$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa File: ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa (raw, json) Hash identifier: 82dgQza979UtmKe5iXXKRbjSXbSfguhCKd1SoaadLbU= Subject key identifier: 02:3A:E0:1F:BF:D0:AF:63:CD:9C:D0:4C:8D:C9:90:81:57:D3:BC:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FBB2A09241D6792164782D10889BD94D877EE0D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa Signing time: Fri 17 Jul 2026 00:01:01 +0000 ROA not before: Fri 17 Jul 2026 00:01:01 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 22394 IP address blocks: 162.208.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bb:2a:09:24:1d:67:92:16:47:82:d1:08:89:bd:94:d8:77:ee:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:01:01 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=1bb531c8cc58906b8bbc82bc758234bfb747d18d8f8edd25cb912cfe11c4d123, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:9a:01:12:a4:53:26:b0:f2:93:08:7d:fa: 87:b6:af:15:73:cd:1e:72:4e:e5:51:18:57:e6:29: ec:ec:c1:fc:d6:ed:7b:c5:5e:3e:9e:2b:8d:41:6d: d2:c4:2a:e4:18:52:d7:af:db:f3:56:56:ed:5f:19: 13:63:80:54:3f:dd:1e:ec:70:73:03:81:e2:11:26: 2d:67:76:b1:09:1f:db:3e:f9:d3:7c:99:10:93:ad: e6:5a:b6:93:8b:aa:25:f0:d9:c9:e2:a7:19:aa:06: 6e:b7:3c:53:a6:a1:3d:2f:e8:37:41:e2:8f:1c:88: ce:15:bf:0a:88:24:33:8d:77:34:09:f8:42:21:cb: a5:7e:63:de:af:e9:eb:45:90:c9:14:ee:19:40:47: 1d:f6:b7:f7:26:e5:07:68:61:9a:19:6a:be:f9:f3: 82:62:12:9e:1c:d4:01:76:02:8c:35:1c:22:a8:a3: ae:3d:54:47:c4:7b:20:c1:19:7d:2b:5d:9b:75:ab: e2:fa:09:0b:ad:ee:b2:3e:22:2f:fa:1e:f7:6d:7f: c5:ec:e3:59:3f:dd:0e:f1:4d:bf:b4:71:87:d9:7d: 7f:ce:24:27:a1:51:b2:91:a8:fc:00:55:fe:da:c3: ef:0f:29:0a:ea:71:39:00:10:77:13:90:f4:a9:65: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:E0:1F:BF:D0:AF:63:CD:9C:D0:4C:8D:C9:90:81:57:D3:BC:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.208.123.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:23:f3:75:bf:17:03:dc:4e:e3:9e:4d:b5:e6:d2:c2:27:cf: 7a:f7:38:da:2a:33:1e:7e:90:b8:f8:6a:00:de:68:7e:f1:6c: 38:cb:14:60:da:9e:24:a3:10:d3:93:48:e9:9a:eb:12:93:16: 0d:48:0a:df:8c:af:75:b9:b8:50:1f:30:f6:0c:cd:d6:d9:f3: dd:8d:b6:be:db:21:5a:8b:80:44:97:5c:e1:58:07:33:a6:24: 4d:39:63:97:28:1a:f5:19:ee:37:24:96:30:87:91:0d:6a:36: b3:b8:64:53:5a:6d:23:5e:13:7a:1d:d0:3f:1e:64:2a:d9:e1: c6:71:a8:48:89:56:0c:a7:0b:2d:dd:4c:89:17:c4:25:c0:fb: 32:31:2f:42:77:fa:ef:cb:1a:42:4c:5c:d4:75:ab:70:31:e5: 7b:24:a3:3c:38:ae:de:47:06:78:34:0c:43:73:20:3c:a1:b0: 9e:e3:cb:1e:9a:19:64:57:de:61:39:06:85:2b:e7:45:d6:d3: 24:a5:1a:7e:e3:f6:5e:07:1f:6f:c7:7c:40:c3:a2:9f:00:8c: 94:4a:cf:c6:c7:db:2f:0f:7d:e7:b3:e3:96:7a:b0:8e:f6:2b: 0f:7a:75:28:3c:60:43:10:b4:f7:78:b2:91:4e:12:1f:c1:0a: 85:4d:e2:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf7sqCSQdZ5IWR4LRCIm9lNh37g0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMTAxWhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmI1MzFjOGNjNTg5MDZiOGJiYzgyYmM3NTgyMzRiZmI3 NDdkMThkOGY4ZWRkMjVjYjkxMmNmZTExYzRkMTIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuhJoBEqRTJrDykwh9+oe2rxVzzR5yTuVRGFfmKezswfzW 7XvFXj6eK41BbdLEKuQYUtev2/NWVu1fGRNjgFQ/3R7scHMDgeIRJi1ndrEJH9s+ +dN8mRCTreZatpOLqiXw2cnipxmqBm63PFOmoT0v6DdB4o8ciM4VvwqIJDONdzQJ +EIhy6V+Y96v6etFkMkU7hlARx32t/cm5QdoYZoZar7584JiEp4c1AF2Aow1HCKo o649VEfEeyDBGX0rXZt1q+L6CQut7rI+Ii/6Hvdtf8Xs41k/3Q7xTb+0cYfZfX/O JCehUbKRqPwAVf7aw+8PKQrqcTkAEHcTkPSpZWFjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAjrgH7/Qr2PNnNBMjcmQgVfTvM0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMGM1NmJjLTRmNTgtNDIxYi05ZTZlLThhNzkwYTEzN2UxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi0HswDQYJKoZIhvcNAQELBQADggEBABwj83W/FwPcTuOeTbXm0sInz3r3 ONoqMx5+kLj4agDeaH7xbDjLFGDaniSjENOTSOma6xKTFg1ICt+Mr3W5uFAfMPYM zdbZ892Ntr7bIVqLgESXXOFYBzOmJE05Y5coGvUZ7jckljCHkQ1qNrO4ZFNabSNe E3od0D8eZCrZ4cZxqEiJVgynCy3dTIkXxCXA+zIxL0J3+u/LGkJMXNR1q3Ax5Xsk ozw4rt5HBng0DENzIDyhsJ7jyx6aGWRX3mE5BoUr50XW0ySlGn7j9l4HH2/HfEDD op8AjJRKz8bH2y8Pfeez45Z6sI72Kw96dSg8YEMQtPd4spFOEh/BCoVN4rc= -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:54 2026 by rpki-client