$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ae17cb9-05a6-4062-9ea9-723cef1d92c6.roa File: 7ae17cb9-05a6-4062-9ea9-723cef1d92c6.roa (raw, json) Hash identifier: HEyD+OfsMXBBxKQqTQleQFbFSWiekdFjFs5bIQa087A= Subject key identifier: 33:25:1B:FB:01:6E:13:47:5A:2A:3A:5E:1B:81:07:4A:99:5E:23:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71315DA37CEA47E4283BC36855E67218AA63A554 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ae17cb9-05a6-4062-9ea9-723cef1d92c6.roa Signing time: Thu 23 Jul 2026 00:20:13 +0000 ROA not before: Thu 23 Jul 2026 00:20:13 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:31:5d:a3:7c:ea:47:e4:28:3b:c3:68:55:e6:72:18:aa:63:a5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:20:13 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=5289c92f3b3a9ed2526fa84a3b3fbed9623be92c121dfcac43d950977d90f7d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:7a:2d:8d:3a:1f:73:19:93:97:4a:ac:0d: 65:bb:c7:76:69:83:44:f8:d2:f5:41:46:4f:77:7f: 00:35:0c:b1:9f:f7:c9:da:a9:bd:c0:1e:3c:a2:dd: c3:9e:c6:ce:41:4c:2a:8c:e9:bd:bd:fe:a6:43:18: 03:33:00:5b:06:43:6a:b3:d9:3b:2f:b4:17:20:26: 97:a0:a8:98:13:0d:12:17:bc:83:19:9f:f0:74:4f: 89:00:b5:42:81:32:f2:f2:66:73:a5:1b:b0:e3:42: 57:26:a0:e3:43:e4:51:16:39:2e:f0:a7:40:2e:72: f5:86:b2:52:c9:f6:85:d3:25:e1:97:50:3d:bb:a4: 78:46:07:6a:aa:79:65:a8:51:3a:c3:41:49:83:69: 63:4b:65:35:02:e1:d9:bf:d9:cc:cf:a1:ef:29:00: c0:91:a6:a8:b6:90:94:75:84:bb:0d:64:3d:d8:a6: 5b:ab:3d:16:bd:c3:5c:dc:fc:66:a9:ed:0d:c2:de: 6b:25:5c:fb:29:1c:76:92:bc:55:c1:e2:02:f8:ad: bc:b1:81:f4:f6:af:5b:78:6c:3a:7f:70:01:b3:08: b6:c0:40:22:91:ce:69:e6:6a:d0:7a:1d:5b:6b:ae: bb:80:3b:11:5a:dd:8e:c8:0a:dd:bd:be:c2:34:7f: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:25:1B:FB:01:6E:13:47:5A:2A:3A:5E:1B:81:07:4A:99:5E:23:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ae17cb9-05a6-4062-9ea9-723cef1d92c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.240.0/21 Signature Algorithm: sha256WithRSAEncryption d6:23:96:7b:80:06:0e:78:64:e6:82:bb:c1:44:f9:a2:0c:ac: b6:cf:68:aa:75:5a:a5:0d:6b:1e:f7:d1:47:5c:81:fa:3d:73: 96:fb:53:32:6b:ca:c0:14:c8:ff:01:3c:4a:a9:de:64:33:86: d1:67:bd:ed:1a:f1:5a:84:de:f0:d1:43:a8:05:a3:30:d8:02: 31:68:f9:d6:ad:3e:28:1b:fa:5c:cc:2c:2c:29:ee:d9:2c:c6: 65:b7:ed:65:d9:c8:6e:90:f5:aa:36:37:09:01:42:d6:53:37: 49:06:d5:ca:6e:0f:93:db:a7:74:4b:ae:5f:26:fb:02:b4:35: 96:92:cf:36:96:9d:8b:de:ce:86:62:dc:f6:5b:44:25:96:f0: a7:c3:ef:46:a6:6a:d0:ac:79:7e:b9:09:09:7c:1c:37:99:ac: df:17:04:8d:50:5e:13:cb:ce:97:4b:a9:67:5a:3b:aa:4d:74: f7:1f:15:94:8d:11:19:4d:6c:fc:d5:81:04:c2:72:bf:63:a5: e6:b8:38:a2:c2:32:17:86:d3:33:6a:4d:32:cc:06:bc:eb:48: d9:a8:20:3d:69:44:44:2c:b3:13:31:f6:9c:b0:e7:6f:84:76: fd:21:a1:56:18:ef:da:f4:90:58:a3:55:33:48:62:3e:df:25: 2b:09:9d:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcTFdo3zqR+QoO8NoVeZyGKpjpVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAyMDEzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Mjg5YzkyZjNiM2E5ZWQyNTI2ZmE4NGEzYjNmYmVkOTYy M2JlOTJjMTIxZGZjYWM0M2Q5NTA5NzdkOTBmN2Q4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSkXotjTofcxmTl0qsDWW7x3Zpg0T40vVBRk93fwA1DLGf 98naqb3AHjyi3cOexs5BTCqM6b29/qZDGAMzAFsGQ2qz2TsvtBcgJpegqJgTDRIX vIMZn/B0T4kAtUKBMvLyZnOlG7DjQlcmoOND5FEWOS7wp0AucvWGslLJ9oXTJeGX UD27pHhGB2qqeWWoUTrDQUmDaWNLZTUC4dm/2czPoe8pAMCRpqi2kJR1hLsNZD3Y plurPRa9w1zc/Gap7Q3C3mslXPspHHaSvFXB4gL4rbyxgfT2r1t4bDp/cAGzCLbA QCKRzmnmatB6HVtrrruAOxFa3Y7ICt29vsI0fz3jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMyUb+wFuE0daKjpeG4EHSpleI1gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhZTE3Y2I5LTA1YTYtNDA2Mi05ZWE5LTcyM2NlZjFkOTJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNgPAwDQYJKoZIhvcNAQELBQADggEBANYjlnuABg54ZOaCu8FE+aIMrLbP aKp1WqUNax730Udcgfo9c5b7UzJrysAUyP8BPEqp3mQzhtFnve0a8VqE3vDRQ6gF ozDYAjFo+datPigb+lzMLCwp7tksxmW37WXZyG6Q9ao2NwkBQtZTN0kG1cpuD5Pb p3RLrl8m+wK0NZaSzzaWnYvezoZi3PZbRCWW8KfD70amatCseX65CQl8HDeZrN8X BI1QXhPLzpdLqWdaO6pNdPcfFZSNERlNbPzVgQTCcr9jpea4OKLCMheG0zNqTTLM BrzrSNmoID1pREQssxMx9pyw52+Edv0hoVYY79r0kFijVTNIYj7fJSsJnRI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:50 2026 by rpki-client