$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa File: 7154b655-2eb9-4fb7-bbc3-c275f8499135.roa (raw, json) Hash identifier: /fiUVQWc37PsugqOlHEee3wZe7sjIfN/vw3OHp0vyP8= Subject key identifier: AF:42:AA:59:2E:E8:67:F4:CB:A3:DE:92:05:02:D9:21:68:77:A2:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D72CFBC4568696E995CE1FB2092E5098CC989FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa Signing time: Sat 18 Jul 2026 00:30:11 +0000 ROA not before: Sat 18 Jul 2026 00:30:11 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.232.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:72:cf:bc:45:68:69:6e:99:5c:e1:fb:20:92:e5:09:8c:c9:89:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:30:11 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=46f91c95119a83df955d6ee5b90351979478d7b3b1444c1dbf376075ba240388, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:aa:f8:4b:32:8e:bf:bd:e2:1e:43:2a:e2: 54:3a:86:ca:07:c4:10:72:64:1b:57:32:c0:81:d3: f1:cd:64:fd:7c:41:2f:60:63:5c:fa:91:68:92:82: 73:6e:41:c0:db:43:20:85:17:1d:f9:75:a4:28:c7: a9:90:a0:fe:7a:00:d4:17:02:43:c2:cf:e9:0f:ff: 4d:41:09:44:f0:47:ed:8c:8b:c6:48:27:30:dd:a9: 61:67:fe:bb:eb:46:48:df:ea:01:06:f8:24:1a:7f: 6f:b1:0f:76:99:a1:86:9c:6f:9f:96:16:12:c6:41: 1f:93:a4:bd:91:d3:94:fe:0d:26:63:61:8c:65:9a: 36:4a:e6:8a:5d:a0:16:73:d1:df:4b:7b:9c:36:76: c7:06:67:33:dc:9b:98:4b:8a:b7:90:9a:21:c8:bf: 8b:29:d0:e4:fe:a0:8b:29:da:d4:3d:ad:da:cf:e4: 31:55:c7:53:6e:06:67:8a:97:7c:7c:c0:f2:49:b1: 2a:17:2e:13:81:2d:5d:b6:f5:d6:f5:7f:d5:c5:f5: 73:af:57:f4:55:99:34:bd:53:38:1e:a3:e5:31:06: 72:b7:02:84:35:be:a0:d9:e1:61:58:9a:3e:b9:5a: 48:b2:ed:be:41:d1:c7:1b:16:17:56:50:b2:35:c9: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:AA:59:2E:E8:67:F4:CB:A3:DE:92:05:02:D9:21:68:77:A2:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.64.0/20 Signature Algorithm: sha256WithRSAEncryption 97:49:70:b6:5c:75:b5:65:be:76:e7:6c:57:03:aa:cc:de:9b: 38:6c:4e:e6:07:ce:7a:61:79:a6:e3:ea:86:6d:82:6b:2b:ce: 1b:31:33:0d:fa:9e:7f:f8:e8:25:61:ac:49:f1:ad:97:d2:59: 7c:ac:b4:33:b6:b4:60:49:c4:6a:2d:09:a3:c6:a7:5c:45:ed: 66:47:65:5c:89:7d:a5:5d:56:4d:74:fb:98:6e:7c:f6:44:84: f3:14:5b:6d:c2:80:0d:bc:21:0a:78:f5:84:23:45:00:b0:f8: 60:71:30:92:9d:0f:fd:b8:a9:45:9d:0b:66:f2:78:95:d7:35: 3a:22:13:ce:aa:7c:0c:03:b2:31:ea:9a:76:78:cc:9f:5e:af: 40:d8:aa:37:64:8f:32:eb:5d:61:23:9f:9b:fc:0a:84:81:df: 30:75:5c:9b:a6:8e:c9:3e:4b:95:a2:20:55:f6:8c:92:2b:66: b4:0c:9d:6f:25:ec:dd:92:1b:97:53:ab:3c:59:76:32:71:be: c3:44:7f:3d:d7:60:ee:7b:66:21:48:f1:87:03:95:5d:76:46: 70:b0:40:ea:52:c8:ec:63:9f:e9:a9:15:ee:89:19:b9:e4:86: c0:de:96:7a:e1:71:8d:d8:48:32:6f:76:2d:61:30:25:34:80: 1a:07:26:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPXLPvEVoaW6ZXOH7IJLlCYzJif0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAzMDExWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmY5MWM5NTExOWE4M2RmOTU1ZDZlZTViOTAzNTE5Nzk0 NzhkN2IzYjE0NDRjMWRiZjM3NjA3NWJhMjQwMzg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFhar4SzKOv73iHkMq4lQ6hsoHxBByZBtXMsCB0/HNZP18 QS9gY1z6kWiSgnNuQcDbQyCFFx35daQox6mQoP56ANQXAkPCz+kP/01BCUTwR+2M i8ZIJzDdqWFn/rvrRkjf6gEG+CQaf2+xD3aZoYacb5+WFhLGQR+TpL2R05T+DSZj YYxlmjZK5opdoBZz0d9Le5w2dscGZzPcm5hLireQmiHIv4sp0OT+oIsp2tQ9rdrP 5DFVx1NuBmeKl3x8wPJJsSoXLhOBLV229db1f9XF9XOvV/RVmTS9Uzgeo+UxBnK3 AoQ1vqDZ4WFYmj65Wkiy7b5B0ccbFhdWULI1yfC/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr0KqWS7oZ/TLo96SBQLZIWh3oi8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxNTRiNjU1LTJlYjktNGZiNy1iYmMzLWMyNzVmODQ5OTEzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARG6EAwDQYJKoZIhvcNAQELBQADggEBAJdJcLZcdbVlvnbnbFcDqszemzhs TuYHznpheabj6oZtgmsrzhsxMw36nn/46CVhrEnxrZfSWXystDO2tGBJxGotCaPG p1xF7WZHZVyJfaVdVk10+5hufPZEhPMUW23CgA28IQp49YQjRQCw+GBxMJKdD/24 qUWdC2byeJXXNToiE86qfAwDsjHqmnZ4zJ9er0DYqjdkjzLrXWEjn5v8CoSB3zB1 XJumjsk+S5WiIFX2jJIrZrQMnW8l7N2SG5dTqzxZdjJxvsNEfz3XYO57ZiFI8YcD lV12RnCwQOpSyOxjn+mpFe6JGbnkhsDelnrhcY3YSDJvdi1hMCU0gBoHJog= -----END CERTIFICATE-----Generated at Fri Jul 24 01:22:20 2026 by rpki-client