$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6662d1f-8ccf-46c2-8791-4736138ec1e7.roa File: e6662d1f-8ccf-46c2-8791-4736138ec1e7.roa (raw, json) Hash identifier: vrtjkexIfE6uD3PALeTzEcls14KCWaF5FWNXVwF3swI= Subject key identifier: F1:2A:E1:79:31:FD:6D:B9:02:22:0B:44:F6:B2:5A:CA:68:67:E7:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6208F7C55F4660993CE002924B899B6BF78A6AD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6662d1f-8ccf-46c2-8791-4736138ec1e7.roa Signing time: Wed 22 Jul 2026 00:10:03 +0000 ROA not before: Wed 22 Jul 2026 00:10:03 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:08:f7:c5:5f:46:60:99:3c:e0:02:92:4b:89:9b:6b:f7:8a:6a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:10:03 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=66d2318a548bc89ea2dd5169b02f559358ddbb8c5856ba2752bc6f52146ec980, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:5d:77:d5:d5:c3:9c:a2:30:10:be:56:e2: c0:01:f0:1f:10:8c:1a:6d:b4:33:d1:ad:21:65:1f: 36:48:13:c3:5d:11:40:6d:fa:39:7e:08:4d:4b:9c: b6:15:c9:cc:c4:6a:5c:08:95:38:0d:d8:cc:e8:0e: b6:58:72:2b:36:31:3a:5a:a7:7c:3f:b5:55:c3:2e: 17:5c:5b:4f:b3:a9:c3:5e:5b:29:b9:da:6c:67:16: ca:e4:00:7e:40:cf:fb:c9:2c:45:cc:60:08:1d:bd: 31:0a:71:b1:45:00:68:14:06:11:6e:a6:8c:ff:d4: 12:c1:1f:08:16:7b:3b:82:61:7b:c5:1c:6a:3e:3f: d4:d6:5a:23:7a:f8:39:31:80:1f:34:dd:5b:25:a7: 98:c2:be:a8:d2:51:9e:69:98:f6:2c:2b:5d:34:f3: 0e:fe:02:44:d4:d9:54:79:04:4c:38:f1:1c:f2:80: b1:16:00:00:cc:4f:af:bf:29:f2:ac:bc:81:61:b5: 40:a4:c4:f0:56:da:2b:9f:e0:37:2f:64:d8:4b:3a: 4b:8f:af:03:05:28:41:27:be:fc:ed:b7:d1:72:09: af:ba:3c:f8:f1:76:8d:2e:12:ac:9a:a0:23:1c:a6: 5e:44:97:5b:1f:2a:86:ee:2e:4e:6e:ce:2c:4a:2c: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:E1:79:31:FD:6D:B9:02:22:0B:44:F6:B2:5A:CA:68:67:E7:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6662d1f-8ccf-46c2-8791-4736138ec1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.147.0/24 Signature Algorithm: sha256WithRSAEncryption 03:a5:c6:5c:5b:0b:4f:b8:99:48:a5:04:01:60:ed:32:f6:bb: 7a:5d:ae:7a:f9:d7:7b:9e:ae:59:c8:b4:79:a1:94:2d:a8:56: d9:39:7b:21:5c:89:bb:61:84:4d:a9:6a:c7:be:2f:ca:f2:d3: 89:e6:10:9d:71:0d:c9:ed:83:c0:db:df:fc:cc:ca:e5:ef:37: 8b:a8:eb:61:26:80:c4:35:02:4e:7a:27:95:36:f2:0b:6a:a4: 85:7d:bf:0b:1d:bb:00:ed:2a:1a:97:3b:72:29:08:39:ee:52: 4c:bb:fa:f1:ce:de:7d:89:77:4f:a6:fb:e0:61:d9:fa:d3:59: 9f:ef:1f:0c:02:87:3d:1c:74:eb:76:0c:23:86:73:25:6f:a4: dc:8c:7e:37:9a:ab:97:f8:71:74:54:19:44:9d:93:8e:42:a8: 82:07:35:34:b8:04:8f:8d:67:1e:f7:73:7c:97:66:20:63:6b: 16:7d:4b:95:e8:48:78:c6:77:4a:1f:a3:e1:c4:bb:0f:75:68: d6:8f:b7:e5:1f:4f:e5:79:a5:a6:44:89:2f:2e:2f:08:8f:22: 9d:aa:57:a4:91:46:28:24:11:d9:40:c5:4d:f8:19:8e:ac:6d: c2:ca:b6:ee:56:0b:3a:4b:ce:25:3b:cc:e3:53:90:5e:2a:ed: 9b:b6:c9:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYgj3xV9GYJk84AKSS4mba/eKatMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIyMDAxMDAzWhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmQyMzE4YTU0OGJjODllYTJkZDUxNjliMDJmNTU5MzU4 ZGRiYjhjNTg1NmJhMjc1MmJjNmY1MjE0NmVjOTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuj1131dXDnKIwEL5W4sAB8B8QjBpttDPRrSFlHzZIE8Nd EUBt+jl+CE1LnLYVyczEalwIlTgN2MzoDrZYcis2MTpap3w/tVXDLhdcW0+zqcNe Wym52mxnFsrkAH5Az/vJLEXMYAgdvTEKcbFFAGgUBhFupoz/1BLBHwgWezuCYXvF HGo+P9TWWiN6+DkxgB803Vslp5jCvqjSUZ5pmPYsK1008w7+AkTU2VR5BEw48Rzy gLEWAADMT6+/KfKsvIFhtUCkxPBW2iuf4DcvZNhLOkuPrwMFKEEnvvztt9FyCa+6 PPjxdo0uEqyaoCMcpl5El1sfKobuLk5uzixKLJTtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8SrheTH9bbkCIgtE9rJaymhn53gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2NjYyZDFmLThjY2YtNDZjMi04NzkxLTQ3MzYxMzhlYzFlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7pMwDQYJKoZIhvcNAQELBQADggEBAAOlxlxbC0+4mUilBAFg7TL2u3pd rnr513uerlnItHmhlC2oVtk5eyFcibthhE2pase+L8ry04nmEJ1xDcntg8Db3/zM yuXvN4uo62EmgMQ1Ak56J5U28gtqpIV9vwsduwDtKhqXO3IpCDnuUky7+vHO3n2J d0+m++Bh2frTWZ/vHwwChz0cdOt2DCOGcyVvpNyMfjeaq5f4cXRUGUSdk45CqIIH NTS4BI+NZx73c3yXZiBjaxZ9S5XoSHjGd0ofo+HEuw91aNaPt+UfT+V5paZEiS8u LwiPIp2qV6SRRigkEdlAxU34GY6sbcLKtu5WCzpLziU7zONTkF4q7Zu2yVw= -----END CERTIFICATE-----Generated at Thu Jul 23 22:31:20 2026 by rpki-client