$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93ef871a-5786-49ee-841f-911efeedc0f2.roa File: 93ef871a-5786-49ee-841f-911efeedc0f2.roa (raw, json) Hash identifier: 29cG6lFOXfWIwQAFJsM0R6IzuhASOk2OY5BGhGQQwoc= Subject key identifier: 3B:30:6C:DC:85:40:76:73:F7:6E:CB:F2:B0:8D:01:43:BE:E5:DE:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FDAEE6E034B374C8864AFFE3470DCC6D6205F9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93ef871a-5786-49ee-841f-911efeedc0f2.roa Signing time: Mon 03 Aug 2026 01:21:56 +0000 ROA not before: Mon 03 Aug 2026 01:21:56 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:da:ee:6e:03:4b:37:4c:88:64:af:fe:34:70:dc:c6:d6:20:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:21:56 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=5fd1377b48c5de6e5824bfe8e9cd596ad873c5f3522e082c235843ccef8eec83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:c9:3b:b4:b2:a8:0a:72:d1:6b:da:9d:f7: be:87:d7:92:48:dc:fa:8f:9d:59:32:75:f4:04:b3: 26:ab:85:f2:22:a1:f6:cb:41:ff:10:36:45:8d:bc: 61:b7:25:33:6e:74:21:00:44:b3:46:2d:df:56:dc: bd:67:82:13:7e:ab:ab:86:c8:73:1c:9d:c1:99:34: 4d:73:db:b1:b4:de:5c:a1:f4:f4:70:03:a7:1c:69: 55:7b:ab:a1:73:49:7c:87:df:10:97:71:0b:36:64: 67:76:8e:78:a3:5e:cf:95:24:26:7d:d0:21:e8:32: 2a:8e:78:bf:0d:59:f6:48:b9:93:ee:21:49:67:a1: 13:40:9a:10:5a:ab:f4:98:17:e0:b9:19:5b:23:9d: ab:02:3f:56:d7:86:98:c6:52:5d:ea:d5:ff:0d:62: 42:46:cc:f0:04:11:0f:74:ca:cc:7d:bc:c0:1e:0a: d7:92:1d:fb:85:43:64:c3:77:ca:4f:1b:f7:c7:91: 7f:6b:f1:ac:b2:26:c9:bc:36:15:d7:0b:d2:bd:7d: df:c4:2a:ba:19:5c:42:9b:a1:7b:f3:cb:f1:96:53: 66:10:f7:b0:7b:e2:0a:2d:c3:d7:47:b8:4a:f6:3d: 47:7a:1e:d0:14:6d:81:20:ed:bd:6d:25:e9:df:65: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:30:6C:DC:85:40:76:73:F7:6E:CB:F2:B0:8D:01:43:BE:E5:DE:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93ef871a-5786-49ee-841f-911efeedc0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.20.0/22 Signature Algorithm: sha256WithRSAEncryption 34:d9:cc:d7:46:28:4b:b3:c6:4d:2c:98:fc:fe:cf:e1:d3:9e: 8a:2b:ef:20:0d:d5:f4:ba:25:ec:a5:a2:b1:1a:6f:61:89:2d: 48:ba:85:0c:ac:85:d3:02:a5:76:b8:28:38:5c:8b:25:95:f1: 8a:8a:1f:d3:21:e4:7a:06:0d:4a:8e:5a:32:2b:ee:4d:b8:62: f6:9a:23:fd:72:64:7b:63:07:24:d3:41:91:7e:1e:81:7e:41: b7:a8:f7:87:06:76:3a:58:d3:44:c7:cd:ed:c3:cd:11:31:aa: 3e:eb:cb:b6:82:90:8c:ef:76:46:02:83:3c:60:8a:1c:86:83: 40:79:ae:99:59:af:33:0a:cf:19:84:77:97:6a:72:d2:09:18: a3:3f:b6:c8:0f:c6:8c:42:b1:2c:9e:05:29:ad:aa:6e:4b:0b: 53:88:44:4b:23:41:5b:27:f9:ae:8a:40:12:2d:5a:ed:d9:50: 4e:38:41:af:ba:da:d4:8a:50:5f:7f:83:e3:ce:f2:8a:6c:33: 51:6f:7a:30:50:61:f5:55:c6:f0:a8:0c:97:84:2f:0f:4d:4f: 9d:53:1a:ab:aa:d6:63:30:16:cf:1c:63:7c:c3:e0:38:fc:c0: 44:45:2d:e9:a0:e4:74:76:2d:cf:bd:cd:15:ca:c8:bc:54:ec: 16:c6:4d:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf9rubgNLN0yIZK/+NHDcxtYgX5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEyMTU2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmQxMzc3YjQ4YzVkZTZlNTgyNGJmZThlOWNkNTk2YWQ4 NzNjNWYzNTIyZTA4MmMyMzU4NDNjY2VmOGVlYzgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBY8k7tLKoCnLRa9qd976H15JI3PqPnVkydfQEsyarhfIi ofbLQf8QNkWNvGG3JTNudCEARLNGLd9W3L1nghN+q6uGyHMcncGZNE1z27G03lyh 9PRwA6ccaVV7q6FzSXyH3xCXcQs2ZGd2jnijXs+VJCZ90CHoMiqOeL8NWfZIuZPu IUlnoRNAmhBaq/SYF+C5GVsjnasCP1bXhpjGUl3q1f8NYkJGzPAEEQ90ysx9vMAe CteSHfuFQ2TDd8pPG/fHkX9r8ayyJsm8NhXXC9K9fd/EKroZXEKboXvzy/GWU2YQ 97B74gotw9dHuEr2PUd6HtAUbYEg7b1tJenfZe0zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOzBs3IVAdnP3bsvysI0BQ77l3nIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzZWY4NzFhLTU3ODYtNDllZS04NDFmLTkxMWVmZWVkYzBmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJu7xQwDQYJKoZIhvcNAQELBQADggEBADTZzNdGKEuzxk0smPz+z+HTnoor 7yAN1fS6JeylorEab2GJLUi6hQyshdMCpXa4KDhciyWV8YqKH9Mh5HoGDUqOWjIr 7k24YvaaI/1yZHtjByTTQZF+HoF+Qbeo94cGdjpY00THze3DzRExqj7ry7aCkIzv dkYCgzxgihyGg0B5rplZrzMKzxmEd5dqctIJGKM/tsgPxoxCsSyeBSmtqm5LC1OI REsjQVsn+a6KQBItWu3ZUE44Qa+62tSKUF9/g+PO8opsM1FvejBQYfVVxvCoDJeE Lw9NT51TGquq1mMwFs8cY3zD4Dj8wERFLemg5HR2Lc+9zRXKyLxU7BbGTYU= -----END CERTIFICATE-----Generated at Mon Aug 3 05:41:16 2026 by rpki-client