$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa File: 24d921c1-9e96-4ec0-8d95-a45b8c083105.roa (raw, json) Hash identifier: Xv1VdcvCMWK2a7BjgLc3Aba7GH5HuXWtZlsc1iHFK94= Subject key identifier: 5F:57:37:36:48:6F:6C:CB:C4:D9:CB:5F:9E:5F:11:68:30:24:74:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3867302AB00E58486BB6150777EF133F043F5DA7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa Signing time: Mon 03 Aug 2026 02:20:39 +0000 ROA not before: Mon 03 Aug 2026 02:20:39 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 168.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:67:30:2a:b0:0e:58:48:6b:b6:15:07:77:ef:13:3f:04:3f:5d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:20:39 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=e1202b30dbbabe8e2835777c6d4ae6a761f7d5d2a39d416ea8b2e1978f642f90, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:39:3e:af:1a:7e:dd:1c:b5:47:7e:1b:2f: 37:0e:5d:01:ea:a8:1d:1f:41:6f:8e:83:13:92:e5: 8d:d7:18:4f:2f:57:01:03:42:df:1a:47:c1:a8:d2: 79:2c:81:08:03:ec:a2:ce:ae:3e:d1:17:e6:59:db: 4f:46:ef:74:2f:36:32:cc:6f:4c:cc:be:fd:78:11: a7:88:19:0b:64:5b:7b:e0:83:9a:41:7a:b7:46:e4: fa:7f:b7:a9:e6:ba:e7:b8:ae:be:17:73:49:c6:e3: 5f:3d:54:22:67:54:e1:56:2d:3d:ce:33:09:4c:a7: 77:3b:ee:9a:4d:56:fd:d9:d6:6a:38:d6:c9:63:6c: 01:09:1e:55:e2:cd:1d:1c:10:15:93:6a:c9:03:09: 91:0d:f6:e0:ce:64:4e:b8:27:1d:fb:63:44:25:fc: 4d:6b:f5:43:c9:55:90:2c:89:cf:24:06:52:ab:5c: 85:65:cd:70:61:0d:d5:46:73:77:45:ea:58:9d:11: 9d:1f:31:15:a1:cd:62:ca:ef:ce:fd:47:c2:fa:2d: 43:0e:05:26:25:70:a4:77:5b:8b:1f:13:34:d4:cc: 3f:a3:70:70:d3:00:e9:fc:5c:f0:27:25:be:52:63: 57:f6:a6:d5:e4:2d:85:88:46:f0:40:e1:02:88:7a: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:37:36:48:6F:6C:CB:C4:D9:CB:5F:9E:5F:11:68:30:24:74:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:2c:36:02:96:a1:62:a4:5f:ac:ab:ce:54:68:ff:46:c4:4e: a7:5f:a6:f6:cb:0a:d2:de:4d:14:f4:3a:72:10:e4:be:e2:2a: 5a:c5:31:cb:84:05:a2:75:eb:d0:a2:33:1e:1a:48:45:c0:bb: a3:58:62:ad:35:95:e1:7b:06:07:56:34:64:9b:fa:ec:b2:e9: 97:48:61:78:80:3f:a1:f0:86:e0:41:ec:b7:1a:10:bf:c0:bc: a4:bb:8a:fe:f1:46:f9:81:b9:e6:a1:13:46:35:b7:47:df:5c: 73:48:48:b9:e0:8d:cc:b2:fe:d5:9a:84:e7:83:5f:09:4e:04: 3e:f1:32:cc:51:30:a2:51:8c:c8:bb:88:a5:9f:a6:57:6f:9e: c5:27:cb:7c:bf:4b:0a:be:b5:d3:13:e1:cb:91:5b:24:13:52: dc:eb:07:3b:34:0c:09:1b:5d:d5:17:0b:af:25:fa:43:a6:ff: 78:7b:43:65:46:6e:c8:3a:b2:1e:b0:be:80:91:66:92:1a:b5: 70:c1:75:30:8a:5a:69:72:57:21:74:d3:fd:e0:ae:00:73:69: 6c:51:75:86:ce:5f:9e:72:88:5b:21:a5:fb:28:1d:a2:50:34: 94:ca:07:20:3a:26:f8:09:84:1e:48:2f:ba:8e:1d:37:72:c6: f7:0d:d6:c1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOGcwKrAOWEhrthUHd+8TPwQ/XacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIyMDM5WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTIwMmIzMGRiYmFiZThlMjgzNTc3N2M2ZDRhZTZhNzYx ZjdkNWQyYTM5ZDQxNmVhOGIyZTE5NzhmNjQyZjkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55zk+rxp+3Ry1R34bLzcOXQHqqB0fQW+OgxOS5Y3XGE8v VwEDQt8aR8Go0nksgQgD7KLOrj7RF+ZZ209G73QvNjLMb0zMvv14EaeIGQtkW3vg g5pBerdG5Pp/t6nmuue4rr4Xc0nG4189VCJnVOFWLT3OMwlMp3c77ppNVv3Z1mo4 1sljbAEJHlXizR0cEBWTaskDCZEN9uDOZE64Jx37Y0Ql/E1r9UPJVZAsic8kBlKr XIVlzXBhDdVGc3dF6lidEZ0fMRWhzWLK7879R8L6LUMOBSYlcKR3W4sfEzTUzD+j cHDTAOn8XPAnJb5SY1f2ptXkLYWIRvBA4QKIeoQ7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUX1c3NkhvbMvE2ctfnl8RaDAkdFEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0ZDkyMWMxLTllOTYtNGVjMC04ZDk1LWE0NWI4YzA4MzEwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCo8jANBgkqhkiG9w0BAQsFAAOCAQEAdiw2ApahYqRfrKvOVGj/RsROp1+m 9ssK0t5NFPQ6chDkvuIqWsUxy4QFonXr0KIzHhpIRcC7o1hirTWV4XsGB1Y0ZJv6 7LLpl0hheIA/ofCG4EHstxoQv8C8pLuK/vFG+YG55qETRjW3R99cc0hIueCNzLL+ 1ZqE54NfCU4EPvEyzFEwolGMyLuIpZ+mV2+exSfLfL9LCr610xPhy5FbJBNS3OsH OzQMCRtd1RcLryX6Q6b/eHtDZUZuyDqyHrC+gJFmkhq1cMF1MIpaaXJXIXTT/eCu AHNpbFF1hs5fnnKIWyGl+ygdolA0lMoHIDom+AmEHkgvuo4dN3LG9w3WwQ== -----END CERTIFICATE-----Generated at Mon Aug 3 05:41:15 2026 by rpki-client