$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99922d4f-b1fc-43d5-9674-a085ad312500.roa File: 99922d4f-b1fc-43d5-9674-a085ad312500.roa (raw, json) Hash identifier: QijSLbQ/nZzBEL1gvWRA+GFQuvi55ODLU00BHb/a/sU= Subject key identifier: CE:3A:7A:53:9D:1B:9D:82:B3:41:92:E3:CB:D4:02:F1:BA:61:5F:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37FDDAD7820F7D8E01CC6E44F009BC5ADE774960 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99922d4f-b1fc-43d5-9674-a085ad312500.roa Signing time: Thu 16 Jul 2026 00:10:39 +0000 ROA not before: Thu 16 Jul 2026 00:10:39 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 104.153.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fd:da:d7:82:0f:7d:8e:01:cc:6e:44:f0:09:bc:5a:de:77:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:10:39 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=14731ecbd3166ae881c8e6aa9b17a89a3ad0cbab9effe687065d1cd70f50375c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:7b:2f:03:48:44:c0:b0:92:67:a0:a2:a8: 0e:e4:31:22:2d:76:8f:f1:09:db:6f:88:28:03:32: 31:b5:2b:ed:d8:a5:f5:02:ce:52:20:25:b3:ee:a0: 05:ee:0e:e6:27:25:2f:52:6f:50:8f:76:74:65:f0: bb:89:ae:d7:3e:8e:06:6c:c8:26:ec:41:8b:43:e2: 07:c8:83:38:5a:90:6c:34:b0:32:a4:b3:0e:2b:72: 7f:eb:dc:46:17:81:34:24:b6:ca:44:38:dc:88:c1: c0:a8:20:17:35:0d:4e:57:7a:ef:b3:fa:b8:e6:8a: a6:cc:05:8a:dc:a6:a0:54:09:30:54:be:a4:12:4b: 28:3f:9b:a6:60:66:7c:53:86:09:c3:30:26:9e:62: 5d:5d:33:9b:6e:b3:c4:ce:50:38:45:32:e0:4b:89: be:e1:ff:e2:39:49:7d:59:a9:c2:47:5d:de:fc:07: 2a:30:ae:a4:f5:90:3e:a9:a2:c3:00:cb:97:0f:b6: d3:a5:60:e8:6c:21:30:51:72:9a:db:b6:fe:d9:64: a9:aa:ce:b4:41:10:94:9b:60:0f:dd:af:95:6d:89: 42:c1:d9:6a:68:3a:39:9d:8e:ce:dd:2f:b5:6f:2d: 4e:e6:8e:4a:81:ec:7d:39:09:ad:02:af:b9:01:b4: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3A:7A:53:9D:1B:9D:82:B3:41:92:E3:CB:D4:02:F1:BA:61:5F:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99922d4f-b1fc-43d5-9674-a085ad312500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.153.118.0/24 Signature Algorithm: sha256WithRSAEncryption 52:6d:5b:02:f8:09:7c:dd:36:c2:97:e5:d8:f6:19:74:66:ea: 5c:99:39:9b:25:55:80:06:56:80:0c:17:f3:3c:c5:e1:cf:6c: e0:d6:2c:92:c6:72:4f:48:e7:dd:4a:78:8b:78:7f:49:b6:57: 8d:de:27:30:c0:31:93:f5:1b:d5:8a:bf:5d:62:d6:a2:e4:0b: c5:20:c7:3b:fd:d1:50:9b:3b:5a:c4:9e:ea:18:40:ba:ae:80: 2b:cd:4a:6b:61:5f:62:ee:b5:57:73:48:46:63:7d:f3:bd:6b: b4:db:21:0c:d2:bd:3a:11:54:c0:64:58:88:f7:48:48:c6:6a: 6b:40:b8:d1:4c:5d:b2:ed:8e:17:c0:7e:d1:8f:db:2e:87:73: 02:33:84:dc:bc:36:8f:65:d1:2e:05:51:dc:e1:05:ea:4b:30: 2e:10:76:aa:ee:f9:84:68:10:86:62:fa:1e:83:bd:b9:61:18: a2:f7:17:30:0c:30:b1:9b:d5:7d:9c:8b:69:f4:d6:f9:e5:dc: 20:cb:00:00:e1:33:8e:21:18:54:61:48:13:83:a8:48:b1:e0: a8:e2:aa:25:7f:24:c4:59:a4:36:40:69:df:69:2d:a1:ee:70: af:0a:c7:a3:64:fb:e4:cf:2e:93:6d:89:08:2f:87:67:9f:2c: 36:60:9a:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN/3a14IPfY4BzG5E8Am8Wt53SWAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMDM5WhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDczMWVjYmQzMTY2YWU4ODFjOGU2YWE5YjE3YTg5YTNh ZDBjYmFiOWVmZmU2ODcwNjVkMWNkNzBmNTAzNzVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3mnsvA0hEwLCSZ6CiqA7kMSItdo/xCdtviCgDMjG1K+3Y pfUCzlIgJbPuoAXuDuYnJS9Sb1CPdnRl8LuJrtc+jgZsyCbsQYtD4gfIgzhakGw0 sDKksw4rcn/r3EYXgTQktspEONyIwcCoIBc1DU5Xeu+z+rjmiqbMBYrcpqBUCTBU vqQSSyg/m6ZgZnxThgnDMCaeYl1dM5tus8TOUDhFMuBLib7h/+I5SX1ZqcJHXd78 ByowrqT1kD6posMAy5cPttOlYOhsITBRcprbtv7ZZKmqzrRBEJSbYA/dr5VtiULB 2WpoOjmdjs7dL7VvLU7mjkqB7H05Ca0Cr7kBtBvVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzjp6U50bnYKzQZLjy9QC8bphX/IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5OTIyZDRmLWIxZmMtNDNkNS05Njc0LWEwODVhZDMxMjUwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABomXYwDQYJKoZIhvcNAQELBQADggEBAFJtWwL4CXzdNsKX5dj2GXRm6lyZ OZslVYAGVoAMF/M8xeHPbODWLJLGck9I591KeIt4f0m2V43eJzDAMZP1G9WKv11i 1qLkC8Ugxzv90VCbO1rEnuoYQLqugCvNSmthX2LutVdzSEZjffO9a7TbIQzSvToR VMBkWIj3SEjGamtAuNFMXbLtjhfAftGP2y6HcwIzhNy8No9l0S4FUdzhBepLMC4Q dqru+YRoEIZi+h6DvblhGKL3FzAMMLGb1X2ci2n01vnl3CDLAADhM44hGFRhSBOD qEix4KjiqiV/JMRZpDZAad9pLaHucK8Kx6Nk++TPLpNtiQgvh2efLDZgmkg= -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:43 2026 by rpki-client