$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc3f5fbc-faa1-4d10-a936-826044c7520d.roa File: cc3f5fbc-faa1-4d10-a936-826044c7520d.roa (raw, json) Hash identifier: CMRITUiltVpgQOSJbnyMsVXPWGeMs4LOplrr2k+E5Bc= Subject key identifier: BC:E0:77:7D:17:E0:C9:A3:91:47:86:A7:98:5C:24:A3:72:06:37:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5470CCA615B579063196E153C3693A4847C71E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc3f5fbc-faa1-4d10-a936-826044c7520d.roa Signing time: Fri 24 Jul 2026 00:10:38 +0000 ROA not before: Fri 24 Jul 2026 00:10:38 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.209.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:70:cc:a6:15:b5:79:06:31:96:e1:53:c3:69:3a:48:47:c7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:10:38 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=da1f31b6cb5bac5f9fca8ff39cb3ae89af3a2060cd682bae0c624b27c69c05ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cf:f9:7c:20:15:4e:58:4d:9b:c5:18:bb:10: 6c:84:e5:5b:97:7d:7a:e5:4e:2d:d1:c7:b2:0a:00: 5b:2d:8c:24:fa:78:53:be:b3:86:6f:4e:2f:90:0f: 91:5d:ac:70:7a:63:c7:e0:f6:09:5e:ed:f6:e2:14: a2:9a:6a:f6:a8:4e:41:7d:17:6d:ec:d4:76:3c:42: 50:e6:3e:85:cd:60:02:56:59:89:fa:d2:5c:fc:0f: cf:1b:f4:16:0c:c6:e0:84:7b:d3:0e:c1:28:91:7c: 7f:4e:0f:56:09:16:69:c9:d9:01:6a:ef:0b:13:43: bc:53:64:df:9c:25:95:ad:b2:76:4e:ac:23:f4:7c: 6a:e2:7c:e1:62:06:63:ed:1f:35:b7:78:89:74:1a: e5:70:31:8b:b7:3a:49:b5:25:bf:69:11:74:63:34: f1:13:83:d4:43:1d:54:0a:24:85:4e:da:6b:02:aa: a3:86:39:9c:ae:a0:fb:c8:4b:eb:16:2a:66:f2:84: f4:05:3e:72:43:79:cf:34:9f:18:8c:bb:eb:90:08: 84:f9:a8:4b:4d:de:2f:9b:9a:be:28:83:db:80:3a: 62:36:43:db:44:6d:cd:d7:12:45:d7:02:ee:55:5d: 2d:9d:13:87:75:51:de:47:e2:10:eb:ed:c2:3c:1e: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:77:7D:17:E0:C9:A3:91:47:86:A7:98:5C:24:A3:72:06:37:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc3f5fbc-faa1-4d10-a936-826044c7520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.209.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5f:61:35:75:11:b0:48:2f:65:f3:04:1d:d6:f4:7e:b0:02:a8: 13:2c:d2:10:49:89:2d:99:f2:47:f3:0d:a6:f6:dd:e9:36:d8: 9a:2c:53:f0:5f:78:e8:92:16:9b:4d:57:8a:d2:98:80:56:79: 26:79:f4:af:fd:4d:e9:01:c4:44:20:4e:6e:b2:53:7f:10:aa: fb:91:29:a9:1c:08:78:a8:62:66:cd:5f:89:ea:a9:e4:66:4a: 78:83:a0:76:40:cb:fb:ce:cd:2d:eb:6b:83:76:39:59:3b:ef: 31:1d:09:2d:c3:45:dc:5b:2c:97:8c:b7:77:dc:1c:a4:d2:53: e9:a1:d1:60:6f:9d:5a:fa:1c:aa:41:12:6f:a8:85:6e:f9:2d: 20:83:7a:27:bc:a4:51:fc:05:64:a0:cc:59:f7:60:cd:2e:44: 03:07:4e:1b:ad:3d:c7:4c:f5:41:20:d8:c4:2b:bf:b3:d6:16: 09:e9:18:fc:3f:75:22:77:5f:76:93:1d:51:67:93:8e:dd:0a: 2e:37:99:28:4d:fd:22:26:e8:4e:f6:3b:51:ef:05:c2:a6:18: c7:41:5c:e1:a1:e4:c1:39:61:35:ec:2e:04:8e:b9:22:ae:dd: 53:27:7d:9c:a5:1c:04:82:76:3a:15:91:ec:7e:f7:4a:e2:1a: 50:01:dc:01 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITVHDMphW1eQYxluFTw2k6SEfHHjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA3MjQwMDEwMzhaFw0yNjEwMjIyMzU5NTla MHoxSTBHBgNVBAUTQGRhMWYzMWI2Y2I1YmFjNWY5ZmNhOGZmMzljYjNhZTg5YWYz YTIwNjBjZDY4MmJhZTBjNjI0YjI3YzY5YzA1Y2UxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOLP+XwgFU5YTZvFGLsQbITlW5d9euVOLdHHsgoAWy2MJPp4 U76zhm9OL5APkV2scHpjx+D2CV7t9uIUoppq9qhOQX0XbezUdjxCUOY+hc1gAlZZ ifrSXPwPzxv0FgzG4IR70w7BKJF8f04PVgkWacnZAWrvCxNDvFNk35wlla2ydk6s I/R8auJ84WIGY+0fNbd4iXQa5XAxi7c6SbUlv2kRdGM08ROD1EMdVAokhU7aawKq o4Y5nK6g+8hL6xYqZvKE9AU+ckN5zzSfGIy765AIhPmoS03eL5uaviiD24A6YjZD 20RtzdcSRdcC7lVdLZ0Th3VR3kfiEOvtwjweN40CAwEAAaOCArAwggKsMB0GA1Ud DgQWBBS84Hd9F+DJo5FHhqeYXCSjcgY3lzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvY2MzZjVmYmMtZmFhMS00ZDEwLWE5MzYtODI2MDQ0Yzc1MjBkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDABDRMA0GCSqGSIb3DQEBCwUAA4IBAQBfYTV1EbBIL2XzBB3W9H6wAqgTLNIQ SYktmfJH8w2m9t3pNtiaLFPwX3jokhabTVeK0piAVnkmefSv/U3pAcREIE5uslN/ EKr7kSmpHAh4qGJmzV+J6qnkZkp4g6B2QMv7zs0t62uDdjlZO+8xHQktw0XcWyyX jLd33Byk0lPpodFgb51a+hyqQRJvqIVu+S0gg3onvKRR/AVkoMxZ92DNLkQDB04b rT3HTPVBINjEK7+z1hYJ6Rj8P3Uid192kx1RZ5OO3QouN5koTf0iJuhO9jtR7wXC phjHQVzhoeTBOWE17C4Ejrkirt1TJ32cpRwEgnY6FZHsfvdK4hpQAdwB -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:49 2026 by rpki-client