$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78d987c2-6fca-4811-b8af-393858444a4d.roa File: 78d987c2-6fca-4811-b8af-393858444a4d.roa (raw, json) Hash identifier: hW2TxlsblwVlLrVRgjbT09lgnlsIyuSp1s90D6Ou//s= Subject key identifier: CB:D2:98:72:1A:8D:1C:BA:D7:56:80:28:40:FD:47:7A:50:E1:60:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C98D0F9EA5F2789F9DAA4A2B3FABB2CAE8BF479 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78d987c2-6fca-4811-b8af-393858444a4d.roa Signing time: Sat 01 Aug 2026 00:40:12 +0000 ROA not before: Sat 01 Aug 2026 00:40:12 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 206.214.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:98:d0:f9:ea:5f:27:89:f9:da:a4:a2:b3:fa:bb:2c:ae:8b:f4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 00:40:12 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=3fad5552ab4439e0c464ba2d3408ef6caf09aaa6024c99e40d71f41690f15100, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6a:70:77:1a:c6:67:09:72:7a:3d:86:ec:06: 18:f7:00:6f:48:53:04:a2:ae:aa:2a:23:7c:6e:11: a4:8b:62:7c:5c:51:85:3f:fb:bb:4e:38:3d:94:1a: 4e:b0:ee:71:20:61:5c:4e:c2:cb:8f:4f:6d:3d:5c: c3:85:57:e4:8b:cf:37:44:5f:fa:f2:7e:ef:1e:57: d5:c4:79:7c:34:15:3b:4e:48:3f:2b:d3:31:aa:2d: 64:af:b1:84:8e:00:c2:bb:45:66:4a:89:cd:2e:41: 66:36:31:e1:64:8c:3d:e9:2d:1f:0c:ad:67:c4:4f: 10:8a:3d:b8:7d:3d:c1:05:48:6a:8c:52:80:a0:23: 8f:a0:d1:61:63:10:b4:d3:dd:b4:1c:21:65:d6:c5: f8:51:de:23:cb:35:a1:de:0d:38:6a:3c:5b:8b:9d: b5:05:1b:99:42:8e:4a:74:94:3a:30:f4:04:30:93: 20:22:eb:82:60:99:28:16:10:5f:d7:de:0a:94:8d: 2d:22:cb:77:dc:8f:b5:a2:97:29:bc:53:14:5f:8a: dd:7e:da:9e:15:47:e5:98:94:df:c0:6c:2e:21:0a: 67:bf:ca:19:f2:19:97:6c:71:cb:f8:8f:9e:84:a4: 6b:a2:52:b4:96:f8:c5:38:e2:a7:71:35:8b:cf:95: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D2:98:72:1A:8D:1C:BA:D7:56:80:28:40:FD:47:7A:50:E1:60:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78d987c2-6fca-4811-b8af-393858444a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.214.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:ae:bd:9b:f7:1b:9e:31:28:59:14:9e:0c:46:0b:6a:f3:41: dd:ad:59:bb:40:12:7f:ea:6d:5c:1d:45:df:d7:b9:4c:07:7c: e5:05:58:67:84:9e:5a:67:71:b2:6c:a8:3e:8d:fb:87:8f:69: af:08:64:5b:27:a0:7a:d7:5c:59:31:93:01:c6:45:90:eb:8f: c5:70:3c:73:6d:15:4e:d4:a1:ca:d0:e5:83:70:f1:81:8e:ab: ee:21:a9:74:6d:46:51:18:32:2f:d4:2d:e0:d7:6b:36:e8:7d: 3d:ca:46:80:27:02:d1:39:d7:cd:e1:64:b6:16:f7:33:f8:ec: 5c:f0:a6:d2:dc:ef:dc:db:a2:26:9c:df:fc:d3:d5:1a:ed:52: 69:3a:f8:44:4a:24:37:58:9d:ed:74:cf:24:47:a2:8f:07:25: 36:71:16:c8:b5:71:18:af:77:75:e2:7d:4b:3b:4b:60:67:d8: 28:bc:01:b0:3e:da:e3:ef:46:d1:7a:09:7e:44:12:6a:fb:8e: 78:a0:3d:fe:90:c8:50:a9:6e:13:8c:b5:2b:ec:57:ae:24:20: 19:02:70:67:bd:b8:a4:02:a2:3b:2e:a9:73:99:f9:f7:ef:e4: ef:5d:fd:51:71:33:47:14:17:ba:a7:b7:9c:84:63:2b:92:40: c9:d9:a4:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPJjQ+epfJ4n52qSis/q7LK6L9HkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAxMDA0MDEyWhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmFkNTU1MmFiNDQzOWUwYzQ2NGJhMmQzNDA4ZWY2Y2Fm MDlhYWE2MDI0Yzk5ZTQwZDcxZjQxNjkwZjE1MTAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIanB3GsZnCXJ6PYbsBhj3AG9IUwSirqoqI3xuEaSLYnxc UYU/+7tOOD2UGk6w7nEgYVxOwsuPT209XMOFV+SLzzdEX/ryfu8eV9XEeXw0FTtO SD8r0zGqLWSvsYSOAMK7RWZKic0uQWY2MeFkjD3pLR8MrWfETxCKPbh9PcEFSGqM UoCgI4+g0WFjELTT3bQcIWXWxfhR3iPLNaHeDThqPFuLnbUFG5lCjkp0lDow9AQw kyAi64JgmSgWEF/X3gqUjS0iy3fcj7Wilym8UxRfit1+2p4VR+WYlN/AbC4hCme/ yhnyGZdsccv4j56EpGuiUrSW+MU44qdxNYvPlRFXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy9KYchqNHLrXVoAoQP1HelDhYNswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ZDk4N2MyLTZmY2EtNDgxMS1iOGFmLTM5Mzg1ODQ0NGE0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATO1mAwDQYJKoZIhvcNAQELBQADggEBACquvZv3G54xKFkUngxGC2rzQd2t WbtAEn/qbVwdRd/XuUwHfOUFWGeEnlpncbJsqD6N+4ePaa8IZFsnoHrXXFkxkwHG RZDrj8VwPHNtFU7UocrQ5YNw8YGOq+4hqXRtRlEYMi/ULeDXazbofT3KRoAnAtE5 183hZLYW9zP47FzwptLc79zboiac3/zT1RrtUmk6+ERKJDdYne10zyRHoo8HJTZx Fsi1cRivd3XifUs7S2Bn2Ci8AbA+2uPvRtF6CX5EEmr7jnigPf6QyFCpbhOMtSvs V64kIBkCcGe9uKQCojsuqXOZ+ffv5O9d/VFxM0cUF7qnt5yEYyuSQMnZpLk= -----END CERTIFICATE-----Generated at Mon Aug 3 05:44:30 2026 by rpki-client