$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d98574-90b7-4b0b-af35-88954b14a5e0.roa File: 68d98574-90b7-4b0b-af35-88954b14a5e0.roa (raw, json) Hash identifier: AM4xsXBUKNC3exhBthW0WNu+uoBLYZvvGUOmnCSo8Go= Subject key identifier: 18:8E:61:21:C3:D0:44:ED:C4:BF:C8:74:2D:38:D9:93:24:BE:EA:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 062CB01F7AA5CD7319C08D8C0D91649CBE3D53B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d98574-90b7-4b0b-af35-88954b14a5e0.roa Signing time: Mon 03 Aug 2026 00:41:06 +0000 ROA not before: Mon 03 Aug 2026 00:41:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 40.235.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2c:b0:1f:7a:a5:cd:73:19:c0:8d:8c:0d:91:64:9c:be:3d:53:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:41:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=1f49849398978e531418b735b5f8fafe12e93f62793a4749232eaaf62e3ac3e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:30:90:24:33:c2:6e:24:ee:3f:66:ce:24: f8:ea:c7:e7:29:f5:c1:d0:fc:42:79:5c:ff:71:fc: e8:b4:c1:84:b8:20:d9:b8:77:69:c9:4e:04:fe:a7: 94:f2:29:5e:e9:e7:65:b4:f7:8a:04:e8:5b:85:16: a4:0a:d7:87:5f:09:39:ab:e8:e2:aa:55:e9:6b:f6: 3b:97:44:5d:f6:6d:d8:55:89:6f:bc:27:3b:f4:55: 0c:15:58:b6:0f:f8:52:27:d9:15:3f:94:92:70:ea: 20:6b:e2:c1:28:94:e3:20:05:b7:38:06:14:74:ae: 11:38:7b:0f:68:18:33:98:9d:70:a7:90:d7:83:98: bb:e0:eb:22:b6:1a:86:7f:12:1c:33:32:ba:4a:68: 3b:df:3b:5c:33:fd:81:87:9f:dc:2a:ce:03:9a:a7: 9b:00:ac:4a:dd:9c:70:1e:75:cc:3b:a6:c6:c5:04: 9d:81:dd:bd:9b:f5:34:f1:88:45:95:89:65:3d:b0: dd:36:78:08:fd:63:b9:66:3e:2c:4c:33:a7:1c:da: ab:6b:c0:c8:9a:29:e5:64:cf:a2:06:97:71:0b:72: 62:30:c2:95:e2:f5:4c:93:94:af:7c:0b:a6:6f:1a: 49:a6:3e:c5:d1:d0:e0:dc:33:71:14:62:d8:bd:48: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:61:21:C3:D0:44:ED:C4:BF:C8:74:2D:38:D9:93:24:BE:EA:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d98574-90b7-4b0b-af35-88954b14a5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.235.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9f:ae:d6:9f:9f:86:35:44:74:43:be:0f:54:a2:11:b0:2c:1e: fc:f0:1b:b5:13:fb:90:0a:b2:12:28:0a:9f:3a:71:18:84:80: 67:c3:fc:a2:93:a5:ff:29:d4:4b:28:96:76:56:34:64:10:d6: af:95:d5:a1:8f:59:59:ea:bb:df:7d:1d:c1:31:0f:e1:9f:ce: 11:a3:77:e7:e5:cd:bf:72:68:5b:dc:16:61:65:94:95:51:65: de:bf:1a:52:a3:66:2c:51:a6:8c:c2:f7:04:85:20:4b:45:39: 10:01:5a:91:a3:2b:db:7e:22:c5:78:22:59:32:cc:20:ca:9f: cc:77:1d:a0:f8:f4:ff:cd:0e:d6:d0:66:3b:6e:38:0c:d6:4b: b3:d0:3b:f1:35:90:91:f5:e2:e9:ee:ed:55:15:07:de:d5:ae: 36:7c:e0:73:5a:7d:38:8c:03:5f:af:32:30:a1:10:77:b7:36: 99:c7:a6:9d:f5:29:be:02:c2:51:6c:73:65:c5:f0:b2:2e:a6: 0e:be:8b:0c:a1:83:c8:74:79:2a:d4:b3:d2:ea:c6:0d:b2:ed: 17:7d:75:b1:ec:59:5a:7e:e6:25:5d:ff:e3:f1:0a:b2:1d:4f: dc:68:d2:fb:00:06:ba:fb:35:0c:c6:79:62:c6:90:8c:16:89: e5:80:2c:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBiywH3qlzXMZwI2MDZFknL49U7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA0MTA2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjQ5ODQ5Mzk4OTc4ZTUzMTQxOGI3MzViNWY4ZmFmZTEy ZTkzZjYyNzkzYTQ3NDkyMzJlYWFmNjJlM2FjM2U0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUODCQJDPCbiTuP2bOJPjqx+cp9cHQ/EJ5XP9x/Oi0wYS4 INm4d2nJTgT+p5TyKV7p52W094oE6FuFFqQK14dfCTmr6OKqVelr9juXRF32bdhV iW+8Jzv0VQwVWLYP+FIn2RU/lJJw6iBr4sEolOMgBbc4BhR0rhE4ew9oGDOYnXCn kNeDmLvg6yK2GoZ/EhwzMrpKaDvfO1wz/YGHn9wqzgOap5sArErdnHAedcw7psbF BJ2B3b2b9TTxiEWViWU9sN02eAj9Y7lmPixMM6cc2qtrwMiaKeVkz6IGl3ELcmIw wpXi9UyTlK98C6ZvGkmmPsXR0ODcM3EUYti9SD0nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGI5hIcPQRO3Ev8h0LTjZkyS+6rQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4ZDk4NTc0LTkwYjctNGIwYi1hZjM1LTg4OTU0YjE0YTVlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYo60AwDQYJKoZIhvcNAQELBQADggEBAJ+u1p+fhjVEdEO+D1SiEbAsHvzw G7UT+5AKshIoCp86cRiEgGfD/KKTpf8p1EsolnZWNGQQ1q+V1aGPWVnqu999HcEx D+GfzhGjd+flzb9yaFvcFmFllJVRZd6/GlKjZixRpozC9wSFIEtFORABWpGjK9t+ IsV4IlkyzCDKn8x3HaD49P/NDtbQZjtuOAzWS7PQO/E1kJH14unu7VUVB97VrjZ8 4HNafTiMA1+vMjChEHe3NpnHpp31Kb4CwlFsc2XF8LIupg6+iwyhg8h0eSrUs9Lq xg2y7Rd9dbHsWVp+5iVd/+PxCrIdT9xo0vsABrr7NQzGeWLGkIwWieWALEI= -----END CERTIFICATE-----Generated at Mon Aug 3 05:43:58 2026 by rpki-client