$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f97c29c9-3c94-4811-9c51-f893093882a8.roa File: f97c29c9-3c94-4811-9c51-f893093882a8.roa (raw, json) Hash identifier: i6bbR5E/aNXRM0Q2uE0ZWFYZ3Vx2VJteEJ6v45fZqsE= Subject key identifier: 13:9C:25:9A:77:AA:75:07:63:D5:3A:63:7F:D8:1A:4E:25:57:66:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 388860180C967D0695570600D7D74B0CA7A2EB95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f97c29c9-3c94-4811-9c51-f893093882a8.roa Signing time: Mon 03 Aug 2026 00:40:58 +0000 ROA not before: Mon 03 Aug 2026 00:40:58 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 174.129.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:88:60:18:0c:96:7d:06:95:57:06:00:d7:d7:4b:0c:a7:a2:eb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:40:58 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=53e468cd3e3909a4dedeb7ddc762e57fa6bc078cadc964550b01a73b3ba1dc86, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:54:15:6c:72:c7:94:34:a1:29:30:60:f3: fa:97:82:6a:95:7f:91:06:c7:50:c7:2e:96:19:aa: 7f:01:f7:c8:2f:fc:15:9d:4f:3b:86:28:0a:26:a1: 65:fc:db:89:55:1b:04:29:80:8a:2c:02:e6:c2:97: bb:8b:3b:26:d2:52:24:ac:01:8f:c7:a0:be:36:0a: 48:b2:8e:b8:7b:b5:0f:3d:f0:4e:2d:0b:ec:3d:5f: d8:c4:b6:b1:32:fd:c2:be:18:0b:1c:7b:31:ca:e4: bc:a2:52:95:9a:df:67:a3:12:01:d7:4f:fe:82:e0: 6e:3d:14:37:44:b1:f4:c0:5d:03:a1:6c:27:1d:6d: 38:1b:0d:33:e2:d8:3d:7d:57:54:c9:cf:a8:3c:85: 90:12:86:8a:ab:57:bf:1f:ea:8e:2e:d7:2f:17:32: df:86:29:05:8c:c6:65:5f:b4:c9:d5:c9:71:03:02: 0f:19:8d:99:29:54:a5:69:f4:a4:ba:12:19:e0:c7: a1:3a:4d:6c:b0:60:f8:a7:f6:3d:75:f6:72:fa:90: 77:74:6b:1b:94:7c:ea:b5:4a:86:1e:7c:52:78:ac: bf:33:9b:cd:1e:b8:68:7c:cb:47:62:53:b0:fa:c5: 5e:28:34:6d:88:06:95:d2:88:6b:eb:6c:f0:0b:e3: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9C:25:9A:77:AA:75:07:63:D5:3A:63:7F:D8:1A:4E:25:57:66:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f97c29c9-3c94-4811-9c51-f893093882a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.128.0/18 Signature Algorithm: sha256WithRSAEncryption 8e:66:0f:8d:82:74:11:14:2c:9f:75:c8:f3:a5:80:0e:55:b6: 43:76:98:1e:c3:6a:80:e6:62:f2:e1:98:63:5b:c5:9e:a4:53: 0c:e2:f4:88:5a:e6:f3:d8:38:24:f6:15:ef:11:8e:f4:41:e6: 5c:70:c6:4c:b7:e9:01:35:28:3e:a9:8b:df:1b:e6:5a:ed:eb: 8c:70:f9:80:da:4d:f2:d1:fa:3f:0d:f3:90:c6:32:70:66:0c: 32:99:01:8b:c2:74:90:64:ac:7c:de:9c:e1:fa:fc:2c:7a:c0: ee:23:56:27:02:ef:10:cd:eb:e8:f7:56:54:9d:fd:ff:e9:ac: 35:6b:5f:ab:30:87:f5:37:93:12:77:91:26:b2:ec:bf:0c:73: c0:c8:f8:91:27:0f:da:9a:d3:68:25:07:7e:fb:df:04:59:2c: 87:a3:e7:37:99:fa:c3:9a:ba:37:ff:b9:81:d2:59:29:67:95: 1f:ec:ee:a6:4e:f7:03:0b:85:53:ff:51:87:26:bf:14:25:bd: b2:7a:05:e8:19:3f:6f:48:da:81:2a:c1:16:27:06:c7:ba:af: 8e:78:b1:d2:0f:ad:22:38:2a:3e:de:b4:43:1a:b3:b3:2e:07: c7:e0:e6:91:be:04:a7:ca:8e:81:92:0b:db:0d:b8:76:73:1e: 14:02:71:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOIhgGAyWfQaVVwYA19dLDKei65UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA0MDU4WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2U0NjhjZDNlMzkwOWE0ZGVkZWI3ZGRjNzYyZTU3ZmE2 YmMwNzhjYWRjOTY0NTUwYjAxYTczYjNiYTFkYzg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnKFQVbHLHlDShKTBg8/qXgmqVf5EGx1DHLpYZqn8B98gv /BWdTzuGKAomoWX824lVGwQpgIosAubCl7uLOybSUiSsAY/HoL42Ckiyjrh7tQ89 8E4tC+w9X9jEtrEy/cK+GAscezHK5LyiUpWa32ejEgHXT/6C4G49FDdEsfTAXQOh bCcdbTgbDTPi2D19V1TJz6g8hZAShoqrV78f6o4u1y8XMt+GKQWMxmVftMnVyXED Ag8ZjZkpVKVp9KS6Ehngx6E6TWywYPin9j119nL6kHd0axuUfOq1SoYefFJ4rL8z m80euGh8y0diU7D6xV4oNG2IBpXSiGvrbPAL441DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE5wlmneqdQdj1Tpjf9gaTiVXZnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5N2MyOWM5LTNjOTQtNDgxMS05YzUxLWY4OTMwOTM4ODJhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaugYAwDQYJKoZIhvcNAQELBQADggEBAI5mD42CdBEULJ91yPOlgA5VtkN2 mB7DaoDmYvLhmGNbxZ6kUwzi9Iha5vPYOCT2Fe8RjvRB5lxwxky36QE1KD6pi98b 5lrt64xw+YDaTfLR+j8N85DGMnBmDDKZAYvCdJBkrHzenOH6/Cx6wO4jVicC7xDN 6+j3VlSd/f/prDVrX6swh/U3kxJ3kSay7L8Mc8DI+JEnD9qa02glB3773wRZLIej 5zeZ+sOaujf/uYHSWSlnlR/s7qZO9wMLhVP/UYcmvxQlvbJ6BegZP29I2oEqwRYn Bse6r454sdIPrSI4Kj7etEMas7MuB8fg5pG+BKfKjoGSC9sNuHZzHhQCcXM= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:53 2026 by rpki-client