$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b280c3b-1852-4888-9c2a-770435ef5710.roa File: 1b280c3b-1852-4888-9c2a-770435ef5710.roa (raw, json) Hash identifier: Ot9rT3YfSkNlkep9wAgJl7m3F0gDyKqtparQZksS8IA= Subject key identifier: D1:6A:6A:0E:0C:C1:40:51:A7:D0:39:87:8D:77:E8:51:30:CE:DB:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 499003AACB8FF95389256E85336D0A9CC81CD655 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b280c3b-1852-4888-9c2a-770435ef5710.roa Signing time: Mon 03 Aug 2026 01:51:07 +0000 ROA not before: Mon 03 Aug 2026 01:51:07 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 174.129.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:90:03:aa:cb:8f:f9:53:89:25:6e:85:33:6d:0a:9c:c8:1c:d6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:51:07 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=94f2b935317cee9d9d8bb9266bfc0a29f0d9eb57738062a1cbfbe349fe10313b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:02:66:37:22:85:38:71:c7:93:de:66:d5: f4:6b:57:c5:3f:55:53:57:85:57:bc:ed:2a:2c:d0: f3:6d:d7:6b:b4:3b:5f:ca:4b:5b:6e:f5:14:56:7c: cd:76:79:0b:4b:c7:7e:a0:fa:5d:b6:a6:4f:6b:ef: dc:77:43:ba:9c:ac:79:d4:0b:af:0f:db:cd:f3:58: 31:69:19:42:fb:69:e5:a1:bd:6a:a3:71:0f:0b:c6: f9:c4:1a:e8:ae:2b:22:ce:5e:bc:34:f6:b4:7e:d0: 6d:36:20:a3:94:95:ba:f5:bc:e6:23:80:3d:57:29: d2:2e:ba:75:85:7d:44:64:d6:3b:65:d3:87:aa:61: 01:30:bf:8d:ce:ec:47:92:ae:a7:d6:0c:c8:ba:ee: c0:dc:c9:fb:9e:57:e8:64:98:87:70:95:a6:96:d0: 58:1d:e4:69:fa:97:c4:b6:92:37:1b:cd:ca:b6:08: 20:18:41:17:21:e8:9a:44:42:dd:bb:0d:54:19:05: a4:e1:15:4d:c8:2f:24:ab:8a:27:af:19:c0:4f:a8: 94:29:71:4f:11:27:4d:4d:9f:fc:56:95:9c:c8:be: 36:57:59:30:7f:a2:1e:22:69:53:ba:2c:22:ea:e7: c0:b7:a7:45:69:5a:b6:44:11:b3:bf:d7:74:9c:40: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:6A:0E:0C:C1:40:51:A7:D0:39:87:8D:77:E8:51:30:CE:DB:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b280c3b-1852-4888-9c2a-770435ef5710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.40.0/22 Signature Algorithm: sha256WithRSAEncryption 45:07:27:13:00:01:4b:dc:62:7d:9a:ae:4e:65:71:49:85:ea: a6:a1:15:1e:71:3e:73:fe:e1:0b:99:28:f5:db:c5:74:4b:bd: 6a:b6:91:7a:57:f4:ca:d2:0f:4c:46:e6:16:34:63:8a:bc:73: 30:d4:8b:e4:bc:b4:0c:72:dd:11:17:8f:7a:41:86:3a:6f:1f: 2c:3c:07:e9:1e:97:54:59:53:79:09:8d:06:0c:1b:cc:f2:a0: bc:43:72:b1:35:a5:22:9e:a9:20:20:0c:27:5a:70:c5:86:42: 6a:d3:1c:4c:97:38:a5:01:86:34:7c:b0:f8:37:08:d1:e4:a2: 0e:59:d5:26:d5:65:e8:76:eb:6f:07:14:98:06:af:28:9f:e2: ab:8a:6c:f7:00:00:2a:2f:c5:3e:83:d5:be:35:00:c5:55:09: 7e:64:86:e0:82:37:ae:8d:15:da:85:18:ce:11:12:c8:7d:bc: 9d:e1:6f:59:36:5c:7c:f2:d6:26:7d:60:d8:cf:ff:2f:92:52: a8:d4:e6:ef:73:1a:5b:36:ed:ac:76:92:8c:b4:b9:0d:ab:c0: 66:22:44:cb:fb:46:1c:da:19:7e:99:7a:c2:b5:86:15:8d:c2: 1a:e1:ca:ab:97:3c:07:be:a4:73:80:d0:ab:f4:cc:ba:12:eb: a4:02:c2:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSZADqsuP+VOJJW6FM20KnMgc1lUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDE1MTA3WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGYyYjkzNTMxN2NlZTlkOWQ4YmI5MjY2YmZjMGEyOWYw ZDllYjU3NzM4MDYyYTFjYmZiZTM0OWZlMTAzMTNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLZwJmNyKFOHHHk95m1fRrV8U/VVNXhVe87Sos0PNt12u0 O1/KS1tu9RRWfM12eQtLx36g+l22pk9r79x3Q7qcrHnUC68P283zWDFpGUL7aeWh vWqjcQ8LxvnEGuiuKyLOXrw09rR+0G02IKOUlbr1vOYjgD1XKdIuunWFfURk1jtl 04eqYQEwv43O7EeSrqfWDMi67sDcyfueV+hkmIdwlaaW0Fgd5Gn6l8S2kjcbzcq2 CCAYQRch6JpEQt27DVQZBaThFU3ILySriievGcBPqJQpcU8RJ01Nn/xWlZzIvjZX WTB/oh4iaVO6LCLq58C3p0VpWrZEEbO/13ScQNjrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0WpqDgzBQFGn0DmHjXfoUTDO2xcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiMjgwYzNiLTE4NTItNDg4OC05YzJhLTc3MDQzNWVmNTcxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKugSgwDQYJKoZIhvcNAQELBQADggEBAEUHJxMAAUvcYn2ark5lcUmF6qah FR5xPnP+4QuZKPXbxXRLvWq2kXpX9MrSD0xG5hY0Y4q8czDUi+S8tAxy3REXj3pB hjpvHyw8B+kel1RZU3kJjQYMG8zyoLxDcrE1pSKeqSAgDCdacMWGQmrTHEyXOKUB hjR8sPg3CNHkog5Z1SbVZeh2628HFJgGryif4quKbPcAACovxT6D1b41AMVVCX5k huCCN66NFdqFGM4REsh9vJ3hb1k2XHzy1iZ9YNjP/y+SUqjU5u9zGls27ax2koy0 uQ2rwGYiRMv7RhzaGX6ZesK1hhWNwhrhyquXPAe+pHOA0Kv0zLoS66QCwlY= -----END CERTIFICATE-----Generated at Mon Aug 3 07:00:27 2026 by rpki-client