$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a64007ca-cddd-47b4-b38f-a15992ab607b.roa File: a64007ca-cddd-47b4-b38f-a15992ab607b.roa (raw, json) Hash identifier: +s4lvKJ/g88XoDHHNleaFKzpdqMJ4RDw+pWvV/EDv0Q= Subject key identifier: B4:B8:75:E9:13:BF:9A:3B:B2:48:46:61:F3:BD:0D:6E:99:4D:35:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 022A4C9821B1DF62412BC972234F1784F5723CF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a64007ca-cddd-47b4-b38f-a15992ab607b.roa Signing time: Mon 20 Jul 2026 00:21:31 +0000 ROA not before: Mon 20 Jul 2026 00:21:31 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2a:4c:98:21:b1:df:62:41:2b:c9:72:23:4f:17:84:f5:72:3c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:21:31 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=59efb69528b3421e971805a0e7ada1dc89d46af83efc218637523ced6b025abb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:17:d0:c0:28:2a:7a:02:5f:28:ed:e3:c2: e7:c7:f8:1d:36:83:da:39:69:38:6c:6c:b1:05:1d: e3:6f:d4:35:57:b0:93:21:27:04:a8:52:97:a1:d1: 91:b2:07:f0:67:75:9c:d4:d9:a3:4d:d7:a5:5b:99: 7c:ad:be:c7:6e:1b:f7:9b:ba:65:e1:d3:e9:bf:a3: b7:ad:b2:cb:22:08:5d:d5:3e:fe:9b:77:c1:b9:7c: a4:aa:f7:8c:2c:aa:cb:2a:f9:65:83:10:cb:cf:30: ef:6f:a1:8b:43:fd:e8:a5:75:7a:00:42:10:bf:d6: 71:fe:e2:70:16:52:b9:26:48:97:40:09:64:56:e1: 00:d6:5c:e1:c4:65:b6:7c:f7:69:8a:90:4c:ac:be: 4e:eb:3e:bf:28:02:8c:ef:06:25:ee:44:ac:88:89: da:86:ae:0d:e5:b5:17:be:f0:69:9c:4b:e0:c2:6d: 3c:bb:5c:fd:ab:f0:da:a6:25:3d:a5:a5:76:b3:b9: 5e:75:5a:62:87:6b:ee:ac:7c:20:a9:25:21:4a:a2: a8:51:44:63:75:c0:f2:f9:d0:af:12:4d:3c:e2:c7: 64:03:6b:c9:e6:98:73:1f:70:a1:49:52:1b:02:7f: 17:5f:78:4b:8e:7e:38:37:e2:39:b1:d2:90:79:1d: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B8:75:E9:13:BF:9A:3B:B2:48:46:61:F3:BD:0D:6E:99:4D:35:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a64007ca-cddd-47b4-b38f-a15992ab607b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.135.0/24 Signature Algorithm: sha256WithRSAEncryption 83:9d:2c:ef:de:8b:3c:bb:70:5d:43:95:1a:d9:e4:62:5f:0d: d4:ba:e6:f4:28:dd:77:7a:6f:6b:f6:a5:81:1d:45:31:3b:12: 5a:44:59:07:c3:b3:92:d9:94:ae:eb:84:29:32:b3:2f:31:6c: e5:c8:17:6c:39:da:f3:98:34:50:e1:d8:0c:61:34:b3:64:75: 17:ea:05:c9:20:7f:39:55:34:83:83:4f:f3:ad:c1:b3:87:d4: a7:95:9c:bd:3a:93:36:e4:fa:cb:20:e7:a1:6d:3b:7e:0c:1f: 9f:4a:1b:60:d8:d7:19:ba:66:40:cd:2e:ac:99:be:c8:31:e5: d4:a0:03:24:89:4d:be:28:e2:54:4c:90:dc:89:1a:4e:31:23: c7:96:8b:04:94:16:18:fa:c6:c2:ae:3a:ed:41:69:ad:88:37: 06:ca:84:a6:83:c6:f9:8d:47:6f:b5:4b:40:97:61:c8:42:a8: 27:e6:a8:3f:5f:36:d8:1f:c5:81:38:27:8b:9a:d7:8b:15:1d: e9:e9:8a:a4:82:34:aa:d6:8b:4e:14:6a:47:d4:5d:b8:6d:49: f7:0b:d5:94:93:9a:86:83:5b:d2:a5:ab:46:35:d7:e6:90:1c: 59:69:49:6b:d8:69:85:8b:07:81:0d:1b:17:4c:7c:0e:8e:b0: 7c:d6:7e:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAipMmCGx32JBK8lyI08XhPVyPPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAyMTMxWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWVmYjY5NTI4YjM0MjFlOTcxODA1YTBlN2FkYTFkYzg5 ZDQ2YWY4M2VmYzIxODYzNzUyM2NlZDZiMDI1YWJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5/RfQwCgqegJfKO3jwufH+B02g9o5aThsbLEFHeNv1DVX sJMhJwSoUpeh0ZGyB/BndZzU2aNN16VbmXytvsduG/ebumXh0+m/o7etsssiCF3V Pv6bd8G5fKSq94wsqssq+WWDEMvPMO9voYtD/eildXoAQhC/1nH+4nAWUrkmSJdA CWRW4QDWXOHEZbZ892mKkEysvk7rPr8oAozvBiXuRKyIidqGrg3ltRe+8GmcS+DC bTy7XP2r8NqmJT2lpXazuV51WmKHa+6sfCCpJSFKoqhRRGN1wPL50K8STTzix2QD a8nmmHMfcKFJUhsCfxdfeEuOfjg34jmx0pB5Hap9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtLh16RO/mjuySEZh870NbplNNXIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NDAwN2NhLWNkZGQtNDdiNC1iMzhmLWExNTk5MmFiNjA3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYcwDQYJKoZIhvcNAQELBQADggEBAIOdLO/eizy7cF1DlRrZ5GJfDdS6 5vQo3Xd6b2v2pYEdRTE7ElpEWQfDs5LZlK7rhCkysy8xbOXIF2w52vOYNFDh2Axh NLNkdRfqBckgfzlVNIODT/OtwbOH1KeVnL06kzbk+ssg56FtO34MH59KG2DY1xm6 ZkDNLqyZvsgx5dSgAySJTb4o4lRMkNyJGk4xI8eWiwSUFhj6xsKuOu1Baa2INwbK hKaDxvmNR2+1S0CXYchCqCfmqD9fNtgfxYE4J4ua14sVHenpiqSCNKrWi04UakfU XbhtSfcL1ZSTmoaDW9Klq0Y11+aQHFlpSWvYaYWLB4ENGxdMfA6OsHzWft0= -----END CERTIFICATE-----Generated at Fri Jul 24 00:03:30 2026 by rpki-client