$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa File: acc7b570-fe00-44a4-ab2f-06f3e8044509.roa (raw, json) Hash identifier: TmBkHFZ/DlYA8hR95qJ6879YAbEoOhy31Xo16H3AX90= Subject key identifier: 86:15:4D:3E:1D:51:23:CC:EF:C8:1E:1E:7F:B2:CA:B7:20:34:AA:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D945CA600A1EBEF306B3A284ACAC94C6E336164 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa Signing time: Mon 20 Jul 2026 00:10:08 +0000 ROA not before: Mon 20 Jul 2026 00:10:08 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.248.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:94:5c:a6:00:a1:eb:ef:30:6b:3a:28:4a:ca:c9:4c:6e:33:61:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:10:08 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=d70ac8a86819677dd3508a37e7b5a7c4bdf3730256f186d77dc786d9cafa586b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:49:c0:0f:81:ea:a1:82:f1:4a:e6:cd:8d: e1:17:a9:b7:1e:4a:1d:f8:d8:9f:9b:6c:45:de:ea: 5c:02:08:80:51:ed:29:08:90:fa:fa:65:a4:f4:f2: 4c:3b:4b:61:f8:76:ba:3d:d6:5e:75:97:1f:5c:25: 49:8d:3d:a7:ac:ae:43:ba:a5:36:6e:fd:db:3e:a3: 73:81:45:0a:30:5f:33:18:01:8f:c8:e7:51:d8:58: 2b:40:e8:0c:2b:7f:e7:54:d9:44:d7:05:68:f8:b1: 1e:58:d9:40:a1:65:24:6b:72:07:88:68:a2:9c:69: b4:95:cc:36:e1:68:7e:7c:3e:d0:bd:2b:56:60:52: 9a:c9:60:ed:52:18:be:0e:99:4d:21:ca:c2:fb:a4: d3:39:9e:05:a5:73:0b:01:75:14:4a:44:c9:68:8a: 59:6a:c2:cd:62:0e:75:3f:c6:ca:ae:4c:25:28:ba: 09:9a:03:da:06:b5:03:ee:97:d3:df:8b:27:68:7d: 00:f5:c0:d4:f4:3c:68:6d:12:55:4f:2a:bc:72:3e: 45:0b:2d:93:1e:66:6f:02:23:ce:ef:1d:ab:2c:76: a9:56:f0:54:be:fe:26:e2:1d:40:3e:88:76:d3:a2: c8:92:7e:1d:4d:ac:67:9a:7c:ea:a5:5d:26:2b:31: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:4D:3E:1D:51:23:CC:EF:C8:1E:1E:7F:B2:CA:B7:20:34:AA:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.248.128.0/18 Signature Algorithm: sha256WithRSAEncryption d4:03:29:ab:14:43:45:53:e2:82:87:70:6d:ce:22:4d:9b:0d: 2c:0e:24:04:49:10:e4:d7:d0:f8:b8:7c:75:8e:d9:ec:19:bb: 58:cf:2e:2d:b5:f5:15:92:63:73:81:f9:07:b0:d6:18:0d:62: 24:dc:1c:ee:b7:1b:05:17:51:5e:af:cc:c3:4d:99:d3:be:fc: 43:01:fb:6a:f4:f6:92:9b:fc:22:09:bf:41:72:70:d7:41:4b: c1:d7:e2:de:8e:f1:5f:c3:3e:f6:fb:6f:e2:97:e7:29:7f:5a: b3:c6:39:66:41:b5:fe:53:71:03:67:00:ad:ac:05:18:8c:47: 4a:22:80:27:63:4d:00:0b:d6:f0:34:0e:95:86:2c:eb:06:31: 3a:1e:44:4c:74:21:6b:c9:b1:f8:3c:f9:4c:ba:3f:3d:7e:b0: ac:b2:e2:ec:6a:4d:f0:bf:8f:59:b1:50:6c:00:f4:03:29:5e: 3b:ba:a5:ef:d5:9f:1b:01:ef:6a:ef:72:dd:60:a4:c0:0a:45: d6:d3:3c:a2:bb:41:de:ce:03:26:b9:78:48:02:aa:63:19:00: 07:c5:8c:6b:1a:c2:c9:d9:1d:fd:1f:d8:8c:31:52:87:a7:bf: 94:6c:92:4f:d3:4e:21:dd:bc:e1:fb:29:7b:32:c8:72:25:8d: 42:c3:c6:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDZRcpgCh6+8wazooSsrJTG4zYWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAxMDA4WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzBhYzhhODY4MTk2NzdkZDM1MDhhMzdlN2I1YTdjNGJk ZjM3MzAyNTZmMTg2ZDc3ZGM3ODZkOWNhZmE1ODZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrlknAD4HqoYLxSubNjeEXqbceSh342J+bbEXe6lwCCIBR 7SkIkPr6ZaT08kw7S2H4dro91l51lx9cJUmNPaesrkO6pTZu/ds+o3OBRQowXzMY AY/I51HYWCtA6Awrf+dU2UTXBWj4sR5Y2UChZSRrcgeIaKKcabSVzDbhaH58PtC9 K1ZgUprJYO1SGL4OmU0hysL7pNM5ngWlcwsBdRRKRMloillqws1iDnU/xsquTCUo ugmaA9oGtQPul9PfiydofQD1wNT0PGhtElVPKrxyPkULLZMeZm8CI87vHassdqlW 8FS+/ibiHUA+iHbTosiSfh1NrGeafOqlXSYrMSttAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhhVNPh1RI8zvyB4ef7LKtyA0qlAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjYzdiNTcwLWZlMDAtNDRhNC1hYjJmLTA2ZjNlODA0NDUwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbY+IAwDQYJKoZIhvcNAQELBQADggEBANQDKasUQ0VT4oKHcG3OIk2bDSwO JARJEOTX0Pi4fHWO2ewZu1jPLi219RWSY3OB+Qew1hgNYiTcHO63GwUXUV6vzMNN mdO+/EMB+2r09pKb/CIJv0FycNdBS8HX4t6O8V/DPvb7b+KX5yl/WrPGOWZBtf5T cQNnAK2sBRiMR0oigCdjTQAL1vA0DpWGLOsGMToeREx0IWvJsfg8+Uy6Pz1+sKyy 4uxqTfC/j1mxUGwA9AMpXju6pe/VnxsB72rvct1gpMAKRdbTPKK7Qd7OAya5eEgC qmMZAAfFjGsawsnZHf0f2IwxUoenv5Rskk/TTiHdvOH7KXsyyHIljULDxv0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:10 2026 by rpki-client