$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa File: fac04063-f7c8-41ee-b745-4de5efa59aaf.roa (raw, json) Hash identifier: rriIUdWpcwxCBnom987nz5e8PrwEZF4Z2bxRLNPg9ik= Subject key identifier: F3:81:DC:58:15:1D:75:96:7B:BD:1E:9F:21:F7:3F:84:2F:61:AD:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20FDD63DA5319A2988A4E0C476B4F736AF20D3FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa Signing time: Fri 17 Jul 2026 00:20:07 +0000 ROA not before: Fri 17 Jul 2026 00:20:07 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.152.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fd:d6:3d:a5:31:9a:29:88:a4:e0:c4:76:b4:f7:36:af:20:d3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:20:07 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=0c038196ff7f923cb9d161e01b860157c64fd33647fb9fe1c704b45c018db742, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:54:9e:ab:e0:65:7c:96:5f:0c:7e:3f:1c: 7e:6a:b0:67:9a:b0:fc:86:a1:be:be:24:b4:da:1f: d0:af:54:92:f1:2f:ec:51:d0:d9:da:39:4b:d4:c9: e7:ce:44:b7:56:5b:95:53:d2:12:95:c4:5e:c9:18: 7f:cc:a4:d0:98:a5:23:ad:3a:2d:7e:d8:49:d4:4e: 9a:75:48:a8:2e:58:0e:c3:46:4f:22:a2:3d:c1:26: 8e:ed:cf:da:0d:23:02:35:1a:37:49:5c:ba:24:36: 7f:fa:b4:33:e1:ff:0c:f9:f3:08:29:da:e1:19:e9: ad:11:93:87:5c:f4:4e:48:41:4a:bd:75:9e:d1:63: 5f:ad:f2:a5:13:9e:9d:83:85:62:59:4a:bc:4f:58: 62:0f:48:5e:48:fd:c6:6b:9c:25:6f:33:ee:36:31: fd:47:61:38:39:b7:46:3b:1e:75:11:e0:6b:4c:da: c8:d4:ed:34:a1:43:43:07:07:86:a5:e1:34:03:1f: 1e:f3:62:b5:77:54:87:7a:52:09:6e:cd:5a:1f:d7: 86:eb:23:68:82:59:f8:3f:c6:28:ab:be:47:e5:01: ec:83:b2:bd:17:5b:fd:ba:15:1f:fe:9f:fa:0f:b4: 11:b2:8a:cc:15:ee:6c:33:f1:77:c6:2b:85:39:00: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:DC:58:15:1D:75:96:7B:BD:1E:9F:21:F7:3F:84:2F:61:AD:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption d7:46:4e:3b:30:a6:1b:0d:28:df:fc:cc:a5:b6:27:8f:37:48: b7:8a:8a:e2:78:4f:fa:76:4b:ed:c6:56:64:97:51:2d:f5:a6: 13:8d:ab:b7:84:f6:06:86:bf:41:9c:8b:6a:8c:6b:bc:7b:98: b5:31:ef:2f:a2:ca:6c:83:3e:6a:2e:c8:1b:95:f5:38:12:49: ab:f0:8f:33:b6:aa:62:1d:b3:d3:9f:72:08:33:89:a2:c5:28: f5:e3:8e:3a:92:d8:d3:41:78:b4:23:28:72:a6:02:07:9c:e0: e6:7e:21:95:21:03:8a:8b:1f:17:2e:aa:54:1f:99:65:1e:8f: 36:dc:6a:12:c2:06:9a:b1:1a:3a:0c:bc:b7:8e:f5:62:b6:46: 4a:d8:75:71:7b:b2:3f:f3:da:38:78:be:a6:96:44:10:01:7d: 2f:42:99:84:01:07:c2:97:ec:d0:2a:28:cc:95:6a:9c:47:e4: bd:9f:a7:39:c8:4d:98:83:31:25:c4:74:7e:e8:d7:45:96:45: 24:b4:ce:bc:61:46:15:b9:50:e1:92:44:9c:ca:e2:45:8d:89: ca:7d:a5:f0:8e:62:aa:86:5e:91:ec:5c:f5:37:fe:38:08:db: 99:5b:10:77:a1:f3:ab:89:03:54:ac:64:25:5a:2a:5e:c5:18: 76:d0:2c:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIP3WPaUxmimIpODEdrT3Nq8g0/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAyMDA3WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzAzODE5NmZmN2Y5MjNjYjlkMTYxZTAxYjg2MDE1N2M2 NGZkMzM2NDdmYjlmZTFjNzA0YjQ1YzAxOGRiNzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDelSeq+BlfJZfDH4/HH5qsGeasPyGob6+JLTaH9CvVJLx L+xR0NnaOUvUyefORLdWW5VT0hKVxF7JGH/MpNCYpSOtOi1+2EnUTpp1SKguWA7D Rk8ioj3BJo7tz9oNIwI1GjdJXLokNn/6tDPh/wz58wgp2uEZ6a0Rk4dc9E5IQUq9 dZ7RY1+t8qUTnp2DhWJZSrxPWGIPSF5I/cZrnCVvM+42Mf1HYTg5t0Y7HnUR4GtM 2sjU7TShQ0MHB4al4TQDHx7zYrV3VId6UgluzVof14brI2iCWfg/xiirvkflAeyD sr0XW/26FR/+n/oPtBGyiswV7mwz8XfGK4U5ABLFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU84HcWBUddZZ7vR6fIfc/hC9hrVIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhYzA0MDYzLWY3YzgtNDFlZS1iNzQ1LTRkZTVlZmE1OWFhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQmDANBgkqhkiG9w0BAQsFAAOCAQEA10ZOOzCmGw0o3/zMpbYnjzdIt4qK 4nhP+nZL7cZWZJdRLfWmE42rt4T2Boa/QZyLaoxrvHuYtTHvL6LKbIM+ai7IG5X1 OBJJq/CPM7aqYh2z059yCDOJosUo9eOOOpLY00F4tCMocqYCB5zg5n4hlSEDiosf Fy6qVB+ZZR6PNtxqEsIGmrEaOgy8t471YrZGSth1cXuyP/PaOHi+ppZEEAF9L0KZ hAEHwpfs0CoozJVqnEfkvZ+nOchNmIMxJcR0fujXRZZFJLTOvGFGFblQ4ZJEnMri RY2Jyn2l8I5iqoZekexc9Tf+OAjbmVsQd6Hzq4kDVKxkJVoqXsUYdtAsyw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:17 2026 by rpki-client