$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa File: 9450df7f-a952-4d04-9779-708f4bfedc40.roa (raw, json) Hash identifier: Mefj8MLhPWGf8oT3PLSAjtZp4YiVNF1wYHfM2GswO/E= Subject key identifier: 05:FE:C0:1B:9A:D4:E9:53:9B:1C:CD:01:BF:78:DF:D3:F5:0F:2C:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05992D3BBE983A84024CF4D9239E340C8A75BA24 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa Signing time: Tue 21 Jul 2026 01:01:57 +0000 ROA not before: Tue 21 Jul 2026 01:01:57 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 151.148.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:99:2d:3b:be:98:3a:84:02:4c:f4:d9:23:9e:34:0c:8a:75:ba:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 01:01:57 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=f3567d59d09ac1fb35eb910b89220b8258110ae34a66b18083398c549497eec2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:6c:e4:79:8f:8a:27:1b:30:c1:60:4b:1f: a7:91:1d:87:2c:7e:af:a8:bb:27:6c:c7:05:17:f9: f0:ff:29:f5:91:be:13:8d:97:aa:b7:9a:e9:58:42: 4a:94:5f:3b:6e:7f:fa:7d:33:cc:2f:58:7b:68:ac: 84:63:8d:11:b3:02:23:b0:de:11:8d:39:63:78:e7: 13:55:a1:ab:a9:6a:41:4b:fd:70:e0:07:9c:2a:30: b5:8f:2a:ea:e9:35:a9:60:8b:bb:5c:f4:51:d8:88: 8d:51:10:6d:07:ea:ab:4e:c7:44:ad:03:8e:95:24: f9:7a:c6:cb:5d:6f:30:8c:67:20:95:63:a7:61:aa: ac:8c:49:5b:15:c1:39:bd:2d:b3:c3:13:5d:09:f7: aa:89:be:d9:f9:26:d2:02:57:92:8c:be:3b:bb:0e: 24:92:27:14:c4:81:7c:7d:2c:72:1e:81:d3:72:65: e3:46:2f:0c:5f:23:1b:8c:c7:f8:64:a9:69:4b:3d: c5:cf:f6:c7:60:39:81:95:99:6f:ee:1d:33:86:0c: 7b:7f:a5:dd:95:be:ea:e0:36:69:6b:4e:4d:16:5f: 0f:22:32:c7:fa:e8:0b:01:9f:32:60:ed:12:c7:b0: df:07:43:1b:f1:cd:0d:c6:10:a6:5a:1c:a6:be:dd: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FE:C0:1B:9A:D4:E9:53:9B:1C:CD:01:BF:78:DF:D3:F5:0F:2C:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.20.0/24 Signature Algorithm: sha256WithRSAEncryption 89:ab:38:06:b1:10:ee:fa:e5:66:6f:94:2b:9d:83:94:f8:0f: 2e:02:f9:82:ad:11:47:f2:3d:c8:ca:01:83:67:a1:6c:24:30: 02:2f:8f:e7:23:ce:c4:db:de:83:2d:9f:98:43:96:8c:bc:4d: e6:c8:b5:25:7a:67:50:6d:6e:6b:2a:22:46:9c:27:e0:0e:88: 7b:43:6c:c4:ff:65:c3:ad:fd:02:91:70:e0:61:23:b4:90:22: 2d:ed:1b:33:8b:53:da:8d:42:75:a0:a6:2b:12:f4:ce:18:72: e9:26:78:af:4d:0a:a8:31:21:6b:0e:9e:9c:cc:34:30:47:bc: 6b:cf:24:51:07:bf:d2:73:72:72:22:25:e8:cd:be:52:88:be: 93:d1:89:02:88:81:15:84:b8:98:61:ec:1e:7a:d5:c2:c3:ff: 5e:77:24:38:2a:e8:30:89:8b:54:4f:27:7c:44:a8:91:71:cc: 39:78:78:b3:3a:84:bb:5d:89:01:f8:6a:55:52:56:7b:73:5c: bf:56:a7:7b:3b:65:dd:f3:3c:8d:43:db:1a:95:69:12:06:d0: 7f:37:82:fa:28:44:05:7e:46:7a:d9:10:6c:16:07:e3:f6:26: 57:72:7a:5f:5d:d0:1c:d3:03:f0:8c:d4:2a:76:64:11:b9:fe: 26:5c:d1:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBZktO76YOoQCTPTZI540DIp1uiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDEwMTU3WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzU2N2Q1OWQwOWFjMWZiMzVlYjkxMGI4OTIyMGI4MjU4 MTEwYWUzNGE2NmIxODA4MzM5OGM1NDk0OTdlZWMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3AWzkeY+KJxswwWBLH6eRHYcsfq+ouydsxwUX+fD/KfWR vhONl6q3mulYQkqUXztuf/p9M8wvWHtorIRjjRGzAiOw3hGNOWN45xNVoaupakFL /XDgB5wqMLWPKurpNalgi7tc9FHYiI1REG0H6qtOx0StA46VJPl6xstdbzCMZyCV Y6dhqqyMSVsVwTm9LbPDE10J96qJvtn5JtICV5KMvju7DiSSJxTEgXx9LHIegdNy ZeNGLwxfIxuMx/hkqWlLPcXP9sdgOYGVmW/uHTOGDHt/pd2VvurgNmlrTk0WXw8i Msf66AsBnzJg7RLHsN8HQxvxzQ3GEKZaHKa+3a2bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBf7AG5rU6VObHM0Bv3jf0/UPLPgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NTBkZjdmLWE5NTItNGQwNC05Nzc5LTcwOGY0YmZlZGM0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlBQwDQYJKoZIhvcNAQELBQADggEBAImrOAaxEO765WZvlCudg5T4Dy4C +YKtEUfyPcjKAYNnoWwkMAIvj+cjzsTb3oMtn5hDloy8TebItSV6Z1BtbmsqIkac J+AOiHtDbMT/ZcOt/QKRcOBhI7SQIi3tGzOLU9qNQnWgpisS9M4YcukmeK9NCqgx IWsOnpzMNDBHvGvPJFEHv9JzcnIiJejNvlKIvpPRiQKIgRWEuJhh7B561cLD/153 JDgq6DCJi1RPJ3xEqJFxzDl4eLM6hLtdiQH4alVSVntzXL9Wp3s7Zd3zPI1D2xqV aRIG0H83gvooRAV+RnrZEGwWB+P2Jldyel9d0BzTA/CM1Cp2ZBG5/iZc0TU= -----END CERTIFICATE-----Generated at Thu Jul 23 22:34:49 2026 by rpki-client