$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa File: b3c97cba-7083-48f3-8280-ad90bc3bee59.roa (raw, json) Hash identifier: P2jdCu/dhGXhkxUlA/XQGt4lUepXcbIJ8Ieo+2QQGqk= Subject key identifier: 5B:B0:BC:24:83:AA:18:C9:90:D3:E8:EC:BD:49:FE:1B:35:4F:91:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31E9A83BD6DD5709D6575CFEB53D9DA7555D9A73 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa Signing time: Mon 20 Jul 2026 00:20:35 +0000 ROA not before: Mon 20 Jul 2026 00:20:35 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.10.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e9:a8:3b:d6:dd:57:09:d6:57:5c:fe:b5:3d:9d:a7:55:5d:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:20:35 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=e472ccd70733d8bca4b3c6f55a17cf78ace47c7396b8dcc997890b4b18c08091, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:8f:1e:bb:b6:79:50:b7:e3:7e:4f:8d:fd: e5:92:d4:9d:76:43:1b:17:95:b9:30:02:2b:77:c3: 3f:a3:2a:3f:8c:36:be:6a:52:ef:88:a0:1e:f1:bd: 59:fb:e1:2b:93:41:79:0c:1f:e0:05:d0:05:7a:34: dc:e2:30:63:e4:d3:5e:fe:24:9c:81:5a:31:cd:3b: 8d:f5:73:f8:ec:0a:a9:e2:5b:f3:ce:42:e6:1f:f1: ae:b6:0e:99:12:50:8e:55:5d:3a:82:2c:a4:17:ce: ca:d4:8b:80:07:ae:f1:0d:2c:b4:bd:53:9d:b9:a2: 2f:de:55:44:21:85:f7:85:9a:47:85:b6:9f:4b:c2: e3:01:dc:a3:f3:16:cc:b6:52:e0:44:c5:18:00:b2: 19:bb:33:7c:a8:4e:7c:7a:73:2b:74:6c:a4:dc:fc: a1:8f:fd:a7:d9:42:8a:48:81:cf:8e:19:46:ac:b9: 5d:f6:ce:8e:32:a0:c3:03:a8:ea:fb:9d:63:19:13: 3b:7d:5f:a7:5c:aa:f1:5b:3b:4a:0c:5d:9d:c2:24: 0b:f5:86:7b:cc:44:44:99:07:84:c1:ba:32:54:00: ef:b7:df:c3:9a:b2:43:1e:ca:84:3b:b4:df:56:9e: ba:49:39:1b:f2:35:61:a7:2e:9a:15:ba:46:12:c5: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:BC:24:83:AA:18:C9:90:D3:E8:EC:BD:49:FE:1B:35:4F:91:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.10.0.0/16 Signature Algorithm: sha256WithRSAEncryption 38:30:43:55:8c:fc:1a:74:f4:33:71:7c:34:da:d2:f4:38:a9: 29:d3:45:38:bc:d6:f2:05:6e:9d:02:92:10:c9:17:ee:5a:6c: d7:2c:b0:60:fe:21:11:0c:bd:7a:13:dc:84:eb:4f:a4:62:f0: 81:11:85:ce:9c:35:13:ea:18:60:21:b5:94:82:f6:69:f2:d4: bc:58:0a:61:4e:d0:99:c5:db:a5:fc:08:90:73:4d:f7:7c:b9: 3a:79:a0:1f:b2:4a:cf:b0:54:5a:42:72:7e:60:34:34:f2:72: 38:91:cc:e0:b0:3e:4c:eb:a0:14:90:9f:30:42:03:83:86:00: 2b:43:82:94:08:c5:92:b8:66:e1:ad:e7:1c:1b:bc:a9:d3:0e: ed:5c:a1:1a:23:a5:3e:fc:ed:e9:3e:d4:56:a4:38:8f:11:cb: c7:ff:93:02:3b:3e:8e:1f:12:6b:10:19:20:47:b8:2f:4a:14: 6b:8b:76:53:bb:9f:5a:24:d6:61:f2:ef:13:b2:56:c5:da:c1: 48:62:2c:c5:9c:95:0c:d7:f0:5f:8a:1c:17:00:34:cf:ed:17: 81:6a:c9:4f:37:a1:c6:82:d4:cf:8b:68:81:e9:0a:8a:5d:7a: 0b:42:7a:55:3d:e7:4e:7b:47:1f:d8:24:15:b3:88:19:66:42: 88:f2:52:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMemoO9bdVwnWV1z+tT2dp1VdmnMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAyMDM1WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDcyY2NkNzA3MzNkOGJjYTRiM2M2ZjU1YTE3Y2Y3OGFj ZTQ3YzczOTZiOGRjYzk5Nzg5MGI0YjE4YzA4MDkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdUY8eu7Z5ULfjfk+N/eWS1J12QxsXlbkwAit3wz+jKj+M Nr5qUu+IoB7xvVn74SuTQXkMH+AF0AV6NNziMGPk017+JJyBWjHNO431c/jsCqni W/POQuYf8a62DpkSUI5VXTqCLKQXzsrUi4AHrvENLLS9U525oi/eVUQhhfeFmkeF tp9LwuMB3KPzFsy2UuBExRgAshm7M3yoTnx6cyt0bKTc/KGP/afZQopIgc+OGUas uV32zo4yoMMDqOr7nWMZEzt9X6dcqvFbO0oMXZ3CJAv1hnvMRESZB4TBujJUAO+3 38OaskMeyoQ7tN9WnrpJORvyNWGnLpoVukYSxZb1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUW7C8JIOqGMmQ0+jsvUn+GzVPkc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzYzk3Y2JhLTcwODMtNDhmMy04MjgwLWFkOTBiYzNiZWU1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDACjANBgkqhkiG9w0BAQsFAAOCAQEAODBDVYz8GnT0M3F8NNrS9DipKdNF OLzW8gVunQKSEMkX7lps1yywYP4hEQy9ehPchOtPpGLwgRGFzpw1E+oYYCG1lIL2 afLUvFgKYU7QmcXbpfwIkHNN93y5OnmgH7JKz7BUWkJyfmA0NPJyOJHM4LA+TOug FJCfMEIDg4YAK0OClAjFkrhm4a3nHBu8qdMO7VyhGiOlPvzt6T7UVqQ4jxHLx/+T Ajs+jh8SaxAZIEe4L0oUa4t2U7ufWiTWYfLvE7JWxdrBSGIsxZyVDNfwX4ocFwA0 z+0XgWrJTzehxoLUz4togekKil16C0J6VT3nTntHH9gkFbOIGWZCiPJSYA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:55 2026 by rpki-client