$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0800b30-a88f-4df8-b267-74e0a2e85bd3.roa File: d0800b30-a88f-4df8-b267-74e0a2e85bd3.roa (raw, json) Hash identifier: zA/4y5qgkN5nq4I2cqgb0RPnBzIWR7WjAmUq1XlgVEw= Subject key identifier: 1A:9E:E8:BB:37:F5:DE:F0:CA:3D:5E:1C:C4:C0:BA:79:0C:53:82:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 677605B1BFC1D38C10D17FC6FC194391AA67BE0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0800b30-a88f-4df8-b267-74e0a2e85bd3.roa Signing time: Wed 22 Jul 2026 00:00:10 +0000 ROA not before: Wed 22 Jul 2026 00:00:10 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:76:05:b1:bf:c1:d3:8c:10:d1:7f:c6:fc:19:43:91:aa:67:be:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:10 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=78fc2a220ed702c2cd7686c80f52197cb4ea5f908c2f223a9a98b598530beac9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:4b:76:a3:8a:c5:97:10:eb:12:a1:6b:12: bd:2b:29:2b:2d:33:22:76:7a:17:15:67:83:2e:19: 55:3c:42:12:08:d7:19:2e:e2:3c:57:46:59:a7:32: 65:f4:1f:42:78:03:6f:3c:b3:ad:69:16:2c:34:a7: 51:a9:7c:5c:18:e7:f3:0c:97:d8:1c:45:ce:d9:63: 78:6f:15:98:7e:f3:e1:74:5e:88:2e:c4:66:75:ef: 9c:0a:0a:48:9e:29:2d:e9:e9:ca:0a:72:be:c6:52: 19:e9:bd:8f:81:85:cd:e9:34:ae:c2:fb:29:6c:97: 50:e7:b6:b2:e4:a1:8e:88:75:2c:67:99:94:d4:d0: e2:ef:91:ed:bf:ea:de:69:5f:a1:7a:63:ea:f6:97: 80:3a:2c:fe:ed:df:d2:68:e6:4a:88:dc:fb:fe:94: b7:36:2c:96:69:32:48:f4:76:ae:36:25:8b:18:a4: 70:93:bc:3c:db:b7:d2:73:a9:2d:3d:49:8a:d8:90: 19:12:75:1a:c0:ee:13:83:cc:0d:ee:38:7c:ce:41: c1:0e:8e:b1:8a:2e:09:08:80:c2:28:74:81:ec:e2: 16:1d:7d:37:8f:94:1c:af:88:af:0c:69:55:25:c7: 6d:a4:38:e1:ed:26:ff:0b:e1:59:50:04:79:a6:fa: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9E:E8:BB:37:F5:DE:F0:CA:3D:5E:1C:C4:C0:BA:79:0C:53:82:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0800b30-a88f-4df8-b267-74e0a2e85bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.204.0/24 Signature Algorithm: sha256WithRSAEncryption 68:44:ec:80:c8:8d:39:34:58:c9:dc:88:9d:8d:f9:78:61:03: 03:16:33:90:96:55:fd:f3:3a:f7:d2:c2:af:f3:42:df:d9:c5: 7a:9f:d9:9d:af:23:e4:6c:8f:68:79:c7:4e:01:7a:16:e7:77: 1a:f2:fc:26:88:36:b9:b5:e1:2f:d6:bb:e5:c3:9b:0f:8e:05: ff:3b:e8:74:49:8d:0f:70:9d:35:9c:cb:61:ec:4a:40:79:43: dc:c1:ae:e2:f3:9d:bd:ab:15:db:aa:4e:1e:9f:93:f4:86:b2: 21:3e:ac:db:6a:b1:1a:6c:f9:75:9f:26:11:67:cd:a5:7b:ca: ae:f2:92:5d:2e:0f:e5:00:45:3e:6a:8c:98:df:c8:0e:8d:d4: f7:bb:b6:6e:68:81:a6:19:ea:39:2e:6d:c3:97:fc:50:7f:bb: 59:fb:3d:60:c3:50:8a:d7:2c:f0:05:1f:d8:75:c7:af:7b:19: ff:7c:d9:08:36:ed:b0:a4:71:ac:07:77:a4:1b:fc:59:2b:df: f7:85:3a:c2:70:b2:d7:ba:6b:b0:ff:74:c8:f2:f3:af:99:2d: cf:71:76:52:aa:f3:ff:73:cc:34:d3:d1:e0:9c:bb:95:e5:2d: c3:b7:33:85:f8:a2:0e:8d:5a:29:0d:57:1f:7c:c1:39:cc:71: dc:68:44:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ3YFsb/B04wQ0X/G/BlDkapnvgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAwMDEwWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGZjMmEyMjBlZDcwMmMyY2Q3Njg2YzgwZjUyMTk3Y2I0 ZWE1ZjkwOGMyZjIyM2E5YTk4YjU5ODUzMGJlYWM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3uUt2o4rFlxDrEqFrEr0rKSstMyJ2ehcVZ4MuGVU8QhII 1xku4jxXRlmnMmX0H0J4A288s61pFiw0p1GpfFwY5/MMl9gcRc7ZY3hvFZh+8+F0 XoguxGZ175wKCkieKS3p6coKcr7GUhnpvY+Bhc3pNK7C+ylsl1DntrLkoY6IdSxn mZTU0OLvke2/6t5pX6F6Y+r2l4A6LP7t39Jo5kqI3Pv+lLc2LJZpMkj0dq42JYsY pHCTvDzbt9JzqS09SYrYkBkSdRrA7hODzA3uOHzOQcEOjrGKLgkIgMIodIHs4hYd fTePlByviK8MaVUlx22kOOHtJv8L4VlQBHmm+kgTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGp7ouzf13vDKPV4cxMC6eQxTgjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwODAwYjMwLWE4OGYtNGRmOC1iMjY3LTc0ZTBhMmU4NWJkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7swwDQYJKoZIhvcNAQELBQADggEBAGhE7IDIjTk0WMnciJ2N+XhhAwMW M5CWVf3zOvfSwq/zQt/ZxXqf2Z2vI+Rsj2h5x04Behbndxry/CaINrm14S/Wu+XD mw+OBf876HRJjQ9wnTWcy2HsSkB5Q9zBruLznb2rFduqTh6fk/SGsiE+rNtqsRps +XWfJhFnzaV7yq7ykl0uD+UART5qjJjfyA6N1Pe7tm5ogaYZ6jkubcOX/FB/u1n7 PWDDUIrXLPAFH9h1x697Gf982Qg27bCkcawHd6Qb/Fkr3/eFOsJwste6a7D/dMjy 86+ZLc9xdlKq8/9zzDTT0eCcu5XlLcO3M4X4og6NWikNVx98wTnMcdxoRHo= -----END CERTIFICATE-----Generated at Fri Jul 24 00:03:01 2026 by rpki-client