$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c9776ab-27f3-4aa0-8637-61029365e929.roa File: 9c9776ab-27f3-4aa0-8637-61029365e929.roa (raw, json) Hash identifier: 7OSYx5jLKzFSuJ6/yCrfrFrdX5tsAsc75m2381LW8cQ= Subject key identifier: 77:21:1C:7E:C8:BA:9D:E2:A5:26:F6:6E:48:21:02:3A:7D:F7:1A:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D8BC9DE95482F60BAA267EC167873CF16488FB4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c9776ab-27f3-4aa0-8637-61029365e929.roa Signing time: Sun 05 Jul 2026 00:01:18 +0000 ROA not before: Sun 05 Jul 2026 00:01:18 +0000 ROA not after: Sat 03 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 199.192.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8b:c9:de:95:48:2f:60:ba:a2:67:ec:16:78:73:cf:16:48:8f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 5 00:01:18 2026 GMT Not After : Oct 3 23:59:59 2026 GMT Subject: serialNumber=8fe68230226a5ee7bac597d3f12c5142952d0406c117aaa1e8acbc58a3457c4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:4b:a7:30:af:2d:1e:5f:33:8e:9f:60:7a: 4c:9a:42:8b:85:6e:ff:3b:bb:02:92:a5:6f:fe:05: 6d:54:88:43:eb:cb:6e:f3:05:45:c5:8b:9c:75:56: 98:66:5f:76:9f:75:0e:3d:86:7a:2e:2a:80:a6:f6: 5b:b5:79:df:bc:ab:3f:c1:0e:c4:c4:36:e3:b4:16: 18:32:f7:6c:a7:fc:07:c5:ef:b1:98:d0:3f:7e:a9: bc:dc:67:c9:cf:3c:fb:b1:d8:da:d2:3f:4a:d6:9e: 56:31:fb:d9:f3:92:c6:b8:70:a9:27:ae:83:27:83: c2:af:fa:87:e5:1e:3a:fd:ef:2a:5e:c0:bf:5e:a4: da:54:a4:5f:f7:16:b6:b8:48:02:7d:31:90:b1:bb: f3:d2:d3:a2:95:7a:d8:a1:d1:a9:c3:ea:78:69:30: 03:9a:c6:92:15:93:2e:7b:80:a1:fb:95:b3:1e:aa: 1f:9b:96:08:76:2b:5f:cf:02:9d:25:a2:a7:43:8c: d3:ab:de:ff:73:32:eb:25:5b:70:90:42:ee:2f:51: 14:80:b0:db:3f:bf:ff:d5:a2:ec:b5:c9:1c:17:46: 1e:2b:f0:7d:73:d5:d1:ef:3f:fe:d5:c7:59:ad:23: 82:b5:8a:fa:a7:b4:81:82:37:47:9d:80:07:4f:83: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:1C:7E:C8:BA:9D:E2:A5:26:F6:6E:48:21:02:3A:7D:F7:1A:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c9776ab-27f3-4aa0-8637-61029365e929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.192.72.0/21 Signature Algorithm: sha256WithRSAEncryption b4:44:23:cd:3d:23:43:c9:ae:c1:33:77:bc:57:b1:90:a2:68: be:86:1f:35:2b:4f:c7:84:6d:bc:79:93:b8:49:20:9e:21:7b: 75:0c:16:57:5f:51:c4:d4:ab:9a:77:4c:ba:be:dc:66:fb:1f: 2b:f0:05:47:ab:d8:95:39:53:e7:a9:e2:b0:24:44:ba:57:b1: c3:87:61:6d:de:36:55:15:87:ce:1f:c3:b9:44:de:9c:e5:0e: bd:c7:52:71:af:b2:ee:47:09:f1:73:3e:77:1a:b6:3e:1c:45: ff:e9:f7:5d:17:07:06:a7:a8:6d:bd:e2:56:8d:22:71:8e:fa: dd:f9:ea:ea:4a:e4:50:f8:98:ef:d9:06:d5:04:2d:84:20:51: 0e:b1:e8:f7:e5:2b:bb:eb:34:d5:33:ab:5b:62:50:42:99:db: 61:1d:37:02:00:2c:95:a2:d6:f8:47:12:95:ed:92:4b:30:54: 24:ca:0c:b9:07:e1:f9:aa:61:af:6f:2b:2d:ab:43:4b:fb:3c: c0:b8:37:e8:11:4e:8d:a0:fb:97:ca:f5:ec:d1:8f:a8:d5:14: 8c:e9:8f:ad:e9:fc:9c:dd:54:78:05:26:ac:85:34:60:cd:df: b3:4d:12:a3:63:0f:82:2e:41:29:4d:59:86:39:95:4d:3f:b6: 05:72:f2:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDYvJ3pVIL2C6omfsFnhzzxZIj7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzA1MDAwMTE4WhcNMjYxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmU2ODIzMDIyNmE1ZWU3YmFjNTk3ZDNmMTJjNTE0Mjk1 MmQwNDA2YzExN2FhYTFlOGFjYmM1OGEzNDU3YzRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0EEunMK8tHl8zjp9gekyaQouFbv87uwKSpW/+BW1UiEPr y27zBUXFi5x1VphmX3afdQ49hnouKoCm9lu1ed+8qz/BDsTENuO0Fhgy92yn/AfF 77GY0D9+qbzcZ8nPPPux2NrSP0rWnlYx+9nzksa4cKknroMng8Kv+oflHjr97ype wL9epNpUpF/3Fra4SAJ9MZCxu/PS06KVetih0anD6nhpMAOaxpIVky57gKH7lbMe qh+blgh2K1/PAp0loqdDjNOr3v9zMuslW3CQQu4vURSAsNs/v//Vouy1yRwXRh4r 8H1z1dHvP/7Vx1mtI4K1ivqntIGCN0edgAdPg4zrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdyEcfsi6neKlJvZuSCECOn33GhQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljOTc3NmFiLTI3ZjMtNGFhMC04NjM3LTYxMDI5MzY1ZTkyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPHwEgwDQYJKoZIhvcNAQELBQADggEBALREI809I0PJrsEzd7xXsZCiaL6G HzUrT8eEbbx5k7hJIJ4he3UMFldfUcTUq5p3TLq+3Gb7HyvwBUer2JU5U+ep4rAk RLpXscOHYW3eNlUVh84fw7lE3pzlDr3HUnGvsu5HCfFzPncatj4cRf/p910XBwan qG294laNInGO+t356upK5FD4mO/ZBtUELYQgUQ6x6PflK7vrNNUzq1tiUEKZ22Ed NwIALJWi1vhHEpXtkkswVCTKDLkH4fmqYa9vKy2rQ0v7PMC4N+gRTo2g+5fK9ezR j6jVFIzpj63p/JzdVHgFJqyFNGDN37NNEqNjD4IuQSlNWYY5lU0/tgVy8sw= -----END CERTIFICATE-----Generated at Thu Jul 23 22:34:17 2026 by rpki-client