$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa File: c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa (raw, json) Hash identifier: 0B2Z+XmStxqD2+6Q6kG1Xh0liUVJ3gDGI3H4DaU0cL0= Subject key identifier: BE:CE:D2:FD:8C:E1:81:CB:0D:79:68:D0:FB:F3:FC:91:CC:E0:DA:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52659ECBA1261C43C0479CE2DD3EBCC29061B556 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa Signing time: Mon 03 Aug 2026 01:50:07 +0000 ROA not before: Mon 03 Aug 2026 01:50:07 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.128.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:65:9e:cb:a1:26:1c:43:c0:47:9c:e2:dd:3e:bc:c2:90:61:b5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:50:07 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=7a33c5b7e3838ef1c8222eb41bd77d588aab5def2bddca3ff78e01361124e202, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:1d:d9:c8:b2:ea:8c:2b:75:9e:c2:55:0c: d3:dd:1b:f5:7c:f1:82:ea:34:17:f1:47:cc:b1:92: c5:cb:23:a6:a9:5f:11:3f:51:77:8a:89:15:28:ec: 6f:25:67:5a:fc:fc:b1:56:93:6b:40:9c:f2:17:4f: 54:47:10:45:46:90:15:06:43:73:b2:50:f4:69:d3: 9a:26:e5:bf:23:9d:78:21:7c:1a:a6:06:e8:2e:a4: 58:a2:f6:9b:1d:d2:ea:a6:59:5d:ca:e1:6c:a8:2b: 8f:ea:e0:04:bb:89:66:15:5a:1c:31:f6:99:c7:a1: 82:44:fd:23:f6:dd:e9:63:85:36:f9:aa:25:ef:f6: 11:2d:e1:f0:e6:18:56:0f:00:d0:2a:e4:51:78:16: 8c:79:4b:35:2b:17:0c:2a:ca:28:be:aa:dd:23:b5: aa:14:31:f9:22:01:20:c9:98:43:b1:25:42:36:22: 91:73:d9:9a:dd:62:05:ac:2d:e8:0e:82:fd:f0:3f: ce:82:74:98:e8:c3:0e:38:ef:6e:72:6d:8a:d3:41: 2a:87:fb:cb:3c:56:44:a5:00:ab:b9:73:59:68:00: de:12:a1:0d:c7:96:ab:4b:3f:1f:90:d4:47:9a:56: 4f:f1:f8:82:aa:9e:e7:03:94:a6:6b:44:f4:fa:77: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CE:D2:FD:8C:E1:81:CB:0D:79:68:D0:FB:F3:FC:91:CC:E0:DA:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.128.64.0/19 Signature Algorithm: sha256WithRSAEncryption 0d:de:f9:c0:91:6e:de:d2:13:eb:2d:fa:64:c3:22:50:ca:e2: f4:26:c5:6b:da:50:e8:45:8b:47:c9:c5:1a:c6:3d:d5:fe:67: db:42:20:6d:a4:18:73:5d:32:be:e7:f1:04:37:95:4e:d8:d1: 50:b8:0a:9b:43:20:a6:6c:5d:a4:8a:2c:80:7f:e6:b6:d2:c4: 4b:af:87:b8:fe:d8:7d:07:3a:f2:56:ac:3c:91:86:6b:57:98: ad:8b:29:5e:57:ba:63:19:b4:90:77:80:fe:ae:f5:cb:b6:fe: f7:90:41:97:3c:36:d1:ba:88:b2:59:37:19:a5:02:db:d2:cb: 5f:27:4f:9e:81:9c:1e:91:00:d0:ed:ec:12:90:15:e0:ff:72: a6:42:5f:f1:55:e4:b1:18:c7:9a:82:73:5a:d1:70:68:d5:55: 4e:0c:a2:b0:87:68:ad:4e:3e:37:be:8c:ee:e5:62:4e:f0:8f: ba:8d:e2:11:b2:14:2f:f6:35:bc:8b:80:b2:26:ca:48:11:c0: 59:1f:b8:d7:86:05:68:4f:7a:fe:42:54:f9:e1:13:5f:98:85: 7f:db:ca:ad:43:be:5b:2e:0f:69:f1:6b:63:f5:a6:66:02:bd: 0e:40:21:e2:b0:a2:e0:e5:01:f6:be:6d:01:7b:4d:8f:b7:db: 2d:e4:8e:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUmWey6EmHEPAR5zi3T68wpBhtVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDE1MDA3WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTMzYzViN2UzODM4ZWYxYzgyMjJlYjQxYmQ3N2Q1ODhh YWI1ZGVmMmJkZGNhM2ZmNzhlMDEzNjExMjRlMjAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVqx3ZyLLqjCt1nsJVDNPdG/V88YLqNBfxR8yxksXLI6ap XxE/UXeKiRUo7G8lZ1r8/LFWk2tAnPIXT1RHEEVGkBUGQ3OyUPRp05om5b8jnXgh fBqmBugupFii9psd0uqmWV3K4WyoK4/q4AS7iWYVWhwx9pnHoYJE/SP23eljhTb5 qiXv9hEt4fDmGFYPANAq5FF4Fox5SzUrFwwqyii+qt0jtaoUMfkiASDJmEOxJUI2 IpFz2ZrdYgWsLegOgv3wP86CdJjoww44725ybYrTQSqH+8s8VkSlAKu5c1loAN4S oQ3HlqtLPx+Q1EeaVk/x+IKqnucDlKZrRPT6d3YtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvs7S/YzhgcsNeWjQ+/P8kczg2pswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzYjM3Mzc2LWJmMTYtNGY3ZS1iOWI1LWM3MGM1ZjUxN2FjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWVgEAwDQYJKoZIhvcNAQELBQADggEBAA3e+cCRbt7SE+st+mTDIlDK4vQm xWvaUOhFi0fJxRrGPdX+Z9tCIG2kGHNdMr7n8QQ3lU7Y0VC4CptDIKZsXaSKLIB/ 5rbSxEuvh7j+2H0HOvJWrDyRhmtXmK2LKV5XumMZtJB3gP6u9cu2/veQQZc8NtG6 iLJZNxmlAtvSy18nT56BnB6RANDt7BKQFeD/cqZCX/FV5LEYx5qCc1rRcGjVVU4M orCHaK1OPje+jO7lYk7wj7qN4hGyFC/2NbyLgLImykgRwFkfuNeGBWhPev5CVPnh E1+YhX/byq1DvlsuD2nxa2P1pmYCvQ5AIeKwouDlAfa+bQF7TY+32y3kjlg= -----END CERTIFICATE-----Generated at Mon Aug 3 05:42:12 2026 by rpki-client