$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95ea2ebe-82dc-4e81-8a37-192e32659b58.roa File: 95ea2ebe-82dc-4e81-8a37-192e32659b58.roa (raw, json) Hash identifier: IB06Z+0+PzoukqteIvvkTIIPqSLKCE3buTlCO74nEIE= Subject key identifier: 8A:B0:B6:48:4F:07:79:51:D0:DA:04:A8:DE:B8:C0:24:70:32:2F:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4482B7C82F3A5305DB65499B99829F141C3B103E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95ea2ebe-82dc-4e81-8a37-192e32659b58.roa Signing time: Fri 17 Jul 2026 00:01:21 +0000 ROA not before: Fri 17 Jul 2026 00:01:21 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.185.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:82:b7:c8:2f:3a:53:05:db:65:49:9b:99:82:9f:14:1c:3b:10:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:01:21 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=29cc2faebfeda85a784a0ab5705d05739379def6305e8facf139eec005a3f214, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:8e:81:4d:30:f6:e2:72:7f:1f:ee:b0:0b: 66:ad:32:c8:33:5d:aa:79:d8:9a:28:95:c0:df:fa: 86:fd:f3:df:c7:1d:9f:b1:d5:21:2b:36:23:d7:8b: 3f:c6:30:30:8e:b5:4d:98:54:9c:20:59:c6:0c:9e: 3d:7d:34:ef:28:07:84:16:ad:63:75:35:be:a1:a9: be:4c:16:ce:75:28:fd:10:ee:4b:bc:a4:4e:d8:59: 9c:fd:75:4a:5e:dd:c0:4d:fa:78:38:fe:4e:6b:e8: fe:8b:e8:51:2f:f4:96:15:42:13:c2:51:ba:30:1d: 1c:ce:d3:b8:d4:f4:e8:7e:bc:05:23:70:bd:ad:f2: a9:3c:cc:a8:d9:ec:b1:05:07:fa:3d:49:c8:c7:bc: d6:ba:32:ce:77:51:95:63:d4:03:e2:ad:15:a7:40: c7:a1:de:35:b9:d2:ad:eb:4e:8e:88:b6:de:d0:bd: 31:bf:3d:ad:07:56:2e:44:3b:06:f0:37:81:5f:2a: 5b:41:07:6f:02:20:e8:34:d5:0f:f5:cf:4e:6a:10: 07:34:83:a8:83:b5:ed:90:48:d1:da:70:b0:86:ca: 8c:39:df:1b:32:ac:c6:66:ab:43:bc:63:a4:73:73: bf:f9:cd:71:3d:94:f3:08:e8:4a:2c:87:8e:69:fa: bd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B0:B6:48:4F:07:79:51:D0:DA:04:A8:DE:B8:C0:24:70:32:2F:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95ea2ebe-82dc-4e81-8a37-192e32659b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:1b:f4:f9:f6:6a:b6:97:f6:dd:d9:ef:eb:f0:47:bf:a8:69: bf:47:ca:e3:d5:54:2b:6e:cc:2b:e1:d4:d3:76:01:4d:fc:ba: 9f:82:fd:50:2b:cb:b3:e5:c8:fc:eb:4a:a6:1a:87:5b:66:38: 04:10:97:d2:1c:a6:6e:88:be:aa:60:49:4c:ae:89:04:9d:76: 2e:47:30:35:ab:6a:83:45:6a:ff:ca:ce:3a:02:0b:53:a1:d9: 2f:b5:4a:69:0d:04:a2:2e:48:03:9d:7b:f3:09:3a:de:c5:fa: d1:2a:c0:70:ac:5f:54:0f:d0:1b:a8:cd:ef:87:a0:ef:cb:7b: de:72:62:7d:01:15:07:59:2f:34:e1:da:fc:a7:93:34:4c:e4: 10:3c:4a:3c:c3:2c:5c:e8:67:ea:14:9e:0d:09:d0:ac:5b:f3: fc:0a:ef:38:d4:cd:55:7e:42:2e:e1:26:a3:5e:2e:2d:7a:ce: 4e:b2:9d:1d:00:21:4a:24:7c:16:12:9d:d5:73:89:7d:b0:ad: 49:ad:c9:2d:64:77:70:cb:25:71:f6:b5:96:60:ec:c1:bd:d5: e7:f2:e4:c3:83:a7:41:a9:d7:f4:44:3a:60:26:7a:ff:0e:97: 6a:32:b0:19:ef:83:be:58:76:88:12:be:cc:ea:4f:6d:84:73: fe:02:70:3a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURIK3yC86UwXbZUmbmYKfFBw7ED4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMTIxWhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWNjMmZhZWJmZWRhODVhNzg0YTBhYjU3MDVkMDU3Mzkz NzlkZWY2MzA1ZThmYWNmMTM5ZWVjMDA1YTNmMjE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJyo6BTTD24nJ/H+6wC2atMsgzXap52JoolcDf+ob989/H HZ+x1SErNiPXiz/GMDCOtU2YVJwgWcYMnj19NO8oB4QWrWN1Nb6hqb5MFs51KP0Q 7ku8pE7YWZz9dUpe3cBN+ng4/k5r6P6L6FEv9JYVQhPCUbowHRzO07jU9Oh+vAUj cL2t8qk8zKjZ7LEFB/o9ScjHvNa6Ms53UZVj1APirRWnQMeh3jW50q3rTo6Itt7Q vTG/Pa0HVi5EOwbwN4FfKltBB28CIOg01Q/1z05qEAc0g6iDte2QSNHacLCGyow5 3xsyrMZmq0O8Y6Rzc7/5zXE9lPMI6Eosh45p+r2rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUirC2SE8HeVHQ2gSo3rjAJHAyL4AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1ZWEyZWJlLTgyZGMtNGU4MS04YTM3LTE5MmUzMjY1OWI1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQuTANBgkqhkiG9w0BAQsFAAOCAQEAVxv0+fZqtpf23dnv6/BHv6hpv0fK 49VUK27MK+HU03YBTfy6n4L9UCvLs+XI/OtKphqHW2Y4BBCX0hymboi+qmBJTK6J BJ12LkcwNatqg0Vq/8rOOgILU6HZL7VKaQ0Eoi5IA5178wk63sX60SrAcKxfVA/Q G6jN74eg78t73nJifQEVB1kvNOHa/KeTNEzkEDxKPMMsXOhn6hSeDQnQrFvz/Arv ONTNVX5CLuEmo14uLXrOTrKdHQAhSiR8FhKd1XOJfbCtSa3JLWR3cMslcfa1lmDs wb3V5/Lkw4OnQanX9EQ6YCZ6/w6XajKwGe+Dvlh2iBK+zOpPbYRz/gJwOg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:26:01 2026 by rpki-client