$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc39cafc-e10d-4157-a241-409287b3c94c.roa File: fc39cafc-e10d-4157-a241-409287b3c94c.roa (raw, json) Hash identifier: jv6f075yhF76c1LcTAZtzp0WJozPjFOoNwQS9w83np0= Subject key identifier: FA:4C:8E:E8:49:DF:39:6A:BF:16:CD:67:D1:1D:23:09:C1:E3:75:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 045B6E7814546728CCD840010DFBF3D16727B2C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc39cafc-e10d-4157-a241-409287b3c94c.roa Signing time: Mon 20 Jul 2026 00:00:08 +0000 ROA not before: Mon 20 Jul 2026 00:00:08 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5b:6e:78:14:54:67:28:cc:d8:40:01:0d:fb:f3:d1:67:27:b2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:00:08 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=e4772f2084759b689d035f0b87952206b752a7260afff63bbe356cd3ea8ba17e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:9e:ae:ea:4a:6d:54:66:b3:ad:94:f1:23: b0:ab:09:0a:21:c6:1a:71:cb:1a:15:07:4b:b3:c4: a1:f4:1e:1d:56:ef:59:92:87:7e:33:58:7a:41:56: 8f:dc:d1:34:a2:44:a0:8e:b3:98:f2:65:45:da:90: 8c:65:ad:13:19:9d:45:0b:13:f7:a4:b8:b8:c1:c5: ce:dc:e4:25:7a:10:92:b0:6d:d1:d0:23:28:c3:34: 70:19:64:37:e9:d2:9f:99:58:01:bd:0d:77:96:8e: ef:1c:44:c8:5b:63:11:c9:c5:80:61:6a:e3:92:f4: d3:2d:78:f8:d3:7f:e9:f1:d7:b1:53:75:99:2b:31: d1:b4:11:72:e7:76:4b:7d:0c:18:bd:60:f9:e7:6d: f6:05:f6:ff:0f:df:fc:52:d2:42:f6:0a:f3:05:4a: 9f:46:a2:6a:41:de:64:15:1f:5c:3e:2d:4e:6f:91: 5f:55:ed:cb:e9:af:64:c8:d8:65:8b:e0:8b:75:03: 91:bb:3d:2e:c7:17:bb:1f:fc:f8:1a:69:cc:82:e3: e3:9e:6d:56:f8:9e:29:36:60:3f:c8:67:88:3f:51: 61:55:64:69:a5:10:07:4e:ef:be:cf:d7:e7:8a:d5: 7e:62:e9:1e:c2:4b:b8:c5:bf:bf:9a:26:06:19:8e: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:8E:E8:49:DF:39:6A:BF:16:CD:67:D1:1D:23:09:C1:E3:75:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc39cafc-e10d-4157-a241-409287b3c94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.129.0/24 Signature Algorithm: sha256WithRSAEncryption 00:0e:2d:26:65:98:91:ab:1f:ce:f8:a0:39:48:be:f6:7e:cc: 37:8d:8e:9b:4e:d8:d9:f3:ae:89:1c:f6:9d:16:a4:2b:f7:b0: c1:1e:13:fb:de:d4:07:d6:1f:32:72:73:71:49:cb:e1:d3:a9: b6:59:65:6a:10:10:27:a6:ae:d6:48:1f:8c:e5:c3:1f:61:5a: bf:d1:6f:6f:5d:cd:aa:bd:6e:78:8f:88:fd:21:fb:16:62:18: 90:2a:0d:1e:8b:3a:60:39:95:f9:3b:25:a0:ca:cb:5a:f2:69: 13:08:6a:0a:81:64:af:c6:7b:d6:ec:0b:e5:a5:b3:72:06:77: 71:a3:4c:e2:9e:53:a5:d8:dd:aa:c1:d7:02:de:96:e1:fb:2b: 9c:c3:94:fa:87:4a:ce:bc:05:6e:78:f9:17:bd:6f:c1:cf:6b: a9:cf:0c:9e:95:ac:17:e1:9b:ae:ee:10:19:69:90:f7:c6:de: b0:c8:b2:01:f0:81:f3:17:2a:43:6d:3c:d3:6e:58:c6:c9:cb: 1b:00:28:c9:b8:b5:b8:57:85:26:d0:4d:6e:99:fb:9a:27:f8: 40:a8:04:c3:9c:7e:ab:1b:f1:e0:91:7a:16:4e:77:33:fb:cc: 95:82:02:70:ac:5a:48:56:7e:1a:20:e1:ec:1f:5f:5d:7f:fa: 5e:a8:b1:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBFtueBRUZyjM2EABDfvz0WcnssMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAwMDA4WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDc3MmYyMDg0NzU5YjY4OWQwMzVmMGI4Nzk1MjIwNmI3 NTJhNzI2MGFmZmY2M2JiZTM1NmNkM2VhOGJhMTdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCubZ6u6kptVGazrZTxI7CrCQohxhpxyxoVB0uzxKH0Hh1W 71mSh34zWHpBVo/c0TSiRKCOs5jyZUXakIxlrRMZnUULE/ekuLjBxc7c5CV6EJKw bdHQIyjDNHAZZDfp0p+ZWAG9DXeWju8cRMhbYxHJxYBhauOS9NMtePjTf+nx17FT dZkrMdG0EXLndkt9DBi9YPnnbfYF9v8P3/xS0kL2CvMFSp9GompB3mQVH1w+LU5v kV9V7cvpr2TI2GWL4It1A5G7PS7HF7sf/PgaacyC4+OebVb4nik2YD/IZ4g/UWFV ZGmlEAdO777P1+eK1X5i6R7CS7jFv7+aJgYZjsGvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+kyO6EnfOWq/Fs1n0R0jCcHjdYIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZjMzljYWZjLWUxMGQtNDE1Ny1hMjQxLTQwOTI4N2IzYzk0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7oEwDQYJKoZIhvcNAQELBQADggEBAAAOLSZlmJGrH874oDlIvvZ+zDeN jptO2Nnzrokc9p0WpCv3sMEeE/ve1AfWHzJyc3FJy+HTqbZZZWoQECemrtZIH4zl wx9hWr/Rb29dzaq9bniPiP0h+xZiGJAqDR6LOmA5lfk7JaDKy1ryaRMIagqBZK/G e9bsC+Wls3IGd3GjTOKeU6XY3arB1wLeluH7K5zDlPqHSs68BW54+Re9b8HPa6nP DJ6VrBfhm67uEBlpkPfG3rDIsgHwgfMXKkNtPNNuWMbJyxsAKMm4tbhXhSbQTW6Z +5on+ECoBMOcfqsb8eCRehZOdzP7zJWCAnCsWkhWfhog4ewfX11/+l6osTM= -----END CERTIFICATE-----Generated at Fri Jul 24 03:57:57 2026 by rpki-client