$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bedaf97f-febb-4704-a253-a67d71c8c7e7.roa File: bedaf97f-febb-4704-a253-a67d71c8c7e7.roa (raw, json) Hash identifier: fvmSzGdnHJKbo+CjCa+4o9+qcAxjGzRvjDUEIr+XwOk= Subject key identifier: 7F:5D:60:1C:C1:FB:74:98:C7:89:CF:88:79:2B:AE:02:D6:9D:20:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5054AEB929B42C38C14F6B4E1A60640B9C36EC76 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bedaf97f-febb-4704-a253-a67d71c8c7e7.roa Signing time: Wed 22 Jul 2026 00:01:21 +0000 ROA not before: Wed 22 Jul 2026 00:01:21 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:54:ae:b9:29:b4:2c:38:c1:4f:6b:4e:1a:60:64:0b:9c:36:ec:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:01:21 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=0414f2ea02a7963b983722bec5edcc830a920086e29f3dd60ee42db61f20c5b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:97:98:95:56:30:3f:4a:73:b6:49:ba:db:c1: 8a:09:f9:da:69:41:b1:ef:69:be:04:36:bf:18:c9: 65:a8:89:b2:5e:4b:38:4b:8b:46:eb:41:4a:bc:be: 5d:4c:9c:9f:e6:8b:7a:d5:44:f0:82:af:91:8e:11: dc:22:da:f6:4a:d5:fa:79:c8:da:82:e2:17:34:a4: 0a:df:08:ab:a4:01:86:32:d9:b0:1a:b0:e5:5e:21: f9:04:5c:51:27:10:8d:80:f0:d6:79:0f:da:c9:72: 5a:f2:33:55:6e:bc:20:00:2b:82:47:8f:15:d4:01: 71:e8:f2:93:9f:2b:bd:a1:bc:95:d3:79:ca:a0:78: 55:b3:1e:e8:dd:ba:85:b5:a4:99:28:c0:f2:eb:dd: 96:2f:a2:3b:b6:d5:26:e6:e7:e8:aa:13:f2:b1:83: 74:a4:b4:00:24:79:ad:ae:b7:73:22:8e:e8:58:61: cb:f7:f3:e5:39:fc:7a:35:8e:7d:77:ce:9a:a1:60: 25:1e:28:e6:48:eb:b9:0f:2b:c6:59:82:e3:56:cf: 1e:7a:38:78:9d:eb:b0:14:85:c4:dc:12:16:ae:69: 98:c4:57:a0:cc:9d:e0:aa:9a:15:d8:7f:41:5a:56: 4d:ec:01:ad:50:f2:8d:97:c1:d6:0e:6f:b0:6a:34: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5D:60:1C:C1:FB:74:98:C7:89:CF:88:79:2B:AE:02:D6:9D:20:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bedaf97f-febb-4704-a253-a67d71c8c7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.161.0/24 Signature Algorithm: sha256WithRSAEncryption 65:b9:5f:44:73:aa:e9:f1:67:cc:d8:db:8d:54:38:ee:a0:3a: 4e:cc:3b:b2:55:51:37:bd:d2:fc:5d:5d:95:0d:74:ef:e4:58: f9:de:a0:70:bf:a9:ff:1f:4a:f9:8f:16:c3:1e:61:30:2d:6b: 65:31:57:89:2c:b9:32:d0:4e:9e:ce:4d:50:56:f2:73:a5:75: 81:00:e2:31:f2:3d:1c:ec:e3:5a:15:52:0c:10:44:2f:58:79: 41:45:1c:e7:7c:9d:5d:29:98:39:36:93:b6:65:03:0f:00:62: 57:ad:e5:01:5c:0e:c6:4d:69:09:54:9e:66:cc:bf:ed:c1:e5: c6:be:09:72:2b:e7:67:e6:a8:c8:79:3e:16:1b:1e:b7:86:d8: 78:0d:aa:41:e5:5e:34:47:f7:6b:94:48:c8:3e:2f:fb:06:3e: 85:92:e8:1c:20:a8:7b:4c:bb:ad:25:6d:93:c0:3f:3c:c9:6d: 5a:47:8b:2c:a6:db:ad:3a:60:4f:d5:fa:c2:70:f9:ee:eb:5a: fc:0d:88:34:a9:77:3f:7d:82:1b:44:48:a1:4f:79:28:54:ab: 28:e0:9b:8e:62:65:5f:ce:b3:be:f6:f3:1b:f7:2b:79:53:8d: 76:c1:0e:21:8f:71:ae:b6:d5:1b:0c:68:a4:bc:14:49:30:f3: 81:ca:d7:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUFSuuSm0LDjBT2tOGmBkC5w27HYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMTIxWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDE0ZjJlYTAyYTc5NjNiOTgzNzIyYmVjNWVkY2M4MzBh OTIwMDg2ZTI5ZjNkZDYwZWU0MmRiNjFmMjBjNWI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnl5iVVjA/SnO2SbrbwYoJ+dppQbHvab4ENr8YyWWoibJe SzhLi0brQUq8vl1MnJ/mi3rVRPCCr5GOEdwi2vZK1fp5yNqC4hc0pArfCKukAYYy 2bAasOVeIfkEXFEnEI2A8NZ5D9rJclryM1VuvCAAK4JHjxXUAXHo8pOfK72hvJXT ecqgeFWzHujduoW1pJkowPLr3ZYvoju21Sbm5+iqE/Kxg3SktAAkea2ut3MijuhY Ycv38+U5/Ho1jn13zpqhYCUeKOZI67kPK8ZZguNWzx56OHid67AUhcTcEhauaZjE V6DMneCqmhXYf0FaVk3sAa1Q8o2XwdYOb7BqNLuZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf11gHMH7dJjHic+IeSuuAtadIG4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlZGFmOTdmLWZlYmItNDcwNC1hMjUzLWE2N2Q3MWM4YzdlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7qEwDQYJKoZIhvcNAQELBQADggEBAGW5X0RzqunxZ8zY241UOO6gOk7M O7JVUTe90vxdXZUNdO/kWPneoHC/qf8fSvmPFsMeYTAta2UxV4ksuTLQTp7OTVBW 8nOldYEA4jHyPRzs41oVUgwQRC9YeUFFHOd8nV0pmDk2k7ZlAw8AYlet5QFcDsZN aQlUnmbMv+3B5ca+CXIr52fmqMh5PhYbHreG2HgNqkHlXjRH92uUSMg+L/sGPoWS 6BwgqHtMu60lbZPAPzzJbVpHiyym2606YE/V+sJw+e7rWvwNiDSpdz99ghtESKFP eShUqyjgm45iZV/Os7728xv3K3lTjXbBDiGPca621RsMaKS8FEkw84HK11k= -----END CERTIFICATE-----Generated at Thu Jul 23 22:52:21 2026 by rpki-client