$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d232050-4c58-40e2-9036-331be5aa0f31.roa File: 0d232050-4c58-40e2-9036-331be5aa0f31.roa (raw, json) Hash identifier: hEzmaZKqexy8nl0QJLgLtUQyu5nXgwCQ1OxiEiJj5lA= Subject key identifier: 94:73:8C:33:95:5E:33:B2:EF:EA:78:67:57:A9:D6:B8:0B:81:DD:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63C05BAB551A350D469CA089FAFE1ABE3ED8208B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d232050-4c58-40e2-9036-331be5aa0f31.roa Signing time: Tue 04 Aug 2026 02:11:17 +0000 ROA not before: Tue 04 Aug 2026 02:11:17 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 121.91.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c0:5b:ab:55:1a:35:0d:46:9c:a0:89:fa:fe:1a:be:3e:d8:20:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:11:17 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=8f926387cf23deecfa0287f61ad997b105b42b2903b511c6b2f521902c7ee9e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:d2:62:ef:99:ff:ee:0d:94:d2:49:4c:49: 3a:09:37:ca:d4:3e:b0:70:30:f7:40:53:1d:37:9d: 5a:50:02:ce:a4:c6:b1:50:fd:53:7e:1a:ef:ae:90: 76:db:43:6f:55:e9:09:2a:55:e3:ba:e3:54:a7:68: 89:ee:90:e3:e3:33:cf:80:84:03:d0:d7:65:a4:96: 9e:20:40:6b:b7:2d:de:49:c3:5a:17:7a:0f:43:2a: 53:4c:3f:73:15:77:59:c4:fb:40:57:1d:ff:c2:96: ba:12:cf:e6:b1:24:2d:74:23:24:70:7d:c4:d5:29: 8c:56:29:c5:fa:c7:c8:61:56:a5:90:83:16:b1:ae: 9e:3a:1d:f3:91:a4:c8:a9:8c:55:2b:8f:03:c0:78: 81:d5:1d:fa:ab:8d:8c:68:05:f8:ee:1a:22:e1:ab: 15:7a:1c:8b:8f:76:fd:d1:ea:4c:ec:17:1f:ef:3b: 76:b1:02:28:8f:a7:c2:e2:2d:7b:3a:e6:64:7d:53: 50:7f:bc:86:68:43:9d:b3:3b:58:d9:02:37:72:62: b8:2c:5f:0e:5b:be:b7:76:ca:3e:70:d6:b8:0b:0c: 37:21:b2:f7:d1:92:7f:63:f1:40:71:34:00:c2:90: d2:c4:4a:d6:36:5e:3b:51:41:71:fa:05:21:b0:ce: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:73:8C:33:95:5E:33:B2:EF:EA:78:67:57:A9:D6:B8:0B:81:DD:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d232050-4c58-40e2-9036-331be5aa0f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.91.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:b0:a0:0d:92:d0:e4:31:fb:b4:14:d1:fa:ed:fe:51:fd:62: 3a:6d:12:e0:90:b1:8a:e4:f9:d6:85:ad:b1:0f:c6:81:42:0a: 53:88:35:84:7f:b3:fb:cd:22:64:46:ff:5c:f1:f2:f0:30:39: d9:ce:dc:5e:ed:ec:90:9b:0d:b5:c2:c1:e8:2c:bd:22:4b:56: 76:49:cb:a6:e4:84:93:e2:c7:83:69:e4:1a:c5:57:92:65:e3: bf:a3:54:36:a6:4c:17:a4:c0:18:d2:87:bf:67:07:39:46:bf: a6:b3:a8:b6:8c:f2:f3:35:a6:22:d3:1a:fd:be:12:21:fc:b7: a6:0d:aa:61:1b:76:49:f4:3f:27:36:0f:68:b9:29:e9:5e:a7: 6f:d7:df:33:c7:42:ed:74:70:68:8b:f8:7f:80:e6:81:e3:98: 80:be:95:bd:db:f6:15:dc:b6:1d:86:23:2b:3b:47:36:f9:d0: 42:af:c4:f2:0a:98:d4:e3:a6:be:00:36:90:b4:60:4b:6f:9b: 52:02:2b:0f:00:38:6f:ed:56:3d:2f:12:4e:46:78:13:56:9e: 5a:69:6c:ec:89:3c:53:4b:c7:c4:2a:5c:14:2d:3a:72:04:cb: 24:35:e5:fb:44:36:8e:19:08:ee:cd:2e:e8:7e:3c:e7:7d:f4: b0:ac:51:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY8Bbq1UaNQ1GnKCJ+v4avj7YIIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIxMTE3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjkyNjM4N2NmMjNkZWVjZmEwMjg3ZjYxYWQ5OTdiMTA1 YjQyYjI5MDNiNTExYzZiMmY1MjE5MDJjN2VlOWUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO69Ji75n/7g2U0klMSToJN8rUPrBwMPdAUx03nVpQAs6k xrFQ/VN+Gu+ukHbbQ29V6QkqVeO641SnaInukOPjM8+AhAPQ12Wklp4gQGu3Ld5J w1oXeg9DKlNMP3MVd1nE+0BXHf/ClroSz+axJC10IyRwfcTVKYxWKcX6x8hhVqWQ gxaxrp46HfORpMipjFUrjwPAeIHVHfqrjYxoBfjuGiLhqxV6HIuPdv3R6kzsFx/v O3axAiiPp8LiLXs65mR9U1B/vIZoQ52zO1jZAjdyYrgsXw5bvrd2yj5w1rgLDDch svfRkn9j8UBxNADCkNLEStY2XjtRQXH6BSGwzkvnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlHOMM5VeM7Lv6nhnV6nWuAuB3QEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkMjMyMDUwLTRjNTgtNDBlMi05MDM2LTMzMWJlNWFhMGYzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ5W8AwDQYJKoZIhvcNAQELBQADggEBAHywoA2S0OQx+7QU0frt/lH9Yjpt EuCQsYrk+daFrbEPxoFCClOINYR/s/vNImRG/1zx8vAwOdnO3F7t7JCbDbXCwegs vSJLVnZJy6bkhJPix4Np5BrFV5Jl47+jVDamTBekwBjSh79nBzlGv6azqLaM8vM1 piLTGv2+EiH8t6YNqmEbdkn0Pyc2D2i5Kelep2/X3zPHQu10cGiL+H+A5oHjmIC+ lb3b9hXcth2GIys7Rzb50EKvxPIKmNTjpr4ANpC0YEtvm1ICKw8AOG/tVj0vEk5G eBNWnlppbOyJPFNLx8QqXBQtOnIEyyQ15ftENo4ZCO7NLuh+POd99LCsUew= -----END CERTIFICATE-----Generated at Sat Aug 15 07:44:01 2026 by rpki-client