42 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=234b7cd5ea69186515a0106e8b6321b14995c5af8befca5f92b911175034f7ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:3e:1f:55:ef:d9:76:b6:c6:ad:aa:ab:f3: 82:60:b1:e7:28:fd:8b:bc:60:c3:bb:b0:72:4c:3f: da:4c:f6:fc:db:be:72:d5:09:06:ca:81:4b:91:97: a3:c2:a3:2a:0f:2a:b4:a6:3a:76:4e:a1:9c:5e:2b: 8b:69:0f:c0:e7:f7:78:23:f9:b4:a5:14:50:97:72: 79:df:dd:d4:1c:54:63:e0:28:43:4a:58:3b:49:c4: 61:9b:54:56:0b:c4:84:d4:c1:02:12:15:37:22:17: 42:05:dc:90:91:4e:b4:cc:5e:5c:e3:50:f3:26:c5: fb:1e:39:df:ca:55:65:da:03:f8:fd:d0:a5:51:95: 79:3b:e7:6b:f6:9b:1b:39:12:9e:ba:1f:0f:52:90: c4:7a:a9:42:81:73:5c:2f:76:3e:24:02:4b:ed:90: 3d:6e:bd:34:8b:15:f6:63:07:63:ad:37:3a:11:fe: 53:d6:95:56:90:b9:ff:f7:b7:f0:f6:94:ff:96:7a: 25:65:c5:3e:ae:7f:ce:8a:48:46:31:16:a3:52:fa: 70:e4:b9:a1:bf:43:06:f2:98:a2:4e:3c:ee:06:36: 38:92:4f:e5:6e:e3:9b:c3:58:82:5e:20:c1:ea:1f: 31:b0:50:78:3b:28:ec:7d:bf:be:42:39:54:92:43: be:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DC:B0:02:95:29:5B:C6:3C:FD:CD:FE:24:89:29:79:6E:EE:40:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3819daa1-d9d8-4229-a37a-3c8fa9024396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.142.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:ee:b0:fe:c2:8c:ef:91:18:71:da:0a:7a:a6:c1:1f:49:af: cc:d1:cf:cf:b2:69:ed:d7:14:6b:5c:ac:4a:89:db:9a:44:99: 06:44:cf:ee:b6:4c:33:48:bf:fc:46:55:16:86:56:63:62:59: 48:22:71:8b:b0:0d:7a:15:a9:7c:2c:60:c2:e3:63:4c:58:8b: 9d:90:e3:16:43:ca:05:0b:39:a2:b2:d5:4b:24:7f:a2:67:d8: 24:03:f5:16:07:7e:33:ff:cf:6a:62:1b:55:19:2a:da:2d:1a: bb:02:bc:fc:a4:6a:82:da:e1:7b:30:5b:92:c5:55:fb:be:d4: ab:58:33:0c:b8:70:27:be:68:f2:b7:09:bb:82:78:3f:67:8e: 8a:a4:5c:a2:86:c9:0e:78:72:76:25:94:31:c1:f2:d8:f0:a8: be:0d:c8:c4:ab:fb:fa:a2:0d:74:96:6a:fc:1f:8c:f5:d2:94: 3b:8e:8d:d8:18:c0:73:41:e9:d8:ac:18:c2:82:71:e4:ca:ec: 23:dc:00:f0:ca:44:5f:1f:73:d8:20:70:c6:e2:2f:48:75:c2: 90:b5:ca:0b:3a:13:23:23:22:1d:4f:43:08:e8:2d:5f:6f:33: 2a:d6:87:ce:48:1c:87:2e:f6:3f:da:53:03:25:40:62:e6:7e: ab:cb:46:33 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUamjfIYf33g7LdRMOH8aGDgZ2QVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMDQyWhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzRiN2NkNWVhNjkxODY1MTVhMDEwNmU4YjYzMjFiMTQ5 OTVjNWFmOGJlZmNhNWY5MmI5MTExNzUwMzRmN2VmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLYT4fVe/ZdrbGraqr84Jgseco/Yu8YMO7sHJMP9pM9vzb vnLVCQbKgUuRl6PCoyoPKrSmOnZOoZxeK4tpD8Dn93gj+bSlFFCXcnnf3dQcVGPg KENKWDtJxGGbVFYLxITUwQISFTciF0IF3JCRTrTMXlzjUPMmxfseOd/KVWXaA/j9 0KVRlXk752v2mxs5Ep66Hw9SkMR6qUKBc1wvdj4kAkvtkD1uvTSLFfZjB2OtNzoR /lPWlVaQuf/3t/D2lP+WeiVlxT6uf86KSEYxFqNS+nDkuaG/QwbymKJOPO4GNjiS T+Vu45vDWIJeIMHqHzGwUHg7KOx9v75COVSSQ76xAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUP9ywApUpW8Y8/c3+JIkpeW7uQPgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MTlkYWExLWQ5ZDgtNDIyOS1hMzdhLTNjOGZhOTAyNDM5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCQjjANBgkqhkiG9w0BAQsFAAOCAQEAQO6w/sKM75EYcdoKeqbBH0mvzNHP z7Jp7dcUa1ysSonbmkSZBkTP7rZMM0i//EZVFoZWY2JZSCJxi7ANehWpfCxgwuNj TFiLnZDjFkPKBQs5orLVSyR/omfYJAP1Fgd+M//PamIbVRkq2i0auwK8/KRqgtrh ezBbksVV+77Uq1gzDLhwJ75o8rcJu4J4P2eOiqRcoobJDnhydiWUMcHy2PCovg3I xKv7+qINdJZq/B+M9dKUO46N2BjAc0Hp2KwYwoJx5MrsI9wA8MpEXx9z2CBwxuIv SHXCkLXKCzoTIyMiHU9DCOgtX28zKtaHzkgchy72P9pTAyVAYuZ+q8tGMw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:39 2026 by rpki-client