$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa File: 5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa (raw, json) Hash identifier: 2Lb8oqXTPjgJibLXutPVFUD0LNRLemAfVCY+Sb4dHzU= Subject key identifier: D3:6B:0E:F2:3F:08:14:08:11:2E:06:41:C2:E8:5A:92:20:32:B5:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3ECD1C0DA4DE18D5D1A71B2EBF6092FCEB4F34F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa Signing time: Mon 13 Jul 2026 00:00:09 +0000 ROA not before: Mon 13 Jul 2026 00:00:09 +0000 ROA not after: Sun 11 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cd:1c:0d:a4:de:18:d5:d1:a7:1b:2e:bf:60:92:fc:eb:4f:34:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 13 00:00:09 2026 GMT Not After : Oct 11 23:59:59 2026 GMT Subject: serialNumber=bd6486bd2009796973a41de19b6c213eee8d9be6604a822fd6672b2576df8387, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:a5:29:93:c6:ad:0d:bd:da:0e:0d:c3:fb: 30:8b:cc:ac:ca:be:20:b6:ce:71:b2:26:60:e2:6e: 92:95:c6:ed:2f:e6:76:0e:c0:76:da:21:1f:5f:04: 7a:72:64:a7:2b:7b:07:31:82:18:34:61:2d:aa:bd: 6b:e1:1c:bf:4e:c9:a1:33:64:4e:eb:db:47:7e:fa: c1:f8:8f:48:8d:79:b0:17:df:8e:6c:3b:21:f7:66: 5c:eb:b6:5b:a9:be:ae:3d:62:33:3a:4f:29:c8:28: 9b:a5:0c:46:ce:0b:4c:c7:f2:b6:41:3f:ee:e3:4d: b3:91:75:b0:dc:4f:fe:a3:98:0b:32:6c:dd:9f:46: ac:e3:4b:cd:f1:6d:ca:a9:46:4a:79:37:c3:f2:c3: fa:76:41:9d:fe:60:9a:02:f7:b0:7d:80:68:0e:41: 8f:fd:2f:5b:1a:3a:71:bd:61:0e:71:6a:27:c7:3f: 33:f1:18:cd:f5:ed:92:44:ff:c9:7f:69:dc:4b:62: 43:90:fc:c5:10:bf:aa:de:ba:d1:9c:44:9d:9b:8e: d0:58:8d:b7:e3:8e:ad:31:49:87:ca:3b:8f:51:8c: f2:2a:1d:9a:04:54:04:f5:ab:a2:2f:50:d1:7e:59: d8:ef:e0:cd:9e:da:d6:14:17:f8:59:5e:18:6d:37: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6B:0E:F2:3F:08:14:08:11:2E:06:41:C2:E8:5A:92:20:32:B5:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.160.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:ab:37:56:d2:f9:00:06:af:50:50:e5:e0:36:6d:8e:87:3b: 18:ef:3b:9a:71:bb:c7:04:2f:4d:a9:02:6f:33:72:d8:5d:fc: 18:ea:3b:d5:3a:64:89:6d:b7:0a:ac:fc:1c:b9:a6:7f:90:a5: 39:92:96:e6:50:cc:93:43:2e:33:81:86:27:ec:42:a4:26:08: 06:3b:9d:51:d3:3a:02:21:cf:5a:60:ec:82:ec:11:57:ae:b5: 1b:6b:de:29:50:2d:9d:c9:c3:ce:34:f9:dd:ea:59:e7:7b:20: a8:f4:bc:c7:7c:30:05:3f:e5:25:c1:52:36:1f:46:20:5f:40: 95:0e:59:16:51:1a:2e:d3:26:e9:bd:48:33:4e:9f:f4:95:09: 93:ba:01:fe:b9:ed:89:42:74:35:18:33:a6:f2:a4:4b:6a:25: d9:d7:38:71:dd:6d:e8:b5:53:71:90:b3:bb:8b:a9:bd:41:3d: f5:fd:ab:db:51:80:3b:9c:ec:88:50:a2:1f:3a:75:61:df:94: 01:7b:82:59:0d:53:92:7a:35:d3:d7:45:22:f2:1b:bb:4a:fc: 7e:df:fa:89:e7:a1:47:b7:b9:7c:be:19:69:e3:6f:87:11:5a: d2:ee:ac:47:27:cf:b6:37:a2:c1:3d:b7:44:5f:b9:e4:3b:79: 78:bd:59:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPs0cDaTeGNXRpxsuv2CS/OtPNPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzEzMDAwMDA5WhcNMjYxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDY0ODZiZDIwMDk3OTY5NzNhNDFkZTE5YjZjMjEzZWVl OGQ5YmU2NjA0YTgyMmZkNjY3MmIyNTc2ZGY4Mzg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAw6Upk8atDb3aDg3D+zCLzKzKviC2znGyJmDibpKVxu0v 5nYOwHbaIR9fBHpyZKcrewcxghg0YS2qvWvhHL9OyaEzZE7r20d++sH4j0iNebAX 345sOyH3Zlzrtlupvq49YjM6TynIKJulDEbOC0zH8rZBP+7jTbORdbDcT/6jmAsy bN2fRqzjS83xbcqpRkp5N8Pyw/p2QZ3+YJoC97B9gGgOQY/9L1saOnG9YQ5xaifH PzPxGM317ZJE/8l/adxLYkOQ/MUQv6reutGcRJ2bjtBYjbfjjq0xSYfKO49RjPIq HZoEVAT1q6IvUNF+Wdjv4M2e2tYUF/hZXhhtN6X9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU02sO8j8IFAgRLgZBwuhakiAytVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlNzI0YmZiLTEyZmItNDZhNS05ODgwLWM2NGY5MzAwZGJkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANBCaAwDQYJKoZIhvcNAQELBQADggEBAE+rN1bS+QAGr1BQ5eA2bY6HOxjv O5pxu8cEL02pAm8zcthd/BjqO9U6ZIlttwqs/By5pn+QpTmSluZQzJNDLjOBhifs QqQmCAY7nVHTOgIhz1pg7ILsEVeutRtr3ilQLZ3Jw840+d3qWed7IKj0vMd8MAU/ 5SXBUjYfRiBfQJUOWRZRGi7TJum9SDNOn/SVCZO6Af657YlCdDUYM6bypEtqJdnX OHHdbei1U3GQs7uLqb1BPfX9q9tRgDuc7IhQoh86dWHflAF7glkNU5J6NdPXRSLy G7tK/H7f+onnoUe3uXy+GWnjb4cRWtLurEcnz7Y3osE9t0RfueQ7eXi9WUs= -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:56 2026 by rpki-client