$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681fb196-b976-4d33-95c9-e448cc127250.roa File: 681fb196-b976-4d33-95c9-e448cc127250.roa (raw, json) Hash identifier: YE81EAdhQlkakrfxNT8yMslT8Yj41REedM90zoXLkNM= Subject key identifier: 5C:66:3C:FE:08:19:D5:57:93:E3:45:85:E8:09:AC:38:5A:FB:16:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3875DA4C1B3A7F59985AC427617104BF8D99B1F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681fb196-b976-4d33-95c9-e448cc127250.roa Signing time: Thu 23 Jul 2026 00:10:46 +0000 ROA not before: Thu 23 Jul 2026 00:10:46 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:75:da:4c:1b:3a:7f:59:98:5a:c4:27:61:71:04:bf:8d:99:b1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:10:46 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=1feaa097d375870fd149aea339a5581cc03bd4a62db42825883ecf927915862f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:55:58:be:f1:72:f1:6c:03:2d:3d:c2:69: 58:da:e2:39:95:9e:7d:36:73:00:0a:d3:23:a5:c3: 9d:8f:47:d8:64:9e:1d:0c:ca:27:8a:18:54:ff:18: 9a:69:ac:e4:13:e3:b0:58:01:c1:da:ea:40:c2:27: e7:01:56:bd:05:ce:16:5b:30:d5:d2:fd:8e:e5:e4: 32:4f:9a:80:f2:7f:b3:79:ad:83:71:a8:69:24:4b: 90:ba:00:cc:f5:70:1c:47:a8:d9:a7:f5:2c:41:16: b6:da:02:43:1a:07:99:4d:21:76:9d:d8:c6:8b:d2: d2:91:a9:a6:2c:7c:5e:89:4d:96:99:ab:1c:1f:ed: 88:37:83:67:fc:73:f0:c4:83:60:ce:fa:cd:8d:da: 9e:aa:74:0c:80:b9:ba:62:9b:84:b5:74:7e:20:10: 5e:68:c1:3c:6f:69:03:f3:94:58:04:09:7f:b7:f8: 67:6f:0a:5d:5f:bf:b1:c6:b6:7c:bb:72:28:92:f8: f9:3c:93:e4:7e:07:d5:51:f3:11:f3:f4:07:20:af: ad:9e:47:d9:66:23:4a:b1:c8:e9:43:e3:d1:f1:1a: bb:44:0e:fd:39:98:05:8a:43:2e:c5:fa:dd:3d:f3: 37:95:c9:0e:c1:71:5b:80:01:14:1a:64:72:59:94: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:66:3C:FE:08:19:D5:57:93:E3:45:85:E8:09:AC:38:5A:FB:16:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681fb196-b976-4d33-95c9-e448cc127250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.0.0/17 Signature Algorithm: sha256WithRSAEncryption 15:47:9a:26:c7:b0:77:d7:3a:30:82:1a:b1:ed:94:b8:5f:03: 23:2f:60:59:6f:6c:87:ae:a3:ea:d6:d3:3e:91:9d:ee:f1:be: a5:3a:25:f2:92:1e:17:e2:f7:e1:ab:fd:8e:b4:fc:e0:ed:71: ec:91:ab:11:eb:64:53:57:d0:a8:5f:c4:2c:43:d7:6e:10:8e: 58:9b:e0:fa:7b:bf:c6:1e:40:33:cb:67:42:4e:e2:55:73:d0: fb:68:71:e6:e2:f0:9d:39:73:39:1f:f3:5e:57:1a:df:9e:d0: 9b:45:67:d0:9d:2e:30:99:c3:77:a9:e5:3b:22:03:c6:2c:7d: f3:47:87:c0:e7:d3:fa:8e:e5:46:3b:3b:f3:94:ec:21:a5:a0: f8:7e:b1:56:1d:07:b6:81:bf:f7:0b:bb:6f:95:9e:0c:a7:91: 9e:6f:0e:68:1a:15:d2:25:41:d6:54:70:57:4f:fb:17:45:07: e5:be:dc:1c:96:31:ca:7b:81:47:da:4c:92:92:3c:46:90:01: 22:d7:f4:58:d4:d3:ea:dc:61:3e:d1:88:14:f7:ae:2e:d2:5c: 8f:cf:9d:12:d8:12:a6:a8:19:54:fe:8f:69:7f:4b:7b:81:01: 38:ef:67:bf:a4:07:91:a3:f9:e1:b1:32:ec:24:22:47:33:80: 04:8a:6b:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOHXaTBs6f1mYWsQnYXEEv42ZsfAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAxMDQ2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmVhYTA5N2QzNzU4NzBmZDE0OWFlYTMzOWE1NTgxY2Mw M2JkNGE2MmRiNDI4MjU4ODNlY2Y5Mjc5MTU4NjJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwwlVYvvFy8WwDLT3CaVja4jmVnn02cwAK0yOlw52PR9hk nh0MyieKGFT/GJpprOQT47BYAcHa6kDCJ+cBVr0FzhZbMNXS/Y7l5DJPmoDyf7N5 rYNxqGkkS5C6AMz1cBxHqNmn9SxBFrbaAkMaB5lNIXad2MaL0tKRqaYsfF6JTZaZ qxwf7Yg3g2f8c/DEg2DO+s2N2p6qdAyAubpim4S1dH4gEF5owTxvaQPzlFgECX+3 +GdvCl1fv7HGtny7ciiS+Pk8k+R+B9VR8xHz9Acgr62eR9lmI0qxyOlD49HxGrtE Dv05mAWKQy7F+t098zeVyQ7BcVuAARQaZHJZlNcLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXGY8/ggZ1VeT40WF6AmsOFr7FtAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MWZiMTk2LWI5NzYtNGQzMy05NWM5LWU0NDhjYzEyNzI1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdM3wAwDQYJKoZIhvcNAQELBQADggEBABVHmibHsHfXOjCCGrHtlLhfAyMv YFlvbIeuo+rW0z6Rne7xvqU6JfKSHhfi9+Gr/Y60/ODtceyRqxHrZFNX0KhfxCxD 124Qjlib4Pp7v8YeQDPLZ0JO4lVz0Ptocebi8J05czkf815XGt+e0JtFZ9CdLjCZ w3ep5TsiA8YsffNHh8Dn0/qO5UY7O/OU7CGloPh+sVYdB7aBv/cLu2+VngynkZ5v DmgaFdIlQdZUcFdP+xdFB+W+3ByWMcp7gUfaTJKSPEaQASLX9FjU0+rcYT7RiBT3 ri7SXI/PnRLYEqaoGVT+j2l/S3uBATjvZ7+kB5Gj+eGxMuwkIkczgASKaxI= -----END CERTIFICATE-----Generated at Thu Jul 23 21:29:31 2026 by rpki-client