$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa File: 2309db7a-9533-458b-bc2b-77dd1708ae8a.roa (raw, json) Hash identifier: HCrNPd+vhb0cjICTuEeQEhtfSIzFDXga+PndcbCh/lA= Subject key identifier: 7D:5B:6D:B1:45:AB:31:22:72:FD:78:76:C6:28:66:3D:28:EB:74:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E55DDDB124B51F771F8DF2E88B4B7436755B7B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa Signing time: Sat 18 Jul 2026 00:00:08 +0000 ROA not before: Sat 18 Jul 2026 00:00:08 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:55:dd:db:12:4b:51:f7:71:f8:df:2e:88:b4:b7:43:67:55:b7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:00:08 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=771bfd9151e18de609707eeb024b8917b0eed23de21f622160cdeababfb9ba54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:44:83:1f:68:4a:95:0b:4c:a9:77:1e:fa: 47:66:bf:f1:19:54:5d:81:fe:1b:9e:70:a7:f7:00: 2e:35:1a:0e:c3:0d:4e:59:95:99:0b:05:b8:c1:83: d8:73:54:2e:ac:6f:e2:82:d7:21:98:5c:ff:ff:1b: 7b:6c:90:62:52:96:f5:73:69:91:32:56:da:e6:be: d1:2f:6f:17:74:4c:fe:fd:48:c2:d7:5a:0b:59:3c: c7:1c:8a:de:81:60:15:64:f2:80:42:ce:99:c0:23: a9:d3:80:4f:55:db:9f:c0:9a:8d:0a:bd:13:e3:c9: 73:21:1c:9e:bf:47:a6:ac:d1:79:61:37:1d:20:8e: 3f:05:0f:97:7c:4c:77:15:28:34:eb:8c:7b:45:9f: 07:82:b9:4a:58:de:cc:d1:0e:c5:98:fb:2e:2e:45: cf:c2:63:5e:ca:d4:4a:93:d8:09:2c:0c:d2:00:0e: ce:55:d1:e3:e8:86:29:d0:60:6b:f5:c1:cf:20:24: 7e:44:b0:71:a6:54:84:48:b9:d2:81:42:6a:29:e3: 3f:ff:92:b2:00:45:55:b4:5a:ca:8b:1d:47:3c:13: 38:c4:0e:09:df:f8:94:9c:7b:e2:6c:da:15:70:10: b5:cb:a0:bc:87:7e:3c:01:05:e1:83:7e:29:05:b3: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:6D:B1:45:AB:31:22:72:FD:78:76:C6:28:66:3D:28:EB:74:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2309db7a-9533-458b-bc2b-77dd1708ae8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.105.0/24 Signature Algorithm: sha256WithRSAEncryption 46:8c:ef:f4:a2:f2:94:bb:2e:a8:d4:23:f4:6a:33:9b:05:ff: eb:f6:4f:a2:56:68:78:1e:d6:92:49:96:e4:b0:74:fb:8c:fa: 3a:a2:3a:3c:be:5f:f4:03:ad:ae:92:09:b0:ea:55:44:a9:85: e4:4d:f9:34:dc:cb:ef:a7:61:02:19:a4:9d:1c:ac:1e:82:1e: bd:cb:af:e9:0f:c0:91:7d:77:65:61:36:b5:fd:2f:4a:eb:b7: ee:d1:08:02:9b:97:e5:c9:3a:3a:3f:92:50:d5:3d:b6:16:00: ab:92:4f:1f:53:47:80:5d:b1:aa:f0:40:39:72:03:50:90:57: 84:be:a0:5a:30:9e:4f:ff:f5:d2:32:f9:89:6b:7a:09:28:99: 60:92:d6:73:9b:38:e4:00:be:c3:55:fd:a3:de:44:dd:3d:32: a1:5c:33:6c:24:26:86:17:3a:fd:5a:a4:74:b2:f5:ef:af:dd: 4d:67:a5:0e:3c:4a:06:1d:62:d5:82:4d:0b:c0:ca:7a:02:01: f4:45:d0:dd:d9:97:df:3f:c9:f5:6c:65:fe:e7:ab:3d:16:a0: 74:51:cc:b3:64:54:fe:ee:5c:e8:b0:6d:c3:92:53:5f:cb:6a: 29:64:f1:01:7a:a1:25:40:44:9e:79:78:9d:44:ef:4f:55:d0: e2:c0:a8:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULlXd2xJLUfdx+N8uiLS3Q2dVt7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAwMDA4WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzFiZmQ5MTUxZTE4ZGU2MDk3MDdlZWIwMjRiODkxN2Iw ZWVkMjNkZTIxZjYyMjE2MGNkZWFiYWJmYjliYTU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9/ESDH2hKlQtMqXce+kdmv/EZVF2B/huecKf3AC41Gg7D DU5ZlZkLBbjBg9hzVC6sb+KC1yGYXP//G3tskGJSlvVzaZEyVtrmvtEvbxd0TP79 SMLXWgtZPMccit6BYBVk8oBCzpnAI6nTgE9V25/Amo0KvRPjyXMhHJ6/R6as0Xlh Nx0gjj8FD5d8THcVKDTrjHtFnweCuUpY3szRDsWY+y4uRc/CY17K1EqT2AksDNIA Ds5V0ePohinQYGv1wc8gJH5EsHGmVIRIudKBQmop4z//krIARVW0WsqLHUc8EzjE Dgnf+JSce+Js2hVwELXLoLyHfjwBBeGDfikFs22VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfVttsUWrMSJy/Xh2xihmPSjrdLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMDlkYjdhLTk1MzMtNDU4Yi1iYzJiLTc3ZGQxNzA4YWU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GkwDQYJKoZIhvcNAQELBQADggEBAEaM7/Si8pS7LqjUI/RqM5sF/+v2 T6JWaHge1pJJluSwdPuM+jqiOjy+X/QDra6SCbDqVUSpheRN+TTcy++nYQIZpJ0c rB6CHr3Lr+kPwJF9d2VhNrX9L0rrt+7RCAKbl+XJOjo/klDVPbYWAKuSTx9TR4Bd sarwQDlyA1CQV4S+oFownk//9dIy+YlregkomWCS1nObOOQAvsNV/aPeRN09MqFc M2wkJoYXOv1apHSy9e+v3U1npQ48SgYdYtWCTQvAynoCAfRF0N3Zl98/yfVsZf7n qz0WoHRRzLNkVP7uXOiwbcOSU1/Lailk8QF6oSVARJ55eJ1E709V0OLAqOM= -----END CERTIFICATE-----Generated at Wed Jul 22 22:13:07 2026 by rpki-client