$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b05ff04-a050-4f23-a421-c71257af8dbd.roa File: 3b05ff04-a050-4f23-a421-c71257af8dbd.roa (raw, json) Hash identifier: RofKmCToi5WKNMKxxwFt4UXQcekDnvn55sWIicByEvY= Subject key identifier: 34:3E:15:3E:27:15:B0:25:C4:EE:E0:97:91:04:BA:AB:A8:E7:92:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74BCCB5512FFFDBCC54874FF3B9433963BE135E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b05ff04-a050-4f23-a421-c71257af8dbd.roa Signing time: Tue 21 Jul 2026 00:50:49 +0000 ROA not before: Tue 21 Jul 2026 00:50:49 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.33.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bc:cb:55:12:ff:fd:bc:c5:48:74:ff:3b:94:33:96:3b:e1:35:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 00:50:49 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=afe04dc2a0d27fd6cab7717ba564c0aceca7544882742e3b43eef6368e93b395, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:52:69:b6:a0:ea:ca:40:e4:7b:de:6a:4a: b7:33:4b:7d:09:d6:be:64:2a:c5:fc:17:2d:06:8f: 7f:93:28:7f:38:f4:d8:9a:4f:07:4d:7b:1f:3f:8f: e1:35:4f:98:fa:a8:74:d2:a8:9b:08:1a:c4:f0:fd: 04:ad:46:b7:00:ce:ef:65:58:a6:15:08:a8:0a:26: d8:3d:cc:50:c8:12:f1:eb:30:64:5e:ae:21:84:1c: 47:37:55:07:55:90:3c:05:58:2a:15:1f:9a:a2:99: e6:b5:9b:5e:20:33:52:17:26:cc:6d:15:a0:35:07: be:30:06:1c:44:b3:b6:fa:d7:88:40:76:59:0c:28: 81:62:55:ce:30:f1:d6:27:67:33:42:a9:ca:47:b2: 30:fd:fc:ba:79:c9:22:d2:a5:9a:bf:25:4c:85:98: c1:ae:33:ba:ca:50:41:31:43:92:9a:c5:e6:a7:18: e4:b8:ee:78:08:df:99:5e:cc:ef:ab:e6:1a:e5:b4: b3:08:bb:3f:d3:72:8a:21:82:13:17:6a:ec:d5:ef: 5b:8f:8e:4a:55:56:e4:f6:07:4f:86:30:15:20:c0: 34:68:ed:d3:bb:a0:12:60:47:a1:99:ca:d1:3b:5c: 03:a9:7f:ea:88:51:c5:12:8b:a9:c6:34:b3:0e:f2: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:15:3E:27:15:B0:25:C4:EE:E0:97:91:04:BA:AB:A8:E7:92:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b05ff04-a050-4f23-a421-c71257af8dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.33.96.0/19 Signature Algorithm: sha256WithRSAEncryption 67:7f:7f:ca:ea:72:d6:23:05:81:d5:63:83:62:11:7b:02:94: 0b:d8:b0:1d:cd:60:b6:de:11:a9:52:0e:f3:a7:6f:e3:fe:c9: b7:c7:d1:e5:25:5e:2a:cc:27:ad:65:92:0f:a4:c9:f8:05:c3: af:62:04:1c:a2:4b:6b:03:ac:0f:f8:6d:e9:d5:0e:e5:a4:f7: 31:02:0c:02:5c:72:12:a9:92:c7:f3:e2:e8:5f:4d:44:17:65: 15:70:ca:ed:7e:dd:46:20:6a:03:be:5b:09:8c:03:91:c9:13: 03:39:bd:4e:db:00:04:43:53:51:55:93:ee:db:17:d9:72:10: f6:4e:fe:9e:7a:f6:06:c9:ab:32:62:65:9a:5a:56:e3:70:f1: 6b:40:8c:d2:70:3f:2a:11:7e:d4:7d:77:0c:1f:92:ed:a3:f9: 2f:8b:95:f9:07:35:4b:0e:57:94:b0:16:64:2b:82:08:f2:7c: ee:d4:b1:63:3c:8b:61:31:4d:03:9f:5b:1f:db:4a:16:0c:b8: 52:a6:d8:a0:5f:df:33:bc:cf:29:83:01:81:a2:b9:d7:14:22: bf:fc:6b:d8:34:ab:e1:1d:1f:7b:20:7a:2e:3a:57:49:94:99: d3:91:54:7f:f2:3c:1e:d5:61:38:af:7c:fd:8a:69:38:6e:d2: ab:6f:61:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdLzLVRL//bzFSHT/O5QzljvhNekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDA1MDQ5WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmUwNGRjMmEwZDI3ZmQ2Y2FiNzcxN2JhNTY0YzBhY2Vj YTc1NDQ4ODI3NDJlM2I0M2VlZjYzNjhlOTNiMzk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPLFJptqDqykDke95qSrczS30J1r5kKsX8Fy0Gj3+TKH84 9NiaTwdNex8/j+E1T5j6qHTSqJsIGsTw/QStRrcAzu9lWKYVCKgKJtg9zFDIEvHr MGReriGEHEc3VQdVkDwFWCoVH5qimea1m14gM1IXJsxtFaA1B74wBhxEs7b614hA dlkMKIFiVc4w8dYnZzNCqcpHsjD9/Lp5ySLSpZq/JUyFmMGuM7rKUEExQ5Kaxean GOS47ngI35lezO+r5hrltLMIuz/TcoohghMXauzV71uPjkpVVuT2B0+GMBUgwDRo 7dO7oBJgR6GZytE7XAOpf+qIUcUSi6nGNLMO8nTzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUND4VPicVsCXE7uCXkQS6q6jnknUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMDVmZjA0LWEwNTAtNGYyMy1hNDIxLWM3MTI1N2FmOGRiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMIWAwDQYJKoZIhvcNAQELBQADggEBAGd/f8rqctYjBYHVY4NiEXsClAvY sB3NYLbeEalSDvOnb+P+ybfH0eUlXirMJ61lkg+kyfgFw69iBByiS2sDrA/4benV DuWk9zECDAJcchKpksfz4uhfTUQXZRVwyu1+3UYgagO+WwmMA5HJEwM5vU7bAARD U1FVk+7bF9lyEPZO/p569gbJqzJiZZpaVuNw8WtAjNJwPyoRftR9dwwfku2j+S+L lfkHNUsOV5SwFmQrggjyfO7UsWM8i2ExTQOfWx/bShYMuFKm2KBf3zO8zymDAYGi udcUIr/8a9g0q+EdH3sgei46V0mUmdORVH/yPB7VYTivfP2KaThu0qtvYUo= -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:14 2026 by rpki-client