$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61065a77-618e-47cc-a114-a9c0237ae690.roa File: 61065a77-618e-47cc-a114-a9c0237ae690.roa (raw, json) Hash identifier: 2WwNwbdYUeXsgU663io23nr6/p7gNX8fojRK+fNHcac= Subject key identifier: EE:6E:2C:ED:F9:93:ED:20:60:1B:60:40:88:CB:3F:79:0D:9D:E0:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FFDC608CEB542CD52CB01FF31BAB16E440365B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61065a77-618e-47cc-a114-a9c0237ae690.roa Signing time: Thu 23 Jul 2026 00:31:15 +0000 ROA not before: Thu 23 Jul 2026 00:31:15 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 5.174.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fd:c6:08:ce:b5:42:cd:52:cb:01:ff:31:ba:b1:6e:44:03:65:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:31:15 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=bdebad61edc6007c26ee80bde65295d20c0b24e36781b5b0943571708e79ed61, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:13:40:89:4e:a4:9d:0d:92:d1:53:92:e2: bc:9d:31:c9:01:1c:3c:93:b4:33:71:5d:bb:1c:35: 2b:ad:ab:d4:7c:39:4d:42:60:90:d9:22:91:d7:22: 99:b4:e7:54:ef:6b:11:32:3b:24:31:59:cf:27:3f: 2f:26:6e:73:cc:97:49:93:8f:09:0c:f7:88:fe:a9: 87:a0:03:42:f4:1d:ee:f6:16:56:1d:57:d6:22:65: 49:21:45:d5:8c:34:ed:14:63:b8:a2:0a:3b:cb:1b: ac:ed:8a:76:fb:d5:ab:fd:42:d9:4c:f5:b6:59:38: d9:a7:28:d2:d5:32:26:5d:3d:64:50:15:4e:44:6d: 8c:dc:b7:91:58:60:5f:31:26:9e:d8:2d:9a:cd:92: a0:11:04:13:05:3d:2f:99:0d:60:3e:9d:30:36:24: a9:26:fa:90:49:30:be:2c:64:59:aa:89:0e:7b:2e: 81:d5:b7:72:9f:d1:7d:b1:ff:75:de:8f:9d:95:1b: 3e:31:52:e6:4a:28:87:8f:58:22:09:76:ea:c7:5a: 94:22:d5:27:70:6b:bb:6a:20:51:ed:d0:6e:9c:c4: 76:c5:d4:b2:c0:27:7a:4e:ad:c3:b7:42:cc:3d:74: 0e:ac:98:8d:3a:0f:d5:78:6c:48:63:86:02:82:21: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:2C:ED:F9:93:ED:20:60:1B:60:40:88:CB:3F:79:0D:9D:E0:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61065a77-618e-47cc-a114-a9c0237ae690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.64.0/20 Signature Algorithm: sha256WithRSAEncryption a3:d5:62:3f:db:9f:ed:85:68:ad:d5:77:34:64:97:df:0e:07: 3c:7b:f3:1f:3c:3a:1a:b1:f1:56:ee:04:81:20:9a:85:02:6e: 38:16:d7:2a:7b:53:34:de:a9:3c:59:95:5d:2d:b3:cc:95:15: 11:02:df:a2:32:07:9b:e7:2f:2a:12:d8:f4:f2:b1:3b:52:57: 05:d2:dc:31:5f:d4:f1:09:73:ed:c6:a5:11:03:f4:a9:26:ce: 9c:64:c9:8e:68:bf:c1:61:76:82:29:41:29:73:1c:77:f1:c8: d6:b0:0f:22:f9:0e:2b:0d:0d:f3:8b:b7:29:59:f3:03:84:35: ac:2f:fd:63:d6:99:3d:bb:0f:41:cb:38:23:70:a4:2f:fc:96: d7:30:18:5b:85:ec:87:1a:93:5f:2f:ae:f9:b6:6c:9c:c0:bf: 35:74:45:73:5f:b3:fa:ac:90:e9:0a:3b:69:b7:e5:b0:85:31: 86:7b:bc:7a:2e:93:eb:c2:ce:4a:2e:eb:22:2f:95:e7:5e:c4: d4:01:0b:59:07:59:00:15:13:6f:9e:b4:df:77:f0:24:81:07: fd:82:0d:d5:88:ad:af:2d:5b:3d:0e:8a:da:99:a7:c5:84:2d: d0:4f:5b:cd:88:aa:fb:47:fe:a8:7d:89:69:9f:3c:bd:45:77: 63:7e:4d:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb/3GCM61Qs1SywH/MbqxbkQDZbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAzMTE1WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGViYWQ2MWVkYzYwMDdjMjZlZTgwYmRlNjUyOTVkMjBj MGIyNGUzNjc4MWI1YjA5NDM1NzE3MDhlNzllZDYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRahNAiU6knQ2S0VOS4rydMckBHDyTtDNxXbscNSutq9R8 OU1CYJDZIpHXIpm051TvaxEyOyQxWc8nPy8mbnPMl0mTjwkM94j+qYegA0L0He72 FlYdV9YiZUkhRdWMNO0UY7iiCjvLG6ztinb71av9QtlM9bZZONmnKNLVMiZdPWRQ FU5EbYzct5FYYF8xJp7YLZrNkqARBBMFPS+ZDWA+nTA2JKkm+pBJML4sZFmqiQ57 LoHVt3Kf0X2x/3Xej52VGz4xUuZKKIePWCIJdurHWpQi1Sdwa7tqIFHt0G6cxHbF 1LLAJ3pOrcO3Qsw9dA6smI06D9V4bEhjhgKCIcchAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7m4s7fmT7SBgG2BAiMs/eQ2d4MUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxMDY1YTc3LTYxOGUtNDdjYy1hMTE0LWE5YzAyMzdhZTY5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQFrkAwDQYJKoZIhvcNAQELBQADggEBAKPVYj/bn+2FaK3VdzRkl98OBzx7 8x88Ohqx8VbuBIEgmoUCbjgW1yp7UzTeqTxZlV0ts8yVFREC36IyB5vnLyoS2PTy sTtSVwXS3DFf1PEJc+3GpRED9KkmzpxkyY5ov8FhdoIpQSlzHHfxyNawDyL5DisN DfOLtylZ8wOENawv/WPWmT27D0HLOCNwpC/8ltcwGFuF7Icak18vrvm2bJzAvzV0 RXNfs/qskOkKO2m35bCFMYZ7vHouk+vCzkou6yIvledexNQBC1kHWQAVE2+etN93 8CSBB/2CDdWIra8tWz0OitqZp8WELdBPW82IqvtH/qh9iWmfPL1Fd2N+Tdk= -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:03 2026 by rpki-client