$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6712166e-3bec-471c-a385-b21c7ca5744e.roa File: 6712166e-3bec-471c-a385-b21c7ca5744e.roa (raw, json) Hash identifier: 2d1GIUayZmq6r5I7EC275A0cHDhHVk2pumES6x/17z8= Subject key identifier: 72:DA:3B:BE:93:01:9D:40:A0:B2:5E:31:3B:E2:61:B7:92:EE:80:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76C250494676FD7CDD693D69C44AA167491CC712 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6712166e-3bec-471c-a385-b21c7ca5744e.roa Signing time: Thu 23 Jul 2026 00:50:09 +0000 ROA not before: Thu 23 Jul 2026 00:50:09 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c2:50:49:46:76:fd:7c:dd:69:3d:69:c4:4a:a1:67:49:1c:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:50:09 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=61109155c4070e8b593a454f7034407be3d364c4b2ae117dc583c0ff3b3bbe78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:cc:ee:d3:8e:59:8c:48:97:df:71:09:71: 09:c5:66:eb:b4:33:af:49:19:eb:a8:ae:1e:cc:e7: 77:5a:a9:9a:8e:83:86:92:5c:41:c5:75:5b:d7:25: 8c:7b:dc:2e:6d:51:42:17:43:3b:a0:96:d7:00:1b: ce:2a:2d:97:f1:0c:fd:4b:7a:0d:9d:2c:b1:d0:53: 04:0b:7b:e8:83:a2:ec:b4:bc:76:71:b2:53:ec:9d: ff:59:18:80:ff:df:dc:c8:2a:7d:bb:41:36:d3:b7: 88:4a:38:e7:dd:7b:b5:a7:a9:e9:14:d4:3a:1d:54: c8:65:a2:71:29:bd:88:ca:6f:08:2a:e9:b8:7a:d9: 75:3b:ca:ed:15:22:a9:b2:9e:b7:43:f2:0f:ba:49: 05:a2:0b:96:21:ea:14:92:65:2d:34:28:3a:d0:07: d1:e2:60:a6:4b:09:bf:27:f3:a9:12:f9:61:d8:b2: 55:84:1b:1a:95:7f:b0:8e:08:5c:12:66:cb:fb:01: 17:73:b4:38:5c:c4:89:7b:63:8e:06:7b:79:63:88: e4:95:92:c7:6b:a2:13:8a:ce:01:81:f8:3c:f1:36: 14:95:f9:88:15:30:5c:28:ba:d2:2d:3b:70:f9:47: e9:40:61:4a:c7:70:54:8e:7d:8a:ae:64:6d:44:fc: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:3B:BE:93:01:9D:40:A0:B2:5E:31:3B:E2:61:B7:92:EE:80:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6712166e-3bec-471c-a385-b21c7ca5744e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.0.0/19 Signature Algorithm: sha256WithRSAEncryption 05:5e:b9:16:2e:d4:21:3f:b6:8e:d3:ab:fa:0e:c7:9a:37:70: ff:83:de:ed:84:9a:a7:ba:62:52:33:d5:7f:24:4a:5f:b8:26: 13:55:09:47:fd:57:5c:ee:7b:74:ed:39:7b:16:74:74:be:65: a7:45:61:43:ed:11:a3:2f:30:05:a6:a6:a6:a7:d0:41:55:01: 23:ce:4c:c7:84:4b:ba:80:66:2f:df:50:4b:0d:7e:3d:fc:d8: c9:e7:24:e6:0c:72:3b:8a:41:d4:a0:7e:7e:b6:8e:44:2d:72: e8:01:78:b4:fc:2c:20:f1:c2:ea:3d:55:ed:a7:f8:da:c5:5d: d1:3c:c6:b0:7d:f5:54:a4:9a:e7:7e:e2:34:d2:dd:d9:c9:0c: 19:82:59:16:34:eb:0f:ff:b7:9e:3e:c4:f3:a2:5c:57:6d:92: 5c:95:bd:42:75:64:b6:8f:9e:f3:2b:a3:32:b2:57:29:bb:2a: c7:be:59:7f:52:0c:a6:3a:3b:1e:ec:93:12:1e:49:cb:d4:e7: 3e:7d:9b:51:09:66:74:94:d3:5a:32:a0:c8:80:07:14:8a:e8: 07:8c:61:f9:e4:a1:62:f5:0c:92:7c:47:99:c6:08:ba:f0:23: b1:6b:5a:b4:d1:a1:f2:ca:fa:3f:7b:0e:b5:9c:b1:e6:ae:a8: ec:69:1c:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdsJQSUZ2/XzdaT1pxEqhZ0kcxxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDA1MDA5WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTEwOTE1NWM0MDcwZThiNTkzYTQ1NGY3MDM0NDA3YmUz ZDM2NGM0YjJhZTExN2RjNTgzYzBmZjNiM2JiZTc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcfczu045ZjEiX33EJcQnFZuu0M69JGeuorh7M53daqZqO g4aSXEHFdVvXJYx73C5tUUIXQzugltcAG84qLZfxDP1Leg2dLLHQUwQLe+iDouy0 vHZxslPsnf9ZGID/39zIKn27QTbTt4hKOOfde7WnqekU1DodVMhlonEpvYjKbwgq 6bh62XU7yu0VIqmynrdD8g+6SQWiC5Yh6hSSZS00KDrQB9HiYKZLCb8n86kS+WHY slWEGxqVf7COCFwSZsv7ARdztDhcxIl7Y44Ge3ljiOSVksdrohOKzgGB+DzxNhSV +YgVMFwoutItO3D5R+lAYUrHcFSOfYquZG1E/DYtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcto7vpMBnUCgsl4xO+Jht5LugFgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTIxNjZlLTNiZWMtNDcxYy1hMzg1LWIyMWM3Y2E1NzQ0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyEgAwDQYJKoZIhvcNAQELBQADggEBAAVeuRYu1CE/to7Tq/oOx5o3cP+D 3u2Emqe6YlIz1X8kSl+4JhNVCUf9V1zue3TtOXsWdHS+ZadFYUPtEaMvMAWmpqan 0EFVASPOTMeES7qAZi/fUEsNfj382MnnJOYMcjuKQdSgfn62jkQtcugBeLT8LCDx wuo9Ve2n+NrFXdE8xrB99VSkmud+4jTS3dnJDBmCWRY06w//t54+xPOiXFdtklyV vUJ1ZLaPnvMrozKyVym7Kse+WX9SDKY6Ox7skxIeScvU5z59m1EJZnSU01oyoMiA BxSK6AeMYfnkoWL1DJJ8R5nGCLrwI7FrWrTRofLK+j97DrWcseauqOxpHG4= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:57 2026 by rpki-client