$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa File: b856ae51-66ec-4600-b64a-768473b00d4c.roa (raw, json) Hash identifier: ZYUyBPNVPsWc5MYjIgLjC2FoM7HW4FbzvCCbM7jTX9k= Subject key identifier: 1A:3A:E4:7B:89:C0:07:E4:82:AA:EA:CA:A9:2E:81:9A:82:A7:6F:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AB10B26238F5CA235C9E83F6FED4BD657B49CA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa Signing time: Mon 20 Jul 2026 00:50:42 +0000 ROA not before: Mon 20 Jul 2026 00:50:42 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b1:0b:26:23:8f:5c:a2:35:c9:e8:3f:6f:ed:4b:d6:57:b4:9c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:50:42 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=5ffca822abd87f33e301fd0f446c791ba5a0ed0ed01d4c033ec4cb4df5295f2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:14:43:08:93:0b:f3:98:12:3e:15:2f:75: c1:e6:89:7a:3c:b1:56:42:5a:50:d2:5a:b1:f4:4a: c0:02:fb:04:96:1a:90:20:10:4e:3f:d0:68:4c:c3: a9:b7:fa:10:a8:85:61:35:0d:4b:90:71:55:c4:c2: b7:b1:be:4b:aa:ef:08:bc:a3:ad:e6:40:2f:7d:d8: 6f:bd:22:60:dc:ed:53:8a:b8:f5:f3:7e:2f:02:a0: c3:1f:33:86:b3:d8:0b:5c:2b:86:80:a3:8a:20:7e: 03:be:aa:72:19:23:38:a7:72:58:9d:20:76:33:f9: 33:a1:f3:ce:67:28:4b:64:b0:5a:d7:56:05:14:0d: 9a:36:d3:7a:88:fb:f1:bf:39:de:41:45:c9:ef:08: b9:98:23:1b:56:60:ec:e1:07:81:b5:47:02:5c:b9: a8:63:5a:aa:0c:a8:8d:90:25:6e:69:be:8b:70:29: d4:a1:54:95:9f:5d:8e:30:77:39:79:fb:ab:1f:65: 7e:64:8d:a0:8d:de:24:52:62:28:50:f9:41:98:55: 34:80:ea:0e:31:a2:78:49:60:8d:4b:04:0d:fc:a7: a4:78:4f:9b:ed:16:d9:35:3f:7c:d2:bd:70:51:67: 28:af:bb:1b:9a:5f:99:c9:96:23:6b:8c:05:5f:f5: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3A:E4:7B:89:C0:07:E4:82:AA:EA:CA:A9:2E:81:9A:82:A7:6F:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.123.0/24 Signature Algorithm: sha256WithRSAEncryption 61:c3:c3:e8:ba:1d:ba:30:f8:e7:34:0c:44:80:75:66:a3:ff: b6:7c:82:aa:3f:a8:61:95:eb:b4:71:24:4c:ee:5d:cf:3b:56: c4:1e:e5:ee:b2:07:1b:90:37:e6:da:67:4f:1a:95:ea:92:5f: 90:26:79:31:3a:7c:84:de:29:e6:23:2a:3e:45:99:99:f8:0f: 65:db:3a:56:a5:8b:67:02:81:f7:7d:a8:03:39:85:6c:2c:34: ad:5e:62:18:27:37:9e:dc:ff:2b:bf:00:a8:dd:6c:a1:7a:90: 30:46:e8:8c:05:21:65:7d:c2:99:ca:97:24:d3:26:5c:17:2e: f4:b0:e6:f0:0d:af:60:e7:4b:84:aa:24:c2:cf:e6:97:e3:c6: 4d:fa:98:45:3c:72:2b:8d:9b:4a:94:b6:ce:96:ce:89:64:22: 5a:22:38:0f:94:3e:f0:25:cf:0e:01:f5:7c:99:0b:5b:3d:6f: 39:09:97:af:16:57:56:11:1b:06:69:fa:da:80:48:b9:38:fc: d1:48:43:a0:2f:fe:88:49:f5:71:43:93:4a:3c:b7:b1:37:c8: de:1f:6b:6e:1d:b8:24:50:b6:3d:7b:29:4d:93:83:e6:5b:69: 12:98:b2:8c:fd:7e:03:dc:59:d7:5c:8f:0e:f6:9d:6d:3b:3c: e4:17:b3:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUarELJiOPXKI1yeg/b+1L1le0nKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA1MDQyWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmZjYTgyMmFiZDg3ZjMzZTMwMWZkMGY0NDZjNzkxYmE1 YTBlZDBlZDAxZDRjMDMzZWM0Y2I0ZGY1Mjk1ZjJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjjRRDCJML85gSPhUvdcHmiXo8sVZCWlDSWrH0SsAC+wSW GpAgEE4/0GhMw6m3+hCohWE1DUuQcVXEwrexvkuq7wi8o63mQC992G+9ImDc7VOK uPXzfi8CoMMfM4az2AtcK4aAo4ogfgO+qnIZIzinclidIHYz+TOh885nKEtksFrX VgUUDZo203qI+/G/Od5BRcnvCLmYIxtWYOzhB4G1RwJcuahjWqoMqI2QJW5pvotw KdShVJWfXY4wdzl5+6sfZX5kjaCN3iRSYihQ+UGYVTSA6g4xonhJYI1LBA38p6R4 T5vtFtk1P3zSvXBRZyivuxuaX5nJliNrjAVf9RzZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGjrke4nAB+SCqurKqS6BmoKnbw0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4NTZhZTUxLTY2ZWMtNDYwMC1iNjRhLTc2ODQ3M2IwMGQ0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HswDQYJKoZIhvcNAQELBQADggEBAGHDw+i6Hbow+Oc0DESAdWaj/7Z8 gqo/qGGV67RxJEzuXc87VsQe5e6yBxuQN+baZ08aleqSX5AmeTE6fITeKeYjKj5F mZn4D2XbOlali2cCgfd9qAM5hWwsNK1eYhgnN57c/yu/AKjdbKF6kDBG6IwFIWV9 wpnKlyTTJlwXLvSw5vANr2DnS4SqJMLP5pfjxk36mEU8ciuNm0qUts6WzolkIloi OA+UPvAlzw4B9XyZC1s9bzkJl68WV1YRGwZp+tqASLk4/NFIQ6Av/ohJ9XFDk0o8 t7E3yN4fa24duCRQtj17KU2Tg+ZbaRKYsoz9fgPcWddcjw72nW07POQXsxo= -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:27 2026 by rpki-client