$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa File: a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json) Hash identifier: W85DMnAnXGo/32Wc/U7s5zEL0q96P2Yw82v5VC50Al0= Subject key identifier: 9E:E5:D9:73:B0:BF:1E:7C:D0:E4:9B:1D:36:36:02:99:53:5F:99:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 210D457A7293AFBD4B56D7EF533D4512AC776431 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa Signing time: Fri 24 Jul 2026 01:00:07 +0000 ROA not before: Fri 24 Jul 2026 01:00:07 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0d:45:7a:72:93:af:bd:4b:56:d7:ef:53:3d:45:12:ac:77:64:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 01:00:07 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=ae99af2dc23c8104452819d13ad1583267ad09200fd761c5f558295deadca97b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:f3:83:f0:d5:c1:19:92:47:ee:a9:62:1d: bf:96:50:99:c5:91:68:69:33:68:62:c7:e5:5d:e6: 55:97:49:c1:b3:4d:11:48:1b:60:70:f6:09:bf:32: 3c:4e:a6:52:54:93:3d:90:71:7c:fc:25:3c:c0:ba: c7:f2:fb:c1:ec:f9:8c:7e:6b:d2:41:f6:4e:5a:b4: d1:c1:ab:6e:e0:b6:b9:fa:98:e3:3a:c0:7c:d8:b8: c9:61:83:03:86:85:12:8b:95:37:90:dd:2a:47:3a: 75:da:30:94:a3:55:9e:08:96:9e:e5:b3:b9:f7:3c: f9:65:ab:ac:dc:4d:be:1c:0a:fd:0d:75:30:33:39: f4:4d:74:fb:56:32:3c:04:77:68:16:9e:85:21:a8: 2f:a0:06:1c:e4:c2:8a:df:50:b8:18:1e:4b:00:6b: f8:1c:3f:88:6c:ea:06:50:81:54:4a:1f:e9:95:43: 98:3a:f8:63:34:c5:d7:57:ee:d8:02:1f:52:ac:84: 67:84:ea:5d:53:55:74:e8:61:c1:ca:7c:57:25:41: 91:2c:ad:58:a8:0b:9e:e4:6a:c9:b1:3c:4c:e7:24: 5b:24:4b:4c:9f:2b:50:a5:2f:a4:73:90:59:80:95: 35:10:10:d5:33:1b:b0:b0:6b:a2:b5:88:82:11:6a: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E5:D9:73:B0:BF:1E:7C:D0:E4:9B:1D:36:36:02:99:53:5F:99:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.96.0/19 Signature Algorithm: sha256WithRSAEncryption 24:9f:5b:ca:80:b9:9f:54:22:bf:f0:0b:ca:6c:32:67:47:d7: 89:72:d0:3b:81:9e:5a:bd:56:04:aa:9b:99:d6:42:5c:50:f5: e7:f4:83:5f:73:10:38:69:f5:ae:0e:ce:28:26:6b:de:30:ab: 83:e7:ae:b0:df:34:02:59:b3:21:78:64:40:31:65:4b:16:c4: 7a:be:3d:51:c1:93:8d:14:d0:2f:0f:73:da:2a:73:91:58:5f: c5:f4:d7:40:18:28:0a:06:6d:e8:c6:d2:9d:54:35:70:5b:1c: 8a:19:e8:d4:97:f6:ba:8c:66:0c:d0:49:bf:45:b5:9b:30:f7: 02:de:54:ce:42:10:a0:6a:0a:87:f0:ab:c9:b3:59:45:66:91: c6:2a:8d:8b:2c:a9:be:5c:fd:7c:9d:96:c7:c7:0e:1b:89:9a: 07:c8:30:fd:90:4d:e3:9b:95:b7:44:67:fe:a2:3c:04:c4:92: d9:36:ee:b7:c0:c1:5f:73:f1:61:b2:de:af:21:ca:b0:1d:ac: 1c:1d:ac:da:43:ea:6f:48:91:78:47:91:2e:da:2d:7f:a9:26: 89:73:99:98:37:8e:d6:48:7e:96:f2:a3:60:79:a7:21:67:4e: 96:9c:83:2a:ca:2b:a0:07:5c:87:18:76:26:00:d7:03:35:61: 74:b6:0c:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQ1FenKTr71LVtfvUz1FEqx3ZDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDEwMDA3WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTk5YWYyZGMyM2M4MTA0NDUyODE5ZDEzYWQxNTgzMjY3 YWQwOTIwMGZkNzYxYzVmNTU4Mjk1ZGVhZGNhOTdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9VPOD8NXBGZJH7qliHb+WUJnFkWhpM2hix+Vd5lWXScGz TRFIG2Bw9gm/MjxOplJUkz2QcXz8JTzAusfy+8Hs+Yx+a9JB9k5atNHBq27gtrn6 mOM6wHzYuMlhgwOGhRKLlTeQ3SpHOnXaMJSjVZ4Ilp7ls7n3PPllq6zcTb4cCv0N dTAzOfRNdPtWMjwEd2gWnoUhqC+gBhzkworfULgYHksAa/gcP4hs6gZQgVRKH+mV Q5g6+GM0xddX7tgCH1KshGeE6l1TVXToYcHKfFclQZEsrVioC57kasmxPEznJFsk S0yfK1ClL6RzkFmAlTUQENUzG7Cwa6K1iIIRaqAHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnuXZc7C/HnzQ5JsdNjYCmVNfmZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNTUxNTc1LWZkYTgtNDBjZC1hMDEyLTJkZDk4ZjU0YTM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGDWAwDQYJKoZIhvcNAQELBQADggEBACSfW8qAuZ9UIr/wC8psMmdH14ly 0DuBnlq9VgSqm5nWQlxQ9ef0g19zEDhp9a4Ozigma94wq4PnrrDfNAJZsyF4ZEAx ZUsWxHq+PVHBk40U0C8Pc9oqc5FYX8X010AYKAoGbejG0p1UNXBbHIoZ6NSX9rqM ZgzQSb9FtZsw9wLeVM5CEKBqCofwq8mzWUVmkcYqjYssqb5c/XydlsfHDhuJmgfI MP2QTeOblbdEZ/6iPATEktk27rfAwV9z8WGy3q8hyrAdrBwdrNpD6m9IkXhHkS7a LX+pJolzmZg3jtZIfpbyo2B5pyFnTpacgyrKK6AHXIcYdiYA1wM1YXS2DDc= -----END CERTIFICATE-----Generated at Fri Jul 24 04:12:40 2026 by rpki-client