$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896417db-6a40-401f-a216-b1bd144effa3.roa File: 896417db-6a40-401f-a216-b1bd144effa3.roa (raw, json) Hash identifier: lBZfspAa+zCWAsS6lykkRPyGyHkWSt0g2qOof/4ABcw= Subject key identifier: 27:A0:2D:03:84:4E:87:95:F1:5C:29:2F:3D:BD:F2:66:0D:47:98:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B32101BBC55956A4167EE36591DB7E7E1CAF8AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896417db-6a40-401f-a216-b1bd144effa3.roa Signing time: Sat 18 Jul 2026 00:10:03 +0000 ROA not before: Sat 18 Jul 2026 00:10:03 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:32:10:1b:bc:55:95:6a:41:67:ee:36:59:1d:b7:e7:e1:ca:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:10:03 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=0ce23d724a725ec0fd6fcda1486ba682f84e5a1179fdc030ea1854a6a09a5015, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:61:82:9c:24:dc:60:08:32:d9:50:c3:2c: 78:e2:da:7b:7b:1e:86:05:09:ee:ed:ae:8b:37:9f: ae:e0:a9:f4:e3:95:2c:65:d3:42:c0:1d:de:53:46: 29:5b:97:5b:65:af:69:a2:67:4e:6a:46:d3:68:bf: 2a:0d:dd:26:3d:af:1e:41:2b:ac:68:8d:8f:22:36: f5:f9:fb:ca:b3:7a:5f:2c:dc:e7:84:d8:41:65:20: f4:82:3a:e5:2d:f5:56:ea:97:6d:ac:22:74:a8:98: f7:18:63:9f:ba:5a:b4:15:6f:6e:3b:f0:20:61:70: 07:dd:d2:24:e0:6a:06:7c:83:d8:23:12:40:e4:40: a2:75:0c:51:11:3a:49:64:df:f1:a3:88:06:a3:0d: 1a:27:ac:4a:44:6a:b9:83:c8:1f:44:60:cd:24:df: 78:96:7f:72:83:83:b2:2e:de:85:f5:1a:36:dd:f7: f0:e1:52:06:ff:1f:ba:c3:55:61:55:b3:f6:c2:f5: 09:68:cb:95:de:a9:1f:80:42:cd:b1:07:6b:0a:22: 54:f1:df:ef:e9:9c:59:08:c3:e7:cb:c0:c6:02:95: 7a:af:9d:94:8e:dc:6b:2d:19:57:47:05:5a:1f:9e: 6f:5c:ac:4a:f8:cb:84:c6:d7:e8:df:6a:59:a0:f5: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A0:2D:03:84:4E:87:95:F1:5C:29:2F:3D:BD:F2:66:0D:47:98:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896417db-6a40-401f-a216-b1bd144effa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.99.0/24 Signature Algorithm: sha256WithRSAEncryption bd:95:27:62:e0:66:16:2f:1c:02:82:af:7e:73:9b:e4:f4:bc: 2a:8f:12:7b:04:8f:05:84:d0:f4:5c:aa:3b:49:02:ea:9b:c9: e6:ed:2f:7e:5d:14:14:13:34:aa:3a:ed:5a:7d:25:5b:58:f6: 42:7a:97:7a:b4:dc:5b:a5:2f:aa:25:0f:bf:68:36:3c:29:a3: 8a:49:93:55:38:79:02:f4:77:d0:1a:e7:db:9d:db:ec:fd:83: d6:56:69:62:b3:94:7a:b2:f0:1e:ab:bd:0c:d2:fb:75:18:e3: 2c:41:28:c7:0a:8c:fa:af:41:93:72:7d:48:74:d4:cd:7c:81: f1:26:58:a4:84:5f:d9:a2:d0:f5:f9:da:12:3f:08:ca:68:18: f3:76:f3:5f:f9:e3:b2:94:2d:eb:94:93:3e:ac:0a:42:b0:fe: 0c:15:da:cd:f9:57:00:4a:15:47:1f:20:47:ad:af:cf:2c:00: af:40:98:b3:5a:cd:d7:34:a6:81:d0:83:ef:f3:a5:c5:e3:8b: 77:82:ae:5b:90:45:03:db:cd:2f:7e:dd:48:65:23:cc:a9:48: 7a:a2:78:84:68:df:67:1e:a1:37:cc:98:85:c4:c3:40:e1:7b: 4f:ca:91:cb:79:e3:e5:d4:9a:64:30:20:aa:ac:fe:9b:da:9b: 43:ec:3f:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGzIQG7xVlWpBZ+42WR235+HK+K0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAxMDAzWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2UyM2Q3MjRhNzI1ZWMwZmQ2ZmNkYTE0ODZiYTY4MmY4 NGU1YTExNzlmZGMwMzBlYTE4NTRhNmEwOWE1MDE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV62GCnCTcYAgy2VDDLHji2nt7HoYFCe7tros3n67gqfTj lSxl00LAHd5TRilbl1tlr2miZ05qRtNovyoN3SY9rx5BK6xojY8iNvX5+8qzel8s 3OeE2EFlIPSCOuUt9Vbql22sInSomPcYY5+6WrQVb2478CBhcAfd0iTgagZ8g9gj EkDkQKJ1DFEROklk3/GjiAajDRonrEpEarmDyB9EYM0k33iWf3KDg7Iu3oX1Gjbd 9/DhUgb/H7rDVWFVs/bC9Qloy5XeqR+AQs2xB2sKIlTx3+/pnFkIw+fLwMYClXqv nZSO3GstGVdHBVofnm9crEr4y4TG1+jfalmg9f7pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ6AtA4ROh5XxXCkvPb3yZg1HmBYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5NjQxN2RiLTZhNDAtNDAxZi1hMjE2LWIxYmQxNDRlZmZhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GMwDQYJKoZIhvcNAQELBQADggEBAL2VJ2LgZhYvHAKCr35zm+T0vCqP EnsEjwWE0PRcqjtJAuqbyebtL35dFBQTNKo67Vp9JVtY9kJ6l3q03FulL6olD79o Njwpo4pJk1U4eQL0d9Aa59ud2+z9g9ZWaWKzlHqy8B6rvQzS+3UY4yxBKMcKjPqv QZNyfUh01M18gfEmWKSEX9mi0PX52hI/CMpoGPN281/547KULeuUkz6sCkKw/gwV 2s35VwBKFUcfIEetr88sAK9AmLNazdc0poHQg+/zpcXji3eCrluQRQPbzS9+3Uhl I8ypSHqieIRo32ceoTfMmIXEw0Dhe0/Kkct54+XUmmQwIKqs/pvam0PsPy4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:21 2026 by rpki-client