$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa File: cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa (raw, json) Hash identifier: BR+Gv3jgf2iEUDwbhLmt1uqSV6XH+ifKa+hGcIMt8DI= Subject key identifier: 94:DB:27:CF:D1:5D:18:15:82:7A:41:8F:49:46:30:91:09:64:D5:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7859801FF3B97DCA53FA6DE88E1D038E0AA6AF40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa Signing time: Sat 18 Jul 2026 00:00:12 +0000 ROA not before: Sat 18 Jul 2026 00:00:12 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.134.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:59:80:1f:f3:b9:7d:ca:53:fa:6d:e8:8e:1d:03:8e:0a:a6:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:00:12 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=cf874c024335b284e3a941cf5d9d247d5dcb2590d6d396c5fe7fee8d95fea282, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:c3:05:dc:b0:14:ab:d2:2f:42:3f:0c:65: 8d:3d:ee:33:46:3f:3b:70:46:d5:bc:72:44:51:3b: 60:c4:12:e5:47:e8:0b:b1:aa:69:d9:8e:6b:1f:84: 09:f7:eb:7c:3c:8b:fe:20:99:f4:a1:0b:3f:40:e3: 59:a8:ac:e2:04:04:50:83:be:0d:6a:71:83:c1:aa: 9c:07:90:ce:12:d1:7f:b5:60:ed:47:c0:eb:ca:81: e4:f2:3f:ce:e4:dd:ec:e9:a6:51:2d:06:e5:6e:17: c1:81:fb:39:6c:83:1f:77:20:a0:bd:ac:13:a6:b5: fe:21:9f:31:25:a8:7c:20:78:68:9f:c8:72:ea:c2: af:0c:f8:03:ce:2f:ae:2c:e0:6c:08:4c:5b:90:ff: 49:48:37:4f:a0:9b:b7:61:f8:a1:b6:46:d0:47:af: ee:79:05:0f:89:dd:3b:44:37:eb:d7:93:2a:33:11: 4e:a0:47:0a:d9:3b:21:69:bc:2e:1e:94:15:be:f3: d1:c7:a5:0d:a7:aa:9b:53:93:76:43:13:f2:5a:53: 58:83:90:0a:d5:57:d6:83:bf:f7:ba:a4:ed:3a:2d: 19:bc:4d:ac:23:e8:88:d3:1c:2f:99:8d:36:f2:ad: 26:12:82:e6:14:7a:ea:9a:b9:e7:23:37:3a:4b:3f: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:27:CF:D1:5D:18:15:82:7A:41:8F:49:46:30:91:09:64:D5:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.134.64.0/18 Signature Algorithm: sha256WithRSAEncryption c2:2b:0a:0b:81:cf:3b:f6:e2:34:d1:7d:5f:51:7a:aa:e8:9d: 08:f7:a8:d0:3b:a3:84:58:53:e0:2c:01:62:a6:2c:04:32:76: 4d:8e:31:76:b2:11:86:d5:d8:6f:fc:e5:d2:17:a6:96:d0:b0: 66:39:39:55:fb:06:9c:74:3d:6b:7b:83:5e:d1:61:35:f1:4d: a8:14:e1:5b:eb:a3:1f:4c:45:db:f9:bd:84:8c:94:9e:32:0b: 21:68:68:3e:87:5e:15:59:09:6e:4a:21:74:3e:1b:ed:4f:7a: 6a:fa:93:1a:8d:82:d4:6f:fe:54:bf:30:6a:59:fa:83:05:27: 0b:9f:d3:dc:c8:4f:50:c5:af:fe:2d:4b:1f:a2:98:6f:e1:0c: d1:e1:02:19:63:44:de:63:b3:e6:64:60:43:12:32:b6:06:3f: 3b:27:b9:2e:1a:b0:ce:4d:66:8e:a9:78:4b:9a:77:6f:78:cf: af:6a:11:c4:d2:c0:7d:f2:0c:db:ac:20:6f:60:d8:5c:35:8a: 13:0f:9a:8b:d9:d4:93:ad:30:a9:48:61:1b:e1:7c:ff:d5:6b: db:d4:90:68:d4:a4:c1:9a:0d:9a:08:6e:c4:2e:88:b0:91:63: 91:89:15:18:dc:04:e0:da:90:d1:ee:52:0c:bc:4a:ee:73:59: 03:74:65:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeFmAH/O5fcpT+m3ojh0Djgqmr0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAwMDEyWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjg3NGMwMjQzMzViMjg0ZTNhOTQxY2Y1ZDlkMjQ3ZDVk Y2IyNTkwZDZkMzk2YzVmZTdmZWU4ZDk1ZmVhMjgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLZcMF3LAUq9IvQj8MZY097jNGPztwRtW8ckRRO2DEEuVH 6AuxqmnZjmsfhAn363w8i/4gmfShCz9A41morOIEBFCDvg1qcYPBqpwHkM4S0X+1 YO1HwOvKgeTyP87k3ezpplEtBuVuF8GB+zlsgx93IKC9rBOmtf4hnzElqHwgeGif yHLqwq8M+APOL64s4GwITFuQ/0lIN0+gm7dh+KG2RtBHr+55BQ+J3TtEN+vXkyoz EU6gRwrZOyFpvC4elBW+89HHpQ2nqptTk3ZDE/JaU1iDkArVV9aDv/e6pO06LRm8 Tawj6IjTHC+ZjTbyrSYSguYUeuqauecjNzpLP4TPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlNsnz9FdGBWCekGPSUYwkQlk1ZgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiMzYzY2E2LTQ0YTUtNDYxZi1iMmVmLTA1ZTkzYTM5YWZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRhkAwDQYJKoZIhvcNAQELBQADggEBAMIrCguBzzv24jTRfV9ReqronQj3 qNA7o4RYU+AsAWKmLAQydk2OMXayEYbV2G/85dIXppbQsGY5OVX7Bpx0PWt7g17R YTXxTagU4Vvrox9MRdv5vYSMlJ4yCyFoaD6HXhVZCW5KIXQ+G+1Pemr6kxqNgtRv /lS/MGpZ+oMFJwuf09zIT1DFr/4tSx+imG/hDNHhAhljRN5js+ZkYEMSMrYGPzsn uS4asM5NZo6peEuad294z69qEcTSwH3yDNusIG9g2Fw1ihMPmovZ1JOtMKlIYRvh fP/Va9vUkGjUpMGaDZoIbsQuiLCRY5GJFRjcBODakNHuUgy8Su5zWQN0ZSY= -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:59 2026 by rpki-client