$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa File: d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa (raw, json) Hash identifier: 9bQd68D6Jbog4p5avdZuIaeoarjQGGZlJ+IZCO7uVKE= Subject key identifier: 5A:0E:44:56:93:AA:81:97:2B:11:41:9F:44:4E:67:9D:EF:48:B2:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DE038A0EEB26D9513DE544788884D41FDD9F27A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa Signing time: Thu 23 Jul 2026 00:20:46 +0000 ROA not before: Thu 23 Jul 2026 00:20:46 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 31.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e0:38:a0:ee:b2:6d:95:13:de:54:47:88:88:4d:41:fd:d9:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:20:46 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=b4deb16616ce3b99e3879db13ace2bdf9e6a103ea1f26ef3b3e661a7d97a719d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:2a:56:8e:98:82:4d:4c:93:09:b6:fa:12: 08:21:b8:32:8c:a5:7c:85:58:1b:fa:ed:d0:d3:74: 58:14:34:ab:1f:40:12:7d:fe:26:53:4d:9f:e1:7d: 07:ed:64:56:50:ed:40:8d:bc:0e:45:b4:09:3b:51: 5f:e3:fc:70:ea:bd:2e:7c:8e:d1:1e:6e:c9:f3:d1: e6:7f:c3:23:62:77:a8:45:62:f1:7a:e9:9d:a9:98: 50:67:1f:95:e2:3d:90:46:cc:4a:1f:79:34:09:9c: 3f:d4:36:c9:7a:5c:02:64:31:9c:f7:95:73:b9:60: e2:e0:8b:3a:b4:e5:5d:d3:42:87:4e:04:84:6e:85: de:11:50:14:f8:0f:0c:f7:ab:4e:da:ca:ac:9c:aa: ad:e3:19:d0:f1:ad:37:db:92:5b:28:4a:29:21:a1: 18:1d:12:3b:6f:a0:05:80:4b:e1:f0:a9:9b:10:37: 19:b5:88:34:f1:19:d8:a0:ee:31:48:48:5f:7b:fc: 85:f4:2f:9c:7b:b1:30:86:a9:15:16:fb:b6:68:b7: ce:e1:f2:05:d8:66:2c:d1:ab:02:6e:c5:89:80:4e: 0f:ea:a5:08:81:7e:0c:56:b7:c8:58:33:94:07:ee: 85:2b:87:11:c3:9a:c8:e3:fb:f0:71:d1:3b:39:82: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0E:44:56:93:AA:81:97:2B:11:41:9F:44:4E:67:9D:EF:48:B2:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption 80:9f:70:b7:b8:a5:53:de:42:b0:df:8d:4b:61:a5:2e:ff:29: 7d:aa:9d:78:46:13:48:14:01:03:bb:97:a8:cf:52:34:65:01: e4:08:3a:01:91:3f:d6:57:47:35:0c:ec:78:46:2a:96:ed:ec: b4:30:e3:44:28:48:66:83:28:e5:bb:4f:df:89:34:15:ba:1b: 2e:9a:77:8c:9e:2c:05:25:5b:ea:c8:93:fb:16:02:9e:d6:e3: a0:58:8e:78:2e:cd:69:97:df:13:ee:b9:8e:aa:c6:ad:0b:23: 5d:46:2f:3e:6b:9e:47:4e:a9:39:c4:2a:cd:88:97:c8:79:44: 70:f2:ad:de:f2:91:07:e9:8d:0d:07:97:29:48:11:45:9c:c2: 14:1f:63:08:a7:83:5d:ae:bd:92:98:ae:ed:3d:53:cf:9d:2a: bd:6f:4a:e8:1e:77:67:dd:89:81:fa:52:de:67:cc:2b:90:a2: d0:fc:b4:06:23:60:87:07:7a:4f:ee:58:74:1c:34:0c:db:80: a5:8b:d5:ce:9b:e6:28:04:a8:e6:33:19:09:c8:9f:f5:ad:07: 2d:03:c6:0d:ea:d3:1c:8d:a4:70:d0:ce:5d:b3:49:a5:4c:71: c1:4f:fb:32:8b:35:79:6a:56:ca:bd:0f:b2:da:43:15:8e:c1: 80:9b:f5:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXeA4oO6ybZUT3lRHiIhNQf3Z8nowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAyMDQ2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGRlYjE2NjE2Y2UzYjk5ZTM4NzlkYjEzYWNlMmJkZjll NmExMDNlYTFmMjZlZjNiM2U2NjFhN2Q5N2E3MTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7sypWjpiCTUyTCbb6EgghuDKMpXyFWBv67dDTdFgUNKsf QBJ9/iZTTZ/hfQftZFZQ7UCNvA5FtAk7UV/j/HDqvS58jtEebsnz0eZ/wyNid6hF YvF66Z2pmFBnH5XiPZBGzEofeTQJnD/UNsl6XAJkMZz3lXO5YOLgizq05V3TQodO BIRuhd4RUBT4Dwz3q07ayqycqq3jGdDxrTfbklsoSikhoRgdEjtvoAWAS+HwqZsQ Nxm1iDTxGdig7jFISF97/IX0L5x7sTCGqRUW+7Zot87h8gXYZizRqwJuxYmATg/q pQiBfgxWt8hYM5QH7oUrhxHDmsjj+/Bx0Ts5ghgxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWg5EVpOqgZcrEUGfRE5nne9IsmcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwMTdlZWFiLWU2MDEtNGNlZi1iYjRhLWM3ZGIxZDM0YjA1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3PwwDQYJKoZIhvcNAQELBQADggEBAICfcLe4pVPeQrDfjUthpS7/KX2q nXhGE0gUAQO7l6jPUjRlAeQIOgGRP9ZXRzUM7HhGKpbt7LQw40QoSGaDKOW7T9+J NBW6Gy6ad4yeLAUlW+rIk/sWAp7W46BYjnguzWmX3xPuuY6qxq0LI11GLz5rnkdO qTnEKs2Il8h5RHDyrd7ykQfpjQ0HlylIEUWcwhQfYwing12uvZKYru09U8+dKr1v Suged2fdiYH6Ut5nzCuQotD8tAYjYIcHek/uWHQcNAzbgKWL1c6b5igEqOYzGQnI n/WtBy0Dxg3q0xyNpHDQzl2zSaVMccFP+zKLNXlqVsq9D7LaQxWOwYCb9Qc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:46:10 2026 by rpki-client