$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd3a3b19-a79f-4aae-b970-427640324c68.roa File: cd3a3b19-a79f-4aae-b970-427640324c68.roa (raw, json) Hash identifier: Zu5lESchww/315imcTPJZwKLS6+mWdUN0bi8BdznF6c= Subject key identifier: 4D:31:6D:8F:DD:EA:72:68:3F:78:12:01:C4:EB:CE:9D:DA:72:A6:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FF28960166FD7D364D8E0C03B746C0AE8C20FD1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd3a3b19-a79f-4aae-b970-427640324c68.roa Signing time: Fri 17 Jul 2026 04:47:55 +0000 ROA not before: Fri 17 Jul 2026 04:47:55 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 45.33.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f2:89:60:16:6f:d7:d3:64:d8:e0:c0:3b:74:6c:0a:e8:c2:0f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 04:47:55 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=9266a1e6576e45fed3058b394c56ca2027a7ab012a0d0de1085625fe1e804594, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:82:59:38:c1:24:97:be:51:94:5e:36:ec:b4: f6:54:81:68:1a:15:fc:9f:b5:44:15:5f:73:29:a8: 84:96:45:39:32:95:e2:09:2b:91:40:65:2f:14:19: 42:54:0a:1c:fe:27:01:84:48:5f:8e:fe:b6:a9:f1: f3:ee:d5:c3:9f:ae:1e:fa:44:a3:0e:46:9b:1b:04: 52:76:a3:6c:86:df:d5:54:0c:ed:c4:55:a7:fc:2b: 8d:cf:9b:a4:b8:52:0b:22:47:c8:4c:37:bd:4c:2f: 8e:21:2b:db:17:3b:61:24:f1:f6:ea:72:7b:3a:30: 37:d8:4f:b4:17:92:3e:82:a8:68:5e:09:7d:15:87: 1e:5c:f1:b7:72:d4:d4:ef:84:ad:f2:4b:18:77:aa: 84:99:40:d9:c8:87:4f:f9:43:ab:90:9c:48:97:e9: b7:09:b4:d1:c0:b6:0b:cf:c0:1f:d9:9f:d6:11:1c: eb:f3:7b:d4:3d:00:60:5d:cc:9e:c5:1a:50:d6:cf: 46:80:06:c8:89:46:06:31:5e:bf:50:bf:d8:ab:71: a4:63:c4:ef:c1:df:4f:0f:f9:ca:97:39:0e:7d:32: 4d:01:22:a5:9b:ef:7a:94:f5:24:8e:69:e6:ce:df: b0:50:24:c2:db:ad:54:a3:c0:e2:86:78:07:0c:35: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:6D:8F:DD:EA:72:68:3F:78:12:01:C4:EB:CE:9D:DA:72:A6:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd3a3b19-a79f-4aae-b970-427640324c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.33.184.0/24 Signature Algorithm: sha256WithRSAEncryption 71:0e:5e:f3:2a:de:83:8c:2f:3a:2e:d4:a5:df:5b:4c:45:95: f2:3d:0f:66:e7:2d:28:25:e1:bb:61:b5:12:ec:32:5c:50:f0: df:b8:5b:2d:90:20:d9:62:a5:17:09:ee:7b:50:c5:60:f6:13: 9f:da:f2:be:09:0e:99:27:2d:d7:42:f8:aa:55:cc:ea:5d:72: 64:1b:3e:18:47:6c:b4:eb:c6:fd:4a:e7:52:44:16:da:8b:68: 12:76:e7:e6:c0:14:1a:31:2c:8f:51:a8:dc:b7:19:9c:b3:a0: 73:29:cc:bf:97:e1:4f:af:81:4d:34:c7:ef:f7:80:a2:a1:3d: 26:50:4f:ab:40:9c:d1:b1:46:2c:d7:65:0d:9d:a0:7a:4c:43: 27:98:da:90:28:d9:b9:5a:d4:b6:09:48:08:9b:f3:9e:83:19: 35:ae:c0:b4:32:d3:14:8c:0f:f0:6b:8b:ec:f9:dc:1e:79:1c: 3e:2d:6d:db:64:a5:a2:ad:75:a0:27:6c:19:2b:7a:68:a2:84: 55:20:e1:d2:3b:7d:c4:a5:34:01:ca:9b:50:c7:62:8a:b3:c3: e4:56:af:96:1f:3f:75:90:24:ed:79:fd:a0:77:46:fd:2d:62: 5c:f6:e3:23:cc:7d:77:53:60:17:f2:b2:67:39:90:62:65:dd: c0:60:bb:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb/KJYBZv19Nk2ODAO3RsCujCD9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDQ0NzU1WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjY2YTFlNjU3NmU0NWZlZDMwNThiMzk0YzU2Y2EyMDI3 YTdhYjAxMmEwZDBkZTEwODU2MjVmZTFlODA0NTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvglk4wSSXvlGUXjbstPZUgWgaFfyftUQVX3MpqISWRTky leIJK5FAZS8UGUJUChz+JwGESF+O/rap8fPu1cOfrh76RKMORpsbBFJ2o2yG39VU DO3EVaf8K43Pm6S4UgsiR8hMN71ML44hK9sXO2Ek8fbqcns6MDfYT7QXkj6CqGhe CX0Vhx5c8bdy1NTvhK3ySxh3qoSZQNnIh0/5Q6uQnEiX6bcJtNHAtgvPwB/Zn9YR HOvze9Q9AGBdzJ7FGlDWz0aABsiJRgYxXr9Qv9ircaRjxO/B308P+cqXOQ59Mk0B IqWb73qU9SSOaebO37BQJMLbrVSjwOKGeAcMNXWdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTTFtj93qcmg/eBIBxOvOndpypsMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkM2EzYjE5LWE3OWYtNGFhZS1iOTcwLTQyNzY0MDMyNGM2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtIbgwDQYJKoZIhvcNAQELBQADggEBAHEOXvMq3oOMLzou1KXfW0xFlfI9 D2bnLSgl4bthtRLsMlxQ8N+4Wy2QINlipRcJ7ntQxWD2E5/a8r4JDpknLddC+KpV zOpdcmQbPhhHbLTrxv1K51JEFtqLaBJ25+bAFBoxLI9RqNy3GZyzoHMpzL+X4U+v gU00x+/3gKKhPSZQT6tAnNGxRizXZQ2doHpMQyeY2pAo2bla1LYJSAib856DGTWu wLQy0xSMD/Bri+z53B55HD4tbdtkpaKtdaAnbBkremiihFUg4dI7fcSlNAHKm1DH Yoqzw+RWr5YfP3WQJO15/aB3Rv0tYlz24yPMfXdTYBfysmc5kGJl3cBgu/M= -----END CERTIFICATE-----Generated at Thu Jul 23 22:31:43 2026 by rpki-client