$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43679d0b-d4d6-4195-8f78-61e5d3431f35.roa File: 43679d0b-d4d6-4195-8f78-61e5d3431f35.roa (raw, json) Hash identifier: q2IP50k3AqdYvWRQpSgDh9lEfDfBBR0RSIwAvtpB+zY= Subject key identifier: 06:F0:D2:AB:68:FC:05:B6:AC:81:3D:77:16:2A:21:54:CB:0B:67:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D4B5A5802684C4FC415CCD15355564D26EAA942 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43679d0b-d4d6-4195-8f78-61e5d3431f35.roa Signing time: Mon 03 Aug 2026 02:21:06 +0000 ROA not before: Mon 03 Aug 2026 02:21:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 164.152.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4b:5a:58:02:68:4c:4f:c4:15:cc:d1:53:55:56:4d:26:ea:a9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:21:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=ffcedd7843a77851eeb188119f49e5de0929c710ab4cdccf6020227a322374a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:e8:1b:cf:1f:3d:a6:43:b8:a0:71:d0:c7: 6a:7d:09:ed:1a:6f:22:2e:61:9c:1b:a9:7f:b2:eb: e8:79:7c:3c:21:84:2f:83:c0:b2:30:de:c6:1f:e0: dc:91:4d:ba:b4:7e:8c:01:6a:74:5d:39:7f:75:8e: 6b:2f:eb:cf:5c:3a:91:c1:a1:12:7a:ce:34:76:a9: 72:d4:9a:32:33:a2:dc:d1:b4:6b:86:d6:dc:da:ab: 48:37:7f:1a:71:c1:df:02:19:72:3c:23:d3:64:a4: 26:79:ff:e3:64:16:d9:1d:6b:66:5a:92:ef:ce:d4: 3d:a4:fc:1f:56:71:32:b2:b8:e3:37:34:f1:63:c5: db:e3:9f:d2:01:9c:89:d4:ae:e6:c8:df:65:a7:39: d7:a0:67:45:e4:e0:47:e9:7a:d3:66:7e:9d:e3:0d: a5:14:69:e8:46:91:54:6f:d6:1d:e4:1d:b9:09:b1: 91:9c:ed:24:f7:77:7b:0e:3f:5e:46:e7:72:10:ee: 52:21:2a:97:82:6e:37:24:85:48:27:3b:1c:89:79: 3a:15:38:fa:50:a1:5c:3f:f8:ef:aa:02:98:ed:79: c9:17:94:2c:5d:fb:a6:16:39:60:83:da:38:02:12: 79:a6:32:4e:35:1d:22:1f:e1:58:ea:1a:fe:34:58: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F0:D2:AB:68:FC:05:B6:AC:81:3D:77:16:2A:21:54:CB:0B:67:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43679d0b-d4d6-4195-8f78-61e5d3431f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.200.0/22 Signature Algorithm: sha256WithRSAEncryption a6:9f:04:73:cd:43:fe:55:92:54:98:47:e1:00:7f:13:df:bd: d4:3a:11:32:62:e8:a7:79:7b:01:70:a2:ab:fc:61:8c:f1:71: f9:79:cf:13:23:c4:4f:71:0f:7e:0d:c3:83:aa:43:f3:4c:10: 55:f4:f9:f9:0d:19:2a:27:02:8e:6f:d9:5a:a1:3e:2a:b2:fa: ed:f0:ae:a4:a2:7e:ea:64:77:51:72:b3:89:0b:9e:eb:b9:9c: 42:24:cc:78:55:ee:04:ca:ba:c4:63:8a:d8:4d:0c:98:bd:fb: 41:bc:03:dc:5e:69:05:44:12:c7:9c:19:9b:90:a6:3b:73:4b: f5:1c:50:3e:b8:c7:93:24:b5:75:81:79:cf:2b:ae:8b:32:e5: 75:59:20:6c:5e:2e:d6:73:c4:00:5c:76:ea:47:51:76:d9:1d: fd:9b:0e:92:d5:d0:f3:5f:05:cb:16:32:e1:dc:01:5a:8d:6a: 8a:1d:05:68:f0:72:e7:8a:a5:d1:fa:73:e3:81:d8:55:69:75: 8f:72:90:35:3d:45:c1:5b:d4:0c:fe:18:77:cc:64:ca:c7:1a: 4a:5c:fd:ee:bc:f6:0f:ea:dd:ae:b9:e8:71:77:7d:6f:ef:67: 67:3e:cd:c5:4a:8d:6b:6d:1a:0b:30:5d:ef:3b:3a:90:69:99: 6a:58:89:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULUtaWAJoTE/EFczRU1VWTSbqqUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIyMTA2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmNlZGQ3ODQzYTc3ODUxZWViMTg4MTE5ZjQ5ZTVkZTA5 MjljNzEwYWI0Y2RjY2Y2MDIwMjI3YTMyMjM3NGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+G+gbzx89pkO4oHHQx2p9Ce0abyIuYZwbqX+y6+h5fDwh hC+DwLIw3sYf4NyRTbq0fowBanRdOX91jmsv689cOpHBoRJ6zjR2qXLUmjIzotzR tGuG1tzaq0g3fxpxwd8CGXI8I9NkpCZ5/+NkFtkda2Zaku/O1D2k/B9WcTKyuOM3 NPFjxdvjn9IBnInUrubI32WnOdegZ0Xk4EfpetNmfp3jDaUUaehGkVRv1h3kHbkJ sZGc7ST3d3sOP15G53IQ7lIhKpeCbjckhUgnOxyJeToVOPpQoVw/+O+qApjteckX lCxd+6YWOWCD2jgCEnmmMk41HSIf4VjqGv40WIeDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBvDSq2j8BbasgT13FiohVMsLZ9swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNjc5ZDBiLWQ0ZDYtNDE5NS04Zjc4LTYxZTVkMzQzMWYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKkmMgwDQYJKoZIhvcNAQELBQADggEBAKafBHPNQ/5VklSYR+EAfxPfvdQ6 ETJi6Kd5ewFwoqv8YYzxcfl5zxMjxE9xD34Nw4OqQ/NMEFX0+fkNGSonAo5v2Vqh Piqy+u3wrqSifupkd1Fys4kLnuu5nEIkzHhV7gTKusRjithNDJi9+0G8A9xeaQVE EsecGZuQpjtzS/UcUD64x5MktXWBec8rrosy5XVZIGxeLtZzxABcdupHUXbZHf2b DpLV0PNfBcsWMuHcAVqNaoodBWjwcueKpdH6c+OB2FVpdY9ykDU9RcFb1Az+GHfM ZMrHGkpc/e689g/q3a656HF3fW/vZ2c+zcVKjWttGgswXe87OpBpmWpYia8= -----END CERTIFICATE-----Generated at Mon Aug 3 05:44:25 2026 by rpki-client