$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/894f5841-d37d-4595-b79e-b8108bb28136.roa File: 894f5841-d37d-4595-b79e-b8108bb28136.roa (raw, json) Hash identifier: qOrcVwehzmL/TxwcSPWMjQ/UuLJlVlEA57ZlQ78JVFE= Subject key identifier: 2F:49:C3:45:1B:5A:80:AD:8C:19:87:73:88:0F:A1:5F:09:EF:11:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27ABC4869ECD63D315101B7FEFF0CBACA5D0A568 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/894f5841-d37d-4595-b79e-b8108bb28136.roa Signing time: Sat 18 Jul 2026 00:00:12 +0000 ROA not before: Sat 18 Jul 2026 00:00:12 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 64.187.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ab:c4:86:9e:cd:63:d3:15:10:1b:7f:ef:f0:cb:ac:a5:d0:a5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:00:12 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=b1384d5aa1e2e9aa7c3d7d51ee3a135a81d216238c75a0dfd6c66afaea0597c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:b0:a6:53:a1:40:99:c1:09:39:24:f2:08: 43:08:5b:f3:32:3d:82:72:bc:ba:74:2d:03:6d:ae: 1f:38:c6:fc:65:dc:d2:7d:4a:d2:6c:2a:ea:6b:a1: e6:ae:aa:97:af:a1:6e:61:75:0a:06:4a:16:23:d8: 86:04:11:ff:50:d0:23:36:31:c5:ed:89:be:3e:78: f5:01:28:55:e7:69:c2:05:41:e2:24:0c:68:bf:e4: 1a:07:2c:f2:cf:30:d0:06:79:64:5b:ae:23:1a:5d: 2e:f2:59:8c:bd:14:08:2d:13:7e:76:96:84:af:25: 72:fa:71:c6:9a:fd:86:eb:a6:a5:d9:e7:56:fe:76: c5:77:d8:38:c4:90:1a:bc:ff:6d:d2:6f:5c:f0:b8: 65:05:fc:7b:11:ba:37:fe:da:1b:29:78:17:09:cf: ed:3d:d9:1f:1c:aa:f7:f6:b0:f6:c8:96:d2:98:49: 98:1e:cd:50:4b:b3:8c:cc:b4:f4:0b:67:91:bd:7b: ab:cd:f8:0a:10:cc:17:b5:09:f8:04:a9:ab:25:4a: a1:b8:62:af:c6:ef:25:a8:29:6c:f0:7d:7a:ac:c9: 05:ab:b1:68:1c:24:80:90:02:82:1a:39:1e:5f:97: 72:62:8d:2c:f6:eb:b6:c4:83:c1:92:94:db:de:6c: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:49:C3:45:1B:5A:80:AD:8C:19:87:73:88:0F:A1:5F:09:EF:11:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/894f5841-d37d-4595-b79e-b8108bb28136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.187.128.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:91:69:7f:33:89:1b:ec:b9:8d:0a:ff:94:73:8f:ee:84:42: bf:f7:16:bc:71:f1:95:bf:4e:f6:e3:c1:56:84:a1:19:fd:2d: f5:91:24:f3:6d:11:48:ea:cd:1b:98:8d:1e:e8:e2:0e:b3:39: b2:4e:27:db:7a:f1:3d:84:63:23:77:53:ab:30:bc:11:e4:48: d2:a1:81:19:63:d1:07:b4:6b:02:42:9b:4b:e0:45:48:46:61: be:01:5a:1e:b6:52:01:bf:81:e3:52:1b:e1:11:5b:9f:5c:1f: 59:c9:e6:70:f1:30:6a:a3:d3:e9:6d:5b:aa:e0:04:5f:2d:48: 0c:82:f7:26:29:1e:bc:dd:04:91:0f:eb:46:f5:91:33:05:4b: 87:1d:bb:9d:8e:e0:b6:99:98:27:86:a5:9d:fb:5c:8f:6a:fd: ed:b2:a5:27:0d:51:8d:81:05:ec:29:60:7f:82:a5:6b:2a:7a: af:4c:5a:43:88:c4:a1:dd:75:f0:da:bb:37:a8:c2:cc:7b:81: df:9d:2d:53:b0:37:23:32:f8:09:84:1f:db:0f:a8:95:8e:a4: 51:df:31:e3:36:a7:2a:46:33:70:17:78:6d:10:ae:8a:17:54: 4f:c4:87:9d:c0:77:d8:c4:a6:8e:b7:ae:90:87:51:d6:61:73: e3:82:0c:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ6vEhp7NY9MVEBt/7/DLrKXQpWgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAwMDEyWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTM4NGQ1YWExZTJlOWFhN2MzZDdkNTFlZTNhMTM1YTgx ZDIxNjIzOGM3NWEwZGZkNmM2NmFmYWVhMDU5N2MxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKj7CmU6FAmcEJOSTyCEMIW/MyPYJyvLp0LQNtrh84xvxl 3NJ9StJsKuproeauqpevoW5hdQoGShYj2IYEEf9Q0CM2McXtib4+ePUBKFXnacIF QeIkDGi/5BoHLPLPMNAGeWRbriMaXS7yWYy9FAgtE352loSvJXL6ccaa/YbrpqXZ 51b+dsV32DjEkBq8/23Sb1zwuGUF/HsRujf+2hspeBcJz+092R8cqvf2sPbIltKY SZgezVBLs4zMtPQLZ5G9e6vN+AoQzBe1CfgEqaslSqG4Yq/G7yWoKWzwfXqsyQWr sWgcJICQAoIaOR5fl3JijSz267bEg8GSlNvebPf3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL0nDRRtagK2MGYdziA+hXwnvEUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5NGY1ODQxLWQzN2QtNDU5NS1iNzllLWI4MTA4YmIyODEzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARAu4AwDQYJKoZIhvcNAQELBQADggEBAB2RaX8ziRvsuY0K/5Rzj+6EQr/3 Frxx8ZW/TvbjwVaEoRn9LfWRJPNtEUjqzRuYjR7o4g6zObJOJ9t68T2EYyN3U6sw vBHkSNKhgRlj0Qe0awJCm0vgRUhGYb4BWh62UgG/geNSG+ERW59cH1nJ5nDxMGqj 0+ltW6rgBF8tSAyC9yYpHrzdBJEP60b1kTMFS4cdu52O4LaZmCeGpZ37XI9q/e2y pScNUY2BBewpYH+CpWsqeq9MWkOIxKHddfDauzeowsx7gd+dLVOwNyMy+AmEH9sP qJWOpFHfMeM2pypGM3AXeG0QrooXVE/Eh53Ad9jEpo63rpCHUdZhc+OCDPs= -----END CERTIFICATE-----Generated at Fri Jul 24 07:42:43 2026 by rpki-client