$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8cd5acc-be81-4ec9-b65a-16745dc162a6.roa File: a8cd5acc-be81-4ec9-b65a-16745dc162a6.roa (raw, json) Hash identifier: NAC/9RGb6CT0KLxP0VAFURobWieJBIyAIspY51VajBo= Subject key identifier: 2E:E8:A8:3E:C0:E8:CB:48:12:A8:EA:5E:5B:52:75:A4:B9:19:36:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2274263684F2E3091F55BAEB5F761DBCAFF2F7B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8cd5acc-be81-4ec9-b65a-16745dc162a6.roa Signing time: Mon 03 Aug 2026 01:31:32 +0000 ROA not before: Mon 03 Aug 2026 01:31:32 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:74:26:36:84:f2:e3:09:1f:55:ba:eb:5f:76:1d:bc:af:f2:f7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:31:32 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=b279eafc284c3669eac83504d4b8ad68a4026fafb760905872afd3fdf7c3d83e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:36:ad:cb:4f:24:b6:c2:c5:02:94:1c:44: 0b:2f:82:dd:18:63:b5:3c:1c:67:5d:03:15:44:28: e2:82:0b:e0:ee:8d:c5:7f:37:af:4e:05:2a:da:de: a9:b4:da:85:8a:4a:38:c0:f1:a9:f2:f0:90:39:02: cb:86:fc:f6:96:fe:00:b5:f9:42:16:2f:3f:f1:94: f6:51:60:01:8c:d3:72:42:6a:63:75:de:56:19:42: 43:13:62:0f:d8:07:0d:c5:75:9f:c4:95:4e:71:4f: 90:bb:5d:be:2a:05:52:26:a2:bc:fc:ac:c0:19:c6: be:ea:47:06:23:35:ce:39:ef:bf:e5:2a:c9:82:f9: 2d:60:fe:ba:1c:ba:d7:fc:fb:03:4b:96:f1:e3:e8: 9e:89:41:52:b2:19:6c:75:91:23:52:66:d7:25:03: f4:18:34:22:36:d3:18:17:6f:b1:5a:f3:2b:a3:c5: 77:de:9d:50:cb:08:80:9e:13:12:47:90:4c:67:64: bc:62:46:be:41:f7:88:89:73:76:c0:92:32:95:00: 50:8f:ff:94:58:51:b1:8c:b6:4a:2b:b3:db:b6:fd: 21:b5:c6:e9:54:23:20:c3:a9:fc:ef:73:2d:ca:1e: de:79:2a:1c:9b:d6:df:ec:81:17:0a:ba:93:ba:78: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:A8:3E:C0:E8:CB:48:12:A8:EA:5E:5B:52:75:A4:B9:19:36:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8cd5acc-be81-4ec9-b65a-16745dc162a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.128.0/23 Signature Algorithm: sha256WithRSAEncryption 87:9e:51:f1:d2:d4:f0:eb:a3:a3:02:e7:95:d8:12:8f:fa:48: 34:f7:90:eb:74:b7:07:4e:18:6b:fb:ec:09:c1:f8:a1:da:8e: 73:11:0f:a1:04:de:9a:9c:3c:88:7a:fc:68:fb:f2:cd:06:d7: 6e:66:c8:9b:73:91:42:ba:80:f0:aa:5d:ce:08:75:81:c5:91: 86:83:b5:62:f1:ec:06:64:09:ad:16:e9:ba:58:78:aa:46:7f: 9e:51:62:c4:ff:50:69:b2:64:01:34:a6:9c:62:3b:92:0f:f3: 67:30:9e:dd:a8:27:09:09:e9:c7:72:71:0f:31:11:1d:a0:a2: 8b:a0:c4:1a:e7:e3:42:a6:86:58:54:2f:5b:4d:bb:22:e5:6c: bc:f6:e3:0e:c5:a6:30:e9:85:22:f1:46:6d:a5:7d:20:cb:65: 14:cc:71:48:b6:85:a7:e7:41:63:de:3e:54:9b:4b:3f:17:18: c2:ac:44:2f:b5:82:50:2a:cc:d5:bc:34:bd:96:d8:d4:15:9c: f4:ff:47:d3:a5:68:b7:55:90:77:88:ed:16:2c:e9:a8:7a:60: 10:5e:0c:da:08:e0:5d:cf:31:a9:76:49:b9:a0:43:47:6d:6c: 3b:ec:ef:a6:fe:1c:30:03:c2:d0:17:cd:d4:61:71:9f:84:5d: 93:db:77:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUInQmNoTy4wkfVbrrX3YdvK/y97EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEzMTMyWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjc5ZWFmYzI4NGMzNjY5ZWFjODM1MDRkNGI4YWQ2OGE0 MDI2ZmFmYjc2MDkwNTg3MmFmZDNmZGY3YzNkODNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClgDaty08ktsLFApQcRAsvgt0YY7U8HGddAxVEKOKCC+Du jcV/N69OBSra3qm02oWKSjjA8any8JA5AsuG/PaW/gC1+UIWLz/xlPZRYAGM03JC amN13lYZQkMTYg/YBw3FdZ/ElU5xT5C7Xb4qBVImorz8rMAZxr7qRwYjNc4577/l KsmC+S1g/rocutf8+wNLlvHj6J6JQVKyGWx1kSNSZtclA/QYNCI20xgXb7Fa8yuj xXfenVDLCICeExJHkExnZLxiRr5B94iJc3bAkjKVAFCP/5RYUbGMtkors9u2/SG1 xulUIyDDqfzvcy3KHt55Khyb1t/sgRcKupO6eKOhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULuioPsDoy0gSqOpeW1J1pLkZNlAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4Y2Q1YWNjLWJlODEtNGVjOS1iNjVhLTE2NzQ1ZGMxNjJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoAwDQYJKoZIhvcNAQELBQADggEBAIeeUfHS1PDro6MC55XYEo/6SDT3 kOt0twdOGGv77AnB+KHajnMRD6EE3pqcPIh6/Gj78s0G125myJtzkUK6gPCqXc4I dYHFkYaDtWLx7AZkCa0W6bpYeKpGf55RYsT/UGmyZAE0ppxiO5IP82cwnt2oJwkJ 6cdycQ8xER2goougxBrn40KmhlhUL1tNuyLlbLz24w7FpjDphSLxRm2lfSDLZRTM cUi2hafnQWPePlSbSz8XGMKsRC+1glAqzNW8NL2W2NQVnPT/R9OlaLdVkHeI7RYs 6ah6YBBeDNoI4F3PMal2SbmgQ0dtbDvs76b+HDADwtAXzdRhcZ+EXZPbd7E= -----END CERTIFICATE-----Generated at Mon Aug 3 05:40:33 2026 by rpki-client