$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4756893-d8c8-4574-8822-ae5b134e827e.roa File: b4756893-d8c8-4574-8822-ae5b134e827e.roa (raw, json) Hash identifier: pgmpLm/H45zip0A2RJuteU/dttmsDimSii1MiKnUg/U= Subject key identifier: 3A:5E:49:1C:9B:20:13:57:FD:E0:1A:04:60:33:89:65:4D:FB:8B:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3147E4C7B2CD921307F62E58B11A8790AD0AF75C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4756893-d8c8-4574-8822-ae5b134e827e.roa Signing time: Wed 22 Jul 2026 00:10:09 +0000 ROA not before: Wed 22 Jul 2026 00:10:09 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:47:e4:c7:b2:cd:92:13:07:f6:2e:58:b1:1a:87:90:ad:0a:f7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:10:09 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=fd0fd3d60fb7e2b33faa318ec6277bede7d54948de234baaf14c9fcd4ac1ad8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:ea:cf:28:60:da:8c:08:67:bf:b3:e6:91: a7:6c:13:3e:37:5d:da:4d:c2:71:94:33:3e:29:bd: 41:ee:6a:76:93:7f:75:54:9f:2e:7d:75:da:d9:7b: 72:3a:3d:fc:3c:e1:7b:85:1a:b0:cc:fe:34:90:55: 83:d8:b4:9b:54:f0:4d:6d:73:cc:85:83:e7:73:59: 3a:22:e9:c7:b3:62:46:87:0f:ef:cd:1f:a4:5a:4e: e0:52:60:df:2f:7c:17:e2:0c:38:81:62:07:f7:87: c0:95:e2:0d:10:0e:f3:c3:16:e4:a9:72:29:13:f4: 87:6c:e2:60:54:32:7e:5e:7a:66:aa:69:3f:07:23: d1:fe:b7:1f:28:7e:2e:ed:a6:7f:de:c2:00:d4:be: 66:8b:37:f0:93:2a:8e:54:cd:02:9a:30:64:31:a3: a4:d0:9a:1c:db:6c:fc:18:c4:4c:8c:9c:3e:30:2f: a1:2f:ef:a4:c0:74:a0:c0:93:5c:ab:da:2d:65:18: 1d:6e:a6:b7:ce:44:89:62:45:a9:5a:53:c0:c5:38: 9e:33:29:6d:2a:f2:9f:13:5f:a8:59:e6:49:46:c9: 46:a5:eb:b6:1f:1e:f8:a4:bc:d8:43:83:b4:fc:a6: 19:64:a8:1b:15:03:1f:e5:1f:0c:c3:df:2f:78:7d: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:49:1C:9B:20:13:57:FD:E0:1A:04:60:33:89:65:4D:FB:8B:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4756893-d8c8-4574-8822-ae5b134e827e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.190.0/24 Signature Algorithm: sha256WithRSAEncryption ad:9c:d0:16:15:5e:c4:38:2e:6c:9c:95:00:9b:59:44:d2:5e: 87:92:38:19:06:90:bb:69:ce:a4:6f:00:f4:62:a5:24:ec:23: 47:cb:26:91:3f:2c:5c:aa:7c:60:43:b8:06:9d:6c:79:74:67: 4d:16:86:51:2c:a8:55:96:ed:d6:3e:b3:73:0a:57:ba:6f:3b: 16:f6:07:a1:4c:7b:90:40:06:99:ba:8d:05:c7:80:5f:25:fd: 76:87:93:d0:4f:36:e5:fc:25:5f:f9:ba:9f:ab:5a:65:d5:30: 82:56:d7:33:10:e2:b9:73:72:63:33:1e:49:1d:b0:3e:f3:99: fe:3d:01:0b:77:1d:e3:f5:2a:46:a5:da:89:4c:fb:45:a0:f6: 53:61:2a:af:cd:02:d7:e4:0d:7b:63:de:60:f0:b0:c0:7f:a3: 8d:6c:27:47:ab:12:88:be:df:d0:4c:d3:3e:f2:96:1d:e2:4c: 73:c0:24:0c:1a:94:01:9b:d1:70:91:64:f4:30:3c:ff:89:40: 12:46:8c:60:77:8a:5b:83:21:7c:a7:1d:56:cd:2f:b8:b8:61: 98:cc:51:04:b9:c9:5b:0b:c4:5a:35:38:04:55:7b:ae:76:9a: c4:f4:ff:04:6b:6f:72:21:e1:f4:67:77:78:9b:7b:1d:05:d6: 53:65:d2:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMUfkx7LNkhMH9i5YsRqHkK0K91wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMDA5WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDBmZDNkNjBmYjdlMmIzM2ZhYTMxOGVjNjI3N2JlZGU3 ZDU0OTQ4ZGUyMzRiYWFmMTRjOWZjZDRhYzFhZDhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6RurPKGDajAhnv7PmkadsEz43XdpNwnGUMz4pvUHuanaT f3VUny59ddrZe3I6Pfw84XuFGrDM/jSQVYPYtJtU8E1tc8yFg+dzWToi6cezYkaH D+/NH6RaTuBSYN8vfBfiDDiBYgf3h8CV4g0QDvPDFuSpcikT9Ids4mBUMn5eemaq aT8HI9H+tx8ofi7tpn/ewgDUvmaLN/CTKo5UzQKaMGQxo6TQmhzbbPwYxEyMnD4w L6Ev76TAdKDAk1yr2i1lGB1uprfORIliRalaU8DFOJ4zKW0q8p8TX6hZ5klGyUal 67YfHvikvNhDg7T8phlkqBsVAx/lHwzD3y94fTXVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOl5JHJsgE1f94BoEYDOJZU37i6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0NzU2ODkzLWQ4YzgtNDU3NC04ODIyLWFlNWIxMzRlODI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7r4wDQYJKoZIhvcNAQELBQADggEBAK2c0BYVXsQ4LmyclQCbWUTSXoeS OBkGkLtpzqRvAPRipSTsI0fLJpE/LFyqfGBDuAadbHl0Z00WhlEsqFWW7dY+s3MK V7pvOxb2B6FMe5BABpm6jQXHgF8l/XaHk9BPNuX8JV/5up+rWmXVMIJW1zMQ4rlz cmMzHkkdsD7zmf49AQt3HeP1Kkal2olM+0Wg9lNhKq/NAtfkDXtj3mDwsMB/o41s J0erEoi+39BM0z7ylh3iTHPAJAwalAGb0XCRZPQwPP+JQBJGjGB3iluDIXynHVbN L7i4YZjMUQS5yVsLxFo1OARVe652msT0/wRrb3Ih4fRnd3ibex0F1lNl0iY= -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:09 2026 by rpki-client