$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa File: 1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa (raw, json) Hash identifier: y7R7/pEGw8C8cVmn9cWanZjx+GJFokY07DtBchMj7EY= Subject key identifier: CA:32:12:6E:AA:82:46:09:A7:F6:13:3C:E6:25:2B:9C:BE:27:5E:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23802B04CA91E32D130C12084006EA77EA62A353 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa Signing time: Sat 08 Aug 2026 00:00:09 +0000 ROA not before: Sat 08 Aug 2026 00:00:09 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 398378 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:80:2b:04:ca:91:e3:2d:13:0c:12:08:40:06:ea:77:ea:62:a3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:00:09 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=d4688bfa6f6b8befce198b4aeef9d6e7c782261c26836c03c9c94d8bc9b9d993, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:52:48:d5:fc:f2:e3:82:f1:e4:1a:86:f3:ea: d6:da:ee:c7:59:20:b1:9a:b9:c4:39:a3:67:f0:9e: ed:03:92:8d:16:45:65:c6:c5:c8:6b:7d:a4:b9:f5: b7:02:52:f8:77:73:74:9f:d9:68:1c:18:e6:62:86: 90:7c:40:a9:51:f0:cb:09:f0:31:db:71:ad:e0:f1: 38:1f:70:da:95:e5:f4:05:91:9a:f4:30:40:c0:84: fc:1d:c5:27:bd:e0:b5:4e:a4:b6:61:74:40:3c:0a: d1:21:ee:72:88:cf:dd:53:a3:2c:53:1f:eb:58:3c: 4c:96:8c:fa:2a:ba:bc:f5:7f:aa:3b:7a:8c:39:83: 8d:8f:7a:aa:c6:85:a2:a7:a5:1a:d4:97:b7:1d:9b: ea:bb:8d:4a:d7:40:3e:18:a6:4f:d0:c1:a9:b7:e8: 01:be:d3:07:8d:c0:d3:23:02:14:bf:8d:c5:a5:68: 74:99:38:3a:62:c7:eb:82:10:9c:19:17:84:d3:a0: 2b:bc:a5:8c:cd:a1:bb:7f:d1:33:9d:c5:0d:80:aa: 2a:46:ca:24:df:b7:f8:6e:7d:0a:b2:b2:7a:43:fb: 61:4f:63:18:3c:07:a5:55:5f:de:3f:50:27:60:2c: 78:65:0c:7a:17:96:26:ff:74:f4:05:b0:82:82:97: cf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:12:6E:AA:82:46:09:A7:F6:13:3C:E6:25:2B:9C:BE:27:5E:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fefa7d9-baf0-4d92-a29b-fd2710f5effe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption cb:b7:6f:58:da:5f:79:23:22:37:fb:9f:7b:3d:d3:52:d4:0f: ca:50:f5:8a:74:4e:68:78:ad:23:f2:36:e3:fe:1f:95:0c:c6: 38:ab:84:a9:05:28:5d:34:a4:ad:86:11:56:a6:26:09:61:ad: a6:ce:f4:c0:ac:71:a0:89:c9:3c:a6:26:b4:b1:7c:00:e0:1c: 4e:d2:e6:84:85:0c:7b:a9:44:74:f4:52:cc:f4:31:87:37:16: 22:de:1b:bf:75:3e:26:ed:25:4a:d3:95:28:be:66:73:17:1f: ec:95:fa:49:55:72:06:5c:73:77:90:e4:b9:c5:8f:10:b8:51: 5d:e9:f7:23:f9:e7:09:21:ff:5f:8a:07:7d:c2:b2:3c:3c:8b: 69:e0:0c:4c:f2:97:77:3c:9c:ec:60:b2:69:37:d3:80:fe:c7: c6:89:92:2b:13:d2:54:0b:3f:94:95:14:08:46:f2:2e:88:ef: b6:d7:b4:4c:6b:43:9d:b7:1f:eb:1c:9c:dd:fe:c9:1a:94:fa: 7f:cd:2d:e8:95:27:8d:5f:be:0b:a6:41:1c:9c:4a:e6:04:a4: 10:a6:0a:3f:54:79:92:a5:e7:8a:5e:35:f3:9b:a8:83:4f:05: 20:1d:6b:ab:7a:e3:e8:71:b7:9e:37:29:33:a4:79:63:b8:10: 45:cf:b9:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI4ArBMqR4y0TDBIIQAbqd+pio1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMDA5WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDY4OGJmYTZmNmI4YmVmY2UxOThiNGFlZWY5ZDZlN2M3 ODIyNjFjMjY4MzZjMDNjOWM5NGQ4YmM5YjlkOTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFUkjV/PLjgvHkGobz6tba7sdZILGaucQ5o2fwnu0Dko0W RWXGxchrfaS59bcCUvh3c3Sf2WgcGOZihpB8QKlR8MsJ8DHbca3g8TgfcNqV5fQF kZr0MEDAhPwdxSe94LVOpLZhdEA8CtEh7nKIz91ToyxTH+tYPEyWjPoqurz1f6o7 eow5g42PeqrGhaKnpRrUl7cdm+q7jUrXQD4Ypk/Qwam36AG+0weNwNMjAhS/jcWl aHSZODpix+uCEJwZF4TToCu8pYzNobt/0TOdxQ2AqipGyiTft/hufQqysnpD+2FP Yxg8B6VVX94/UCdgLHhlDHoXlib/dPQFsIKCl8+VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyjISbqqCRgmn9hM85iUrnL4nXhIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmZWZhN2Q5LWJhZjAtNGQ5Mi1hMjliLWZkMjcxMGY1ZWZmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBAMu3b1jaX3kjIjf7n3s901LUD8pQ 9Yp0Tmh4rSPyNuP+H5UMxjirhKkFKF00pK2GEVamJglhrabO9MCscaCJyTymJrSx fADgHE7S5oSFDHupRHT0Usz0MYc3FiLeG791PibtJUrTlSi+ZnMXH+yV+klVcgZc c3eQ5LnFjxC4UV3p9yP55wkh/1+KB33Csjw8i2ngDEzyl3c8nOxgsmk304D+x8aJ kisT0lQLP5SVFAhG8i6I77bXtExrQ523H+scnN3+yRqU+n/NLeiVJ41fvgumQRyc SuYEpBCmCj9UeZKl54peNfObqINPBSAda6t64+hxt543KTOkeWO4EEXPuSE= -----END CERTIFICATE-----Generated at Fri Aug 21 02:24:25 2026 by rpki-client