$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa File: 5b59b775-668d-4eff-a5fc-13102f0cb266.roa (raw, json) Hash identifier: Hpk8Hx0hIaem+TiAh6wYdWZnM+AtUl0P2SLYVZnvGdk= Subject key identifier: 58:71:40:81:72:7A:18:EB:1F:13:3F:18:17:8E:DC:64:9F:59:58:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6198C242854886C53FB81B7AF504D8D856D54567 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa Signing time: Mon 20 Jul 2026 00:51:13 +0000 ROA not before: Mon 20 Jul 2026 00:51:13 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:c2:42:85:48:86:c5:3f:b8:1b:7a:f5:04:d8:d8:56:d5:45:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:51:13 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=6c3d874e43fe1670782e14a2a4d9e43c3c06e5d613438d0da913e5276ad20c92, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:8d:8c:22:20:3d:b1:27:ae:00:a1:fc:93: 96:14:73:14:82:1f:0b:0f:ba:6a:71:ff:42:79:45: 0c:6e:08:f5:48:97:db:c6:1d:66:0d:b6:4e:b1:93: 34:5f:80:2f:3a:59:1b:16:26:cb:30:e3:97:0e:ba: 6c:75:e7:9b:03:f7:d3:5d:39:b9:d1:fa:d1:ff:a8: 8e:25:8c:5d:25:ed:87:01:bc:e7:1f:c0:9a:44:5e: 08:f6:ce:3e:fa:85:10:bd:64:77:3f:1f:03:d7:6b: 0e:d7:cb:fd:dd:e6:a8:93:a5:d5:0a:d9:b3:96:70: 85:69:da:61:97:36:74:d7:37:48:fc:30:59:a8:dc: f0:f9:14:59:51:51:04:7c:4d:af:36:f7:fe:8e:25: dd:de:d2:23:63:41:5d:f6:cc:07:8c:b7:ae:d6:1b: 15:ca:30:c2:73:c2:cf:36:56:88:49:49:d0:e3:44: eb:9d:fc:47:c1:89:8a:b1:59:e4:81:98:c6:82:ef: 49:e4:c7:a4:9d:ec:89:41:78:2f:31:c7:f6:38:1f: 7d:8f:07:fb:4c:b4:26:d5:21:50:d0:ab:40:0e:d7: 71:ef:0d:a0:58:b0:65:9b:ee:e9:77:93:1d:c8:a0: 38:5e:df:b1:c4:4d:21:7f:7b:0b:83:25:2f:c9:37: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:71:40:81:72:7A:18:EB:1F:13:3F:18:17:8E:DC:64:9F:59:58:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:0f:b4:f4:de:84:70:b3:ef:92:87:94:75:91:22:d6:bb:81: 76:03:23:7c:f7:58:df:7b:8a:db:25:b4:d0:1d:10:ec:df:df: 4d:33:17:66:10:79:86:b7:9e:b8:8e:af:c9:05:34:63:51:01: 1c:dc:64:3e:fe:a9:e5:55:08:ec:0e:b4:db:6b:7e:b1:1b:7b: c8:bf:a5:a8:9b:4e:d9:f7:be:2a:4e:fd:bc:cd:ca:78:68:11: e3:30:b7:75:0a:7d:56:4d:98:3c:b5:ed:6a:95:95:c4:67:14: a3:92:73:b9:90:d7:9f:4f:82:5b:64:8f:bc:36:87:76:f6:08: 5c:f2:9a:e6:0f:99:db:71:f5:8e:72:eb:de:80:0b:48:1a:a7: c1:bf:b3:57:0c:a3:34:47:35:4e:74:50:c7:37:30:38:67:c1: 10:e2:6b:3b:6b:d4:8d:df:71:64:f4:fb:56:da:87:b1:78:e1: 84:9a:04:12:45:7d:6b:00:ef:c8:00:a8:64:94:ab:5c:e5:d6: 95:ff:d0:87:93:36:55:37:05:24:81:29:d7:f4:30:9b:0d:c7: 39:42:e6:fc:ba:b1:3e:3c:24:17:53:4b:51:d1:2a:a9:58:a1: e0:2a:20:30:87:f4:b7:86:a6:3d:32:e5:41:3e:87:32:ac:e5: f8:5d:25:bf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYZjCQoVIhsU/uBt69QTY2FbVRWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA1MTEzWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzNkODc0ZTQzZmUxNjcwNzgyZTE0YTJhNGQ5ZTQzYzNj MDZlNWQ2MTM0MzhkMGRhOTEzZTUyNzZhZDIwYzkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPj42MIiA9sSeuAKH8k5YUcxSCHwsPumpx/0J5RQxuCPVI l9vGHWYNtk6xkzRfgC86WRsWJssw45cOumx155sD99NdObnR+tH/qI4ljF0l7YcB vOcfwJpEXgj2zj76hRC9ZHc/HwPXaw7Xy/3d5qiTpdUK2bOWcIVp2mGXNnTXN0j8 MFmo3PD5FFlRUQR8Ta829/6OJd3e0iNjQV32zAeMt67WGxXKMMJzws82VohJSdDj ROud/EfBiYqxWeSBmMaC70nkx6Sd7IlBeC8xx/Y4H32PB/tMtCbVIVDQq0AO13Hv DaBYsGWb7ul3kx3IoDhe37HETSF/ewuDJS/JN2G7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWHFAgXJ6GOsfEz8YF47cZJ9ZWIYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViNTliNzc1LTY2OGQtNGVmZi1hNWZjLTEzMTAyZjBjYjI2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDGhDANBgkqhkiG9w0BAQsFAAOCAQEArQ+09N6EcLPvkoeUdZEi1ruBdgMj fPdY33uK2yW00B0Q7N/fTTMXZhB5hreeuI6vyQU0Y1EBHNxkPv6p5VUI7A6022t+ sRt7yL+lqJtO2fe+Kk79vM3KeGgR4zC3dQp9Vk2YPLXtapWVxGcUo5JzuZDXn0+C W2SPvDaHdvYIXPKa5g+Z23H1jnLr3oALSBqnwb+zVwyjNEc1TnRQxzcwOGfBEOJr O2vUjd9xZPT7VtqHsXjhhJoEEkV9awDvyACoZJSrXOXWlf/Qh5M2VTcFJIEp1/Qw mw3HOULm/LqxPjwkF1NLUdEqqVih4CogMIf0t4amPTLlQT6HMqzl+F0lvw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:32:36 2026 by rpki-client