$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8c9c0b-0356-49c4-ae47-c92220db650f.roa File: 5d8c9c0b-0356-49c4-ae47-c92220db650f.roa (raw, json) Hash identifier: xzVrDMEE5SOM52Cb4GGSfpS+RensL6w2PHggY6yNLDo= Subject key identifier: A1:96:38:A9:BD:81:0C:18:40:1A:D8:AF:09:D9:69:DD:90:B9:19:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4905F17B33DF761DEE85257AD2FE4F83745EE148 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8c9c0b-0356-49c4-ae47-c92220db650f.roa Signing time: Thu 23 Jul 2026 00:41:32 +0000 ROA not before: Thu 23 Jul 2026 00:41:32 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:05:f1:7b:33:df:76:1d:ee:85:25:7a:d2:fe:4f:83:74:5e:e1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:41:32 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=fdea64b91586bbfc99aedcc0488946cc69280a91781c430a2ac4b34c0530a67e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:3f:c0:11:20:62:41:9f:72:95:c1:3a:c4: 7f:52:1e:1b:7c:0c:15:45:fc:48:0f:2e:2a:2f:ab: 1c:d6:48:f7:54:3a:3b:36:a9:c5:cd:b7:89:4b:c4: 9a:6e:25:b3:5a:90:09:8c:e7:c0:26:48:c2:1f:dc: 0c:e2:be:06:d5:89:17:94:99:ff:c2:59:17:ea:66: 79:00:7c:e8:36:6c:68:ac:5f:6a:2e:f3:cc:e7:5c: 7a:86:4f:d3:c5:de:d1:28:b3:2b:d3:30:76:ef:b4: 48:d2:e8:ed:39:de:07:cd:59:16:09:ee:6b:3b:28: 94:0b:eb:34:96:90:3f:0d:45:bc:f0:b5:61:8a:8d: e8:04:2e:d8:34:6f:1b:97:69:e0:4a:bd:96:4b:d1: 40:b8:2c:38:84:7f:03:e3:13:2f:20:4b:03:55:32: 0a:95:df:4c:f4:38:1b:0c:9e:e7:a2:21:d6:16:11: 1e:74:b5:c2:e8:66:a6:e5:fd:4c:de:d6:dc:7b:1b: 58:a3:ba:db:8d:8d:b5:ff:7c:36:1e:b9:1a:76:db: 63:3a:ca:a1:79:48:86:35:32:29:ca:7e:76:a6:56: 5a:4c:6a:ba:94:08:82:cb:f7:37:52:69:09:2e:91: d5:cc:b9:86:c1:0e:7b:a9:76:c5:a2:3d:0e:a9:0e: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:38:A9:BD:81:0C:18:40:1A:D8:AF:09:D9:69:DD:90:B9:19:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8c9c0b-0356-49c4-ae47-c92220db650f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.144.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:d8:e4:5c:ae:99:c1:89:7c:83:b9:a3:22:33:99:74:03:05: 65:b0:b0:3c:b2:cb:35:87:1e:49:95:c3:ef:55:5e:4c:b5:2d: 7e:b3:d9:4a:ee:fc:55:8d:f9:23:da:b0:47:4c:ed:c7:19:49: 51:0b:b1:3d:0b:21:e3:0a:48:be:f9:31:a6:2e:27:48:0a:2f: eb:e1:1d:5a:be:55:0c:08:91:07:b1:14:fd:fb:25:d4:5d:4c: 7b:d2:46:73:1d:e0:eb:b8:dc:9c:54:3a:44:b6:d0:42:a0:53: 39:f0:6b:d9:08:57:9c:7e:69:6c:27:b6:29:51:74:5d:be:e3: 22:e5:8c:2f:21:0f:87:db:42:9f:0c:58:92:94:1a:38:2e:3a: 16:b4:3e:5d:5c:fc:d1:a5:fb:8e:49:8a:bd:9b:32:30:ca:a3: 9b:d3:a3:b8:aa:10:b3:45:62:79:ec:2e:3a:f0:93:42:d0:86: d5:1f:52:19:04:b3:a9:41:1e:ef:b0:3a:27:69:bd:0f:95:d1: b9:16:a5:3f:7f:03:75:eb:8a:ef:6f:cc:e9:0b:0a:e4:08:20: 5e:42:e9:f6:c8:d0:40:34:98:70:1d:e1:66:d3:17:42:8f:57: 7a:be:8a:d3:87:03:56:16:97:c8:d4:30:26:23:06:bc:b8:f9: 2b:62:a0:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSQXxezPfdh3uhSV60v5Pg3Re4UgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDA0MTMyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGVhNjRiOTE1ODZiYmZjOTlhZWRjYzA0ODg5NDZjYzY5 MjgwYTkxNzgxYzQzMGEyYWM0YjM0YzA1MzBhNjdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC0j/AESBiQZ9ylcE6xH9SHht8DBVF/EgPLiovqxzWSPdU Ojs2qcXNt4lLxJpuJbNakAmM58AmSMIf3AzivgbViReUmf/CWRfqZnkAfOg2bGis X2ou88znXHqGT9PF3tEosyvTMHbvtEjS6O053gfNWRYJ7ms7KJQL6zSWkD8NRbzw tWGKjegELtg0bxuXaeBKvZZL0UC4LDiEfwPjEy8gSwNVMgqV30z0OBsMnueiIdYW ER50tcLoZqbl/Uze1tx7G1ijutuNjbX/fDYeuRp222M6yqF5SIY1MinKfnamVlpM arqUCILL9zdSaQkukdXMuYbBDnupdsWiPQ6pDi59AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoZY4qb2BDBhAGtivCdlp3ZC5GXkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkOGM5YzBiLTAzNTYtNDljNC1hZTQ3LWM5MjIyMGRiNjUwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgJAwDQYJKoZIhvcNAQELBQADggEBAA3Y5FyumcGJfIO5oyIzmXQDBWWw sDyyyzWHHkmVw+9VXky1LX6z2Uru/FWN+SPasEdM7ccZSVELsT0LIeMKSL75MaYu J0gKL+vhHVq+VQwIkQexFP37JdRdTHvSRnMd4Ou43JxUOkS20EKgUznwa9kIV5x+ aWwntilRdF2+4yLljC8hD4fbQp8MWJKUGjguOha0Pl1c/NGl+45Jir2bMjDKo5vT o7iqELNFYnnsLjrwk0LQhtUfUhkEs6lBHu+wOidpvQ+V0bkWpT9/A3Xriu9vzOkL CuQIIF5C6fbI0EA0mHAd4WbTF0KPV3q+itOHA1YWl8jUMCYjBry4+StioJE= -----END CERTIFICATE-----Generated at Thu Jul 23 21:36:06 2026 by rpki-client