$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c4e920b-ec71-48a2-8a49-a9e978539728.roa File: 4c4e920b-ec71-48a2-8a49-a9e978539728.roa (raw, json) Hash identifier: QpCcYqO3QhBFNepOZDvjEpoancRr0mqungt41Ij36zA= Subject key identifier: 0B:EF:B8:9A:4D:9B:52:C2:AC:67:89:76:BC:A8:DC:93:5F:F8:8B:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4622D0EB7DC3A74E033AD8C788BC66AFF7CE50D5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c4e920b-ec71-48a2-8a49-a9e978539728.roa Signing time: Sat 18 Jul 2026 00:51:43 +0000 ROA not before: Sat 18 Jul 2026 00:51:43 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.136.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:d0:eb:7d:c3:a7:4e:03:3a:d8:c7:88:bc:66:af:f7:ce:50:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:51:43 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=af7a7436402fcbc8807f4e5defaa0a3c7cf59b4bf61bfd44b63c8df8bcc9f292, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:89:ca:9b:6c:ac:aa:11:dc:e4:42:df:2d: ce:56:ab:95:79:fa:7d:7f:c0:fe:9b:8b:28:66:97: 65:68:a6:33:95:10:0d:4c:5f:8c:78:67:aa:8a:f3: b9:b7:01:87:2f:03:e5:18:50:15:f1:68:f1:d4:ab: 43:a4:cf:05:0e:82:cf:78:98:20:f5:dd:1d:fc:bc: ea:44:e0:4d:20:ba:f6:e9:b8:bf:6b:2d:ae:1b:a1: c3:3c:71:b1:56:55:33:b8:b9:51:9e:57:c5:df:f1: 58:c9:cf:4c:77:e2:21:ad:04:08:4b:c9:e7:87:06: 01:c9:94:83:a4:a2:da:ba:c9:1c:8a:55:bd:fe:48: 46:5d:24:b1:30:84:ea:12:8f:1e:21:3e:60:7b:76: 8f:79:e0:8a:d5:ce:b5:35:90:d9:35:e6:c2:6c:9c: bc:30:4f:dd:97:c2:62:1a:28:ab:4e:cb:a3:cc:87: 8a:fe:0b:3f:99:21:e4:92:91:86:7c:03:28:7e:e4: 46:dd:74:1a:36:9e:5f:a6:7f:e8:f7:d1:68:41:c8: 43:fd:2d:8c:e4:60:da:e3:09:91:5c:3d:2b:f6:d1: e9:c8:24:43:4d:55:ba:92:ba:4e:b5:d9:7a:8a:84: 61:6d:94:85:51:55:b4:7c:db:40:0b:e0:d4:01:a3: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EF:B8:9A:4D:9B:52:C2:AC:67:89:76:BC:A8:DC:93:5F:F8:8B:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c4e920b-ec71-48a2-8a49-a9e978539728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.136.0.0/16 Signature Algorithm: sha256WithRSAEncryption 91:13:4a:bd:27:82:eb:ea:1d:29:86:c2:25:04:c0:c5:f9:af: ca:f1:f3:36:09:06:e6:3a:8a:e2:1f:7a:e3:2c:44:6a:39:39: 72:7b:0d:6a:50:91:03:60:f0:88:0d:cf:42:a3:be:a1:82:bb: f4:ff:74:1a:12:6c:81:fd:70:84:38:9e:a0:22:e4:de:ac:b7: db:95:5f:b8:ed:67:38:8f:0c:a4:c4:b4:f9:bf:2e:49:03:2d: 08:6e:42:87:83:21:87:9a:33:35:fc:d4:5f:38:39:f1:a2:5f: 2c:2b:df:f5:2b:7e:9d:21:8f:c3:df:1d:6a:45:df:94:df:c9: 4e:e5:6f:89:1e:f6:d3:30:1c:03:9c:b9:0b:ed:62:18:a6:4a: 85:cd:c1:33:cc:55:fe:82:de:e7:20:0c:5d:b9:84:d8:20:bd: 23:be:a2:06:9b:32:cf:ce:f8:99:58:55:fb:e5:da:95:65:1f: 05:99:a0:8c:4a:e1:ec:c9:f6:ac:28:52:ef:2b:73:6d:62:64: aa:c5:3c:7c:09:5d:4f:29:b1:4a:ed:ab:a1:e0:b2:d3:a5:fd: d6:98:da:9e:65:a2:b8:1c:e1:52:0d:a8:92:c5:ec:f7:53:70: 85:24:89:0c:1b:64:4e:86:28:e2:81:c8:2a:1f:bb:04:5b:8b: d0:34:ac:c0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURiLQ633Dp04DOtjHiLxmr/fOUNUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA1MTQzWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjdhNzQzNjQwMmZjYmM4ODA3ZjRlNWRlZmFhMGEzYzdj ZjU5YjRiZjYxYmZkNDRiNjNjOGRmOGJjYzlmMjkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhs4nKm2ysqhHc5ELfLc5Wq5V5+n1/wP6biyhml2VopjOV EA1MX4x4Z6qK87m3AYcvA+UYUBXxaPHUq0OkzwUOgs94mCD13R38vOpE4E0guvbp uL9rLa4bocM8cbFWVTO4uVGeV8Xf8VjJz0x34iGtBAhLyeeHBgHJlIOkotq6yRyK Vb3+SEZdJLEwhOoSjx4hPmB7do954IrVzrU1kNk15sJsnLwwT92XwmIaKKtOy6PM h4r+Cz+ZIeSSkYZ8Ayh+5EbddBo2nl+mf+j30WhByEP9LYzkYNrjCZFcPSv20enI JENNVbqSuk612XqKhGFtlIVRVbR820AL4NQBo+WfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUC++4mk2bUsKsZ4l2vKjck1/4i5kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjNGU5MjBiLWVjNzEtNDhhMi04YTQ5LWE5ZTk3ODUzOTcyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2iDANBgkqhkiG9w0BAQsFAAOCAQEAkRNKvSeC6+odKYbCJQTAxfmvyvHz NgkG5jqK4h964yxEajk5cnsNalCRA2DwiA3PQqO+oYK79P90GhJsgf1whDieoCLk 3qy325VfuO1nOI8MpMS0+b8uSQMtCG5Ch4Mhh5ozNfzUXzg58aJfLCvf9St+nSGP w98dakXflN/JTuVviR720zAcA5y5C+1iGKZKhc3BM8xV/oLe5yAMXbmE2CC9I76i Bpsyz874mVhV++XalWUfBZmgjErh7Mn2rChS7ytzbWJkqsU8fAldTymxSu2roeCy 06X91pjanmWiuBzhUg2oksXs91NwhSSJDBtkToYo4oHIKh+7BFuL0DSswA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:17:15 2026 by rpki-client