$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b7b9ae-b712-4a51-b302-aafa1010e46e.roa File: 61b7b9ae-b712-4a51-b302-aafa1010e46e.roa (raw, json) Hash identifier: YabXjrfJDZgLKtb2dSalWKQ9iFnGmpY3UqNqY57LCwY= Subject key identifier: AB:50:5E:5D:38:EF:4F:DC:5F:6D:C8:22:8C:4D:86:97:45:A1:29:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 433E2E87E91E0863D28994BD4193D3F37AE6B6C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b7b9ae-b712-4a51-b302-aafa1010e46e.roa Signing time: Fri 17 Jul 2026 00:20:07 +0000 ROA not before: Fri 17 Jul 2026 00:20:07 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3e:2e:87:e9:1e:08:63:d2:89:94:bd:41:93:d3:f3:7a:e6:b6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:20:07 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=a1b832e8bd1ba4bc3a496c9915a0b280a286266f6c51ce8087acf4b79d10e0d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:54:d5:b3:b5:8e:a5:84:a2:40:df:81:4f: c0:d6:68:c6:e2:2e:b9:cc:32:15:50:66:97:c8:29: 52:ef:56:98:f8:ff:01:0b:2b:d8:5a:73:de:ad:c8: 35:ed:fa:fb:d3:c9:d1:2f:e7:13:36:5a:61:e9:be: 01:1a:55:04:0a:b5:d4:37:b7:29:78:d6:fc:8a:ae: 97:db:6d:51:ce:9e:b0:02:fe:12:a7:06:1d:16:d3: 96:e4:57:a5:96:f8:66:e5:ff:e2:1b:77:0e:e7:96: ae:db:71:c1:a7:be:e3:16:ff:91:0c:f8:a5:6f:0d: 3f:8f:9a:55:6e:5a:ab:18:da:64:a3:1c:67:78:3d: 14:9e:16:7c:8a:7c:74:43:fc:cc:34:6c:c4:37:c1: 11:97:8d:0d:f8:65:42:da:57:ec:41:7d:ee:1a:da: 93:e2:9f:94:35:3b:fd:05:90:99:33:68:74:48:b9: 3b:40:24:19:2c:48:9a:48:07:bf:fc:85:ba:a1:f0: d8:05:37:2d:fb:0d:0c:39:9a:61:72:2e:20:3e:42: 90:ab:bb:4e:e1:a9:c9:a7:ac:4a:06:9b:24:a9:0c: 0b:b8:a1:5a:74:5c:56:5a:74:25:e4:16:a0:2e:85: 4b:e7:b1:72:5e:09:91:3c:3b:ce:bc:89:97:ab:f0: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:50:5E:5D:38:EF:4F:DC:5F:6D:C8:22:8C:4D:86:97:45:A1:29:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b7b9ae-b712-4a51-b302-aafa1010e46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2e:94:bb:3f:e5:bd:7e:7b:6a:2a:a8:de:74:b1:9e:d0:4b:ed: ab:a6:92:ce:03:a0:2f:30:2c:11:19:ad:32:02:00:1c:a3:b7: 17:d1:8e:a5:69:4e:6f:a9:5c:df:90:df:90:b8:48:cd:15:0f: 24:2b:ff:9d:f5:c7:ba:71:68:ce:74:27:cd:f2:e2:01:e4:14: 9f:74:78:9c:5d:95:b7:37:63:04:60:1d:55:28:0b:9f:51:60: a8:f6:df:95:d7:7c:a6:c3:41:8a:64:81:47:7d:4e:d6:38:38: 51:70:c0:fb:58:25:72:ab:f1:ec:cd:b5:0d:d3:ac:81:de:53: 1f:53:17:ed:53:9b:32:71:2a:ba:3b:d0:73:43:13:fa:3d:88: bd:98:c3:f8:91:6f:4d:49:d5:73:d6:b5:c8:e9:b3:c6:8f:83: 16:d1:6c:83:62:e0:ca:3a:50:5e:31:53:ec:d3:2d:a0:f1:53: c9:05:38:bb:f9:d5:5f:61:89:71:89:63:08:ab:21:e8:76:c0: bb:38:c6:29:0d:37:48:06:fe:c5:d1:45:69:d9:80:ad:04:50: b2:35:7c:9b:72:03:0d:5f:0b:76:f2:64:28:fe:61:2c:22:6d: 32:b6:36:dd:cd:fd:8c:39:0b:e6:a0:f0:2e:cf:e4:de:26:b0: c2:23:c7:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQz4uh+keCGPSiZS9QZPT83rmtsMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAyMDA3WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWI4MzJlOGJkMWJhNGJjM2E0OTZjOTkxNWEwYjI4MGEy ODYyNjZmNmM1MWNlODA4N2FjZjRiNzlkMTBlMGQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWi1TVs7WOpYSiQN+BT8DWaMbiLrnMMhVQZpfIKVLvVpj4 /wELK9hac96tyDXt+vvTydEv5xM2WmHpvgEaVQQKtdQ3tyl41vyKrpfbbVHOnrAC /hKnBh0W05bkV6WW+Gbl/+Ibdw7nlq7bccGnvuMW/5EM+KVvDT+PmlVuWqsY2mSj HGd4PRSeFnyKfHRD/Mw0bMQ3wRGXjQ34ZULaV+xBfe4a2pPin5Q1O/0FkJkzaHRI uTtAJBksSJpIB7/8hbqh8NgFNy37DQw5mmFyLiA+QpCru07hqcmnrEoGmySpDAu4 oVp0XFZadCXkFqAuhUvnsXJeCZE8O868iZer8AlFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUq1BeXTjvT9xfbcgijE2Gl0WhKYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxYjdiOWFlLWI3MTItNGE1MS1iMzAyLWFhZmExMDEwZTQ2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEALpS7P+W9fntqKqjedLGe0Evtq6aS zgOgLzAsERmtMgIAHKO3F9GOpWlOb6lc35DfkLhIzRUPJCv/nfXHunFoznQnzfLi AeQUn3R4nF2VtzdjBGAdVSgLn1FgqPbfldd8psNBimSBR31O1jg4UXDA+1glcqvx 7M21DdOsgd5TH1MX7VObMnEqujvQc0MT+j2IvZjD+JFvTUnVc9a1yOmzxo+DFtFs g2LgyjpQXjFT7NMtoPFTyQU4u/nVX2GJcYljCKsh6HbAuzjGKQ03SAb+xdFFadmA rQRQsjV8m3IDDV8LdvJkKP5hLCJtMrY23c39jDkL5qDwLs/k3iawwiPHHA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:30:46 2026 by rpki-client