$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d04561-54bf-45bb-85ee-804da85b65f9.roa File: b1d04561-54bf-45bb-85ee-804da85b65f9.roa (raw, json) Hash identifier: SyXV/Oq8yvB+KTEXsNpFrif0mvlDsWyoT3QYPogMHOQ= Subject key identifier: 86:4A:41:A5:59:EE:8C:5A:9A:14:93:17:19:22:7F:E7:B0:BC:E1:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4275E450CCC8F9B28D993D5B5EF0EC4F9F6742AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d04561-54bf-45bb-85ee-804da85b65f9.roa Signing time: Fri 17 Jul 2026 00:00:10 +0000 ROA not before: Fri 17 Jul 2026 00:00:10 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 150.247.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:75:e4:50:cc:c8:f9:b2:8d:99:3d:5b:5e:f0:ec:4f:9f:67:42:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:00:10 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=b80d12c7ce79726896eeda1ba2f085c3d69262b99b9b57a643f95426f56eb322, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:3f:bb:e2:79:07:ef:c4:36:93:02:a1:76: 4b:d5:ee:6e:6e:c6:8f:31:34:a5:72:4d:dc:7a:4b: 66:72:30:a6:82:a2:09:7f:06:cb:f9:a8:25:78:ce: dd:ee:bc:57:11:31:80:2b:42:bc:97:8a:89:f0:7e: a1:98:cf:9f:2a:71:48:ca:51:43:69:ba:2d:83:2e: 8d:49:84:29:0a:06:86:80:aa:5f:af:54:43:c4:67: cd:c1:eb:d6:f4:fc:5f:a1:87:46:e9:01:3e:40:7a: d2:1d:0a:37:35:b3:85:c1:a7:1e:a6:a4:c1:c1:ef: ad:ac:83:30:52:f4:99:a5:65:17:25:b0:e1:4a:79: d7:18:b5:90:64:6c:22:f6:78:bc:93:ab:88:0e:67: 3d:a8:24:43:48:3e:69:a2:15:5f:98:2e:c6:60:db: 7c:0c:b5:6c:96:23:15:d9:b0:21:e3:d0:65:5f:cf: 10:1a:4f:91:2e:09:a0:d5:c0:23:95:00:c0:a7:b2: b2:d1:4f:a5:ea:da:d2:0d:a7:60:4d:e6:2f:e5:d5: 2c:0c:43:ec:8b:66:87:1a:f4:1e:5e:28:02:10:ce: f2:7f:55:49:46:3b:63:bc:fd:a5:2a:0f:0b:b3:ef: 6c:d7:c7:bd:93:22:58:14:20:a2:39:88:26:29:93: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4A:41:A5:59:EE:8C:5A:9A:14:93:17:19:22:7F:E7:B0:BC:E1:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d04561-54bf-45bb-85ee-804da85b65f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.247.33.0/24 Signature Algorithm: sha256WithRSAEncryption c5:6d:08:e9:0e:d7:ab:99:23:ec:38:f9:e4:d4:b4:5f:90:37: ff:6e:91:f9:fb:37:9b:b5:af:ee:8c:de:e0:b6:e5:0e:e4:3f: 8a:3a:31:be:e1:70:9b:70:7c:48:77:c2:26:59:cb:1a:b3:0b: c5:0e:f6:f7:36:27:a6:81:d5:51:93:6d:e2:83:42:50:b1:3f: 5e:aa:63:00:23:03:46:87:db:57:30:0a:7d:7e:4c:97:99:f6: 80:80:6a:cb:cf:23:21:da:48:e0:dc:4e:28:d7:50:88:9d:e0: 84:c0:7a:cd:43:46:62:8b:19:a2:8f:a9:48:1d:88:26:00:ba: c8:0f:e3:89:ed:01:f1:e8:37:f2:e8:c9:84:d0:d1:f3:8b:af: ab:14:f3:f8:44:49:20:d3:43:1a:24:df:c1:f9:96:25:ee:1c: 39:d5:93:58:63:ef:8f:71:04:40:e8:18:04:9e:c1:b2:76:4f: f0:0c:e2:b0:62:bc:61:c3:7d:98:38:c1:d2:62:2f:16:3f:f5: 5d:e3:6c:56:3a:2a:0d:9a:a6:95:5a:f4:c9:3d:d0:c6:5a:87: a3:d1:70:ba:d2:86:66:03:45:f7:97:2e:1f:e3:43:a3:89:d6: 0b:00:c0:35:02:ef:2f:39:19:1b:b5:97:6f:d2:28:fa:4b:15: 53:53:80:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQnXkUMzI+bKNmT1bXvDsT59nQq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMDEwWhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODBkMTJjN2NlNzk3MjY4OTZlZWRhMWJhMmYwODVjM2Q2 OTI2MmI5OWI5YjU3YTY0M2Y5NTQyNmY1NmViMzIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpjz+74nkH78Q2kwKhdkvV7m5uxo8xNKVyTdx6S2ZyMKaC ogl/Bsv5qCV4zt3uvFcRMYArQryXionwfqGYz58qcUjKUUNpui2DLo1JhCkKBoaA ql+vVEPEZ83B69b0/F+hh0bpAT5AetIdCjc1s4XBpx6mpMHB762sgzBS9JmlZRcl sOFKedcYtZBkbCL2eLyTq4gOZz2oJENIPmmiFV+YLsZg23wMtWyWIxXZsCHj0GVf zxAaT5EuCaDVwCOVAMCnsrLRT6Xq2tINp2BN5i/l1SwMQ+yLZoca9B5eKAIQzvJ/ VUlGO2O8/aUqDwuz72zXx72TIlgUIKI5iCYpk9SFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhkpBpVnujFqaFJMXGSJ/57C84QkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxZDA0NTYxLTU0YmYtNDViYi04NWVlLTgwNGRhODViNjVmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW9yEwDQYJKoZIhvcNAQELBQADggEBAMVtCOkO16uZI+w4+eTUtF+QN/9u kfn7N5u1r+6M3uC25Q7kP4o6Mb7hcJtwfEh3wiZZyxqzC8UO9vc2J6aB1VGTbeKD QlCxP16qYwAjA0aH21cwCn1+TJeZ9oCAasvPIyHaSODcTijXUIid4ITAes1DRmKL GaKPqUgdiCYAusgP44ntAfHoN/LoyYTQ0fOLr6sU8/hESSDTQxok38H5liXuHDnV k1hj749xBEDoGASewbJ2T/AM4rBivGHDfZg4wdJiLxY/9V3jbFY6Kg2appVa9Mk9 0MZah6PRcLrShmYDRfeXLh/jQ6OJ1gsAwDUC7y85GRu1l2/SKPpLFVNTgCY= -----END CERTIFICATE-----Generated at Thu Jul 23 21:29:49 2026 by rpki-client