$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fba52a91-ecf5-4217-b8b6-2d26623cc8b7.roa File: fba52a91-ecf5-4217-b8b6-2d26623cc8b7.roa (raw, json) Hash identifier: mE5KU9rzJDQ+bkdeOPB3+LHbAa7dEMUqQSd2mZP/YPg= Subject key identifier: AC:2B:E0:23:B2:C3:9D:2C:8A:E0:B4:42:51:C1:15:4E:AB:45:09:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 760C7785CD512F9966D76937A686724F1205C9A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fba52a91-ecf5-4217-b8b6-2d26623cc8b7.roa Signing time: Thu 23 Jul 2026 01:00:09 +0000 ROA not before: Thu 23 Jul 2026 01:00:09 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0c:77:85:cd:51:2f:99:66:d7:69:37:a6:86:72:4f:12:05:c9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 01:00:09 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=649343e5112084a927d3f8af04081ffa705554d0dd34a6470b4a3ff2e458d009, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:64:17:e4:ec:4c:45:79:b7:d4:86:2d:04: 33:bf:31:c4:e8:d7:8d:0a:35:e4:9c:81:fa:39:20: a7:3e:ed:8c:ae:79:64:0f:a2:0c:f7:9e:3a:24:de: d7:d4:db:b4:fc:f1:cf:3f:6d:64:16:b8:93:49:fa: 6d:91:91:44:4e:f7:be:45:78:64:84:05:4d:08:c9: de:1f:48:e7:c6:62:29:c8:01:18:13:37:b6:b4:91: be:0f:3a:19:91:37:87:5f:54:9b:37:18:16:64:b9: 1b:b8:0f:08:6f:bf:b6:67:9c:76:2c:d4:15:7f:4f: 93:4e:3a:45:ce:31:6e:2b:6d:9a:11:b4:cb:81:80: d0:cc:b0:f9:4b:5a:98:15:24:79:c8:6f:54:c4:54: 40:61:85:f1:39:d1:ab:9e:ec:cd:14:b9:c7:9e:5f: 6d:de:c5:d1:47:69:0c:18:4f:71:fb:08:b9:61:2d: 33:c3:83:2d:ce:d7:04:7a:81:e1:09:2b:dc:b9:be: c7:b1:ff:c3:08:3e:61:6d:93:d6:3a:e7:40:50:7e: 68:9e:a3:11:0a:15:1e:9f:cf:e2:73:5e:76:9d:23: 93:69:fd:9a:22:03:ce:b0:67:c0:00:d0:b5:0d:35: f2:d0:0f:cc:22:dc:91:f5:58:6c:bb:ab:63:fd:d0: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2B:E0:23:B2:C3:9D:2C:8A:E0:B4:42:51:C1:15:4E:AB:45:09:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fba52a91-ecf5-4217-b8b6-2d26623cc8b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.170.0/23 Signature Algorithm: sha256WithRSAEncryption 64:00:e2:36:64:6c:8d:5c:3f:d9:79:64:4b:a9:c5:4b:f9:96: 04:97:cb:20:3a:28:a5:f8:aa:72:d6:33:55:d5:3d:42:7b:c6: ea:bd:ff:b0:f0:9f:9c:f6:44:c2:b5:6f:28:de:e5:6e:ea:86: 45:4f:db:d8:55:1e:1c:1c:95:c4:e8:46:bb:1a:f7:90:8c:5e: 6a:4a:cb:96:6c:b6:80:43:5c:1f:9e:1d:28:7b:bd:c1:75:43: eb:be:5a:1f:fd:a0:4c:73:ff:6e:44:fb:7c:e8:ad:ed:9c:33: 7f:62:82:2f:3b:ae:aa:bb:07:be:78:f5:c5:64:ba:25:df:c7: dc:67:9a:37:7f:74:87:26:7a:24:74:a9:fd:f8:4b:b7:3b:1c: de:92:45:c7:1c:f7:03:83:33:6e:6a:69:91:c1:aa:5f:49:66: 89:cc:9a:b2:dc:f6:a7:11:1d:a7:d2:88:c5:bb:fb:64:ef:49: c2:40:b9:65:0a:3e:39:ac:2b:a9:00:42:ae:ab:20:a0:41:fd: 11:51:85:f5:e0:92:80:45:01:39:a0:81:76:02:57:36:93:b0: 7a:86:83:c1:cd:db:83:ed:53:49:41:00:e0:ea:7c:6b:84:f4: ed:4f:91:5e:16:e8:f5:b2:75:83:7a:83:7d:81:25:56:7b:bf: 83:eb:55:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdgx3hc1RL5lm12k3poZyTxIFyacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDEwMDA5WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDkzNDNlNTExMjA4NGE5MjdkM2Y4YWYwNDA4MWZmYTcw NTU1NGQwZGQzNGE2NDcwYjRhM2ZmMmU0NThkMDA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjnGQX5OxMRXm31IYtBDO/McTo140KNeScgfo5IKc+7Yyu eWQPogz3njok3tfU27T88c8/bWQWuJNJ+m2RkURO975FeGSEBU0Iyd4fSOfGYinI ARgTN7a0kb4POhmRN4dfVJs3GBZkuRu4Dwhvv7ZnnHYs1BV/T5NOOkXOMW4rbZoR tMuBgNDMsPlLWpgVJHnIb1TEVEBhhfE50aue7M0UuceeX23exdFHaQwYT3H7CLlh LTPDgy3O1wR6geEJK9y5vsex/8MIPmFtk9Y650BQfmieoxEKFR6fz+JzXnadI5Np /ZoiA86wZ8AA0LUNNfLQD8wi3JH1WGy7q2P90JB5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrCvgI7LDnSyK4LRCUcEVTqtFCaEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiYTUyYTkxLWVjZjUtNDIxNy1iOGI2LTJkMjY2MjNjYzhiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM36owDQYJKoZIhvcNAQELBQADggEBAGQA4jZkbI1cP9l5ZEupxUv5lgSX yyA6KKX4qnLWM1XVPUJ7xuq9/7Dwn5z2RMK1byje5W7qhkVP29hVHhwclcToRrsa 95CMXmpKy5ZstoBDXB+eHSh7vcF1Q+u+Wh/9oExz/25E+3zore2cM39igi87rqq7 B7549cVkuiXfx9xnmjd/dIcmeiR0qf34S7c7HN6SRccc9wODM25qaZHBql9JZonM mrLc9qcRHafSiMW7+2TvScJAuWUKPjmsK6kAQq6rIKBB/RFRhfXgkoBFATmggXYC VzaTsHqGg8HN24PtU0lBAODqfGuE9O1PkV4W6PWydYN6g32BJVZ7v4PrVQY= -----END CERTIFICATE-----Generated at Thu Jul 23 22:32:26 2026 by rpki-client