$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa File: a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa (raw, json) Hash identifier: ddmeY8Ge8xJ9OV1qefmZjxtgEgTLrmIm+S8jANAmLyA= Subject key identifier: C0:46:25:51:D6:25:2C:F3:87:1C:CE:AE:5B:C7:3B:ED:EA:AA:6D:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BA2843272C1538735532D71C880F3CA187BC591 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa Signing time: Thu 23 Jul 2026 00:11:44 +0000 ROA not before: Thu 23 Jul 2026 00:11:44 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a2:84:32:72:c1:53:87:35:53:2d:71:c8:80:f3:ca:18:7b:c5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:11:44 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=6a9a3dbcb79567fb0b27ce294eee83f08b5e5b3ea78a1d4f51b833dc5036da68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ec:05:fb:f3:8d:2a:fd:4b:4f:6f:a6:2a:de: 69:6b:ca:f4:00:3c:bf:50:a3:13:dc:35:9d:70:b7: 5b:92:54:93:bf:f3:29:64:a4:f5:42:30:16:d5:b0: ab:73:8d:42:8c:8f:7a:41:06:33:40:f7:78:ff:ae: 2c:80:5c:28:68:10:51:0a:76:55:68:de:db:3f:92: ec:b3:a3:e5:eb:53:41:e8:4b:82:52:1a:dc:dc:8b: 00:5a:80:f9:58:dd:e0:a6:91:9b:75:02:ed:5e:4f: bb:05:42:3f:82:3a:6c:5e:3b:c2:60:64:b4:ac:19: 5d:c4:23:54:0c:09:6b:46:1f:2e:de:32:0c:cc:0b: 23:5f:e5:f5:cc:94:b8:08:f0:45:37:0b:f7:78:1e: 3a:46:fa:40:c1:cf:3a:93:9d:e1:b4:77:17:0b:4e: ae:6e:f6:29:1e:84:0f:e4:a5:bc:5b:4d:50:7c:33: 5e:80:2e:90:73:bf:d5:5d:dd:76:b5:7f:4c:7d:03: 18:26:50:0e:b9:d6:e4:d9:30:8c:95:37:93:b2:a1: 5f:4f:79:bb:a2:20:c0:5d:72:71:53:34:4a:0d:65: 08:c9:05:96:9c:07:7a:17:2b:38:e0:56:39:01:55: 12:29:62:87:dd:6a:4b:16:da:ce:2f:5a:5f:15:41: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:25:51:D6:25:2C:F3:87:1C:CE:AE:5B:C7:3B:ED:EA:AA:6D:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78c2cf7-6f29-4895-8a2d-8271a22f1f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.48.0/20 Signature Algorithm: sha256WithRSAEncryption 00:77:1d:f8:94:98:31:77:1d:e6:8d:d8:fa:55:00:4b:1d:2a: e9:f1:10:c2:cb:db:38:d8:a3:14:33:ff:cf:ba:78:f6:4b:46: bf:a1:60:f1:50:0b:fd:95:60:c2:28:9d:5c:7b:c8:a8:de:60: ac:48:d2:28:a8:01:cb:1b:2f:c6:55:f4:dc:cd:c2:fe:b2:2b: df:eb:1a:26:9f:66:57:b8:29:fe:67:b5:ec:f3:71:86:77:b3: 2a:72:c0:2d:de:35:cf:71:92:c0:2e:26:8b:28:d9:27:bb:07: 79:95:b6:1e:3c:35:78:d2:82:fa:d8:a5:61:da:60:67:ae:3f: be:54:e9:20:ba:ad:78:78:f1:41:70:40:ec:2c:33:00:ba:f1: db:0a:ef:88:32:28:55:b3:d0:86:73:e4:89:67:3c:e2:e5:e9: c2:ea:23:45:ba:08:4f:a6:f9:f0:78:78:0e:84:ee:b3:51:16: fe:3a:9f:26:5f:a9:88:78:1f:57:c0:0c:b9:25:7e:56:a0:ba: c7:81:a3:73:52:fc:d5:6b:04:ef:78:9c:9c:99:1e:9d:77:e1: a1:b0:e2:be:d1:f0:a7:2b:db:36:b8:73:4c:1b:c2:87:bc:40: 6a:1f:a7:2c:5f:fe:87:b9:7b:84:fa:8f:b6:ab:8d:1c:83:6a: 2b:f0:ea:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG6KEMnLBU4c1Uy1xyIDzyhh7xZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAxMTQ0WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTlhM2RiY2I3OTU2N2ZiMGIyN2NlMjk0ZWVlODNmMDhi NWU1YjNlYTc4YTFkNGY1MWI4MzNkYzUwMzZkYTY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDn7AX7840q/UtPb6Yq3mlryvQAPL9QoxPcNZ1wt1uSVJO/ 8ylkpPVCMBbVsKtzjUKMj3pBBjNA93j/riyAXChoEFEKdlVo3ts/kuyzo+XrU0Ho S4JSGtzciwBagPlY3eCmkZt1Au1eT7sFQj+COmxeO8JgZLSsGV3EI1QMCWtGHy7e MgzMCyNf5fXMlLgI8EU3C/d4HjpG+kDBzzqTneG0dxcLTq5u9ikehA/kpbxbTVB8 M16ALpBzv9Vd3Xa1f0x9AxgmUA651uTZMIyVN5OyoV9PebuiIMBdcnFTNEoNZQjJ BZacB3oXKzjgVjkBVRIpYofdaksW2s4vWl8VQc8vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwEYlUdYlLPOHHM6uW8c77eqqbZAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3OGMyY2Y3LTZmMjktNDg5NS04YTJkLTgyNzFhMjJmMWYyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmdTAwDQYJKoZIhvcNAQELBQADggEBAAB3HfiUmDF3HeaN2PpVAEsdKunx EMLL2zjYoxQz/8+6ePZLRr+hYPFQC/2VYMIonVx7yKjeYKxI0iioAcsbL8ZV9NzN wv6yK9/rGiafZle4Kf5ntezzcYZ3sypywC3eNc9xksAuJoso2Se7B3mVth48NXjS gvrYpWHaYGeuP75U6SC6rXh48UFwQOwsMwC68dsK74gyKFWz0IZz5IlnPOLl6cLq I0W6CE+m+fB4eA6E7rNRFv46nyZfqYh4H1fADLklflaguseBo3NS/NVrBO94nJyZ Hp134aGw4r7R8Kcr2za4c0wbwoe8QGofpyxf/oe5e4T6j7arjRyDaivw6l4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:57 2026 by rpki-client