$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e7a6c71-e92b-4075-8609-01eba646e6ae.roa File: 4e7a6c71-e92b-4075-8609-01eba646e6ae.roa (raw, json) Hash identifier: SFJ8QDqkkyiJEntS/Frq0aICq5O2o2OZu1AQ2WyFgDI= Subject key identifier: A6:DA:93:48:37:75:A2:83:96:CB:FB:D6:B1:63:8F:0E:1C:DB:13:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 439310202DC6F8430A7C8FAD1DCB8FE04865B05F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e7a6c71-e92b-4075-8609-01eba646e6ae.roa Signing time: Wed 22 Jul 2026 00:00:09 +0000 ROA not before: Wed 22 Jul 2026 00:00:09 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:93:10:20:2d:c6:f8:43:0a:7c:8f:ad:1d:cb:8f:e0:48:65:b0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:09 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=2909977d41b75ee07092ecbd39b4b78d113e818974eef4bd0f5b9bc5b7284a16, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:e9:01:d6:18:55:d4:2e:c5:97:1d:11:09: fa:e1:7d:09:b1:9e:78:65:17:5f:af:b0:12:d4:c3: b0:87:c6:44:c7:e2:18:2c:ca:11:1f:db:33:88:73: 40:8c:5c:e5:87:14:5d:86:d1:7f:aa:bd:9b:da:78: b5:e3:24:ec:ae:11:98:bc:32:8f:7f:b7:13:0d:d3: 9b:bb:04:16:71:fc:41:ab:d2:18:da:cc:54:0a:af: d0:fe:61:01:55:7d:8f:ec:8e:ba:e0:9f:af:65:52: 7a:b7:db:3f:9d:69:83:2b:81:b1:62:8a:61:4d:32: b2:7c:b6:30:92:20:33:c2:cb:7d:08:d2:3a:86:66: 5e:2c:fe:71:a6:f4:28:a4:57:e4:87:98:e0:5a:62: f8:85:cf:5b:06:b2:be:fb:03:26:d7:8a:47:cb:e2: 07:68:40:f9:fb:4d:74:2a:26:80:d0:7d:c9:f4:9d: 81:85:bf:63:35:91:73:41:a2:08:dd:87:da:e2:15: 39:dc:7c:3d:b2:0c:58:75:65:ab:d5:c4:02:5b:73: 87:43:fc:70:94:b8:3f:2b:cd:2c:00:c7:df:94:eb: 71:46:cb:b8:46:e1:53:07:26:24:d8:f9:ba:83:3c: 12:88:a4:0e:1e:eb:ed:30:19:d0:01:c6:1d:12:49: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DA:93:48:37:75:A2:83:96:CB:FB:D6:B1:63:8F:0E:1C:DB:13:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e7a6c71-e92b-4075-8609-01eba646e6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.157.0/24 Signature Algorithm: sha256WithRSAEncryption ce:d6:50:1c:ef:c0:bc:82:31:e1:7b:d1:2e:a7:d3:a7:5e:ad: df:75:f4:2f:9a:15:3f:56:2f:1a:27:16:d7:a3:ef:44:8f:18: eb:f0:54:8f:2f:da:ce:3a:69:54:ab:07:0f:2f:c0:a2:32:be: 80:f0:fd:b9:bd:1f:d8:a8:d6:16:59:c5:03:59:94:52:6f:fd: 4a:87:cf:7a:03:b2:cd:64:a3:ed:93:a9:c9:11:3d:d0:79:2d: d2:0d:b1:29:ed:3a:e3:e0:f4:e2:9a:e8:e5:17:e3:30:b9:dc: 94:1a:a4:f5:a9:ba:f1:ff:29:81:68:f7:3c:ef:d9:54:9f:e0: dd:97:97:95:cf:60:c5:48:a6:68:7b:38:8e:c0:e5:cd:e1:27: d8:60:17:39:b6:d5:e6:c7:cf:6b:09:a0:15:40:82:8c:fb:b9: ce:7e:95:fe:ea:1f:84:25:27:d9:8e:47:a3:11:11:03:57:3c: 34:59:69:7a:ee:cd:4e:c7:97:5a:72:cf:fe:ce:43:9f:d0:21: 39:4b:a9:40:a2:48:d8:c0:97:a3:b9:b8:d1:ca:2c:82:7a:5d: 10:98:28:f4:76:1b:db:d7:fd:b7:5e:ee:01:af:50:28:0c:7e: b3:86:03:d7:40:df:fe:dc:b1:1b:68:01:d5:ab:d5:12:6d:8e: 6f:41:de:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ5MQIC3G+EMKfI+tHcuP4EhlsF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDA5WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTA5OTc3ZDQxYjc1ZWUwNzA5MmVjYmQzOWI0Yjc4ZDEx M2U4MTg5NzRlZWY0YmQwZjViOWJjNWI3Mjg0YTE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBtekB1hhV1C7Flx0RCfrhfQmxnnhlF1+vsBLUw7CHxkTH 4hgsyhEf2zOIc0CMXOWHFF2G0X+qvZvaeLXjJOyuEZi8Mo9/txMN05u7BBZx/EGr 0hjazFQKr9D+YQFVfY/sjrrgn69lUnq32z+daYMrgbFiimFNMrJ8tjCSIDPCy30I 0jqGZl4s/nGm9CikV+SHmOBaYviFz1sGsr77AybXikfL4gdoQPn7TXQqJoDQfcn0 nYGFv2M1kXNBogjdh9riFTncfD2yDFh1ZavVxAJbc4dD/HCUuD8rzSwAx9+U63FG y7hG4VMHJiTY+bqDPBKIpA4e6+0wGdABxh0SSb9RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUptqTSDd1ooOWy/vWsWOPDhzbE/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlN2E2YzcxLWU5MmItNDA3NS04NjA5LTAxZWJhNjQ2ZTZhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7p0wDQYJKoZIhvcNAQELBQADggEBAM7WUBzvwLyCMeF70S6n06derd91 9C+aFT9WLxonFtej70SPGOvwVI8v2s46aVSrBw8vwKIyvoDw/bm9H9io1hZZxQNZ lFJv/UqHz3oDss1ko+2TqckRPdB5LdINsSntOuPg9OKa6OUX4zC53JQapPWpuvH/ KYFo9zzv2VSf4N2Xl5XPYMVIpmh7OI7A5c3hJ9hgFzm21ebHz2sJoBVAgoz7uc5+ lf7qH4QlJ9mOR6MREQNXPDRZaXruzU7Hl1pyz/7OQ5/QITlLqUCiSNjAl6O5uNHK LIJ6XRCYKPR2G9vX/bde7gGvUCgMfrOGA9dA3/7csRtoAdWr1RJtjm9B3hs= -----END CERTIFICATE-----Generated at Thu Jul 23 21:24:55 2026 by rpki-client