$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e39db6-da30-45c2-a8c7-072e85acd46e.roa File: 63e39db6-da30-45c2-a8c7-072e85acd46e.roa (raw, json) Hash identifier: xfOG70F1y0DFWO7NiYYaE99Xyrs017uQXD9+D64a5L8= Subject key identifier: 7A:3C:DB:A3:13:2D:55:73:EF:8E:18:B8:6F:82:2B:38:F0:CF:A4:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DE46C0B195AECC51080586226A4B7896D1200FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e39db6-da30-45c2-a8c7-072e85acd46e.roa Signing time: Sat 18 Jul 2026 00:01:22 +0000 ROA not before: Sat 18 Jul 2026 00:01:22 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e4:6c:0b:19:5a:ec:c5:10:80:58:62:26:a4:b7:89:6d:12:00:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:01:22 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=43e8c995435765783dedcf7bd18209d15040c4c3fd827de9790fa86885e86e1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:99:01:ef:ff:a1:77:78:9b:f3:8e:ec:dd: 9b:32:95:43:85:12:07:08:4f:1f:73:d6:c5:05:a9: bd:54:86:7d:7c:31:51:c7:6f:08:3c:e1:e4:6d:95: 6c:1e:ef:24:a8:07:a5:0e:9a:16:ca:59:5c:d0:d0: c1:af:f6:97:4b:77:a5:64:2d:0a:9d:c3:b4:41:2b: 86:79:35:97:2a:89:f5:fe:57:a5:4a:b2:68:0b:b7: 51:f6:f1:92:e1:45:00:bc:71:79:54:00:f1:dd:78: bf:ac:c0:4e:3b:cb:45:12:fd:6e:4e:cf:3d:0b:83: 6f:5d:e0:3b:40:ec:54:72:e8:78:ad:b0:a3:1f:48: 90:d6:da:55:b1:a3:83:0a:b3:50:52:0c:8a:55:2a: 3f:e5:1e:fe:81:16:ce:c3:38:d7:3c:6a:14:7f:91: 5b:b7:74:44:00:3f:3f:17:80:0b:80:5c:32:ca:60: f9:a7:03:70:90:0f:6f:5a:89:fb:a5:a9:af:1f:0c: 2c:b2:cd:9c:57:1d:ef:af:ab:39:06:f9:7b:00:0b: ad:a6:0a:2c:5e:1b:7e:2e:df:5d:9f:50:aa:ff:26: 79:bf:3c:01:c7:e8:4e:dc:a5:cb:fa:cf:ea:c5:05: 27:50:df:bd:0e:35:9b:bd:a3:83:f5:64:d4:86:98: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3C:DB:A3:13:2D:55:73:EF:8E:18:B8:6F:82:2B:38:F0:CF:A4:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e39db6-da30-45c2-a8c7-072e85acd46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 54:fe:7c:95:2d:8e:b1:36:cc:22:cc:69:fb:fa:6a:f8:e4:a2: 9a:71:e0:67:34:95:6c:04:d5:2c:72:b6:5f:3a:22:62:fd:23: 54:05:33:c8:75:05:d0:c0:4c:cc:61:a2:5f:c2:6f:08:e3:64: 56:ce:b5:c5:03:a5:93:12:e4:8e:cf:19:5d:c4:a2:18:2d:e1: 9f:f7:9a:4f:61:af:1b:90:7c:78:a1:aa:17:6e:c5:7d:35:a6: 8a:8b:70:7d:77:81:48:71:09:85:c5:6c:9c:c3:d1:79:71:c2: 5d:fa:e1:b7:e1:d7:1a:db:35:cf:54:33:72:60:50:01:22:ad: 5c:ef:ef:48:e1:82:d6:13:e3:bd:36:68:a9:35:c7:8a:cf:06: ee:49:20:8b:6e:0e:79:64:98:78:32:1d:2b:9c:96:b9:91:75: b3:e4:1a:12:9a:b6:75:00:b6:82:b5:2f:3c:7b:bf:97:f8:75: aa:10:b1:08:8c:cd:f6:f4:b8:df:f1:69:2a:ab:2f:aa:97:e0: 05:5a:ee:97:b0:f6:24:65:4b:46:4a:9e:e5:f1:d7:5c:47:60: 5e:af:d3:d2:18:14:d4:00:a7:33:9b:4c:3f:2e:e5:ea:b7:cc: a1:03:11:29:36:10:a8:fb:91:a8:80:e8:3e:16:c6:84:e7:4d: 88:3a:89:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfeRsCxla7MUQgFhiJqS3iW0SAP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAwMTIyWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2U4Yzk5NTQzNTc2NTc4M2RlZGNmN2JkMTgyMDlkMTUw NDBjNGMzZmQ4MjdkZTk3OTBmYTg2ODg1ZTg2ZTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+ZkB7/+hd3ib847s3ZsylUOFEgcITx9z1sUFqb1Uhn18 MVHHbwg84eRtlWwe7ySoB6UOmhbKWVzQ0MGv9pdLd6VkLQqdw7RBK4Z5NZcqifX+ V6VKsmgLt1H28ZLhRQC8cXlUAPHdeL+swE47y0US/W5Ozz0Lg29d4DtA7FRy6Hit sKMfSJDW2lWxo4MKs1BSDIpVKj/lHv6BFs7DONc8ahR/kVu3dEQAPz8XgAuAXDLK YPmnA3CQD29aifulqa8fDCyyzZxXHe+vqzkG+XsAC62mCixeG34u312fUKr/Jnm/ PAHH6E7cpcv6z+rFBSdQ370ONZu9o4P1ZNSGmAjXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUejzboxMtVXPvjhi4b4IrOPDPpGAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzZTM5ZGI2LWRhMzAtNDVjMi1hOGM3LTA3MmU4NWFjZDQ2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EAwDQYJKoZIhvcNAQELBQADggEBAFT+fJUtjrE2zCLMafv6avjkoppx 4Gc0lWwE1Sxytl86ImL9I1QFM8h1BdDATMxhol/CbwjjZFbOtcUDpZMS5I7PGV3E ohgt4Z/3mk9hrxuQfHihqhduxX01poqLcH13gUhxCYXFbJzD0Xlxwl364bfh1xrb Nc9UM3JgUAEirVzv70jhgtYT4702aKk1x4rPBu5JIItuDnlkmHgyHSuclrmRdbPk GhKatnUAtoK1Lzx7v5f4daoQsQiMzfb0uN/xaSqrL6qX4AVa7pew9iRlS0ZKnuXx 11xHYF6v09IYFNQApzObTD8u5eq3zKEDESk2EKj7kaiA6D4WxoTnTYg6iQk= -----END CERTIFICATE-----Generated at Thu Jul 23 21:29:19 2026 by rpki-client