$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79209ee-b31e-46fa-bdfb-ea990915c3be.roa File: d79209ee-b31e-46fa-bdfb-ea990915c3be.roa (raw, json) Hash identifier: vXFHMQufIoe5J9d05KkoBvnhgGv2k6zkttzbk5aSq3Q= Subject key identifier: 08:72:D2:BE:03:E4:05:F3:A3:50:99:81:2D:40:DC:41:19:B9:FD:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A33E32BD5C0C2F0E511FC9DF3E862F60EE0EF25 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79209ee-b31e-46fa-bdfb-ea990915c3be.roa Signing time: Sat 18 Jul 2026 00:40:51 +0000 ROA not before: Sat 18 Jul 2026 00:40:51 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 98.76.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:33:e3:2b:d5:c0:c2:f0:e5:11:fc:9d:f3:e8:62:f6:0e:e0:ef:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:40:51 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=b189c95d1654e1d056936b8d01678b9f0811f219d1858a34685f8ac4ad848d80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:5f:e6:4b:d6:39:0f:96:46:d5:fd:e8:1f: 85:18:db:9a:4e:f8:87:70:e1:6c:05:a1:9d:47:cb: cd:f6:44:0e:e2:e4:4b:ce:62:07:05:57:98:e4:2a: 8f:c1:a6:14:46:a4:43:fe:97:e9:8f:1e:ee:08:09: 3f:12:e4:8f:e3:8e:b1:72:b9:a1:36:ae:8e:c6:a9: 68:a1:82:ca:5b:77:b2:9d:db:13:66:26:a9:72:8a: 53:01:46:b9:46:2e:9d:9a:e8:8f:40:68:a2:94:43: 1a:f5:dd:6c:aa:39:8a:eb:b8:2c:92:e6:24:bc:0e: 56:16:3a:6b:f4:be:ad:e7:3a:04:3a:b9:a6:34:e4: c0:8e:ce:4f:05:4a:a2:48:cd:26:95:76:9b:33:96: ee:8b:56:24:ca:1f:f8:06:61:96:94:a9:97:c9:9e: ad:31:fd:d4:42:cb:04:8d:c9:56:a3:21:a7:b5:20: 12:ec:05:0b:2a:9e:0b:16:ac:99:5f:18:6c:b4:4d: 9d:0c:6f:a5:8d:44:08:dd:2b:55:c7:16:e2:5b:5c: ca:de:84:26:18:96:24:1e:08:85:23:d9:d1:b5:e9: 09:6e:6b:ba:f3:38:4a:9b:27:14:b1:db:a2:20:6b: 6f:e9:4a:67:05:4b:ed:f9:d5:d0:17:bb:7c:b4:0a: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:72:D2:BE:03:E4:05:F3:A3:50:99:81:2D:40:DC:41:19:B9:FD:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79209ee-b31e-46fa-bdfb-ea990915c3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.76.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:b9:50:f5:9b:a7:3f:bb:79:0c:93:51:b9:2b:9a:6c:6d:a9: ac:f4:de:76:96:b4:ab:f6:6f:6d:38:a2:c0:b1:03:75:fb:0e: 4f:39:f0:52:58:ed:8d:ad:56:db:2e:ac:89:18:f0:87:91:70: 6e:b3:d6:91:48:8e:af:7b:70:8d:ab:f7:5e:11:d7:0b:25:35: 4f:27:ca:10:12:df:f6:a2:f5:8d:2a:7c:7b:22:40:68:5c:e8: c2:4c:b4:ea:2e:74:e2:41:85:fb:4b:a1:74:3d:13:b4:e5:6e: a7:16:8e:77:45:2a:33:57:1f:5a:30:82:53:fd:05:d9:28:36: fb:3b:29:bc:6c:da:b4:40:fb:a2:68:05:67:e2:56:f7:31:e2: 3d:cd:d4:0f:35:d2:32:71:83:fb:f3:b6:8b:a9:8f:80:48:2b: c8:cc:e2:3e:00:7f:33:23:db:30:38:bb:e4:2c:79:85:13:20: 36:86:98:1f:55:cc:47:3e:4b:6f:19:51:30:17:86:a7:14:f0: bd:ae:2e:4c:6a:8b:06:a5:7e:30:4c:56:e0:6e:05:25:04:88: 4b:5e:58:81:9d:82:f9:eb:60:d9:17:a1:91:13:b6:c0:fc:ca: f2:38:d1:e3:4d:90:cd:a5:de:30:de:c3:28:c3:10:5e:5a:86: ae:bf:5e:2e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOjPjK9XAwvDlEfyd8+hi9g7g7yUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA0MDUxWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTg5Yzk1ZDE2NTRlMWQwNTY5MzZiOGQwMTY3OGI5ZjA4 MTFmMjE5ZDE4NThhMzQ2ODVmOGFjNGFkODQ4ZDgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Wl/mS9Y5D5ZG1f3oH4UY25pO+Idw4WwFoZ1Hy832RA7i 5EvOYgcFV5jkKo/BphRGpEP+l+mPHu4ICT8S5I/jjrFyuaE2ro7GqWihgspbd7Kd 2xNmJqlyilMBRrlGLp2a6I9AaKKUQxr13WyqOYrruCyS5iS8DlYWOmv0vq3nOgQ6 uaY05MCOzk8FSqJIzSaVdpszlu6LViTKH/gGYZaUqZfJnq0x/dRCywSNyVajIae1 IBLsBQsqngsWrJlfGGy0TZ0Mb6WNRAjdK1XHFuJbXMrehCYYliQeCIUj2dG16Qlu a7rzOEqbJxSx26Iga2/pSmcFS+351dAXu3y0Ck3pAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCHLSvgPkBfOjUJmBLUDcQRm5/XkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3OTIwOWVlLWIzMWUtNDZmYS1iZGZiLWVhOTkwOTE1YzNiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBiTDANBgkqhkiG9w0BAQsFAAOCAQEAuLlQ9ZunP7t5DJNRuSuabG2prPTe dpa0q/ZvbTiiwLEDdfsOTznwUljtja1W2y6siRjwh5FwbrPWkUiOr3twjav3XhHX CyU1TyfKEBLf9qL1jSp8eyJAaFzowky06i504kGF+0uhdD0TtOVupxaOd0UqM1cf WjCCU/0F2Sg2+zspvGzatED7omgFZ+JW9zHiPc3UDzXSMnGD+/O2i6mPgEgryMzi PgB/MyPbMDi75Cx5hRMgNoaYH1XMRz5LbxlRMBeGpxTwva4uTGqLBqV+MExW4G4F JQSIS15YgZ2C+etg2RehkRO2wPzK8jjR402QzaXeMN7DKMMQXlqGrr9eLg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:45 2026 by rpki-client