$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d91aaa-a302-47ac-9ff3-22b5494654b8.roa File: 94d91aaa-a302-47ac-9ff3-22b5494654b8.roa (raw, json) Hash identifier: Nf0sxlg/tE+EON+aiImS6C6TJnnH3vyMMqk0hW3TYLM= Subject key identifier: E1:00:8D:82:E0:1B:D6:1B:C0:B2:72:DA:0C:A6:A5:67:0F:31:E0:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AA8643A2B8CE2EA45DC1729802A858758B8DBB8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d91aaa-a302-47ac-9ff3-22b5494654b8.roa Signing time: Sat 18 Jul 2026 00:30:17 +0000 ROA not before: Sat 18 Jul 2026 00:30:17 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a8:64:3a:2b:8c:e2:ea:45:dc:17:29:80:2a:85:87:58:b8:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:30:17 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=c152b03ea9d88101fe28ff80f156302924ad4d0665516306b4cc5770cd0d8d93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:68:19:b8:cd:ce:ff:14:5b:b8:44:af:1f: 3e:27:5c:7e:cc:53:86:20:26:d8:a9:13:15:bd:a6: 3e:b9:03:47:df:9f:58:47:9e:c4:9a:b2:ef:25:e8: 81:89:b0:12:cd:cb:20:4f:d0:57:36:7d:34:e3:ef: 1c:0d:6a:5c:e4:fc:0f:f0:b5:5f:ea:00:1a:a4:7a: 00:cb:50:92:2c:51:8d:a2:86:63:ed:18:60:86:8f: b1:66:44:28:ac:60:3c:1c:5d:3b:8e:d7:15:50:aa: 3f:5c:0f:42:42:b5:b9:22:cb:21:50:52:be:98:7b: 9f:33:0c:16:13:1b:4f:89:77:57:f9:5d:ea:61:58: a4:11:9f:6c:48:73:35:a9:a7:8d:38:86:a3:4f:e5: e7:2a:95:96:16:90:7a:5f:b6:d6:cc:63:49:e3:22: ce:ed:77:75:75:eb:8a:c0:9b:f2:7d:e3:b5:70:ac: 72:07:a1:62:96:91:b3:89:cc:e8:c7:74:43:6f:cc: 70:3c:23:02:3d:20:5d:6a:08:cd:9c:a0:1a:95:38: 48:fb:eb:66:94:2a:3d:84:0e:b8:a6:aa:f9:e9:25: 1e:24:30:18:63:cc:00:0e:87:29:be:d7:9b:81:d4: cd:78:90:6e:df:04:3b:d2:41:3a:83:fb:bb:ad:9a: db:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:8D:82:E0:1B:D6:1B:C0:B2:72:DA:0C:A6:A5:67:0F:31:E0:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d91aaa-a302-47ac-9ff3-22b5494654b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.115.0/24 Signature Algorithm: sha256WithRSAEncryption 96:97:d8:9d:91:09:66:35:dc:0d:4a:57:2d:5b:28:0c:a7:00: 13:40:26:88:3f:eb:73:8e:65:e3:79:8a:b9:1a:33:59:28:88: a2:d8:de:98:2d:e3:79:96:39:70:55:bd:08:14:da:7e:f2:03: cf:31:b8:09:2b:c3:8f:1e:1c:57:35:28:b8:d8:a9:6b:c3:db: b0:1e:3c:21:60:81:6c:7d:0b:1b:64:5c:41:08:fb:e6:1b:12: a7:8c:5e:d5:f9:fc:bd:80:29:f1:25:01:d6:a7:9f:c3:b1:14: 8f:c3:48:06:14:53:49:74:c8:6c:fd:51:e8:2a:2a:a3:4b:e1: bd:1f:01:18:64:a3:ee:d9:af:3e:7f:98:0d:28:89:9c:e6:43: ec:8a:4b:29:55:4b:89:9c:ea:67:f8:43:b9:d9:04:7c:75:13: 92:55:f5:ea:fe:a5:2b:31:95:5c:64:84:2b:30:63:6c:54:7f: 8e:42:9c:53:7d:aa:62:36:d3:92:31:e2:62:ce:aa:98:0e:d7: 4b:c7:c8:e0:23:ec:1b:43:76:d6:18:31:25:5c:86:dc:d2:3a: 22:5d:8b:f6:f1:7d:1b:bb:a2:26:06:8e:67:98:6b:57:5a:17: 80:39:3c:de:c7:c9:68:e2:78:54:8a:3e:1d:44:df:25:0a:f7: 99:51:7b:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSqhkOiuM4upF3BcpgCqFh1i427gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAzMDE3WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTUyYjAzZWE5ZDg4MTAxZmUyOGZmODBmMTU2MzAyOTI0 YWQ0ZDA2NjU1MTYzMDZiNGNjNTc3MGNkMGQ4ZDkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDInmgZuM3O/xRbuESvHz4nXH7MU4YgJtipExW9pj65A0ff n1hHnsSasu8l6IGJsBLNyyBP0Fc2fTTj7xwNalzk/A/wtV/qABqkegDLUJIsUY2i hmPtGGCGj7FmRCisYDwcXTuO1xVQqj9cD0JCtbkiyyFQUr6Ye58zDBYTG0+Jd1f5 XephWKQRn2xIczWpp404hqNP5ecqlZYWkHpfttbMY0njIs7td3V164rAm/J947Vw rHIHoWKWkbOJzOjHdENvzHA8IwI9IF1qCM2coBqVOEj762aUKj2EDrimqvnpJR4k MBhjzAAOhym+15uB1M14kG7fBDvSQTqD+7utmttXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4QCNguAb1hvAsnLaDKalZw8x4CAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0ZDkxYWFhLWEzMDItNDdhYy05ZmYzLTIyYjU0OTQ2NTRiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HMwDQYJKoZIhvcNAQELBQADggEBAJaX2J2RCWY13A1KVy1bKAynABNA Jog/63OOZeN5irkaM1koiKLY3pgt43mWOXBVvQgU2n7yA88xuAkrw48eHFc1KLjY qWvD27AePCFggWx9CxtkXEEI++YbEqeMXtX5/L2AKfElAdann8OxFI/DSAYUU0l0 yGz9UegqKqNL4b0fARhko+7Zrz5/mA0oiZzmQ+yKSylVS4mc6mf4Q7nZBHx1E5JV 9er+pSsxlVxkhCswY2xUf45CnFN9qmI205Ix4mLOqpgO10vHyOAj7BtDdtYYMSVc htzSOiJdi/bxfRu7oiYGjmeYa1daF4A5PN7HyWjieFSKPh1E3yUK95lRe4c= -----END CERTIFICATE-----Generated at Thu Jul 23 22:53:42 2026 by rpki-client