$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3454ba8-e03c-463a-be52-e46f944b7fa6.roa File: d3454ba8-e03c-463a-be52-e46f944b7fa6.roa (raw, json) Hash identifier: S3WJQ493UTJLhitv+UJ1xbGEcIpm4FalRmPmzDXxz5c= Subject key identifier: 0E:BC:DB:88:FE:1C:46:3E:60:C3:F2:D4:5A:67:CF:08:09:13:6C:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F71FA7B425E5EB476F618E9922D14B17A6E1BC8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3454ba8-e03c-463a-be52-e46f944b7fa6.roa Signing time: Fri 17 Jul 2026 00:31:14 +0000 ROA not before: Fri 17 Jul 2026 00:31:14 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:71:fa:7b:42:5e:5e:b4:76:f6:18:e9:92:2d:14:b1:7a:6e:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:31:14 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=5c37566d4b7c1d4045309c995102b1c6198a6c469eb4e10378f8a2cb8feed029, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:0e:dc:64:8f:68:1a:71:34:3e:54:90:02: 5d:8e:f0:15:2e:30:5b:09:c0:ea:3a:6a:f2:e8:85: 49:cd:14:7e:69:ab:b9:90:d2:43:e5:47:e5:98:0f: 68:d6:2c:f1:d4:33:ec:42:a7:35:0e:5e:06:03:f3: d8:21:3a:3a:92:a2:54:35:89:ec:06:29:8c:d4:97: 65:27:64:ab:6c:2d:eb:32:5b:d5:fe:e6:1a:4c:bd: b9:d9:ac:95:03:2b:4d:0b:3e:01:70:8f:c3:0f:4c: eb:d7:21:3f:de:1d:00:99:65:fe:94:72:eb:56:a0: a0:07:70:e4:a1:6e:b7:5f:c5:82:f4:97:5d:c4:28: 91:f8:f9:f4:f7:eb:c7:85:f4:68:a4:62:3f:c1:48: 9f:27:0d:d3:16:c5:5b:ed:54:84:a6:0d:24:d8:26: 0d:4d:95:45:67:e1:5f:a9:d5:24:f9:14:a1:b9:de: 8d:37:a4:c4:b5:48:09:0d:36:36:fc:31:78:39:1f: 60:18:1d:e7:4b:c0:b2:7b:a6:05:18:ba:79:25:8f: 07:ae:9b:c2:97:57:96:ee:28:db:33:f9:52:2f:e2: 3c:76:76:8e:0c:54:b4:2c:8c:7f:89:8a:17:e6:16: 99:69:b2:18:71:f3:c5:d3:7f:90:aa:5c:ec:a5:b1: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:DB:88:FE:1C:46:3E:60:C3:F2:D4:5A:67:CF:08:09:13:6C:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3454ba8-e03c-463a-be52-e46f944b7fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:37:32:57:66:2c:d5:27:b3:6b:f0:1f:1f:ce:82:df:61:d8: 20:be:54:d9:34:9f:c3:4d:5d:55:8b:3f:b3:de:56:71:5b:2e: 13:de:06:22:14:7c:4e:b3:1e:f8:d7:e2:43:d3:c3:1f:a6:71: 24:c1:e4:d2:d3:79:b7:c9:fe:49:7d:ba:67:75:b0:e7:28:ca: c3:4d:9a:f6:df:1d:41:87:db:91:91:59:b0:0c:48:cb:c6:22: b1:4a:58:2a:d8:35:77:f6:fc:01:b8:7d:62:a4:d3:32:7b:9a: 7e:61:5b:98:d6:73:87:1a:40:08:a2:8f:5c:bb:d3:20:6e:e4: 6d:c5:c5:b5:da:a2:a4:8d:83:62:e0:45:a4:54:26:9d:91:df: bf:0a:d2:a9:81:5a:0b:08:74:04:8c:f3:ec:3c:53:50:71:e0: f9:87:16:08:ee:b9:92:34:b4:40:47:33:59:69:31:45:d2:43: 6a:1c:9b:4f:e6:ab:ae:30:29:b4:ad:5d:73:2a:d3:f8:6a:a3: d3:fa:22:1d:22:b6:60:06:d8:36:10:24:76:d8:0d:05:6b:e7: 5d:54:a4:3b:c5:1d:d6:16:a0:ca:36:56:95:9b:40:05:e7:fe: cf:cc:56:be:80:27:b7:b5:2b:5e:40:09:45:52:4e:b6:f7:c8: 69:f0:6d:46 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX3H6e0JeXrR29hjpki0UsXpuG8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAzMTE0WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzM3NTY2ZDRiN2MxZDQwNDUzMDljOTk1MTAyYjFjNjE5 OGE2YzQ2OWViNGUxMDM3OGY4YTJjYjhmZWVkMDI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV4w7cZI9oGnE0PlSQAl2O8BUuMFsJwOo6avLohUnNFH5p q7mQ0kPlR+WYD2jWLPHUM+xCpzUOXgYD89ghOjqSolQ1iewGKYzUl2UnZKtsLesy W9X+5hpMvbnZrJUDK00LPgFwj8MPTOvXIT/eHQCZZf6UcutWoKAHcOShbrdfxYL0 l13EKJH4+fT368eF9GikYj/BSJ8nDdMWxVvtVISmDSTYJg1NlUVn4V+p1ST5FKG5 3o03pMS1SAkNNjb8MXg5H2AYHedLwLJ7pgUYunkljweum8KXV5buKNsz+VIv4jx2 do4MVLQsjH+JihfmFplpshhx88XTf5CqXOylsTZjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDrzbiP4cRj5gw/LUWmfPCAkTbFMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzNDU0YmE4LWUwM2MtNDYzYS1iZTUyLWU0NmY5NDRiN2ZhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQaDANBgkqhkiG9w0BAQsFAAOCAQEAazcyV2Ys1Seza/AfH86C32HYIL5U 2TSfw01dVYs/s95WcVsuE94GIhR8TrMe+NfiQ9PDH6ZxJMHk0tN5t8n+SX26Z3Ww 5yjKw02a9t8dQYfbkZFZsAxIy8YisUpYKtg1d/b8Abh9YqTTMnuafmFbmNZzhxpA CKKPXLvTIG7kbcXFtdqipI2DYuBFpFQmnZHfvwrSqYFaCwh0BIzz7DxTUHHg+YcW CO65kjS0QEczWWkxRdJDahybT+arrjAptK1dcyrT+Gqj0/oiHSK2YAbYNhAkdtgN BWvnXVSkO8Ud1hagyjZWlZtABef+z8xWvoAnt7UrXkAJRVJOtvfIafBtRg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:42:59 2026 by rpki-client