$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa File: 61d0d1a8-1d1a-4b6a-be79-09198325212d.roa (raw, json) Hash identifier: bvkjKdHMOBjTSjULcfRrlWC0eJYtUjCZVKhgYKIQT9M= Subject key identifier: 97:8C:27:91:B2:43:0A:60:E8:7A:95:86:AD:3E:DD:53:14:C1:DA:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 235FA4EDD32F6E04AE2F1EC47242D5E8B90AE012 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa Signing time: Sat 18 Jul 2026 00:41:37 +0000 ROA not before: Sat 18 Jul 2026 00:41:37 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.4.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5f:a4:ed:d3:2f:6e:04:ae:2f:1e:c4:72:42:d5:e8:b9:0a:e0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:41:37 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=17993f847ea49513c2b414e6e7ce1b6a3af4572c1581b46b1e8940c9add3bfba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:23:d9:9f:1a:10:d0:33:38:68:00:fc:42: fb:11:fe:5c:03:06:3a:64:f0:34:e6:4d:f3:e3:19: 45:92:af:96:f9:24:24:19:62:d3:f3:ba:7a:0d:9e: ad:42:d8:4d:b1:91:ca:cd:b8:da:ba:df:c3:af:52: 4a:bd:27:62:d6:83:ba:c9:73:86:f8:e5:e0:4f:d5: 72:f0:22:09:d9:4c:a9:dc:76:af:46:d3:12:a5:5e: fd:ee:5c:e3:e3:09:79:4d:1b:13:f6:44:31:c8:69: 8f:07:f5:57:db:40:60:3b:ed:84:39:c0:20:1e:d6: 53:b6:5b:86:73:37:8b:12:af:b3:8a:4e:6d:50:f3: b1:73:2e:83:84:01:32:31:e0:0c:70:30:d3:81:95: 70:31:2a:34:64:76:3d:13:59:3a:b2:68:5b:4a:9b: 1f:8a:43:53:3d:0a:f5:f7:5a:f2:c1:73:c9:4a:06: 7e:41:47:34:6f:97:6b:4c:1d:55:03:a3:89:86:c1: 77:65:39:a9:80:b0:2d:73:6e:09:f3:48:43:bf:22: ae:a1:25:73:ba:f5:10:51:5e:4c:d3:a1:34:5d:dc: 67:26:6e:e3:35:2c:32:ee:a9:ef:af:7b:9e:03:71: 05:6d:d7:1c:70:8d:72:e9:2b:2c:d6:48:4b:18:61: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:27:91:B2:43:0A:60:E8:7A:95:86:AD:3E:DD:53:14:C1:DA:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.4.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:0f:91:16:42:13:db:a6:de:c6:2f:96:26:47:3f:6c:f8:1f: 95:1c:7e:db:54:16:af:72:07:e8:23:06:34:a7:00:2d:f0:94: f4:9d:06:7b:b8:54:3e:1c:23:7f:b0:74:16:0a:27:c3:56:b2: 8a:6c:8d:4b:4e:7e:66:c1:e0:f2:3b:25:c5:da:6a:88:5a:44: 33:3a:16:de:63:01:d6:64:5f:c7:aa:12:f3:c8:d7:d1:6b:b1: 6e:b1:b7:84:2c:d6:66:31:2d:9a:76:1e:ea:08:66:78:b7:56: b3:c2:f2:d6:9b:12:b5:d2:b9:21:1b:25:9c:8a:8f:94:82:5c: ef:e0:a5:58:1a:b8:81:78:af:56:07:cb:c9:12:12:7f:6f:e5: b1:5e:6c:c3:ad:80:7e:36:5c:a5:23:8e:b9:86:c0:e6:cf:f3: 69:22:56:96:05:3c:4b:03:7a:cb:cc:63:e8:0d:cd:cf:0b:1d: a4:d9:d4:7c:9e:ba:9d:0e:5e:dd:1b:7d:25:74:f2:81:ff:5f: e5:52:0b:4a:c1:8b:23:61:65:e1:4e:cb:8b:6f:bb:4d:4a:ed: d4:d2:8d:75:b5:a7:fa:f3:95:72:f3:21:25:96:53:5f:0f:59: 1f:19:ac:a6:51:cc:80:79:df:d4:18:63:02:e0:be:b5:3f:d6: ee:25:e3:04 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI1+k7dMvbgSuLx7EckLV6LkK4BIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA0MTM3WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzk5M2Y4NDdlYTQ5NTEzYzJiNDE0ZTZlN2NlMWI2YTNh ZjQ1NzJjMTU4MWI0NmIxZTg5NDBjOWFkZDNiZmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6XyPZnxoQ0DM4aAD8QvsR/lwDBjpk8DTmTfPjGUWSr5b5 JCQZYtPzunoNnq1C2E2xkcrNuNq638OvUkq9J2LWg7rJc4b45eBP1XLwIgnZTKnc dq9G0xKlXv3uXOPjCXlNGxP2RDHIaY8H9VfbQGA77YQ5wCAe1lO2W4ZzN4sSr7OK Tm1Q87FzLoOEATIx4AxwMNOBlXAxKjRkdj0TWTqyaFtKmx+KQ1M9CvX3WvLBc8lK Bn5BRzRvl2tMHVUDo4mGwXdlOamAsC1zbgnzSEO/Iq6hJXO69RBRXkzToTRd3Gcm buM1LDLuqe+ve54DcQVt1xxwjXLpKyzWSEsYYal9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUl4wnkbJDCmDoepWGrT7dUxTB2igwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxZDBkMWE4LTFkMWEtNGI2YS1iZTc5LTA5MTk4MzI1MjEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBBBDANBgkqhkiG9w0BAQsFAAOCAQEAnw+RFkIT26bexi+WJkc/bPgflRx+ 21QWr3IH6CMGNKcALfCU9J0Ge7hUPhwjf7B0Fgonw1ayimyNS05+ZsHg8jslxdpq iFpEMzoW3mMB1mRfx6oS88jX0WuxbrG3hCzWZjEtmnYe6ghmeLdWs8Ly1psStdK5 IRslnIqPlIJc7+ClWBq4gXivVgfLyRISf2/lsV5sw62AfjZcpSOOuYbA5s/zaSJW lgU8SwN6y8xj6A3NzwsdpNnUfJ66nQ5e3Rt9JXTygf9f5VILSsGLI2Fl4U7Li2+7 TUrt1NKNdbWn+vOVcvMhJZZTXw9ZHxmsplHMgHnf1BhjAuC+tT/W7iXjBA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:41 2026 by rpki-client