$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa File: f619c54b-758f-439f-834b-535001e1dc31.roa (raw, json) Hash identifier: p0detXdkLB2x7CVRtncnfftY33veSOzSu7sZhl3h2aQ= Subject key identifier: C4:6D:E6:AC:68:6B:2E:F5:02:82:25:D0:4E:69:0F:DF:5E:9F:C6:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40CCF7BE352B6F39E098D2CB67D9BA5D0B6DDB1A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa Signing time: Fri 17 Jul 2026 00:10:46 +0000 ROA not before: Fri 17 Jul 2026 00:10:46 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 128.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cc:f7:be:35:2b:6f:39:e0:98:d2:cb:67:d9:ba:5d:0b:6d:db:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:10:46 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=7a2f3ca1f50422f8c4cccbde186a6067226cfd7cadfc0f484aff8edc5771e1a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:4b:de:e9:dd:00:15:97:53:82:00:4d:7a: 73:07:93:a5:fb:73:33:64:79:3f:f1:88:ea:2c:ee: 70:3f:a1:d4:3a:53:aa:33:3b:e4:06:5c:bf:c8:bc: 3c:ab:67:d6:1f:51:95:36:53:49:54:0f:04:5e:33: fd:a7:65:c0:53:60:5d:02:02:f7:4d:0c:54:be:0a: c5:70:20:89:76:22:a6:1e:f8:2e:c2:fd:3c:16:52: 16:1a:a8:f9:5e:b9:af:46:b0:cc:8f:83:e8:98:d4: 73:d2:22:67:7a:a3:15:26:72:33:38:2d:6e:17:41: 14:8d:ec:26:bf:68:8e:20:66:0a:51:07:b7:7b:75: 4f:e2:4c:64:2c:8b:3f:f6:bf:6c:5a:c6:a4:cf:79: 1a:44:f2:db:69:f1:a7:38:c7:a5:f7:c1:71:d4:80: b5:6d:41:19:5e:06:65:9e:2c:fd:ad:59:c5:04:77: 27:26:87:db:6a:eb:af:82:af:33:a5:ce:9c:8c:a1: b9:6e:89:aa:17:67:d7:ac:68:01:dc:2d:2c:6d:5a: 51:9c:bf:75:c1:77:12:05:7a:f0:78:c6:e8:03:de: a4:b0:44:be:19:46:19:26:fc:58:a0:bc:cd:ec:a1: 86:69:94:47:b5:17:93:1c:a0:12:55:fb:18:0c:b8: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6D:E6:AC:68:6B:2E:F5:02:82:25:D0:4E:69:0F:DF:5E:9F:C6:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 93:e1:1b:db:a8:0a:04:74:4e:4c:2e:00:cb:a0:28:2b:e2:6a: 32:a5:d8:d9:b5:0b:6e:92:4e:31:a2:cd:e9:20:ca:9e:56:3b: b1:71:77:da:8e:72:63:4b:55:b5:1b:16:cf:38:af:74:89:cd: a4:36:03:36:30:53:b9:6e:91:86:b8:61:04:c6:bd:00:25:60: b6:c8:0a:b4:67:18:10:52:8f:1a:2e:c4:27:ea:b5:5c:c1:5c: 48:30:77:5c:49:a5:dd:a1:7e:5d:d2:0e:ec:40:26:5f:9d:58: 39:3a:a3:78:15:df:04:8c:81:05:c9:b7:a5:1a:99:42:41:ee: e6:41:74:e7:07:d7:a8:d9:2c:17:4f:d3:27:78:d7:cd:39:87: b1:c7:ba:b3:22:a4:fb:99:22:f8:e6:62:4a:06:92:30:f2:8a: 8f:c0:7b:94:0d:23:d0:78:47:ab:35:9b:58:8d:b4:7d:91:ab: bc:49:19:16:83:c7:b2:b2:54:79:dd:28:6e:7c:9a:09:1a:d8: d0:e0:a9:6c:43:a4:72:98:6e:45:70:60:2d:9f:4c:d5:fd:07: ad:53:e3:19:c4:59:7b:66:e3:98:f3:f2:6e:5c:99:c5:c8:08: 2a:9f:d6:2d:11:82:66:c5:47:ff:3b:c7:aa:f1:ec:28:f0:9a: 60:44:0d:82 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQMz3vjUrbzngmNLLZ9m6XQtt2xowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAxMDQ2WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTJmM2NhMWY1MDQyMmY4YzRjY2NiZGUxODZhNjA2NzIy NmNmZDdjYWRmYzBmNDg0YWZmOGVkYzU3NzFlMWE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ60ve6d0AFZdTggBNenMHk6X7czNkeT/xiOos7nA/odQ6 U6ozO+QGXL/IvDyrZ9YfUZU2U0lUDwReM/2nZcBTYF0CAvdNDFS+CsVwIIl2IqYe +C7C/TwWUhYaqPleua9GsMyPg+iY1HPSImd6oxUmcjM4LW4XQRSN7Ca/aI4gZgpR B7d7dU/iTGQsiz/2v2xaxqTPeRpE8ttp8ac4x6X3wXHUgLVtQRleBmWeLP2tWcUE dycmh9tq66+CrzOlzpyMobluiaoXZ9esaAHcLSxtWlGcv3XBdxIFevB4xugD3qSw RL4ZRhkm/FigvM3soYZplEe1F5McoBJV+xgMuBuBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxG3mrGhrLvUCgiXQTmkP316fxpkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2MTljNTRiLTc1OGYtNDM5Zi04MzRiLTUzNTAwMWUxZGMzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCAFTANBgkqhkiG9w0BAQsFAAOCAQEAk+Eb26gKBHROTC4Ay6AoK+JqMqXY 2bULbpJOMaLN6SDKnlY7sXF32o5yY0tVtRsWzzivdInNpDYDNjBTuW6RhrhhBMa9 ACVgtsgKtGcYEFKPGi7EJ+q1XMFcSDB3XEml3aF+XdIO7EAmX51YOTqjeBXfBIyB Bcm3pRqZQkHu5kF05wfXqNksF0/TJ3jXzTmHsce6syKk+5ki+OZiSgaSMPKKj8B7 lA0j0HhHqzWbWI20fZGrvEkZFoPHsrJUed0obnyaCRrY0OCpbEOkcphuRXBgLZ9M 1f0HrVPjGcRZe2bjmPPyblyZxcgIKp/WLRGCZsVH/zvHqvHsKPCaYEQNgg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:56 2026 by rpki-client