$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42dee813-68c7-4819-8c4b-795b2199cf13.roa File: 42dee813-68c7-4819-8c4b-795b2199cf13.roa (raw, json) Hash identifier: 5rm3LbuK8O+LH4BSSaxYCay+pFvPioHMRPYWuOKm/RQ= Subject key identifier: CC:72:74:2C:C1:72:58:50:4E:37:AA:FC:ED:5A:66:82:42:27:2C:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3947F66383DD886E1F36A1098A8494991646336B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42dee813-68c7-4819-8c4b-795b2199cf13.roa Signing time: Wed 22 Jul 2026 00:10:42 +0000 ROA not before: Wed 22 Jul 2026 00:10:42 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:47:f6:63:83:dd:88:6e:1f:36:a1:09:8a:84:94:99:16:46:33:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:10:42 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=65b8b7fff26f0145997401c56601ae6de3b6911138572a1c016073108eb21963, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:9e:f2:6b:ca:99:0f:4a:59:8e:d1:1f:73: 35:0a:fa:32:ef:9b:d7:ed:c9:8d:f6:90:09:6a:8f: a4:c7:96:52:3f:17:a0:4e:1b:56:70:b4:ca:a2:45: 78:31:fa:6f:5f:d6:c5:8c:ba:0c:bd:21:37:96:c7: fb:b7:04:23:31:8e:54:cb:c7:9e:9c:60:a3:44:96: 9e:64:5e:03:51:30:36:ef:32:28:24:6e:dd:db:b6: c1:1a:15:7f:8c:c3:11:45:f8:4d:81:fb:82:98:cc: 50:bd:33:94:ac:79:a3:eb:e3:fe:99:6a:77:55:e3: 98:84:8d:62:b1:2d:db:ab:99:02:71:d4:ee:34:26: 13:37:71:be:e3:0e:72:b1:2a:9d:20:14:4a:c3:e3: d0:11:3c:65:f4:50:b2:4a:fb:fe:fe:45:7d:f3:60: 17:fd:ef:b8:99:9f:51:88:4d:b8:8e:da:67:75:d2: 55:0c:f8:11:1f:5d:38:5d:3d:60:25:45:3c:65:51: 87:2a:4c:71:a4:ce:3e:cc:7e:2d:de:8d:4f:4a:31: ec:ac:12:d0:81:97:80:f5:32:4d:d1:99:09:da:75: 5f:32:ea:f1:c7:78:cd:9d:97:a3:ae:31:8e:6f:b1: e5:ec:b7:41:1d:52:fa:a6:85:2c:0e:d9:45:14:5f: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:72:74:2C:C1:72:58:50:4E:37:AA:FC:ED:5A:66:82:42:27:2C:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42dee813-68c7-4819-8c4b-795b2199cf13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.205.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:17:51:59:c9:eb:4d:dd:0b:fa:22:aa:1c:de:76:03:05:8c: 0a:b7:04:2d:d1:a3:8c:66:fd:37:05:00:c0:c6:ba:09:17:23: 8f:cf:bb:5c:a5:f3:61:30:4e:4a:89:d9:fc:78:0b:ad:8e:95: c7:03:15:0c:d6:23:c0:c7:bc:74:28:40:58:91:76:1a:66:85: c5:91:cd:19:08:2a:8e:36:02:1b:ff:0b:a2:54:ab:06:fb:c0: ee:02:ce:ef:de:5a:2d:e9:1d:98:c1:e5:8c:9e:cb:ab:9e:01: 74:d8:0d:06:68:49:e1:34:4d:ce:96:6d:2b:3e:be:cd:1e:cc: 68:85:00:74:9c:aa:f0:9e:98:91:54:3e:d5:31:af:e7:ee:4c: 17:7a:b9:79:c8:35:ca:6c:75:66:83:17:e0:3a:20:28:af:41: 80:cf:4b:b9:b3:65:e2:9a:1d:16:5e:9f:fe:ee:50:dc:bd:38: 84:59:8b:7c:d3:bb:ca:2e:dd:22:81:a8:b3:80:50:ac:e4:1e: 0b:d6:2a:0b:6e:82:b9:58:26:49:4d:30:0d:84:17:66:d4:49: b1:e2:ac:23:26:8c:e6:5f:8e:b7:41:ca:66:c7:7e:a5:fb:d8: 68:d7:25:a7:1c:40:f0:f0:fe:66:ca:e6:dc:4c:a7:54:e5:92: 28:b7:1c:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOUf2Y4PdiG4fNqEJioSUmRZGM2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMDQyWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWI4YjdmZmYyNmYwMTQ1OTk3NDAxYzU2NjAxYWU2ZGUz YjY5MTExMzg1NzJhMWMwMTYwNzMxMDhlYjIxOTYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxjp7ya8qZD0pZjtEfczUK+jLvm9ftyY32kAlqj6THllI/ F6BOG1ZwtMqiRXgx+m9f1sWMugy9ITeWx/u3BCMxjlTLx56cYKNElp5kXgNRMDbv Migkbt3btsEaFX+MwxFF+E2B+4KYzFC9M5SseaPr4/6ZandV45iEjWKxLdurmQJx 1O40JhM3cb7jDnKxKp0gFErD49ARPGX0ULJK+/7+RX3zYBf977iZn1GITbiO2md1 0lUM+BEfXThdPWAlRTxlUYcqTHGkzj7Mfi3ejU9KMeysEtCBl4D1Mk3RmQnadV8y 6vHHeM2dl6OuMY5vseXst0EdUvqmhSwO2UUUXyNVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzHJ0LMFyWFBON6r87VpmgkInLBcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyZGVlODEzLTY4YzctNDgxOS04YzRiLTc5NWIyMTk5Y2YxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7s0wDQYJKoZIhvcNAQELBQADggEBAIwXUVnJ603dC/oiqhzedgMFjAq3 BC3Ro4xm/TcFAMDGugkXI4/Pu1yl82EwTkqJ2fx4C62OlccDFQzWI8DHvHQoQFiR dhpmhcWRzRkIKo42Ahv/C6JUqwb7wO4Czu/eWi3pHZjB5Yyey6ueAXTYDQZoSeE0 Tc6WbSs+vs0ezGiFAHScqvCemJFUPtUxr+fuTBd6uXnINcpsdWaDF+A6ICivQYDP S7mzZeKaHRZen/7uUNy9OIRZi3zTu8ou3SKBqLOAUKzkHgvWKgtugrlYJklNMA2E F2bUSbHirCMmjOZfjrdBymbHfqX72GjXJaccQPDw/mbK5txMp1Tlkii3HAk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:37 2026 by rpki-client