$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d351095-e533-4b12-b92a-8fc885911708.roa File: 5d351095-e533-4b12-b92a-8fc885911708.roa (raw, json) Hash identifier: 2bjIsAiblRnzrmEQr5x7tO/gU9oKxhyWsMuzuh22Eco= Subject key identifier: BF:1B:B1:B3:D8:FE:32:CD:64:20:2E:0A:67:69:21:9C:F3:24:C9:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CBC4478DC58B2C28F08BC8CF07A3981A04F5BB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d351095-e533-4b12-b92a-8fc885911708.roa Signing time: Mon 03 Aug 2026 00:20:40 +0000 ROA not before: Mon 03 Aug 2026 00:20:40 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 100.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bc:44:78:dc:58:b2:c2:8f:08:bc:8c:f0:7a:39:81:a0:4f:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:20:40 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=06dd5fc339ec76a88b93171e26fe0d84d62873b8407d5030243ce14f90a3cab2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:41:bb:49:42:63:3a:6a:26:7f:8f:c1:2b: e7:e8:b5:e3:4a:f8:76:77:af:78:eb:09:28:84:52: 30:31:17:47:25:34:24:ea:12:0e:45:59:a6:5b:9c: 0d:ab:71:51:82:68:8a:30:dc:4a:e0:dc:93:c2:64: 13:61:be:6d:33:4a:17:53:98:c7:e9:e9:6d:6e:d5: a6:47:34:b8:a6:2d:82:c1:4a:0d:11:cd:3d:92:cd: 1d:0d:05:fb:4d:d3:64:e7:eb:65:1e:39:72:b5:71: ea:42:99:19:68:e6:57:1c:5c:98:bb:94:b1:5e:ad: 07:10:ec:ce:c6:36:aa:1f:12:ce:eb:e3:07:4d:1d: 6f:7e:45:de:85:ea:fb:4c:f5:99:c0:e1:c4:4c:35: 27:58:0e:e5:c9:12:e9:bc:63:9b:6e:5e:48:fa:27: 3c:44:b4:0e:8a:e7:64:8d:e3:0b:2d:8a:f5:1f:d4: 7b:d0:b0:16:aa:1d:5c:5d:4e:b4:c0:4e:29:1f:16: db:12:7f:52:8b:b2:33:1c:d0:28:62:fe:19:1c:6e: b6:fd:0c:17:70:f0:b3:55:e3:83:ab:ed:b6:28:1b: a4:6d:cb:ca:a1:54:22:8a:5f:00:12:db:65:2f:78: 85:55:fd:fe:bf:da:3e:91:da:11:9f:60:40:58:11: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1B:B1:B3:D8:FE:32:CD:64:20:2E:0A:67:69:21:9C:F3:24:C9:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d351095-e533-4b12-b92a-8fc885911708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption 45:f3:90:8e:81:50:d3:fd:3f:44:88:6a:d3:70:8f:61:c7:eb: 58:4b:35:c8:4a:d6:7a:af:39:de:85:c8:2f:e8:52:25:ed:43: 29:3f:8d:45:70:d3:d9:fc:91:9e:5a:92:4b:9a:e3:29:06:27: 4f:db:05:89:50:c1:40:25:b5:77:0d:84:56:f2:00:e1:58:41: 63:61:d2:66:db:e9:c7:b9:13:85:9e:c7:eb:f5:ed:be:2d:8c: b9:db:75:54:df:7e:3a:d3:90:50:57:4c:5c:ce:e1:2b:80:ca: 6a:a9:f3:b0:8b:5c:50:64:b4:98:ee:3b:32:5c:74:fb:25:08: c8:41:ec:2c:47:02:63:32:c2:98:db:26:5b:34:f0:39:4b:91: 9a:98:3f:18:6d:c8:c4:43:51:5e:cc:2a:6a:f4:45:78:95:12: 18:66:1b:f7:94:9d:34:94:04:10:eb:ea:d2:01:a9:83:d1:84: 58:4e:b1:5d:fa:99:e8:f4:78:72:9b:db:df:41:a2:4c:88:68: 7e:d6:20:e7:5d:fe:bb:e8:95:2a:76:06:f5:90:bf:bc:cc:08: f1:18:aa:79:24:78:4f:7e:97:d2:47:85:0d:ae:8f:fb:fa:f4: 48:41:96:d3:c2:8e:69:be:65:f6:2e:30:b7:74:ed:99:cd:08: 1a:da:22:41 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfLxEeNxYssKPCLyM8Ho5gaBPW7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDAyMDQwWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmRkNWZjMzM5ZWM3NmE4OGI5MzE3MWUyNmZlMGQ4NGQ2 Mjg3M2I4NDA3ZDUwMzAyNDNjZTE0ZjkwYTNjYWIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs/kG7SUJjOmomf4/BK+foteNK+HZ3r3jrCSiEUjAxF0cl NCTqEg5FWaZbnA2rcVGCaIow3Erg3JPCZBNhvm0zShdTmMfp6W1u1aZHNLimLYLB Sg0RzT2SzR0NBftN02Tn62UeOXK1cepCmRlo5lccXJi7lLFerQcQ7M7GNqofEs7r 4wdNHW9+Rd6F6vtM9ZnA4cRMNSdYDuXJEum8Y5tuXkj6JzxEtA6K52SN4wstivUf 1HvQsBaqHVxdTrTATikfFtsSf1KLsjMc0Chi/hkcbrb9DBdw8LNV44Or7bYoG6Rt y8qhVCKKXwAS22UveIVV/f6/2j6R2hGfYEBYEVG5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvxuxs9j+Ms1kIC4KZ2khnPMkyRUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkMzUxMDk1LWU1MzMtNGIxMi1iOTJhLThmYzg4NTkxMTcwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJkFDANBgkqhkiG9w0BAQsFAAOCAQEARfOQjoFQ0/0/RIhq03CPYcfrWEs1 yErWeq853oXIL+hSJe1DKT+NRXDT2fyRnlqSS5rjKQYnT9sFiVDBQCW1dw2EVvIA 4VhBY2HSZtvpx7kThZ7H6/Xtvi2Mudt1VN9+OtOQUFdMXM7hK4DKaqnzsItcUGS0 mO47Mlx0+yUIyEHsLEcCYzLCmNsmWzTwOUuRmpg/GG3IxENRXswqavRFeJUSGGYb 95SdNJQEEOvq0gGpg9GEWE6xXfqZ6PR4cpvb30GiTIhoftYg513+u+iVKnYG9ZC/ vMwI8RiqeSR4T36X0keFDa6P+/r0SEGW08KOab5l9i4wt3Ttmc0IGtoiQQ== -----END CERTIFICATE-----Generated at Mon Aug 3 05:42:28 2026 by rpki-client