$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa File: 799c386f-67bd-428b-8c5a-c04024c7aaf2.roa (raw, json) Hash identifier: QLW+FEVBLSIVr9TZmEbGM1KVo/tvjBj38bVQgynVRgE= Subject key identifier: C4:40:C5:62:5E:C2:F5:06:4A:E9:E6:1C:E0:DA:97:2E:21:5E:EE:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57EAFCBDDB61BB48B8F57DF575F1985D102E1E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa Signing time: Sat 18 Jul 2026 00:50:07 +0000 ROA not before: Sat 18 Jul 2026 00:50:07 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:fc:bd:db:61:bb:48:b8:f5:7d:f5:75:f1:98:5d:10:2e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:50:07 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=91080b6fb305138b5eec7e64eb36c007db6aea55fadd32740cc702ed97390e6b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:30:8a:de:23:0d:27:85:42:45:9e:79:89: 90:0c:20:e8:e0:b5:d0:64:09:b5:e6:f8:5f:8d:ff: 56:f4:d1:68:dd:ad:e8:c1:a8:98:d1:ef:88:b1:ad: 65:4b:e7:67:3f:8a:27:75:ab:ba:71:c3:2c:1e:19: b3:56:07:43:90:d7:41:9e:46:c6:93:94:69:09:30: b5:c9:91:a0:f0:20:f3:03:92:78:f4:4b:b0:d1:7b: f8:16:85:74:c9:00:53:fc:a1:c2:07:62:7f:18:46: 2b:10:9d:ae:4a:64:ec:8e:a9:b3:80:0b:46:16:5d: 25:a2:18:ac:d9:9f:2f:35:be:06:e1:fe:12:35:ae: 5c:43:8d:34:6d:3e:34:c3:05:dc:27:dd:e3:1c:26: b1:f3:0b:38:11:8c:4d:47:a8:8d:19:3c:a1:7c:24: dc:a5:19:fa:88:06:eb:06:2e:93:e7:cc:2e:c1:b7: d0:f6:ba:31:d4:9c:80:a7:91:f8:b1:72:36:60:06: fc:a3:d6:b8:59:45:2e:1d:43:4e:94:f5:04:da:b1: b0:5e:94:ce:97:db:f1:3d:d4:20:09:6d:c5:d7:6e: f4:86:54:3a:54:5b:c1:73:35:17:eb:96:84:4b:40: 20:98:f0:90:80:c8:3c:b3:f2:da:23:8e:a9:a2:c4: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:40:C5:62:5E:C2:F5:06:4A:E9:E6:1C:E0:DA:97:2E:21:5E:EE:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption cb:13:ab:1c:92:19:95:3d:5e:72:2d:28:bc:b0:15:ef:cd:71: bb:76:32:5b:d9:3d:52:d0:05:96:b4:c5:dd:fe:c9:a5:77:63: 75:ce:8e:9a:79:dd:7d:9b:08:f6:5d:38:1f:ea:cf:49:06:c3: cc:2f:c4:68:9e:69:df:52:c7:73:ea:5b:a4:51:a2:10:f4:fe: 17:f5:04:ae:41:f6:ee:49:ed:d2:f4:85:ae:be:c1:8f:06:5d: 0d:9f:81:09:44:e4:f6:b6:0a:3e:ed:84:86:0f:7d:94:5f:91: 84:c3:e1:ab:11:44:75:5f:e4:8c:45:a4:00:2e:a9:28:a3:f3: f1:db:55:9f:dd:f2:78:5e:0c:f1:3a:26:a4:78:b9:1a:43:2e: a7:ca:b6:79:ea:9b:7f:c9:8d:22:6b:dd:dc:26:98:62:86:f0: e0:8b:c2:26:44:c6:0b:e9:44:84:72:75:68:3f:04:e1:2c:f4: 94:25:8d:f7:c2:32:39:48:25:05:44:c3:36:3d:37:44:24:cb: fe:c3:be:0c:99:08:95:5b:6d:57:3a:8e:db:37:31:e4:d4:23: 01:19:94:91:74:9b:a7:7c:ff:f8:75:f4:50:f9:26:e0:67:ee: 3d:b8:ea:20:e8:59:5c:33:04:db:cb:00:90:ba:53:f8:b1:72: 9a:e4:10:aa -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITV+r8vdthu0i49X31dfGYXRAuHjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA3MTgwMDUwMDdaFw0yNjEwMTYyMzU5NTla MHoxSTBHBgNVBAUTQDkxMDgwYjZmYjMwNTEzOGI1ZWVjN2U2NGViMzZjMDA3ZGI2 YWVhNTVmYWRkMzI3NDBjYzcwMmVkOTczOTBlNmIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ1AMIreIw0nhUJFnnmJkAwg6OC10GQJteb4X43/VvTRaN2t 6MGomNHviLGtZUvnZz+KJ3WrunHDLB4Zs1YHQ5DXQZ5GxpOUaQkwtcmRoPAg8wOS ePRLsNF7+BaFdMkAU/yhwgdifxhGKxCdrkpk7I6ps4ALRhZdJaIYrNmfLzW+BuH+ EjWuXEONNG0+NMMF3Cfd4xwmsfMLOBGMTUeojRk8oXwk3KUZ+ogG6wYuk+fMLsG3 0Pa6MdScgKeR+LFyNmAG/KPWuFlFLh1DTpT1BNqxsF6Uzpfb8T3UIAltxddu9IZU OlRbwXM1F+uWhEtAIJjwkIDIPLPy2iOOqaLEg5MCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBTEQMViXsL1Bkrp5hzg2pcuIV7uWjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNzk5YzM4NmYtNjdiZC00MjhiLThjNWEtYzA0MDI0YzdhYWYyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDABCJMA0GCSqGSIb3DQEBCwUAA4IBAQDLE6sckhmVPV5yLSi8sBXvzXG7djJb 2T1S0AWWtMXd/smld2N1zo6aed19mwj2XTgf6s9JBsPML8RonmnfUsdz6lukUaIQ 9P4X9QSuQfbuSe3S9IWuvsGPBl0Nn4EJROT2tgo+7YSGD32UX5GEw+GrEUR1X+SM RaQALqkoo/Px21Wf3fJ4XgzxOiakeLkaQy6nyrZ56pt/yY0ia93cJphihvDgi8Im RMYL6USEcnVoPwThLPSUJY33wjI5SCUFRMM2PTdEJMv+w74MmQiVW21XOo7bNzHk 1CMBGZSRdJunfP/4dfRQ+SbgZ+49uOog6FlcMwTbywCQulP4sXKa5BCq -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:44 2026 by rpki-client