$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa File: e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa (raw, json) Hash identifier: 0VjQjkq3CLmghijOVvRXdSvanarbeUcrLBlmuen7dCs= Subject key identifier: 01:37:A8:3F:BB:8F:32:CD:A4:FD:F2:B3:41:56:78:95:DB:61:D4:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 386E506DADC4694D1177370B569FF794126A4A32 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa Signing time: Mon 20 Jul 2026 00:21:05 +0000 ROA not before: Mon 20 Jul 2026 00:21:05 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 68.217.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6e:50:6d:ad:c4:69:4d:11:77:37:0b:56:9f:f7:94:12:6a:4a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:21:05 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=217a6fdfe1426259bd400d65cb5a94a9d4fc4da551dda858e77c3d616d92dd82, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:c7:c4:c4:f8:dc:d1:cf:99:b7:8b:fa:de: d5:e7:8e:3a:b1:cb:fb:92:f8:3c:ed:dc:25:59:9f: e3:2b:04:49:46:25:78:c4:02:b8:58:8f:73:5f:e4: 8f:c4:b8:c3:82:3e:ee:b6:5b:1c:35:89:30:15:d6: 0e:80:a2:d3:43:ce:f0:ae:53:fa:91:72:79:1f:a8: be:e7:33:ad:dc:42:4d:1f:6e:f7:d8:b9:f2:95:40: cd:ea:68:81:8d:bd:7e:c1:7c:b6:4a:85:da:f5:6a: 27:f7:af:4b:4f:a9:42:d3:42:ab:82:da:29:c7:86: af:56:9c:43:dc:e9:98:c2:8a:ad:fc:3b:8d:a9:79: 2f:a8:f7:f8:4b:2a:86:9a:50:ae:89:14:e0:00:c0: 51:ff:7b:5d:f6:44:93:04:18:c7:1c:6f:96:83:48: bc:fd:34:ed:b6:f9:65:1e:37:33:60:11:94:28:68: ac:8e:54:19:dc:f7:da:2c:39:79:df:ab:ee:c4:a0: 27:d3:29:06:16:c0:9b:34:f2:85:bb:f6:f1:c4:08: be:db:d9:8f:48:53:5b:04:af:94:e8:95:6f:70:40: b5:ac:3a:58:10:a5:48:ad:fd:af:05:5e:f2:02:f5: 60:9c:11:55:ec:7d:8e:fe:18:f2:16:87:87:93:64: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:A8:3F:BB:8F:32:CD:A4:FD:F2:B3:41:56:78:95:DB:61:D4:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85e2573-73cc-4d70-be6b-4b61dd0f34b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 24:c4:e6:e5:b5:36:f7:d9:ea:bc:a4:ce:c9:1f:b2:05:02:ad: a7:79:a1:d8:00:05:0b:d6:88:af:9c:bf:f2:84:73:82:93:99: 04:87:49:36:9a:71:be:fa:52:87:1f:35:5c:19:de:e2:b0:ea: 3d:c0:a5:ac:8d:f7:44:26:1c:80:71:97:05:6a:1d:49:e9:f6: d4:65:a1:f9:33:94:26:3b:5e:e6:30:66:86:db:88:9d:85:c6: ae:c2:3a:20:06:6a:74:07:f5:be:24:b6:50:09:fc:1e:eb:f5: 1b:9b:03:fa:c2:26:46:60:3b:27:fb:fb:a2:2c:30:b9:3a:35: b9:b1:44:bd:5d:2e:54:2f:01:b3:db:7c:04:4b:c5:4c:70:06: 5c:ab:77:d3:78:b1:a2:f2:9c:83:4c:40:d2:c1:33:23:ec:20: ca:d8:99:2e:c5:61:7a:f2:15:8f:0e:3f:53:e6:55:bc:83:57: b7:fa:91:7c:dd:17:77:be:af:f0:31:c2:29:fa:2c:71:bb:aa: 27:40:1e:fc:6e:c4:ed:6c:be:ac:fd:1b:9c:c9:36:7d:bd:7a: 15:20:f6:4a:8d:19:7b:33:fb:98:38:7f:af:3a:fa:2a:5b:e5: 20:e7:b4:94:7b:15:cd:ae:76:5e:0e:ce:5a:7f:79:39:8c:70: 17:81:04:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOG5Qba3EaU0RdzcLVp/3lBJqSjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAyMTA1WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTdhNmZkZmUxNDI2MjU5YmQ0MDBkNjVjYjVhOTRhOWQ0 ZmM0ZGE1NTFkZGE4NThlNzdjM2Q2MTZkOTJkZDgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN+8fExPjc0c+Zt4v63tXnjjqxy/uS+Dzt3CVZn+MrBElG JXjEArhYj3Nf5I/EuMOCPu62Wxw1iTAV1g6AotNDzvCuU/qRcnkfqL7nM63cQk0f bvfYufKVQM3qaIGNvX7BfLZKhdr1aif3r0tPqULTQquC2inHhq9WnEPc6ZjCiq38 O42peS+o9/hLKoaaUK6JFOAAwFH/e132RJMEGMccb5aDSLz9NO22+WUeNzNgEZQo aKyOVBnc99osOXnfq+7EoCfTKQYWwJs08oW79vHECL7b2Y9IU1sEr5TolW9wQLWs OlgQpUit/a8FXvIC9WCcEVXsfY7+GPIWh4eTZBcnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUATeoP7uPMs2k/fKzQVZ4ldth1PswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NWUyNTczLTczY2MtNGQ3MC1iZTZiLTRiNjFkZDBmMzRiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBE2TANBgkqhkiG9w0BAQsFAAOCAQEAJMTm5bU299nqvKTOyR+yBQKtp3mh 2AAFC9aIr5y/8oRzgpOZBIdJNppxvvpShx81XBne4rDqPcClrI33RCYcgHGXBWod Sen21GWh+TOUJjte5jBmhtuInYXGrsI6IAZqdAf1viS2UAn8Huv1G5sD+sImRmA7 J/v7oiwwuTo1ubFEvV0uVC8Bs9t8BEvFTHAGXKt303ixovKcg0xA0sEzI+wgytiZ LsVhevIVjw4/U+ZVvINXt/qRfN0Xd76v8DHCKfoscbuqJ0Ae/G7E7Wy+rP0bnMk2 fb16FSD2So0ZezP7mDh/rzr6KlvlIOe0lHsVza52Xg7OWn95OYxwF4EEmw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:03:46 2026 by rpki-client