$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab3f2ad1-9214-4a98-8573-eb7c27739641.roa File: ab3f2ad1-9214-4a98-8573-eb7c27739641.roa (raw, json) Hash identifier: 8TK+8rzf7onhfg/1HNx2jVCq+AsIu4cUfd+98ey+Jis= Subject key identifier: 62:BC:5E:E5:A1:71:E5:ED:FD:61:E3:9D:AD:5A:BB:D5:28:A4:37:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AFC71A2B94B12B212590D566D8999FAB89624ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab3f2ad1-9214-4a98-8573-eb7c27739641.roa Signing time: Wed 22 Jul 2026 00:10:45 +0000 ROA not before: Wed 22 Jul 2026 00:10:45 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fc:71:a2:b9:4b:12:b2:12:59:0d:56:6d:89:99:fa:b8:96:24:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:10:45 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=0d0b745d06ca3c5ef2bca3fb43153e11d05017c226eb116225f4cb3334f9a90d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:a2:42:ba:7f:2d:03:02:57:3e:20:e4:f1: 00:e2:3a:ed:49:fa:55:45:e1:07:68:83:86:2d:1d: 05:6b:cc:da:fb:17:43:f8:7f:b8:78:12:d1:30:76: cd:4f:d1:0d:e1:c6:39:6a:28:fe:b1:f1:5e:6c:d2: 26:b0:08:dc:fe:33:36:cc:f9:df:7e:3a:e5:15:21: 11:2b:6b:99:60:c6:28:a7:40:e2:92:41:ef:69:50: bb:c3:00:70:f7:49:c8:94:93:a3:d3:b1:61:a6:a9: 4b:90:b0:a7:82:3e:72:36:e0:68:e9:9f:ed:9d:6e: 1c:2a:34:70:69:01:2e:7c:a7:10:e0:30:3b:1b:2d: 81:b8:e9:41:2f:0b:8d:3f:9e:06:46:b2:ea:b6:62: dc:99:5e:a6:d3:f8:29:e9:4d:46:47:b2:01:74:5b: 3a:7e:25:60:e7:c0:61:95:93:37:ab:61:71:5a:ff: 71:14:cf:83:45:24:d2:ff:94:b1:e7:bf:9d:97:75: 48:5d:26:73:01:60:46:d9:ce:b7:fa:f0:6e:22:f1: 68:cb:25:45:01:9e:63:b4:f8:37:4b:cb:6e:78:6c: 24:ad:c9:8c:b9:61:df:11:18:dc:48:19:c5:69:49: a3:5b:1a:0c:2a:02:ac:8c:ae:49:2f:20:78:f6:e8: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BC:5E:E5:A1:71:E5:ED:FD:61:E3:9D:AD:5A:BB:D5:28:A4:37:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab3f2ad1-9214-4a98-8573-eb7c27739641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.206.0/24 Signature Algorithm: sha256WithRSAEncryption 47:34:98:6d:5c:63:1b:3a:1a:38:c2:fa:ba:41:67:e1:a3:81: 11:cf:5b:0d:d7:a0:19:00:1c:7b:c3:0c:73:30:e2:e6:e6:cf: ee:a3:2a:61:49:21:eb:6d:8b:43:a5:66:97:1f:d3:6c:32:64: d3:da:41:a4:b0:7f:54:3b:68:4a:e1:07:a5:ac:f6:de:53:65: ec:fa:5b:01:a9:d2:69:74:4b:dd:05:de:25:fb:60:ed:d5:83: 24:90:ec:40:a1:94:02:6a:4c:71:95:90:f1:77:75:98:71:7f: 09:de:49:e7:8a:ae:8f:72:9a:99:83:b6:40:81:67:09:4a:19: b5:f1:fe:e4:09:ba:a4:a2:50:6f:44:b4:26:b4:e1:b0:58:a8: b4:f1:3b:1b:f9:1d:f1:be:65:f7:1b:25:4a:97:ba:2d:5f:b6: 63:9d:72:c3:e5:49:c2:dc:90:d0:3e:6c:26:f4:d4:a0:56:de: e2:c9:a4:a2:aa:4b:f0:1c:25:07:34:cb:a9:48:b8:15:92:2c: 7f:06:0e:f2:3c:38:d5:a4:a1:a2:26:f3:f1:76:a7:f2:03:d0: ea:d3:98:1b:4f:1c:0c:5e:e2:91:45:ee:4e:b3:ab:3f:04:32: 61:5a:9f:e3:1d:c1:2c:5b:74:25:38:56:c2:18:70:11:41:24: 01:59:b9:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUavxxorlLErISWQ1WbYmZ+riWJO0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMDQ1WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDBiNzQ1ZDA2Y2EzYzVlZjJiY2EzZmI0MzE1M2UxMWQw NTAxN2MyMjZlYjExNjIyNWY0Y2IzMzM0ZjlhOTBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdKqJCun8tAwJXPiDk8QDiOu1J+lVF4Qdog4YtHQVrzNr7 F0P4f7h4EtEwds1P0Q3hxjlqKP6x8V5s0iawCNz+MzbM+d9+OuUVIREra5lgxiin QOKSQe9pULvDAHD3SciUk6PTsWGmqUuQsKeCPnI24Gjpn+2dbhwqNHBpAS58pxDg MDsbLYG46UEvC40/ngZGsuq2YtyZXqbT+CnpTUZHsgF0Wzp+JWDnwGGVkzerYXFa /3EUz4NFJNL/lLHnv52XdUhdJnMBYEbZzrf68G4i8WjLJUUBnmO0+DdLy254bCSt yYy5Yd8RGNxIGcVpSaNbGgwqAqyMrkkvIHj26NabAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYrxe5aFx5e39YeOdrVq71SikN/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiM2YyYWQxLTkyMTQtNGE5OC04NTczLWViN2MyNzczOTY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7s4wDQYJKoZIhvcNAQELBQADggEBAEc0mG1cYxs6GjjC+rpBZ+GjgRHP Ww3XoBkAHHvDDHMw4ubmz+6jKmFJIetti0OlZpcf02wyZNPaQaSwf1Q7aErhB6Ws 9t5TZez6WwGp0ml0S90F3iX7YO3VgySQ7EChlAJqTHGVkPF3dZhxfwneSeeKro9y mpmDtkCBZwlKGbXx/uQJuqSiUG9EtCa04bBYqLTxOxv5HfG+ZfcbJUqXui1ftmOd csPlScLckNA+bCb01KBW3uLJpKKqS/AcJQc0y6lIuBWSLH8GDvI8ONWkoaIm8/F2 p/ID0OrTmBtPHAxe4pFF7k6zqz8EMmFan+MdwSxbdCU4VsIYcBFBJAFZudA= -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:34 2026 by rpki-client