$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa File: 91d5664a-8248-46da-9cb9-0b09e0fab78e.roa (raw, json) Hash identifier: s23zw6Rz1Lz3fINSyN3CF8eqLRlaRyb9KKBAQzrcQLo= Subject key identifier: 74:E3:3A:A2:FC:2C:DC:3D:BB:50:F5:D3:A7:52:E0:3A:72:09:7F:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17CAF7767E8CD73248171E4A757161E483C9AC38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa Signing time: Thu 23 Jul 2026 01:00:46 +0000 ROA not before: Thu 23 Jul 2026 01:00:46 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 44.216.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ca:f7:76:7e:8c:d7:32:48:17:1e:4a:75:71:61:e4:83:c9:ac:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 01:00:46 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=fb5c6ba1c125f77d87cd263097ca013d7008dc519fee7e3132811252d8b2af5b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:b9:b7:64:ba:8a:3f:ff:b1:c6:b3:c9:20: 5c:ee:75:60:1b:71:c3:28:bf:d7:cb:f2:8e:a3:ca: 00:a1:b3:3e:ab:8d:a7:f8:c7:70:35:b1:6e:bf:4c: e9:a7:a1:94:92:f3:d2:5a:dc:68:50:1e:66:b2:50: 74:9b:14:0f:ee:44:8e:3c:95:31:f0:7b:b7:d9:2b: 84:52:b9:fb:e7:7a:9c:59:55:d9:3c:f0:04:a7:f7: f1:68:7b:3c:04:96:5e:39:10:ff:fe:b0:e0:08:2b: 42:de:72:d1:a8:59:4d:de:5d:39:c0:49:11:80:d8: f0:1e:ec:1d:05:9c:13:2f:b3:7a:2f:47:d1:f0:2c: 3e:22:21:ce:93:0e:27:c7:a7:7f:b6:06:34:e1:f5: a5:17:e8:0e:53:b4:86:3b:9e:16:3e:9e:ca:e6:6f: 45:68:18:29:96:e0:90:95:52:55:91:3f:8b:ed:11: 96:82:c6:d4:43:a6:fe:1f:be:94:09:2d:cd:ed:d3: 14:66:d6:d2:69:a3:0f:f2:63:63:c4:ae:2f:3b:bc: 0c:c9:48:ee:9d:ac:04:c3:e0:65:c9:5c:95:ee:7e: 5b:35:0b:03:88:39:46:be:94:bb:5b:11:f9:f8:8b: 8a:88:90:d3:5d:16:26:25:bb:22:aa:8f:c2:c5:a7: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:3A:A2:FC:2C:DC:3D:BB:50:F5:D3:A7:52:E0:3A:72:09:7F:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.216.200.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:9f:4e:0f:c7:a8:6d:5e:ec:1b:01:9f:c1:1a:f1:40:d2:b8: 26:a8:24:65:08:db:54:cc:13:3c:08:2a:ab:21:cb:a2:be:1e: 04:0d:f0:79:b2:ea:ab:1e:5f:56:76:24:53:1b:d3:b4:e1:b2: ef:67:db:b8:0d:12:b4:28:da:c6:7c:d5:3f:71:af:5f:18:cb: f9:0d:81:96:b7:0a:e1:ac:2c:ee:46:6f:2f:97:1e:e4:d6:8a: ef:56:3b:09:02:56:f1:7b:b7:32:2c:7f:56:1b:e9:b5:36:23: c9:e7:01:62:f8:8b:6b:cc:11:c1:d7:d3:4a:4c:9b:28:41:16: ef:f1:5e:cf:3a:63:08:b8:a0:e8:0e:14:0b:ea:58:e6:66:09: 3f:25:3a:aa:86:06:06:d0:ef:b9:5e:ec:be:dc:89:78:2c:dc: 7a:bf:ac:e0:ad:57:b1:56:d7:7a:3a:f1:e6:1d:62:36:00:b4: f3:32:55:d5:d9:f3:ba:ce:c1:06:2e:4d:9d:00:b2:48:3f:ed: e2:37:59:1d:08:66:64:07:da:73:c6:1b:3e:c2:ac:28:e7:76: 5b:5b:b5:11:f9:9e:45:9a:12:cd:52:e2:e2:21:3a:1c:46:c7: b4:47:31:92:ad:6e:8b:6b:5e:ba:f9:86:a1:c9:56:22:48:8d: 0b:a4:c5:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF8r3dn6M1zJIFx5KdXFh5IPJrDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDEwMDQ2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjVjNmJhMWMxMjVmNzdkODdjZDI2MzA5N2NhMDEzZDcw MDhkYzUxOWZlZTdlMzEzMjgxMTI1MmQ4YjJhZjViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5Zrm3ZLqKP/+xxrPJIFzudWAbccMov9fL8o6jygChsz6r jaf4x3A1sW6/TOmnoZSS89Ja3GhQHmayUHSbFA/uRI48lTHwe7fZK4RSufvnepxZ Vdk88ASn9/FoezwEll45EP/+sOAIK0LectGoWU3eXTnASRGA2PAe7B0FnBMvs3ov R9HwLD4iIc6TDifHp3+2BjTh9aUX6A5TtIY7nhY+nsrmb0VoGCmW4JCVUlWRP4vt EZaCxtRDpv4fvpQJLc3t0xRm1tJpow/yY2PEri87vAzJSO6drATD4GXJXJXufls1 CwOIOUa+lLtbEfn4i4qIkNNdFiYluyKqj8LFp+O1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdOM6ovws3D27UPXTp1LgOnIJfyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxZDU2NjRhLTgyNDgtNDZkYS05Y2I5LTBiMDllMGZhYjc4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs2MgwDQYJKoZIhvcNAQELBQADggEBAIufTg/HqG1e7BsBn8Ea8UDSuCao JGUI21TMEzwIKqshy6K+HgQN8Hmy6qseX1Z2JFMb07Thsu9n27gNErQo2sZ81T9x r18Yy/kNgZa3CuGsLO5Gby+XHuTWiu9WOwkCVvF7tzIsf1Yb6bU2I8nnAWL4i2vM EcHX00pMmyhBFu/xXs86Ywi4oOgOFAvqWOZmCT8lOqqGBgbQ77le7L7ciXgs3Hq/ rOCtV7FW13o68eYdYjYAtPMyVdXZ87rOwQYuTZ0Askg/7eI3WR0IZmQH2nPGGz7C rCjndltbtRH5nkWaEs1S4uIhOhxGx7RHMZKtbotrXrr5hqHJViJIjQukxbE= -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:22 2026 by rpki-client