$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6442b906-9c85-4204-9201-a49c8f1a0852.roa File: 6442b906-9c85-4204-9201-a49c8f1a0852.roa (raw, json) Hash identifier: sX1YKIiCrgzpk5JFIJ3Bh9r6/8TBv3NKRrAdlTsyiT8= Subject key identifier: 3B:8B:68:9B:21:B6:C3:7C:CF:50:3B:A1:4D:75:9D:B9:ED:78:ED:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27CE582F344753294BC48D96AE03C127683A0D28 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6442b906-9c85-4204-9201-a49c8f1a0852.roa Signing time: Wed 22 Jul 2026 00:00:57 +0000 ROA not before: Wed 22 Jul 2026 00:00:57 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ce:58:2f:34:47:53:29:4b:c4:8d:96:ae:03:c1:27:68:3a:0d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:57 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=2b2083c24d8edeee53db55be46b6f48567a080392ff9971d545a9f7fe17b032b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:6d:ed:6d:ae:85:b2:5d:70:f6:51:17:d5: 8b:67:77:91:1f:23:84:6c:12:cf:27:da:6f:32:5b: 33:fc:88:67:22:f4:7c:97:95:ac:93:e3:86:c5:97: 25:c6:8e:92:a4:e7:bf:5f:09:35:9b:98:db:ea:37: c1:46:b7:86:0c:e4:cc:fb:65:8a:f3:f0:08:a6:6c: 02:3e:1e:c9:ae:1b:5f:d9:ee:3b:41:dd:fb:c4:3e: a3:9f:d8:3f:76:bf:fd:cb:5d:cd:a5:32:8d:1f:07: 33:bc:ae:e1:5a:46:02:78:57:50:44:ac:7c:d2:d1: 2f:9c:53:b4:a1:db:32:94:c9:83:fc:7d:3d:b1:ea: 80:c0:2c:3f:6e:53:d3:8c:d4:fa:97:8e:58:4c:9b: 62:89:ca:4c:e9:91:60:cf:cf:67:74:dd:43:09:53: 85:84:98:d4:0f:51:a2:9b:3f:8a:d9:3e:02:20:1d: 95:68:b3:99:38:86:85:c0:91:b9:a5:82:30:ce:75: 34:98:4d:bd:5b:5d:09:56:8c:6e:c7:0f:3a:e4:91: 2a:36:e9:bc:41:93:3f:86:fd:18:b8:7d:7a:22:28: 7a:93:1a:76:20:92:27:96:67:77:68:4f:98:84:5f: 60:b3:92:4f:2e:cf:2f:48:f7:e3:9c:b9:ef:96:01: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8B:68:9B:21:B6:C3:7C:CF:50:3B:A1:4D:75:9D:B9:ED:78:ED:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6442b906-9c85-4204-9201-a49c8f1a0852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.191.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d5:1d:89:8a:cd:44:41:2e:6c:f9:9f:eb:00:77:f5:6a:83: e0:dd:44:a5:66:3c:8b:56:24:45:7d:17:bf:31:11:bd:3a:40: 7e:f5:94:7f:10:ba:1b:30:96:f9:8e:cd:5f:56:cd:3c:81:1a: e3:04:1a:f5:d1:0a:28:3e:df:63:9b:3d:35:5d:c9:3b:4e:8e: e4:a3:41:67:3d:16:cb:10:c9:08:5e:cd:f3:ca:a1:e2:de:0d: ef:ca:65:4b:3f:a6:5b:b7:0f:d6:41:0a:96:e7:a8:65:4d:f9: b8:7c:b6:96:e7:91:7c:f3:05:88:4e:37:e6:0f:4b:05:66:c3: 5b:8e:be:42:e9:96:19:53:53:e8:53:9c:2a:48:bd:a9:cd:a4: 3a:03:89:9b:fd:9e:26:5f:fb:4c:68:2a:40:c2:30:47:f4:51: b8:f2:ef:aa:6a:d6:81:cb:fc:75:4a:6a:74:d8:5a:c0:34:64: 03:14:93:4b:69:df:40:a3:bc:99:aa:47:18:a6:d4:3f:74:ad: 6c:d5:41:cf:23:79:8e:5d:a7:1f:0a:fd:d2:56:4e:d4:6c:17: 59:e0:8e:ec:8e:7a:60:c9:e2:75:1f:61:ad:e9:50:6e:98:aa: a2:f0:39:49:14:ef:4b:2d:15:93:92:4c:43:05:df:17:a0:a9: 97:be:90:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ85YLzRHUylLxI2WrgPBJ2g6DSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDU3WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjIwODNjMjRkOGVkZWVlNTNkYjU1YmU0NmI2ZjQ4NTY3 YTA4MDM5MmZmOTk3MWQ1NDVhOWY3ZmUxN2IwMzJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaRG3tba6Fsl1w9lEX1Ytnd5EfI4RsEs8n2m8yWzP8iGci 9HyXlayT44bFlyXGjpKk579fCTWbmNvqN8FGt4YM5Mz7ZYrz8AimbAI+HsmuG1/Z 7jtB3fvEPqOf2D92v/3LXc2lMo0fBzO8ruFaRgJ4V1BErHzS0S+cU7Sh2zKUyYP8 fT2x6oDALD9uU9OM1PqXjlhMm2KJykzpkWDPz2d03UMJU4WEmNQPUaKbP4rZPgIg HZVos5k4hoXAkbmlgjDOdTSYTb1bXQlWjG7HDzrkkSo26bxBkz+G/Ri4fXoiKHqT GnYgkieWZ3doT5iEX2Czkk8uzy9I9+Ocue+WAVxZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO4tomyG2w3zPUDuhTXWdue147dYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0NDJiOTA2LTljODUtNDIwNC05MjAxLWE0OWM4ZjFhMDg1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7r8wDQYJKoZIhvcNAQELBQADggEBAAXVHYmKzURBLmz5n+sAd/Vqg+Dd RKVmPItWJEV9F78xEb06QH71lH8QuhswlvmOzV9WzTyBGuMEGvXRCig+32ObPTVd yTtOjuSjQWc9FssQyQhezfPKoeLeDe/KZUs/plu3D9ZBCpbnqGVN+bh8tpbnkXzz BYhON+YPSwVmw1uOvkLplhlTU+hTnCpIvanNpDoDiZv9niZf+0xoKkDCMEf0Ubjy 76pq1oHL/HVKanTYWsA0ZAMUk0tp30CjvJmqRxim1D90rWzVQc8jeY5dpx8K/dJW TtRsF1ngjuyOemDJ4nUfYa3pUG6YqqLwOUkU70stFZOSTEMF3xegqZe+kCk= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:29 2026 by rpki-client