$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98cc72ea-914b-406d-a713-eb0cb9240ff9.roa File: 98cc72ea-914b-406d-a713-eb0cb9240ff9.roa (raw, json) Hash identifier: HRXZaeR+C4W8B05Z47IiDQ5IHm/BLyaC+NzFB4ngV08= Subject key identifier: 5D:FE:8F:13:E0:3C:BC:DE:E0:64:69:82:E9:D9:82:94:B1:DB:BF:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A84A5E876B4B3AEFB4B9D0EBB23C18BF178935A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98cc72ea-914b-406d-a713-eb0cb9240ff9.roa Signing time: Tue 21 Jul 2026 00:40:12 +0000 ROA not before: Tue 21 Jul 2026 00:40:12 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:84:a5:e8:76:b4:b3:ae:fb:4b:9d:0e:bb:23:c1:8b:f1:78:93:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 00:40:12 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=af8d89aa49503df2c47c0a7e839f4077b64454c8ade794464a33de952cc3791e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:b0:e0:88:b9:76:a1:02:5c:35:4d:65:35: aa:d7:54:6b:d3:0d:b6:19:6b:2e:33:c1:54:b2:c0: 43:cd:1d:c3:18:3e:94:45:9d:5e:50:a2:ab:15:1c: ad:1b:73:a2:85:4e:7e:bd:68:f2:92:2a:8c:cd:4d: 4a:ee:48:6c:48:d8:46:b2:0a:01:5d:47:8f:30:d4: 4a:f8:87:c9:06:06:37:cf:27:63:fd:3e:7b:73:02: 61:ea:4b:e2:9f:22:1f:6a:c4:8f:6b:89:36:e0:08: b2:27:90:58:e4:9d:39:7e:b8:8b:22:f1:72:f8:9c: e0:b5:3c:b2:91:70:96:c1:10:60:1f:95:11:40:34: 54:38:39:bf:4e:79:05:d0:12:7d:8d:a8:6e:28:a9: e4:94:91:a6:8e:e5:1d:8e:b4:c3:a7:71:98:0e:11: 78:44:35:2a:2b:45:ed:3e:f0:f6:38:d6:ff:bf:f1: 66:46:0c:fd:8c:86:b2:80:f3:83:4e:5b:10:e7:77: b9:68:ce:75:02:51:2f:bc:49:8f:7c:24:58:1c:39: 44:01:d1:cb:04:e8:6a:c5:97:f7:36:24:30:d7:40: 81:c7:2f:80:89:5a:47:57:df:28:f7:b6:b5:08:0c: 24:ce:1c:13:18:78:08:66:97:f4:ea:c4:c4:8e:92: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:8F:13:E0:3C:BC:DE:E0:64:69:82:E9:D9:82:94:B1:DB:BF:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98cc72ea-914b-406d-a713-eb0cb9240ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:f9:39:72:40:10:c8:90:0d:fe:e0:d6:b3:9a:1c:25:1a:8a: 87:3e:99:4a:8d:21:ae:3c:a7:3a:b5:6d:25:9f:50:92:f1:69: c4:23:fe:18:46:7f:36:f4:52:6e:5d:d4:bf:5a:58:b1:22:3c: 5c:de:ef:b3:6c:07:bb:7e:8d:8a:a6:7f:f2:c1:c5:57:d9:7c: 3b:9a:88:40:16:f3:88:5d:38:33:3d:d1:a8:d3:6f:f5:67:ac: 5c:c2:c4:1f:3c:93:81:65:37:5b:64:50:f8:02:72:0b:67:08: db:ef:e1:01:60:dc:c9:ad:7b:85:fd:c7:e0:d6:f0:32:98:03: 3c:c5:44:27:71:5a:0a:5f:29:0e:19:f7:44:1d:7a:24:e1:34: a2:ba:7f:75:d3:4d:6a:bb:86:57:d5:bf:64:f0:d7:f0:3b:ce: 37:e4:08:78:6e:cb:b5:76:aa:91:67:0e:11:6c:4a:c1:5a:61: 33:67:58:81:9f:f2:0d:80:c5:ad:e6:27:14:c2:25:82:60:15: 93:95:d1:11:dc:51:b2:81:32:c4:37:e1:86:a8:2a:f2:e5:3f: 1c:c3:f0:0e:d0:ac:bb:0d:67:20:5a:6e:63:b4:c6:b8:87:c6: ae:ce:b8:b4:cc:db:27:c7:07:92:98:5f:b1:d3:16:f7:2a:3f: 4d:4c:71:ec -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeoSl6Ha0s677S50OuyPBi/F4k1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDA0MDEyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjhkODlhYTQ5NTAzZGYyYzQ3YzBhN2U4MzlmNDA3N2I2 NDQ1NGM4YWRlNzk0NDY0YTMzZGU5NTJjYzM3OTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqTrDgiLl2oQJcNU1lNarXVGvTDbYZay4zwVSywEPNHcMY PpRFnV5QoqsVHK0bc6KFTn69aPKSKozNTUruSGxI2EayCgFdR48w1Er4h8kGBjfP J2P9PntzAmHqS+KfIh9qxI9riTbgCLInkFjknTl+uIsi8XL4nOC1PLKRcJbBEGAf lRFANFQ4Ob9OeQXQEn2NqG4oqeSUkaaO5R2OtMOncZgOEXhENSorRe0+8PY41v+/ 8WZGDP2MhrKA84NOWxDnd7loznUCUS+8SY98JFgcOUQB0csE6GrFl/c2JDDXQIHH L4CJWkdX3yj3trUIDCTOHBMYeAhml/TqxMSOkgy3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXf6PE+A8vN7gZGmC6dmClLHbvzkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4Y2M3MmVhLTkxNGItNDA2ZC1hNzEzLWViMGNiOTI0MGZmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAouzANBgkqhkiG9w0BAQsFAAOCAQEAkvk5ckAQyJAN/uDWs5ocJRqKhz6Z So0hrjynOrVtJZ9QkvFpxCP+GEZ/NvRSbl3Uv1pYsSI8XN7vs2wHu36NiqZ/8sHF V9l8O5qIQBbziF04Mz3RqNNv9WesXMLEHzyTgWU3W2RQ+AJyC2cI2+/hAWDcya17 hf3H4NbwMpgDPMVEJ3FaCl8pDhn3RB16JOE0orp/ddNNaruGV9W/ZPDX8DvON+QI eG7LtXaqkWcOEWxKwVphM2dYgZ/yDYDFreYnFMIlgmAVk5XREdxRsoEyxDfhhqgq 8uU/HMPwDtCsuw1nIFpuY7TGuIfGrs64tMzbJ8cHkphfsdMW9yo/TUxx7A== -----END CERTIFICATE-----Generated at Thu Jul 23 22:54:18 2026 by rpki-client