$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/423ab5d9-486f-4148-a91c-859792458d5c.roa File: 423ab5d9-486f-4148-a91c-859792458d5c.roa (raw, json) Hash identifier: nPgRPwgMXL7pcxQw1MRxYyYVzrIsZcEd3ckxS2vZm3o= Subject key identifier: F1:37:C8:B4:0D:9F:9D:9C:54:FB:E9:5A:D6:36:BE:27:D8:6C:48:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C6A3798EB02DB1D41E8DBEE5CFFAA52803CD21C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/423ab5d9-486f-4148-a91c-859792458d5c.roa Signing time: Fri 17 Jul 2026 00:11:08 +0000 ROA not before: Fri 17 Jul 2026 00:11:08 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.99.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6a:37:98:eb:02:db:1d:41:e8:db:ee:5c:ff:aa:52:80:3c:d2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:11:08 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=9cfffc35cc04ce717da439d4b14ed6d6ade5e0baf694dccc0fcc282844898c00, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:6e:e2:d1:e4:50:7b:16:63:e8:c4:63:b0: 87:a4:69:6f:8a:b4:4d:a6:5e:a9:f1:12:45:dd:76: c3:51:68:90:4b:ef:05:92:3b:f1:e0:32:53:03:8b: 98:1b:9e:80:ff:55:11:76:3a:a7:ad:7e:db:23:ca: 67:07:5f:e2:18:b5:7c:05:69:3d:e7:e3:1b:e7:d1: 3b:c1:78:ec:64:17:26:5c:d8:60:97:5d:4f:9a:a5: e3:d6:83:80:56:db:3b:6d:b8:bf:20:5d:62:e5:42: 63:bf:6f:bb:42:28:90:c8:21:c6:c3:89:1a:86:3a: 4e:cf:b5:37:8c:a8:1b:9a:20:b9:32:fe:b4:9b:e5: 8f:1a:dc:dd:b6:0c:11:31:35:aa:bd:46:be:52:75: 87:d1:0d:54:d1:5a:5e:d1:21:8f:aa:eb:cf:6b:2e: 05:6f:c1:4c:62:bb:bb:70:e7:12:e9:05:ae:e0:79: 25:fe:94:0b:78:c6:2c:65:a9:b2:9d:b4:24:c4:8b: 76:f2:35:c1:bd:e0:ce:17:4e:2e:6b:fe:1d:99:c5: 3c:7d:b2:cc:1c:42:2d:ec:7e:cf:ea:52:3d:48:e7: b9:eb:27:09:fd:a5:45:07:fc:30:4b:40:f7:14:52: e6:85:4d:74:7e:b9:2d:6b:78:20:ee:d5:d9:f4:27: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:C8:B4:0D:9F:9D:9C:54:FB:E9:5A:D6:36:BE:27:D8:6C:48:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/423ab5d9-486f-4148-a91c-859792458d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.99.2.0/24 Signature Algorithm: sha256WithRSAEncryption b7:ee:03:04:d6:bc:8f:a3:c8:cf:f5:c8:ae:43:c0:d1:a8:20: fe:de:68:ec:9f:c6:74:5d:20:f3:60:c6:66:df:dc:a8:94:d7: 9a:b6:42:a0:52:61:e8:ca:75:7d:87:78:b8:85:6e:3e:f9:85: 8e:ac:4b:68:25:90:08:f8:69:5b:4c:e8:d0:13:1f:b8:d3:32: 47:5b:a2:d1:b9:66:7b:20:a1:1c:43:96:07:8d:b7:eb:d9:24: 76:1a:97:38:1f:ea:34:7c:bc:e6:e0:27:54:08:47:1a:11:6e: 14:50:ad:34:a9:0e:87:63:73:90:98:6c:da:c7:7b:2b:19:44: 54:aa:7d:de:6e:54:66:3d:2c:8f:39:bb:21:fb:ff:e5:fe:54: da:76:0f:18:cf:0f:63:fe:4c:0d:39:09:6c:64:6a:8a:15:95: 18:9d:39:aa:49:5e:06:fa:93:a6:25:4b:51:98:3a:50:90:01: 98:69:76:4a:0b:c0:38:d8:64:c5:6f:a6:cd:b5:29:9d:d6:31: 9e:97:8b:cb:29:12:cc:4e:06:9f:02:9e:d5:e3:a5:a0:79:79: 58:b9:6c:46:93:93:95:dd:ca:48:93:74:df:e7:d5:e7:82:99: 3b:8b:a0:1c:1b:e1:d1:36:65:46:6a:ca:56:43:35:5c:b0:3f: c7:2b:98:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTGo3mOsC2x1B6NvuXP+qUoA80hwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAxMTA4WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2ZmZmMzNWNjMDRjZTcxN2RhNDM5ZDRiMTRlZDZkNmFk ZTVlMGJhZjY5NGRjY2MwZmNjMjgyODQ0ODk4YzAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVbm7i0eRQexZj6MRjsIekaW+KtE2mXqnxEkXddsNRaJBL 7wWSO/HgMlMDi5gbnoD/VRF2OqetftsjymcHX+IYtXwFaT3n4xvn0TvBeOxkFyZc 2GCXXU+apePWg4BW2zttuL8gXWLlQmO/b7tCKJDIIcbDiRqGOk7PtTeMqBuaILky /rSb5Y8a3N22DBExNaq9Rr5SdYfRDVTRWl7RIY+q689rLgVvwUxiu7tw5xLpBa7g eSX+lAt4xixlqbKdtCTEi3byNcG94M4XTi5r/h2ZxTx9sswcQi3sfs/qUj1I57nr Jwn9pUUH/DBLQPcUUuaFTXR+uS1reCDu1dn0J/aLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8TfItA2fnZxU++la1ja+J9hsSKYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyM2FiNWQ5LTQ4NmYtNDE0OC1hOTFjLTg1OTc5MjQ1OGQ1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGYwIwDQYJKoZIhvcNAQELBQADggEBALfuAwTWvI+jyM/1yK5DwNGoIP7e aOyfxnRdIPNgxmbf3KiU15q2QqBSYejKdX2HeLiFbj75hY6sS2glkAj4aVtM6NAT H7jTMkdbotG5ZnsgoRxDlgeNt+vZJHYalzgf6jR8vObgJ1QIRxoRbhRQrTSpDodj c5CYbNrHeysZRFSqfd5uVGY9LI85uyH7/+X+VNp2DxjPD2P+TA05CWxkaooVlRid OapJXgb6k6YlS1GYOlCQAZhpdkoLwDjYZMVvps21KZ3WMZ6Xi8spEsxOBp8CntXj paB5eVi5bEaTk5XdykiTdN/n1eeCmTuLoBwb4dE2ZUZqylZDNVywP8crmBw= -----END CERTIFICATE-----Generated at Fri Jul 24 00:09:50 2026 by rpki-client