$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a842743f-2a64-4da9-99c9-7f095e35b425.roa File: a842743f-2a64-4da9-99c9-7f095e35b425.roa (raw, json) Hash identifier: bhBmyWT+sSfv0xah9ko01Eiq9V6dcC4aaus5eO1ZW4Y= Subject key identifier: 5F:0A:C3:B8:42:B2:21:A7:3A:4B:92:5E:BA:B9:5F:28:B2:8E:82:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 763DA4DE713207386D57DC5AE8C038AF029C8BCA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a842743f-2a64-4da9-99c9-7f095e35b425.roa Signing time: Fri 17 Jul 2026 00:10:43 +0000 ROA not before: Fri 17 Jul 2026 00:10:43 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3d:a4:de:71:32:07:38:6d:57:dc:5a:e8:c0:38:af:02:9c:8b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:10:43 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=bdcc53be4da2ab11afb1ac47e8f0423554588b8a2a6e797f6a3d1ff6df049b17, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:13:77:bf:d0:9a:11:cf:5b:b0:ff:97:f1: 36:f8:24:17:76:7c:b3:dd:98:f2:ce:56:d5:93:c7: 8c:a0:26:55:fe:8e:a1:bf:f6:2f:08:dc:8c:56:89: 70:d6:a8:ba:dc:19:c5:7b:35:4d:38:23:55:c0:18: 6d:90:3c:42:55:52:68:87:e4:b5:1b:ff:f9:fd:58: d8:72:16:30:a8:2b:f9:f9:65:4f:8d:70:72:45:82: 95:bb:35:6d:72:a0:40:c2:0c:7e:9f:8f:9d:6f:53: 67:30:92:50:66:90:87:cd:ca:52:93:bb:30:67:57: df:0f:b5:ae:b8:83:7a:e3:a0:06:7c:5e:45:b2:fb: 42:16:af:25:1d:39:b1:e0:76:f2:23:0a:4b:df:59: 65:dd:fd:64:1a:f7:0c:06:3e:62:c4:08:b6:3d:69: e8:f1:6a:e9:d9:54:35:57:f6:ea:fc:c1:d5:82:a5: db:04:0a:eb:6b:76:f3:36:ba:3e:02:d8:38:83:9f: 76:cf:48:27:4f:94:b2:e6:47:98:a2:f1:f0:50:ba: 5c:2f:df:14:40:18:e4:f5:c5:7a:37:e6:0c:69:d0: d6:08:b7:09:63:23:8c:b5:72:4b:46:94:5d:5b:c5: 97:ed:eb:48:49:fd:ce:d7:04:9a:f3:24:16:c1:64: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0A:C3:B8:42:B2:21:A7:3A:4B:92:5E:BA:B9:5F:28:B2:8E:82:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a842743f-2a64-4da9-99c9-7f095e35b425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.99.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:28:d1:ec:85:d4:16:d8:ea:e1:64:28:3e:2c:81:af:28:4b: d9:a5:51:3e:af:5a:a8:29:e3:e3:ba:99:a1:b7:46:02:9b:8d: 74:87:7a:a9:52:b9:12:88:32:2b:2a:06:71:ec:fb:e2:ab:9e: fc:75:68:65:82:97:69:7f:89:e6:3d:09:db:d4:5f:bf:ec:2c: 7f:97:9b:a2:39:08:e7:24:16:c8:20:c8:df:ad:76:67:54:ee: f5:1e:f9:dd:55:be:07:ed:fd:4e:b3:42:13:f6:30:ae:99:0b: 97:76:45:fb:cd:7c:f3:7a:52:87:a8:0e:a1:98:73:6c:a3:17: 5d:ac:84:d1:53:16:19:0f:0c:57:ee:35:a4:eb:f5:34:f9:45: 75:92:12:93:d8:bb:8e:35:db:33:63:f7:4c:8e:7b:de:35:5a: b7:73:6a:e3:fa:0f:b0:34:3e:c8:a9:0f:62:cd:58:78:a3:a9: c6:66:87:87:4d:20:5b:bd:b6:69:95:ba:4f:1f:aa:bd:93:c6: 3d:84:3f:fc:cf:d2:46:45:6c:10:c0:ec:85:f4:50:ff:a9:65: c6:4a:a4:10:54:a1:90:c6:71:d9:36:27:7d:03:55:bc:e8:74: f6:a7:7b:3e:8c:30:83:be:99:8d:91:5e:51:3f:4f:0a:a7:19: 32:14:19:ac -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdj2k3nEyBzhtV9xa6MA4rwKci8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAxMDQzWhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGNjNTNiZTRkYTJhYjExYWZiMWFjNDdlOGYwNDIzNTU0 NTg4YjhhMmE2ZTc5N2Y2YTNkMWZmNmRmMDQ5YjE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVSRN3v9CaEc9bsP+X8Tb4JBd2fLPdmPLOVtWTx4ygJlX+ jqG/9i8I3IxWiXDWqLrcGcV7NU04I1XAGG2QPEJVUmiH5LUb//n9WNhyFjCoK/n5 ZU+NcHJFgpW7NW1yoEDCDH6fj51vU2cwklBmkIfNylKTuzBnV98Pta64g3rjoAZ8 XkWy+0IWryUdObHgdvIjCkvfWWXd/WQa9wwGPmLECLY9aejxaunZVDVX9ur8wdWC pdsECutrdvM2uj4C2DiDn3bPSCdPlLLmR5ii8fBQulwv3xRAGOT1xXo35gxp0NYI twljI4y1cktGlF1bxZft60hJ/c7XBJrzJBbBZLuHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXwrDuEKyIac6S5JeurlfKLKOgrEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NDI3NDNmLTJhNjQtNGRhOS05OWM5LTdmMDk1ZTM1YjQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQYzANBgkqhkiG9w0BAQsFAAOCAQEAuCjR7IXUFtjq4WQoPiyBryhL2aVR Pq9aqCnj47qZobdGApuNdId6qVK5EogyKyoGcez74que/HVoZYKXaX+J5j0J29Rf v+wsf5ebojkI5yQWyCDI3612Z1Tu9R753VW+B+39TrNCE/YwrpkLl3ZF+81883pS h6gOoZhzbKMXXayE0VMWGQ8MV+41pOv1NPlFdZISk9i7jjXbM2P3TI573jVat3Nq 4/oPsDQ+yKkPYs1YeKOpxmaHh00gW722aZW6Tx+qvZPGPYQ//M/SRkVsEMDshfRQ /6llxkqkEFShkMZx2TYnfQNVvOh09qd7Powwg76ZjZFeUT9PCqcZMhQZrA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:46 2026 by rpki-client