$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa File: 65c740c7-8676-4c12-9db9-da6bf2962464.roa (raw, json) Hash identifier: iue6mb8VhcaeoVfBnOmriPHdfu35kT9k/mW5TgCAKD0= Subject key identifier: 1F:1A:56:A0:0E:3E:31:98:8A:61:E8:00:4E:69:50:A3:CC:65:C8:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3664E61E6CD9D98FC1B7913E71E8742C70600FB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa Signing time: Fri 24 Jul 2026 00:21:11 +0000 ROA not before: Fri 24 Jul 2026 00:21:11 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.177.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:64:e6:1e:6c:d9:d9:8f:c1:b7:91:3e:71:e8:74:2c:70:60:0f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:21:11 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=9eae37a65adc49b51f59ba386e7337c6e2bb092a71959c4938d481abcb968001, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:58:b4:ff:3d:ad:dd:5f:c1:9e:73:31:38: c8:c4:9e:e3:f0:fc:be:32:e9:10:b4:b4:70:4f:14: 61:6d:70:a8:7d:7d:c7:c1:32:00:7c:2d:c5:cc:3c: 14:2d:22:c6:12:0b:4d:59:20:db:03:e8:40:77:80: 4f:d9:c2:c5:2a:de:24:21:7b:67:81:f4:3f:ec:0f: 4e:33:87:7b:ef:25:c3:ef:61:b3:a3:59:fa:26:b9: ee:26:c3:2a:c7:c4:6f:d1:f8:1c:6d:df:1a:fa:e6: 33:ec:cc:12:d1:b4:c9:ea:87:6d:36:ce:c8:10:75: 98:87:4a:d6:d9:b9:d3:81:78:c0:fc:ee:b9:3a:b0: 57:69:90:11:6e:89:76:98:04:47:f4:dc:bc:e7:a4: 67:ba:c1:5b:27:25:38:9d:63:14:3a:d2:93:4d:79: a4:26:d2:5d:f3:03:38:15:3e:91:7b:f7:8c:01:3a: 78:57:d7:33:a8:cd:2b:35:e7:d1:fa:19:4f:6f:aa: 14:65:ce:b1:b6:b0:65:48:ea:72:a7:3e:ed:46:c1: 81:33:dd:3f:f3:35:c1:26:61:32:8e:00:97:4d:be: 24:ce:29:ea:42:f2:9e:73:b7:24:20:d5:0c:2e:5a: 9b:4e:99:fd:e2:84:81:4e:b2:e0:eb:1a:71:42:80: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:56:A0:0E:3E:31:98:8A:61:E8:00:4E:69:50:A3:CC:65:C8:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.0.0/20 Signature Algorithm: sha256WithRSAEncryption 66:8e:a2:95:20:45:2a:e6:7e:a8:55:ee:95:74:c0:c9:a4:6a: a6:b0:90:9d:53:eb:47:07:32:47:af:75:a6:ad:9b:22:e6:98: 8f:a7:df:dd:df:62:a2:0d:7f:ed:f8:97:1e:2c:fc:0e:60:69: 05:33:e3:f6:4f:eb:41:7d:65:90:18:21:dd:cc:4b:83:6d:5e: ce:e2:d1:19:98:5b:23:fa:e2:a8:8a:80:51:31:bf:b9:98:d8: b5:57:26:a4:2e:7c:4f:d7:6d:66:35:a8:2f:cd:0b:d0:25:b4: 89:ae:6b:a3:15:b1:f6:c4:71:3d:03:b0:63:79:c9:4c:bb:7a: 47:83:53:d8:6c:f4:b1:08:82:de:fa:89:33:fc:f2:be:64:5c: 04:1b:0a:8e:97:d4:44:96:99:eb:7a:9a:7f:1e:7a:09:3e:a6: 52:ee:af:a7:64:4a:73:ca:46:dc:c3:b2:c8:c2:f8:5d:2b:76: f9:8a:39:af:12:0c:d6:05:c3:88:29:23:d4:a8:69:1d:b1:a2: 8e:15:8f:75:6e:eb:3f:38:7a:86:e0:57:52:3b:00:64:76:97: d9:37:2c:6c:55:d3:19:81:53:c4:b0:0e:26:ff:92:fc:53:77: b7:56:70:ab:7d:6a:dc:7d:3a:fa:d8:98:28:e5:8e:82:94:ea: 8b:23:c2:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNmTmHmzZ2Y/Bt5E+ceh0LHBgD7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAyMTExWhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWFlMzdhNjVhZGM0OWI1MWY1OWJhMzg2ZTczMzdjNmUy YmIwOTJhNzE5NTljNDkzOGQ0ODFhYmNiOTY4MDAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgCFi0/z2t3V/BnnMxOMjEnuPw/L4y6RC0tHBPFGFtcKh9 fcfBMgB8LcXMPBQtIsYSC01ZINsD6EB3gE/ZwsUq3iQhe2eB9D/sD04zh3vvJcPv YbOjWfomue4mwyrHxG/R+Bxt3xr65jPszBLRtMnqh202zsgQdZiHStbZudOBeMD8 7rk6sFdpkBFuiXaYBEf03LznpGe6wVsnJTidYxQ60pNNeaQm0l3zAzgVPpF794wB OnhX1zOozSs159H6GU9vqhRlzrG2sGVI6nKnPu1GwYEz3T/zNcEmYTKOAJdNviTO KepC8p5ztyQg1QwuWptOmf3ihIFOsuDrGnFCgOTXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHxpWoA4+MZiKYegATmlQo8xlyAIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1Yzc0MGM3LTg2NzYtNGMxMi05ZGI5LWRhNmJmMjk2MjQ2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATRsQAwDQYJKoZIhvcNAQELBQADggEBAGaOopUgRSrmfqhV7pV0wMmkaqaw kJ1T60cHMkevdaatmyLmmI+n393fYqINf+34lx4s/A5gaQUz4/ZP60F9ZZAYId3M S4NtXs7i0RmYWyP64qiKgFExv7mY2LVXJqQufE/XbWY1qC/NC9AltImua6MVsfbE cT0DsGN5yUy7ekeDU9hs9LEIgt76iTP88r5kXAQbCo6X1ESWmet6mn8eegk+plLu r6dkSnPKRtzDssjC+F0rdvmKOa8SDNYFw4gpI9SoaR2xoo4Vj3Vu6z84eobgV1I7 AGR2l9k3LGxV0xmBU8SwDib/kvxTd7dWcKt9atx9OvrYmCjljoKU6osjwjw= -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:39 2026 by rpki-client