$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef504dee-d869-4e21-9d5f-bf36e67ea248.roa File: ef504dee-d869-4e21-9d5f-bf36e67ea248.roa (raw, json) Hash identifier: oLxJ9fHRBN87SZ/+OVTVr8Ux8e457yYfiZsItq96xwc= Subject key identifier: 2C:46:1E:C2:4B:52:89:ED:4C:42:12:73:5C:0B:BF:29:63:BB:CE:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18635FBA01E9998A982A2A94211E69623058F6F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef504dee-d869-4e21-9d5f-bf36e67ea248.roa Signing time: Sat 25 Jul 2026 00:10:50 +0000 ROA not before: Sat 25 Jul 2026 00:10:50 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 74.221.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:63:5f:ba:01:e9:99:8a:98:2a:2a:94:21:1e:69:62:30:58:f6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:10:50 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=b1d5eea7f285e0a533a0ed09bf3b78d380d2798a8fb12f78baa6e5879afd50b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b6:0a:9b:ac:17:56:09:85:34:ce:fb:a4:a5: 2f:b7:bc:11:7f:0f:0d:6f:e7:78:5c:90:1f:29:f3: bc:aa:01:87:7b:e8:16:a0:5e:19:b5:1e:2c:b6:d4: 8d:01:77:40:ab:8a:ea:e9:86:aa:9d:e9:c2:be:00: 6d:67:7d:06:77:75:09:b0:be:f8:b3:f3:13:d3:cd: 9f:ba:66:73:94:2d:df:81:bb:52:8c:0a:9d:78:ce: 40:5d:94:8c:39:e9:64:a4:d6:d3:0c:c2:a7:dd:4c: d4:15:95:e9:b5:24:c2:89:02:02:96:cb:9a:40:6c: 48:8a:e2:4e:bb:a4:bf:30:02:fe:bd:4f:03:bc:d7: 90:b3:5b:72:a1:50:37:e3:b6:8f:33:82:3a:f9:b7: c6:c7:0d:c2:0e:5b:f5:81:90:35:34:1e:2c:48:31: 7c:67:6a:29:0a:fc:b9:a9:eb:d8:a5:7c:dc:4c:61: 3c:cc:87:56:93:e1:a6:08:82:5c:7d:01:32:e0:21: 7c:21:fe:78:3f:a3:5b:50:c7:b8:88:41:e2:5b:45: 39:b4:bd:f1:5a:0f:09:16:e5:34:d3:c8:25:8a:a3: 5f:f7:f4:de:61:9c:36:97:7c:6e:7d:4b:c7:63:70: af:52:ac:9f:b9:33:e2:21:28:6f:1d:5f:04:a2:55: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:46:1E:C2:4B:52:89:ED:4C:42:12:73:5C:0B:BF:29:63:BB:CE:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef504dee-d869-4e21-9d5f-bf36e67ea248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.221.240.0/20 Signature Algorithm: sha256WithRSAEncryption 36:3a:53:7a:08:3d:22:fb:92:b5:b3:9f:7c:b5:6d:8b:02:ab: b8:d5:3c:f0:3a:1e:61:b0:82:62:51:58:aa:7a:b9:6a:1d:09: ff:b6:d9:7c:88:3f:06:a6:cb:23:23:11:89:6c:9b:0b:83:ac: 29:10:55:e8:ee:3e:17:b9:3a:8b:b2:a3:f7:9b:d1:ae:b0:af: ee:97:63:ef:6d:97:9c:7a:e0:34:f2:dc:44:e3:86:31:e5:2e: c7:ac:ed:42:ae:be:7a:3a:98:ee:35:4f:37:09:1a:ce:0c:28: 25:72:f6:04:04:b3:91:65:ca:15:2a:81:ea:fa:58:32:da:0c: 76:90:46:1e:ee:d6:68:7f:46:6a:38:34:81:b6:1d:49:c8:52: bd:ab:82:d2:29:67:2c:52:17:ed:ca:0a:42:4b:9f:2c:44:32: f0:92:1b:5a:33:5e:04:61:23:f8:35:8d:9a:6e:d0:52:c9:9a: 74:1e:51:90:47:6f:6b:4e:dd:56:85:f1:55:45:d5:a2:44:0e: e8:7d:f5:81:bc:2d:81:45:87:52:19:be:90:c0:48:5c:28:e7: a4:e4:5d:b2:7f:3a:fd:9c:f4:0b:e8:ab:0c:7e:b9:c4:ee:cc: 8a:d8:5b:a4:86:b4:12:9b:32:79:9a:52:8a:b5:3d:dd:74:d2: ec:76:b0:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGGNfugHpmYqYKiqUIR5pYjBY9vcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAxMDUwWhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWQ1ZWVhN2YyODVlMGE1MzNhMGVkMDliZjNiNzhkMzgw ZDI3OThhOGZiMTJmNzhiYWE2ZTU4NzlhZmQ1MGI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDntgqbrBdWCYU0zvukpS+3vBF/Dw1v53hckB8p87yqAYd7 6BagXhm1Hiy21I0Bd0Criurphqqd6cK+AG1nfQZ3dQmwvviz8xPTzZ+6ZnOULd+B u1KMCp14zkBdlIw56WSk1tMMwqfdTNQVlem1JMKJAgKWy5pAbEiK4k67pL8wAv69 TwO815CzW3KhUDfjto8zgjr5t8bHDcIOW/WBkDU0HixIMXxnaikK/Lmp69ilfNxM YTzMh1aT4aYIglx9ATLgIXwh/ng/o1tQx7iIQeJbRTm0vfFaDwkW5TTTyCWKo1/3 9N5hnDaXfG59S8djcK9SrJ+5M+IhKG8dXwSiVd2DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULEYewktSie1MQhJzXAu/KWO7znkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNTA0ZGVlLWQ4NjktNGUyMS05ZDVmLWJmMzZlNjdlYTI0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARK3fAwDQYJKoZIhvcNAQELBQADggEBADY6U3oIPSL7krWzn3y1bYsCq7jV PPA6HmGwgmJRWKp6uWodCf+22XyIPwamyyMjEYlsmwuDrCkQVejuPhe5Oouyo/eb 0a6wr+6XY+9tl5x64DTy3ETjhjHlLses7UKuvno6mO41TzcJGs4MKCVy9gQEs5Fl yhUqger6WDLaDHaQRh7u1mh/Rmo4NIG2HUnIUr2rgtIpZyxSF+3KCkJLnyxEMvCS G1ozXgRhI/g1jZpu0FLJmnQeUZBHb2tO3VaF8VVF1aJEDuh99YG8LYFFh1IZvpDA SFwo56TkXbJ/Ov2c9Avoqwx+ucTuzIrYW6SGtBKbMnmaUoq1Pd100ux2sGw= -----END CERTIFICATE-----Generated at Tue Sep 15 12:10:22 2026 by rpki-client