$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3bf681b-1a54-482b-8a5f-bea7301895e3.roa File: a3bf681b-1a54-482b-8a5f-bea7301895e3.roa (raw, json) Hash identifier: r1Qy5L2XCGWt48gdxCXzNnx5QUOu6s1lvHYRonp9oUI= Subject key identifier: 9C:7D:3D:82:33:62:B4:A0:52:73:E6:14:1A:91:B4:28:F4:C2:0E:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5070EBC21CB311E7D2D2A0C8487199264EEDF73E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3bf681b-1a54-482b-8a5f-bea7301895e3.roa Signing time: Wed 22 Jul 2026 00:00:51 +0000 ROA not before: Wed 22 Jul 2026 00:00:51 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:70:eb:c2:1c:b3:11:e7:d2:d2:a0:c8:48:71:99:26:4e:ed:f7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:51 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=ea8b1f5d2bb02f9732ffd12057149e777d46ce6809e88a7fde0ff748e97b3411, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:20:7a:b7:e8:9a:ce:7c:da:61:ee:bf:ce: 67:b2:e1:46:53:34:f4:6b:47:b5:e8:80:0a:e3:aa: 5a:24:8d:78:23:ba:bf:13:9e:47:76:15:3e:94:78: 42:b3:f9:9f:ad:6d:c5:72:62:0d:9f:20:8c:1d:b0: 37:c6:a8:26:cb:eb:72:3c:f4:95:c1:62:1a:a1:6a: 21:31:70:c4:91:b0:f2:f2:15:85:e0:1a:0e:b6:ab: ca:73:44:e4:52:48:01:49:6d:b9:17:69:21:79:73: cc:60:52:0a:f5:e2:89:d6:e2:70:e8:b0:6d:bb:04: c4:d1:60:0e:17:11:0b:f7:eb:03:34:d0:34:06:d6: 61:8e:68:0b:3a:1e:3f:ad:ea:c4:70:83:6a:f6:bf: d9:c6:0b:88:81:0f:67:42:b7:de:05:7c:44:ca:e5: b0:65:39:4b:20:02:93:5f:24:6f:d0:9e:80:fd:d4: 9a:4c:c3:dd:13:ae:33:78:fd:0f:84:ec:b0:ca:50: 76:88:41:00:38:79:4f:6d:b3:4c:61:ca:28:be:b7: f5:76:1e:33:90:5a:26:a2:7d:65:58:ce:cc:c3:42: ac:f8:a1:27:c1:e1:ad:21:af:10:f6:1a:34:18:71: a7:71:69:ac:e4:ec:27:de:05:4e:b5:c3:8b:4f:31: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7D:3D:82:33:62:B4:A0:52:73:E6:14:1A:91:B4:28:F4:C2:0E:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3bf681b-1a54-482b-8a5f-bea7301895e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.209.0/24 Signature Algorithm: sha256WithRSAEncryption 71:be:3c:a9:9b:9d:3c:1c:67:c8:c5:01:82:ef:96:7f:5e:92: c8:5e:1b:c5:57:5c:f3:fa:78:44:62:b3:81:10:9a:9d:09:b4: 75:eb:b4:fb:92:3a:b0:5e:10:fc:83:48:50:48:38:df:2a:89: 5a:67:32:62:44:c7:a6:84:3a:c9:7a:fe:be:bd:ce:e8:59:a0: ca:f1:55:11:2d:2b:b3:49:47:d9:7b:df:f4:ba:80:3b:1a:ca: 8f:0c:b3:f9:fc:fd:71:36:34:0c:db:bc:b5:b6:32:83:46:f6: ba:8e:8e:41:d5:57:52:09:19:90:03:a7:a5:74:92:7f:44:f3: d4:41:9b:b7:f3:e9:97:b9:a2:29:d0:85:06:8f:fd:95:83:13: a6:60:16:39:98:d6:af:41:c3:62:f5:af:31:5c:d6:b8:a4:28: d7:d9:3a:01:64:0b:27:86:85:87:87:6b:02:75:fe:93:f9:d2: 4f:80:9d:82:bd:d0:40:33:da:64:aa:d6:17:43:2c:b4:c9:ac: 32:a4:1b:87:ef:e2:aa:7c:32:bc:71:a8:0e:0d:d5:3b:0a:e2: 17:35:db:97:5e:98:c7:f4:48:f4:f1:53:38:71:6b:f6:fe:b5: e5:de:b0:f0:af:d8:85:2a:a6:96:03:42:e5:dd:b2:e1:be:60: be:73:40:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUHDrwhyzEefS0qDISHGZJk7t9z4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDUxWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYThiMWY1ZDJiYjAyZjk3MzJmZmQxMjA1NzE0OWU3Nzdk NDZjZTY4MDllODhhN2ZkZTBmZjc0OGU5N2IzNDExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtlyB6t+iaznzaYe6/zmey4UZTNPRrR7XogArjqlokjXgj ur8Tnkd2FT6UeEKz+Z+tbcVyYg2fIIwdsDfGqCbL63I89JXBYhqhaiExcMSRsPLy FYXgGg62q8pzRORSSAFJbbkXaSF5c8xgUgr14onW4nDosG27BMTRYA4XEQv36wM0 0DQG1mGOaAs6Hj+t6sRwg2r2v9nGC4iBD2dCt94FfETK5bBlOUsgApNfJG/QnoD9 1JpMw90TrjN4/Q+E7LDKUHaIQQA4eU9ts0xhyii+t/V2HjOQWiaifWVYzszDQqz4 oSfB4a0hrxD2GjQYcadxaazk7CfeBU61w4tPMcrXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnH09gjNitKBSc+YUGpG0KPTCDl8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzYmY2ODFiLTFhNTQtNDgyYi04YTVmLWJlYTczMDE4OTVlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7tEwDQYJKoZIhvcNAQELBQADggEBAHG+PKmbnTwcZ8jFAYLvln9ekshe G8VXXPP6eERis4EQmp0JtHXrtPuSOrBeEPyDSFBION8qiVpnMmJEx6aEOsl6/r69 zuhZoMrxVREtK7NJR9l73/S6gDsayo8Ms/n8/XE2NAzbvLW2MoNG9rqOjkHVV1IJ GZADp6V0kn9E89RBm7fz6Ze5oinQhQaP/ZWDE6ZgFjmY1q9Bw2L1rzFc1rikKNfZ OgFkCyeGhYeHawJ1/pP50k+AnYK90EAz2mSq1hdDLLTJrDKkG4fv4qp8MrxxqA4N 1TsK4hc125demMf0SPTxUzhxa/b+teXesPCv2IUqppYDQuXdsuG+YL5zQBY= -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:59 2026 by rpki-client