$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa File: 05767c0c-a51a-4724-8188-24d099c58bd8.roa (raw, json) Hash identifier: YOEAty6+SqRwkmN06dB3g4VVN5QwKdIYxlko9SV2Cq8= Subject key identifier: 4F:D0:3F:21:E7:AA:37:8E:CC:13:07:22:82:E3:3E:FA:0D:0F:49:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C885D21CC79EB068300D10F3E73A08BE312EBFE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa Signing time: Fri 17 Jul 2026 00:31:18 +0000 ROA not before: Fri 17 Jul 2026 00:31:18 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:88:5d:21:cc:79:eb:06:83:00:d1:0f:3e:73:a0:8b:e3:12:eb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:31:18 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=272c2599e328df4de0b0f158857cf5b9aa7a3a092e73730fda8135f0692428c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:6c:94:c9:3f:ab:e9:9f:7d:8d:20:52:41: 35:ff:fb:43:6d:5a:70:66:43:2c:41:d5:10:28:fa: b5:eb:fb:e3:49:02:2a:6c:8c:85:2c:a9:67:4c:68: 86:aa:6a:6b:62:8b:58:25:0e:86:73:96:48:52:6d: 7b:2c:e1:6b:0c:a5:e3:b7:44:6b:de:3e:de:34:f8: 88:33:c0:c3:29:a5:90:de:7b:37:0f:1d:66:f3:1a: 16:c4:34:40:6d:94:a8:ae:27:7e:33:11:8c:4b:a6: e4:fa:af:78:13:d2:b3:8d:54:23:53:90:bb:5e:0e: 95:ab:9a:a7:34:c8:00:22:a9:e9:a1:11:b2:18:17: 74:41:bb:2d:a3:d5:bf:48:40:23:00:1d:ec:68:7e: ad:cb:8b:7b:ba:19:c1:b0:0b:77:9f:16:b0:fe:e8: e8:8e:fd:bc:a7:f6:62:1a:dc:91:ec:1c:b2:cb:6f: 21:cc:8d:af:74:81:c0:fe:df:b1:4d:29:92:0a:93: 94:37:35:8f:19:1d:e5:b5:5c:10:f6:7c:9d:6c:42: 37:98:28:62:b5:4a:48:ba:6b:5f:f1:b8:79:f0:c4: 47:26:de:7e:a4:ae:e9:bd:35:d5:bc:9e:d9:91:41: 98:4f:fc:16:97:d4:a3:27:8d:45:b7:35:9a:79:4d: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D0:3F:21:E7:AA:37:8E:CC:13:07:22:82:E3:3E:FA:0D:0F:49:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:21:41:c0:dc:fb:e0:89:2d:f2:aa:a1:1a:7c:5c:07:93:0e: c7:79:b8:1b:e2:96:50:14:b9:f8:71:19:51:f5:d7:c4:0a:fb: 37:33:24:0f:47:7e:2e:8b:92:f2:8f:2a:cf:ae:99:97:df:00: 36:28:de:15:75:96:02:c8:5e:d4:79:82:3b:1c:c2:f4:37:8c: 30:65:68:b4:09:a0:a8:7a:60:b0:c4:de:e2:33:16:17:3b:c4: b9:f6:e1:31:55:ce:12:ae:2c:5b:c4:49:ca:0d:6f:85:12:af: 5f:87:73:38:e6:38:f1:e0:45:b1:49:c8:0a:40:e7:77:79:07: cc:d1:82:91:de:b5:9f:2e:68:e3:fd:5a:fd:af:8d:ad:4b:1e: 6d:ed:44:46:4c:8a:d3:3c:57:c7:a1:62:9f:6d:fd:cb:a9:ee: 92:a9:4b:ae:1e:04:02:fb:97:e6:0e:4c:27:ca:02:dd:38:15: 2d:c4:45:80:9b:65:9d:85:2a:3d:0d:39:f1:19:72:bb:53:52: e8:be:e1:f7:ac:77:a9:34:d7:9d:79:5b:a0:7a:d5:ca:61:af: 01:5e:49:18:9b:2a:c4:14:80:e3:b9:b9:e5:d7:e2:19:50:b8: fe:cc:88:38:fc:43:a3:f5:5d:5a:87:39:1b:80:be:17:4e:b1: 37:40:24:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTIhdIcx56waDANEPPnOgi+MS6/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAzMTE4WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzJjMjU5OWUzMjhkZjRkZTBiMGYxNTg4NTdjZjViOWFh N2EzYTA5MmU3MzczMGZkYTgxMzVmMDY5MjQyOGMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX62yUyT+r6Z99jSBSQTX/+0NtWnBmQyxB1RAo+rXr++NJ AipsjIUsqWdMaIaqamtii1glDoZzlkhSbXss4WsMpeO3RGvePt40+IgzwMMppZDe ezcPHWbzGhbENEBtlKiuJ34zEYxLpuT6r3gT0rONVCNTkLteDpWrmqc0yAAiqemh EbIYF3RBuy2j1b9IQCMAHexofq3Li3u6GcGwC3efFrD+6OiO/byn9mIa3JHsHLLL byHMja90gcD+37FNKZIKk5Q3NY8ZHeW1XBD2fJ1sQjeYKGK1Ski6a1/xuHnwxEcm 3n6krum9NdW8ntmRQZhP/BaX1KMnjUW3NZp5TUprAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUT9A/IeeqN47MEwciguM++g0PSfowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NzY3YzBjLWE1MWEtNDcyNC04MTg4LTI0ZDA5OWM1OGJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQvjANBgkqhkiG9w0BAQsFAAOCAQEAniFBwNz74Ikt8qqhGnxcB5MOx3m4 G+KWUBS5+HEZUfXXxAr7NzMkD0d+LouS8o8qz66Zl98ANijeFXWWAshe1HmCOxzC 9DeMMGVotAmgqHpgsMTe4jMWFzvEufbhMVXOEq4sW8RJyg1vhRKvX4dzOOY48eBF sUnICkDnd3kHzNGCkd61ny5o4/1a/a+NrUsebe1ERkyK0zxXx6Fin239y6nukqlL rh4EAvuX5g5MJ8oC3TgVLcRFgJtlnYUqPQ058Rlyu1NS6L7h96x3qTTXnXlboHrV ymGvAV5JGJsqxBSA47m55dfiGVC4/syIOPxDo/VdWoc5G4C+F06xN0Ak4Q== -----END CERTIFICATE-----Generated at Thu Jul 23 23:01:16 2026 by rpki-client