$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5de12f4-379b-4e73-b7ff-9282064fe09d.roa File: a5de12f4-379b-4e73-b7ff-9282064fe09d.roa (raw, json) Hash identifier: RK70a8N2C7PszafZHVnFQnGbT/cXz3zz62MIKXNAZVM= Subject key identifier: 23:B7:0D:7B:F9:1B:5D:AA:1B:0F:E1:3C:56:EF:2B:33:28:16:C7:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46A19FE06667086B4D9E4C8F7C721065FC83B1F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5de12f4-379b-4e73-b7ff-9282064fe09d.roa Signing time: Fri 17 Jul 2026 00:31:14 +0000 ROA not before: Fri 17 Jul 2026 00:31:14 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a1:9f:e0:66:67:08:6b:4d:9e:4c:8f:7c:72:10:65:fc:83:b1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:31:14 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=8785ad9b7d79e4f8efd9c9b0cf27c7c5c3870455d4620959afcbde1f66d93f72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:83:89:01:3e:22:ea:13:0e:77:6e:17:b9: d1:fe:37:24:c7:53:06:af:11:57:32:b0:81:0f:f2: ce:f3:8c:a2:80:f9:f8:bc:9a:e5:07:8d:3a:af:b3: f8:a8:2b:c6:f9:60:3d:b0:fa:c7:40:2e:c0:22:dd: fd:4b:da:d8:aa:17:74:32:dd:c3:e9:45:fc:63:6c: 4b:ef:c3:92:98:78:1f:20:5f:2a:6c:0b:b2:7e:4f: fa:9f:af:30:65:60:03:d6:60:7b:63:32:de:96:8a: 8b:d4:20:52:d0:78:35:18:9e:7d:c4:67:93:a3:6e: 3a:a3:08:ae:20:d7:6b:59:12:27:15:16:f7:16:76: 43:7a:13:49:7e:a3:18:3b:a0:b5:14:2e:ba:bb:5a: fe:7a:f4:28:35:3f:d7:da:88:76:6c:3a:13:d2:2d: 71:e8:b3:c9:26:fd:42:7f:35:66:b6:dd:16:b6:6f: e3:38:0c:cc:72:a1:bc:4f:2d:0c:b7:e3:08:6f:c9: 8b:b0:8f:f8:70:50:50:ce:d8:78:9b:20:e6:df:f8: f9:68:a5:19:71:8d:8a:23:65:9c:f2:b7:84:a5:a3: af:a8:1e:ae:6a:84:8b:d4:34:30:ef:0c:76:01:90: 3e:1a:10:a8:aa:ef:b4:91:10:85:df:ac:b0:f4:b4: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B7:0D:7B:F9:1B:5D:AA:1B:0F:E1:3C:56:EF:2B:33:28:16:C7:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5de12f4-379b-4e73-b7ff-9282064fe09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:8b:0e:3c:69:14:1a:4e:ad:04:75:4c:99:8f:3a:a6:3b:af: 42:41:5c:03:89:11:d4:af:ff:03:6a:46:51:55:61:d2:3b:14: 2a:d0:3b:53:d1:ac:93:20:87:b3:4a:2f:77:fe:5c:c1:3d:70: f5:cc:8d:c7:5a:2e:a5:d4:5a:42:5a:27:bc:17:7a:ea:e5:ab: 1e:02:2a:77:14:00:aa:9d:6d:e1:0f:40:47:95:b4:3f:bc:fa: b5:a0:01:c1:2e:fa:d7:54:19:f0:74:3d:66:a2:73:8b:95:b5: 79:5e:60:0e:7a:c3:36:93:6b:3d:a8:aa:c6:c6:3d:d5:24:e0: 56:9c:80:70:c2:0e:ec:a1:ec:87:c7:8e:a2:f0:a2:ca:37:8d: 02:6f:83:40:3d:20:eb:ee:13:68:4f:94:8b:0e:f0:bc:f1:cd: b9:b0:cf:50:c1:41:0f:38:c6:d6:fd:f3:3b:59:7c:41:a1:7f: 78:52:b7:98:fa:38:eb:fc:48:1e:20:0e:44:90:a7:51:f1:1b: 4f:a0:8a:5d:86:2c:3c:44:a6:ce:03:3c:c1:32:0b:7d:82:65: e4:85:79:d5:8b:09:89:26:86:25:d4:6d:50:16:50:6a:25:10: a6:58:cb:1b:9f:1b:96:43:c1:d2:84:3f:2c:68:2a:6f:74:01: 1d:3c:ec:94 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURqGf4GZnCGtNnkyPfHIQZfyDsfAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAzMTE0WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Nzg1YWQ5YjdkNzllNGY4ZWZkOWM5YjBjZjI3YzdjNWMz ODcwNDU1ZDQ2MjA5NTlhZmNiZGUxZjY2ZDkzZjcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp6YOJAT4i6hMOd24XudH+NyTHUwavEVcysIEP8s7zjKKA +fi8muUHjTqvs/ioK8b5YD2w+sdALsAi3f1L2tiqF3Qy3cPpRfxjbEvvw5KYeB8g XypsC7J+T/qfrzBlYAPWYHtjMt6WiovUIFLQeDUYnn3EZ5OjbjqjCK4g12tZEicV FvcWdkN6E0l+oxg7oLUULrq7Wv569Cg1P9faiHZsOhPSLXHos8km/UJ/NWa23Ra2 b+M4DMxyobxPLQy34whvyYuwj/hwUFDO2HibIObf+PlopRlxjYojZZzyt4Slo6+o Hq5qhIvUNDDvDHYBkD4aEKiq77SREIXfrLD0tINtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUI7cNe/kbXaobD+E8Vu8rMygWx60wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1ZGUxMmY0LTM3OWItNGU3My1iN2ZmLTkyODIwNjRmZTA5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQSTANBgkqhkiG9w0BAQsFAAOCAQEABIsOPGkUGk6tBHVMmY86pjuvQkFc A4kR1K//A2pGUVVh0jsUKtA7U9GskyCHs0ovd/5cwT1w9cyNx1oupdRaQlonvBd6 6uWrHgIqdxQAqp1t4Q9AR5W0P7z6taABwS7611QZ8HQ9ZqJzi5W1eV5gDnrDNpNr PaiqxsY91STgVpyAcMIO7KHsh8eOovCiyjeNAm+DQD0g6+4TaE+Uiw7wvPHNubDP UMFBDzjG1v3zO1l8QaF/eFK3mPo46/xIHiAORJCnUfEbT6CKXYYsPESmzgM8wTIL fYJl5IV51YsJiSaGJdRtUBZQaiUQpljLG58blkPB0oQ/LGgqb3QBHTzslA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:35:22 2026 by rpki-client