$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d12f578a-2624-49c9-8eb5-3cb8294ad301.roa File: d12f578a-2624-49c9-8eb5-3cb8294ad301.roa (raw, json) Hash identifier: dU43MxNTWMzZf76i6SaqG2psuWtceD+Lgeb6vy/ZjuQ= Subject key identifier: 64:87:53:EB:7E:11:1A:8C:91:CC:05:BC:42:DC:4C:86:0F:F0:3D:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45F1B87795249A85D09D4DDCDDB02616581370B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d12f578a-2624-49c9-8eb5-3cb8294ad301.roa Signing time: Wed 22 Jul 2026 00:11:08 +0000 ROA not before: Wed 22 Jul 2026 00:11:08 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f1:b8:77:95:24:9a:85:d0:9d:4d:dc:dd:b0:26:16:58:13:70:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:11:08 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=08c6c3c492c10a14a2af6c140ecde0d343eaa9669f2100bde25047e7230522a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:ff:34:b4:43:7a:09:55:d0:4e:f4:04:20: 67:df:af:a8:a0:80:be:c7:cd:df:6e:75:b0:1b:8e: eb:8e:41:73:c6:f8:08:a3:17:3e:ba:af:d1:ce:b6: 39:98:18:3d:b4:13:63:cf:2e:7f:52:58:87:3a:e9: 0a:89:4d:22:8c:e2:b6:94:62:93:6c:2b:03:46:30: bd:53:c6:68:a9:7a:f9:dd:c1:38:18:8d:ba:d4:39: 76:06:1c:ac:61:b6:68:84:4e:09:40:46:9d:90:de: 65:9a:ed:a7:77:85:99:0f:75:e1:b7:09:e4:87:a7: 0f:2e:15:8c:84:0b:99:8b:d4:49:98:23:dc:14:8d: 88:67:72:7f:8a:90:6b:76:93:b8:16:08:b2:a5:02: 86:50:97:d2:e3:42:4c:d5:26:7a:c0:a5:fd:3e:28: c2:fc:1c:50:7b:8e:c8:5b:d2:fe:26:80:3c:6a:3c: 0e:80:bc:59:f9:bd:d7:78:a5:92:64:86:cb:d9:46: ec:a3:7e:f0:2d:fe:32:c8:8c:11:00:6a:6a:8f:74: 02:f4:3a:1b:69:f0:c3:fe:96:09:38:14:f5:97:28: d0:1a:49:b9:9d:40:c9:aa:19:c7:aa:a1:df:7d:67: 22:cc:b1:86:40:f5:1d:53:de:e7:e8:13:ec:e9:a9: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:87:53:EB:7E:11:1A:8C:91:CC:05:BC:42:DC:4C:86:0F:F0:3D:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d12f578a-2624-49c9-8eb5-3cb8294ad301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.170.0/24 Signature Algorithm: sha256WithRSAEncryption c0:53:70:15:a3:31:1d:76:c3:d1:3e:e6:0d:a0:fc:d6:0e:33: 9a:9c:80:14:13:8d:2d:82:14:99:c0:4c:d9:ed:da:ac:4e:cd: ba:e4:01:f8:8f:6c:bc:c1:87:85:45:0f:64:29:3f:92:79:b4: c7:b9:4f:a8:70:59:c2:6b:6d:f0:98:96:c6:52:3e:f1:4d:1a: 2e:9f:03:7b:ea:68:a8:d1:36:85:7a:35:44:dd:b9:41:4f:c8: 0f:44:a8:34:ae:40:17:66:a1:cd:1b:ff:f6:64:c6:5c:16:c3: 07:af:f4:aa:2d:0a:cc:38:04:34:1a:f3:4d:7d:bf:37:ef:14: 40:51:72:78:62:01:cf:32:d4:c6:1b:df:1f:f6:29:03:47:ab: b3:8a:c7:76:39:93:f2:4e:0e:3d:b1:5f:4b:55:14:11:42:1b: 4e:bd:40:e6:bb:67:dd:0c:3a:4f:5f:e0:3b:43:b8:a1:03:a3: 1b:dc:f0:e6:86:50:15:7e:39:a1:59:42:fe:d4:bd:24:a2:ab: 1f:ac:35:f7:c0:41:79:dc:eb:11:21:47:9f:98:76:0d:17:7f: b1:b9:66:63:e4:3f:54:2e:30:bf:ef:7f:c0:29:c1:a6:74:52: 5f:89:26:09:86:26:a6:d8:fa:ab:4e:b3:d3:7b:f6:e7:da:f1: ad:aa:3a:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURfG4d5UkmoXQnU3c3bAmFlgTcLQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMTA4WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGM2YzNjNDkyYzEwYTE0YTJhZjZjMTQwZWNkZTBkMzQz ZWFhOTY2OWYyMTAwYmRlMjUwNDdlNzIzMDUyMmEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl+/80tEN6CVXQTvQEIGffr6iggL7Hzd9udbAbjuuOQXPG +AijFz66r9HOtjmYGD20E2PPLn9SWIc66QqJTSKM4raUYpNsKwNGML1Txmipevnd wTgYjbrUOXYGHKxhtmiETglARp2Q3mWa7ad3hZkPdeG3CeSHpw8uFYyEC5mL1EmY I9wUjYhncn+KkGt2k7gWCLKlAoZQl9LjQkzVJnrApf0+KML8HFB7jshb0v4mgDxq PA6AvFn5vdd4pZJkhsvZRuyjfvAt/jLIjBEAamqPdAL0Ohtp8MP+lgk4FPWXKNAa SbmdQMmqGceqod99ZyLMsYZA9R1T3ufoE+zpqdevAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZIdT634RGoyRzAW8QtxMhg/wPVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxMmY1NzhhLTI2MjQtNDljOS04ZWI1LTNjYjgyOTRhZDMwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7qowDQYJKoZIhvcNAQELBQADggEBAMBTcBWjMR12w9E+5g2g/NYOM5qc gBQTjS2CFJnATNnt2qxOzbrkAfiPbLzBh4VFD2QpP5J5tMe5T6hwWcJrbfCYlsZS PvFNGi6fA3vqaKjRNoV6NUTduUFPyA9EqDSuQBdmoc0b//ZkxlwWwwev9KotCsw4 BDQa8019vzfvFEBRcnhiAc8y1MYb3x/2KQNHq7OKx3Y5k/JODj2xX0tVFBFCG069 QOa7Z90MOk9f4DtDuKEDoxvc8OaGUBV+OaFZQv7UvSSiqx+sNffAQXnc6xEhR5+Y dg0Xf7G5ZmPkP1QuML/vf8ApwaZ0Ul+JJgmGJqbY+qtOs9N79ufa8a2qOhc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:37 2026 by rpki-client