$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c4bf097-d8a8-476c-a175-6b763ab54239.roa File: 8c4bf097-d8a8-476c-a175-6b763ab54239.roa (raw, json) Hash identifier: wZ4cuE+3bQErpgfLVrfYTNfz7W++NgggT9gdd1XvkyM= Subject key identifier: B9:27:3B:04:3E:43:3C:C5:ED:EB:9C:07:89:F7:EF:5B:2A:7E:5A:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72F4D13A84D058C52EC4C2E5D73B39D37D0DCFB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c4bf097-d8a8-476c-a175-6b763ab54239.roa Signing time: Mon 20 Jul 2026 00:20:07 +0000 ROA not before: Mon 20 Jul 2026 00:20:07 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f4:d1:3a:84:d0:58:c5:2e:c4:c2:e5:d7:3b:39:d3:7d:0d:cf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:20:07 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=d38d8e60c6bba29bd6a0a18d9b5f6531b6b2bdd2511104f0c121ca90f535cd46, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:aa:06:89:67:a9:fe:2c:71:0c:64:22:47: 3c:e8:4f:94:27:c2:b5:0c:44:f7:02:e5:06:c0:a0: 59:55:6c:7b:cb:46:62:d0:fe:6f:16:75:06:dc:a4: 2f:df:64:5a:51:4c:e0:67:c9:9e:4e:6b:e9:69:2c: 7e:9f:13:c5:9c:ff:57:19:91:bd:25:65:d3:eb:55: 07:2a:33:6e:96:cb:dd:b9:ba:99:52:41:af:9f:49: 2b:bc:72:4b:a0:df:df:0a:4d:7b:6f:d5:86:80:d5: 18:e9:06:b1:ff:7e:9d:ec:a2:8b:06:29:c5:e5:10: ca:d4:b0:3d:e3:01:b9:6d:24:35:ff:5b:40:e1:80: 46:2d:31:30:05:e7:9a:38:af:dc:7a:44:d1:76:c0: 0b:de:2e:36:ea:b5:fd:56:b6:87:88:07:d3:68:dd: a9:2c:93:f2:04:0b:e7:e4:5d:b4:4e:1c:d7:26:d1: 41:6f:ec:38:ec:87:f9:4b:69:9e:f5:c1:4f:8c:17: 71:1c:e7:71:db:5b:93:51:6c:05:c2:fb:87:81:79: 7f:a0:d6:9c:04:5e:7d:e1:b6:08:79:04:98:5b:17: 98:fc:30:5b:e6:c2:7b:97:60:03:b4:57:9e:47:3d: b4:c5:48:86:1f:69:8d:10:50:9b:73:ee:c3:69:b1: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:3B:04:3E:43:3C:C5:ED:EB:9C:07:89:F7:EF:5B:2A:7E:5A:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c4bf097-d8a8-476c-a175-6b763ab54239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.4.0/22 Signature Algorithm: sha256WithRSAEncryption d2:87:b5:70:e8:31:2d:8b:e1:64:28:73:71:d2:ed:5a:26:4e: b2:b2:1d:75:14:e7:82:af:75:94:5a:10:a7:2b:09:79:3f:2a: 7f:e0:b6:61:d0:3d:17:93:01:18:6b:db:72:ba:18:06:18:02: cf:ea:bd:27:08:d1:de:e7:16:ae:32:d2:63:8c:da:a6:ec:ad: b8:da:1d:cd:f9:cd:2d:a1:0d:2c:68:db:b4:25:af:85:c8:82: c9:2a:2a:76:92:37:70:61:80:80:2a:5c:2d:74:72:b9:db:53: 75:88:f2:95:ae:5f:a1:d2:49:6f:25:7e:ca:0e:cc:73:3d:6b: 2a:3b:ba:d7:23:72:12:19:b4:51:1d:25:8f:53:bc:a4:91:6a: 84:e3:26:62:29:58:01:6b:9a:f8:b9:51:76:38:d0:61:ab:24: 10:14:e5:59:dc:07:d6:f4:65:98:c7:3c:d1:8c:68:e3:51:8c: 61:b1:ed:90:d1:67:54:80:f2:a7:ac:74:11:f0:3f:4d:2c:a7: b7:76:a6:c7:a1:d3:ee:ed:df:f7:0b:ce:52:00:3d:35:af:d5: f5:3e:7e:5c:d4:53:17:51:bb:e4:9a:09:b6:08:7d:d9:10:58: 31:5a:ad:3a:64:3d:36:f3:d6:80:7a:2b:bd:39:a7:7d:8e:d1: 4c:e7:f2:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcvTROoTQWMUuxMLl1zs5030Nz7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAyMDA3WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzhkOGU2MGM2YmJhMjliZDZhMGExOGQ5YjVmNjUzMWI2 YjJiZGQyNTExMTA0ZjBjMTIxY2E5MGY1MzVjZDQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZCqoGiWep/ixxDGQiRzzoT5QnwrUMRPcC5QbAoFlVbHvL RmLQ/m8WdQbcpC/fZFpRTOBnyZ5Oa+lpLH6fE8Wc/1cZkb0lZdPrVQcqM26Wy925 uplSQa+fSSu8ckug398KTXtv1YaA1RjpBrH/fp3soosGKcXlEMrUsD3jAbltJDX/ W0DhgEYtMTAF55o4r9x6RNF2wAveLjbqtf1WtoeIB9No3aksk/IEC+fkXbROHNcm 0UFv7Djsh/lLaZ71wU+MF3Ec53HbW5NRbAXC+4eBeX+g1pwEXn3htgh5BJhbF5j8 MFvmwnuXYAO0V55HPbTFSIYfaY0QUJtz7sNpsYytAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuSc7BD5DPMXt65wHiffvWyp+WsgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjNGJmMDk3LWQ4YTgtNDc2Yy1hMTc1LTZiNzYzYWI1NDIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEgQwDQYJKoZIhvcNAQELBQADggEBANKHtXDoMS2L4WQoc3HS7VomTrKy HXUU54KvdZRaEKcrCXk/Kn/gtmHQPReTARhr23K6GAYYAs/qvScI0d7nFq4y0mOM 2qbsrbjaHc35zS2hDSxo27Qlr4XIgskqKnaSN3BhgIAqXC10crnbU3WI8pWuX6HS SW8lfsoOzHM9ayo7utcjchIZtFEdJY9TvKSRaoTjJmIpWAFrmvi5UXY40GGrJBAU 5VncB9b0ZZjHPNGMaONRjGGx7ZDRZ1SA8qesdBHwP00sp7d2pseh0+7t3/cLzlIA PTWv1fU+flzUUxdRu+SaCbYIfdkQWDFarTpkPTbz1oB6K705p32O0Uzn8hw= -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:46 2026 by rpki-client