$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a715747-9f74-4dac-b63a-385bc9e292ee.roa File: 4a715747-9f74-4dac-b63a-385bc9e292ee.roa (raw, json) Hash identifier: BlatB5vECjo2E1xcxJaMXoMJsYHUptWbrzHBZWVfgJg= Subject key identifier: 35:73:11:6A:EB:E5:87:69:52:2C:94:BD:25:CC:3D:E1:39:0C:79:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C8691C8DD9C0585850B20584BFB4B207281E248 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a715747-9f74-4dac-b63a-385bc9e292ee.roa Signing time: Fri 31 Jul 2026 00:41:27 +0000 ROA not before: Fri 31 Jul 2026 00:41:27 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:86:91:c8:dd:9c:05:85:85:0b:20:58:4b:fb:4b:20:72:81:e2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 00:41:27 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=d92d410167b8c3d576897223fbffa230f4dfb4d2577b12bc2f92e3d55d8742e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:6b:09:06:8b:92:db:fb:64:ba:c0:46:2f: 98:ca:74:27:f8:d7:b1:b7:d3:35:f7:6b:54:92:0c: 6a:7f:ce:2f:4e:17:ba:a8:22:0d:39:27:73:07:98: 69:79:bc:72:23:e3:11:4d:eb:54:18:4a:37:70:c1: c4:42:04:b4:c5:be:4f:a6:41:72:30:ef:3a:98:78: 52:38:b8:93:f1:9a:ea:8a:29:d5:49:2b:e7:c2:62: 64:2c:f2:9c:be:c6:78:b9:01:5e:ab:f2:e1:10:b5: 28:7e:9c:7b:7c:4c:4e:b3:a8:0c:2c:0f:e9:1b:77: f6:65:7f:3b:93:a4:fe:cc:0d:1b:23:8f:52:d1:4a: fc:31:2c:02:84:a4:77:82:bb:57:48:b1:f3:72:74: 8e:2f:69:ea:e6:d6:b5:c0:c9:d7:99:a9:1f:71:de: 5d:6a:6e:83:9c:fe:19:24:f8:c8:df:45:5d:b8:88: 56:d5:2a:ae:92:c7:1d:48:e9:63:c2:a5:93:c0:99: 37:de:17:a2:d9:fc:78:e6:8e:e9:2d:ad:3c:14:dc: 45:75:4a:dd:67:71:23:dc:b8:0a:32:54:cb:52:53: 45:dd:8c:21:51:fe:37:91:15:31:a6:db:2e:07:69: e5:28:11:e8:a6:f9:f0:00:b8:62:b7:14:91:3b:a9: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:73:11:6A:EB:E5:87:69:52:2C:94:BD:25:CC:3D:E1:39:0C:79:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a715747-9f74-4dac-b63a-385bc9e292ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.113.0/24 Signature Algorithm: sha256WithRSAEncryption bb:a6:c0:2a:0b:93:f8:7d:ff:f8:c6:d6:8c:79:5f:53:50:88: fe:57:4e:31:26:28:9d:23:96:67:65:b0:a7:f0:f0:9a:01:c5: 83:28:82:89:43:f0:6f:60:65:18:6a:2b:72:95:ed:9a:84:d1: 18:3d:ff:68:f3:6b:06:05:de:d2:ef:b9:db:0a:c5:0c:6f:2c: 94:6f:3d:92:32:12:e7:5d:92:9b:df:58:5a:6b:c6:fd:76:77: 3b:80:5b:2b:d5:dd:77:e9:b4:f5:bc:56:1b:fa:b8:91:8b:58: 2d:4e:49:15:c0:e4:fd:a1:b3:ac:25:84:ec:2a:98:93:c3:78: 66:03:c7:0e:a9:56:92:c3:3a:6d:41:05:70:b9:2c:7e:f0:be: 95:c7:8a:9e:0c:61:67:1a:51:70:c5:50:d1:f2:b2:13:25:b7: 56:a0:e8:4f:91:32:a1:65:46:21:47:5f:47:d6:01:ee:7e:7a: eb:82:ad:9f:17:f7:cd:32:4c:45:f2:83:7f:81:91:45:51:df: 0b:86:15:f1:1f:cd:47:a6:6c:78:2b:f5:c3:65:38:10:7d:4a: 23:b7:cc:fe:60:b5:77:1d:88:ec:2f:e4:61:26:85:4f:c3:d3: fb:5a:12:55:66:03:52:8a:e3:6b:18:68:e3:12:2a:c7:cb:7b: 34:10:f1:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTIaRyN2cBYWFCyBYS/tLIHKB4kgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDA0MTI3WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTJkNDEwMTY3YjhjM2Q1NzY4OTcyMjNmYmZmYTIzMGY0 ZGZiNGQyNTc3YjEyYmMyZjkyZTNkNTVkODc0MmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGsGsJBouS2/tkusBGL5jKdCf417G30zX3a1SSDGp/zi9O F7qoIg05J3MHmGl5vHIj4xFN61QYSjdwwcRCBLTFvk+mQXIw7zqYeFI4uJPxmuqK KdVJK+fCYmQs8py+xni5AV6r8uEQtSh+nHt8TE6zqAwsD+kbd/ZlfzuTpP7MDRsj j1LRSvwxLAKEpHeCu1dIsfNydI4vaerm1rXAydeZqR9x3l1qboOc/hkk+MjfRV24 iFbVKq6Sxx1I6WPCpZPAmTfeF6LZ/HjmjuktrTwU3EV1St1ncSPcuAoyVMtSU0Xd jCFR/jeRFTGm2y4HaeUoEeim+fAAuGK3FJE7qYYvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNXMRauvlh2lSLJS9Jcw94TkMeSwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhNzE1NzQ3LTlmNzQtNGRhYy1iNjNhLTM4NWJjOWUyOTJlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHEwDQYJKoZIhvcNAQELBQADggEBALumwCoLk/h9//jG1ox5X1NQiP5X TjEmKJ0jlmdlsKfw8JoBxYMogolD8G9gZRhqK3KV7ZqE0Rg9/2jzawYF3tLvudsK xQxvLJRvPZIyEuddkpvfWFprxv12dzuAWyvV3XfptPW8Vhv6uJGLWC1OSRXA5P2h s6wlhOwqmJPDeGYDxw6pVpLDOm1BBXC5LH7wvpXHip4MYWcaUXDFUNHyshMlt1ag 6E+RMqFlRiFHX0fWAe5+euuCrZ8X980yTEXyg3+BkUVR3wuGFfEfzUembHgr9cNl OBB9SiO3zP5gtXcdiOwv5GEmhU/D0/taElVmA1KK42sYaOMSKsfLezQQ8d4= -----END CERTIFICATE-----Generated at Mon Aug 3 06:53:20 2026 by rpki-client