$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/433b382a-b41e-4e2b-9699-a78241ad6a5a.roa File: 433b382a-b41e-4e2b-9699-a78241ad6a5a.roa (raw, json) Hash identifier: 45pFGiohqNCZI2iaRIXiXEG9QqGPagX7Ag4nSL2Of18= Subject key identifier: 80:C2:29:C8:43:E3:25:77:50:0A:44:1C:D7:C1:9F:77:F9:76:C9:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4240E4952F26D821DDC982F46394C04A7CD77455 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/433b382a-b41e-4e2b-9699-a78241ad6a5a.roa Signing time: Wed 22 Jul 2026 00:00:15 +0000 ROA not before: Wed 22 Jul 2026 00:00:15 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:40:e4:95:2f:26:d8:21:dd:c9:82:f4:63:94:c0:4a:7c:d7:74:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:15 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=0ed0dfa336e9fbe0e9a0bcb938ece2bdb91819d937d2a470d66f7734a5c6ac41, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:16:a3:a8:50:ea:3a:b8:1e:e4:60:3a:11: 2d:70:27:28:3e:6e:c5:31:61:61:e8:19:84:7c:db: af:e8:c4:ce:f7:aa:ef:42:34:56:68:8a:69:3e:bf: bb:4a:96:04:1b:7c:eb:29:f3:3e:07:d0:1e:5f:f8: ef:7c:ca:b0:40:e2:23:73:37:52:1c:1f:01:dd:c9: fe:ca:e3:8e:20:f2:f3:64:51:f5:b8:78:64:05:8b: 31:cd:47:c2:5f:1b:c8:26:0e:d6:7a:35:b9:b8:02: 96:3f:26:56:b3:34:e7:fb:9e:74:c7:ef:a3:7c:be: b3:ff:d4:80:74:25:28:dc:4a:cb:52:e2:a1:b6:d3: 35:27:8a:35:79:b3:79:f8:77:5e:8d:cf:e1:87:37: 70:57:99:f0:3a:44:68:f0:eb:09:29:9b:85:37:17: b3:0a:51:7c:e6:e0:4e:3f:3b:79:3e:2c:6f:be:cf: 42:3f:f9:6b:83:b9:a6:af:b3:99:c3:35:14:25:34: 6b:54:6a:f9:0a:9a:8c:81:db:30:b5:c1:8f:c8:8d: 8f:ba:79:85:e6:20:96:b2:d6:3b:79:a3:41:5c:18: 33:88:07:35:a4:1e:9c:6c:d0:0a:9d:32:b6:96:a7: ec:f2:bb:c0:5d:3b:bc:9b:1c:ec:82:cc:b6:ac:3c: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C2:29:C8:43:E3:25:77:50:0A:44:1C:D7:C1:9F:77:F9:76:C9:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/433b382a-b41e-4e2b-9699-a78241ad6a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.136.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e6:75:ea:38:45:25:eb:c3:b9:77:d3:1a:6a:2a:bf:1e:7f: 08:63:f2:2e:00:f6:f0:d7:90:d8:2a:c8:d8:87:95:15:d3:20: 7b:3a:c5:12:2a:45:ee:18:15:ad:69:02:b7:2b:c5:11:91:ec: 4e:28:cc:81:e9:a4:48:d8:a2:af:69:01:dd:0a:87:36:10:ac: 32:3b:68:91:c0:06:fb:01:66:89:5f:ef:a0:96:43:01:11:24: f6:6a:32:f1:1b:21:6f:3c:02:21:3a:05:13:f1:16:e8:53:2b: d7:f6:a7:ed:fb:0b:6a:96:bf:db:28:e8:80:5b:d0:a8:58:32: 13:7e:a3:33:16:d9:30:67:64:08:65:ba:72:e7:72:3d:26:e4: 03:21:35:89:56:43:05:0c:09:a0:7b:34:84:c6:32:fe:45:55: 53:83:de:0b:ac:dd:3d:c3:3c:ba:e2:34:3c:5b:d2:6d:1b:8f: 3b:1e:cd:04:19:05:50:9f:e5:60:fb:2e:07:22:0b:40:f3:31: a7:b1:00:90:aa:0f:2e:87:17:15:40:12:79:c5:d9:8f:82:f0: b8:0f:9e:02:62:db:47:c0:df:d4:3d:84:45:8f:e0:3a:4e:26: 78:97:fc:4c:fb:72:99:ff:67:ef:83:89:a3:3d:69:14:1a:11: 51:a5:9f:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQkDklS8m2CHdyYL0Y5TASnzXdFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDE1WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWQwZGZhMzM2ZTlmYmUwZTlhMGJjYjkzOGVjZTJiZGI5 MTgxOWQ5MzdkMmE0NzBkNjZmNzczNGE1YzZhYzQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjGBajqFDqOrge5GA6ES1wJyg+bsUxYWHoGYR826/oxM73 qu9CNFZoimk+v7tKlgQbfOsp8z4H0B5f+O98yrBA4iNzN1IcHwHdyf7K444g8vNk UfW4eGQFizHNR8JfG8gmDtZ6Nbm4ApY/JlazNOf7nnTH76N8vrP/1IB0JSjcSstS 4qG20zUnijV5s3n4d16Nz+GHN3BXmfA6RGjw6wkpm4U3F7MKUXzm4E4/O3k+LG++ z0I/+WuDuaavs5nDNRQlNGtUavkKmoyB2zC1wY/IjY+6eYXmIJay1jt5o0FcGDOI BzWkHpxs0AqdMraWp+zyu8BdO7ybHOyCzLasPKsNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgMIpyEPjJXdQCkQc18Gfd/l2ybcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzM2IzODJhLWI0MWUtNGUyYi05Njk5LWE3ODI0MWFkNmE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7ogwDQYJKoZIhvcNAQELBQADggEBAEDmdeo4RSXrw7l30xpqKr8efwhj 8i4A9vDXkNgqyNiHlRXTIHs6xRIqRe4YFa1pArcrxRGR7E4ozIHppEjYoq9pAd0K hzYQrDI7aJHABvsBZolf76CWQwERJPZqMvEbIW88AiE6BRPxFuhTK9f2p+37C2qW v9so6IBb0KhYMhN+ozMW2TBnZAhlunLncj0m5AMhNYlWQwUMCaB7NITGMv5FVVOD 3gus3T3DPLriNDxb0m0bjzsezQQZBVCf5WD7LgciC0DzMaexAJCqDy6HFxVAEnnF 2Y+C8LgPngJi20fA39Q9hEWP4DpOJniX/Ez7cpn/Z++DiaM9aRQaEVGlnwM= -----END CERTIFICATE-----Generated at Thu Jul 23 22:35:16 2026 by rpki-client