$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa File: a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa (raw, json) Hash identifier: stj29cRwdeJQnFyjbqOe3UkcM8OK7Z12B+F07ggG8OU= Subject key identifier: 04:FE:86:DA:F8:B6:67:08:C0:D0:79:00:2B:FB:53:80:A5:5B:C0:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27F31C290E1D0907DAE57A3A13FF1779FF7A7F6B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa Signing time: Mon 20 Jul 2026 00:01:23 +0000 ROA not before: Mon 20 Jul 2026 00:01:23 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 99.82.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f3:1c:29:0e:1d:09:07:da:e5:7a:3a:13:ff:17:79:ff:7a:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:01:23 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=f3f0f74c38d721b149c53d8be2a04bcca980f61dc149dcfdb6b9df88f160cc8d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:4c:dd:54:b1:32:41:fa:c3:27:19:4a:f7: a4:93:b1:9f:fa:b4:dd:95:b0:f4:f3:83:57:b7:b9: 0b:58:5e:ad:ca:5e:e6:a2:2f:73:42:1b:30:a2:f3: e2:20:67:bb:0c:43:11:10:a9:b9:e9:f8:b5:13:f6: dd:c4:3e:88:3f:6d:08:45:cd:83:24:ee:87:2c:48: 7d:28:65:56:44:4e:5a:8b:b8:30:2e:6a:c2:0b:44: 90:2c:0b:55:a6:5c:49:e8:0c:96:2e:de:96:71:08: 48:bb:85:69:10:15:20:9f:10:44:df:51:e0:9b:88: 0a:7c:d1:e3:29:3d:22:39:4e:bf:5e:aa:53:86:49: ee:db:1c:be:35:09:b3:50:39:38:a2:e9:a2:c6:e5: b6:4b:d7:19:e3:aa:b5:fc:4a:8a:1c:22:20:33:8d: 4f:3c:4f:46:f5:f5:6d:d9:58:7b:c1:5f:46:0d:07: 6b:5c:7f:a4:e1:74:26:0c:fd:55:cc:11:07:29:50: f2:81:bd:68:73:94:55:4e:2b:32:f2:93:70:0e:08: e5:0a:5e:cd:77:3d:e1:22:a3:46:f1:2c:73:0f:e4: d3:80:6f:67:d4:de:5a:fd:43:9c:4e:2b:3b:c7:4d: 5e:02:bd:c0:6c:a2:51:5a:a5:2e:f6:89:c8:c5:d8: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:86:DA:F8:B6:67:08:C0:D0:79:00:2B:FB:53:80:A5:5B:C0:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.167.0/24 Signature Algorithm: sha256WithRSAEncryption 34:bd:bc:3c:d2:69:63:ad:a6:e6:e7:9e:c9:ae:dc:44:9b:46: 70:d9:1a:11:66:4a:4b:10:42:e4:8a:04:bf:6e:53:ee:71:f5: 3c:ca:a2:77:a5:6d:8d:95:e3:76:26:a9:0a:24:bc:28:9c:8d: c3:20:b4:0a:6b:b9:2a:59:8d:9c:74:25:06:e3:bd:31:9b:ce: 24:99:b1:58:69:ff:6a:16:e5:9e:fe:98:31:28:a2:e7:87:94: ac:ae:d8:ea:56:bb:36:0b:85:2c:c0:4d:8f:a0:12:8f:17:4d: c8:f0:d7:4b:2f:77:db:c6:b6:fc:3b:1e:bf:86:83:a7:9f:88: 51:45:6d:63:05:8c:30:f6:6a:bc:e6:ba:56:18:77:a4:c9:2a: 15:94:1c:b2:a9:79:e6:a1:7c:cb:3d:46:99:1b:f0:7c:d5:5f: cb:12:47:26:c8:7d:ee:df:77:90:33:39:09:a8:53:0f:40:3c: 92:99:ff:50:fb:0b:2c:00:8c:5f:c9:a3:37:ad:f0:5c:ee:d7: c9:18:c4:b1:56:1e:aa:b9:64:d1:6f:58:22:84:1c:f0:ca:b7: 0d:8e:e1:5b:1d:e2:3d:25:3e:07:9d:46:24:88:cc:4c:c5:b7: 50:24:29:d6:b8:51:60:7e:39:30:0c:41:47:3a:63:72:1a:42: e7:c5:a5:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ/McKQ4dCQfa5Xo6E/8Xef96f2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAwMTIzWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2YwZjc0YzM4ZDcyMWIxNDljNTNkOGJlMmEwNGJjY2E5 ODBmNjFkYzE0OWRjZmRiNmI5ZGY4OGYxNjBjYzhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCih0zdVLEyQfrDJxlK96STsZ/6tN2VsPTzg1e3uQtYXq3K XuaiL3NCGzCi8+IgZ7sMQxEQqbnp+LUT9t3EPog/bQhFzYMk7ocsSH0oZVZETlqL uDAuasILRJAsC1WmXEnoDJYu3pZxCEi7hWkQFSCfEETfUeCbiAp80eMpPSI5Tr9e qlOGSe7bHL41CbNQOTii6aLG5bZL1xnjqrX8SoocIiAzjU88T0b19W3ZWHvBX0YN B2tcf6ThdCYM/VXMEQcpUPKBvWhzlFVOKzLyk3AOCOUKXs13PeEio0bxLHMP5NOA b2fU3lr9Q5xOKzvHTV4CvcBsolFapS72icjF2O0FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBP6G2vi2ZwjA0HkAK/tTgKVbwFYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5Mjc0YjhjLTVmZWUtNDhiMS1hMDQyLTIxNDAzYjJjNmVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjUqcwDQYJKoZIhvcNAQELBQADggEBADS9vDzSaWOtpubnnsmu3ESbRnDZ GhFmSksQQuSKBL9uU+5x9TzKonelbY2V43YmqQokvCicjcMgtApruSpZjZx0JQbj vTGbziSZsVhp/2oW5Z7+mDEooueHlKyu2OpWuzYLhSzATY+gEo8XTcjw10svd9vG tvw7Hr+Gg6efiFFFbWMFjDD2arzmulYYd6TJKhWUHLKpeeahfMs9Rpkb8HzVX8sS RybIfe7fd5AzOQmoUw9APJKZ/1D7CywAjF/Jozet8Fzu18kYxLFWHqq5ZNFvWCKE HPDKtw2O4Vsd4j0lPgedRiSIzEzFt1AkKda4UWB+OTAMQUc6Y3IaQufFpQ0= -----END CERTIFICATE-----Generated at Fri Jul 24 00:06:25 2026 by rpki-client