$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc2623bf-7dde-4a72-bf4b-e8eac80cd77e.roa File: fc2623bf-7dde-4a72-bf4b-e8eac80cd77e.roa (raw, json) Hash identifier: esDTPb/maeeDzOf+0KHSoXR8eqjIxThOZ/kmgwF3GbM= Subject key identifier: D9:1F:B1:9B:0B:EF:6C:D0:70:41:AC:54:40:07:2E:83:28:91:64:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 326E5D971F9259C7F90ABF0ACA592FE8B4B80444 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc2623bf-7dde-4a72-bf4b-e8eac80cd77e.roa Signing time: Fri 17 Jul 2026 00:20:09 +0000 ROA not before: Fri 17 Jul 2026 00:20:09 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.147.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6e:5d:97:1f:92:59:c7:f9:0a:bf:0a:ca:59:2f:e8:b4:b8:04:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:20:09 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=e568dca85b4d5e2d4abb8c7629506afe7ebe4b440ab314332a3d75bccd6f574c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:52:09:2b:9b:c9:86:c8:0f:59:b6:b8:36: 92:9f:43:7b:8c:40:2e:f6:5e:04:35:b1:c4:a1:6c: fe:41:2f:cb:60:ad:a9:15:7d:3a:4c:56:17:43:8b: 0e:7c:e3:2b:fa:bd:43:c8:2d:89:f3:79:e2:43:07: 43:13:a5:0e:61:bb:3c:e7:39:47:11:f4:36:16:f3: 61:24:33:6d:d2:10:4d:8a:cc:1d:67:5c:1e:c3:e9: 95:4a:6e:85:17:01:72:b9:3f:c5:4d:59:a2:5d:91: fb:b0:99:07:c8:16:a2:9d:64:2a:00:32:15:d5:68: a6:da:88:4d:4a:fc:a4:b6:a9:5a:5e:c6:f1:0d:d4: 88:99:c8:ad:7c:0d:fa:c2:80:9e:69:31:74:7f:71: 97:3a:86:16:28:16:50:71:81:4b:f7:b1:15:93:f5: 58:88:fc:00:8f:85:48:a4:e5:09:68:7f:fe:c8:b5: 63:a7:98:39:43:c2:a7:72:41:b3:d7:94:a9:df:18: 9f:aa:33:50:3e:a2:f2:c9:26:8f:10:46:19:71:be: 88:55:08:3d:32:76:92:6e:2b:41:85:45:19:17:86: fe:de:40:c2:a2:7d:5c:97:79:fd:d8:70:ec:a7:cb: 8a:46:cf:5b:81:e6:4a:19:d2:8f:a0:1a:04:32:d2: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1F:B1:9B:0B:EF:6C:D0:70:41:AC:54:40:07:2E:83:28:91:64:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc2623bf-7dde-4a72-bf4b-e8eac80cd77e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:60:67:2b:72:86:62:3a:e7:11:af:82:b9:4e:5c:c4:ec:3e: 3d:d8:33:0a:00:2a:7f:02:0b:18:48:4e:75:63:a0:a8:f2:d9: d7:68:06:5b:bb:01:e8:e3:7e:cd:37:c2:29:97:5f:d5:87:85: 45:b0:46:5f:9c:47:d0:bd:85:40:db:61:4d:18:54:9b:5f:6f: cc:70:96:fa:ef:fe:6b:8c:45:98:dc:56:c1:a9:dc:78:5f:dc: da:ee:67:74:21:a3:3f:27:fe:ab:91:fb:23:7f:96:8d:4a:26: 77:17:de:1d:c5:a2:bb:c2:b0:b0:f4:98:07:b1:81:30:65:5d: 5f:95:f1:6f:52:2c:a8:41:ad:9e:cb:60:c4:9f:fc:f1:dd:f7: 15:d1:0c:38:70:24:87:16:dc:b9:95:36:77:43:f8:9d:61:b3: d5:b7:9e:fe:91:44:2c:21:d8:eb:b0:d2:77:ae:55:b1:26:52: d0:75:aa:02:dc:cc:30:88:aa:9f:7d:eb:2b:5c:e0:2a:48:4a: d8:5d:5d:d1:d5:f8:be:46:80:8e:c1:4e:03:c4:a8:28:3f:98: 13:2b:74:bf:f2:d9:6a:29:61:85:ab:f2:8b:6b:89:2f:3d:24: 2f:68:af:0a:cb:47:de:5b:26:b1:36:8e:7a:a1:28:99:8a:7d: 62:d7:49:bd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMm5dlx+SWcf5Cr8Kylkv6LS4BEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAyMDA5WhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTY4ZGNhODViNGQ1ZTJkNGFiYjhjNzYyOTUwNmFmZTdl YmU0YjQ0MGFiMzE0MzMyYTNkNzViY2NkNmY1NzRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCztVIJK5vJhsgPWba4NpKfQ3uMQC72XgQ1scShbP5BL8tg rakVfTpMVhdDiw584yv6vUPILYnzeeJDB0MTpQ5huzznOUcR9DYW82EkM23SEE2K zB1nXB7D6ZVKboUXAXK5P8VNWaJdkfuwmQfIFqKdZCoAMhXVaKbaiE1K/KS2qVpe xvEN1IiZyK18DfrCgJ5pMXR/cZc6hhYoFlBxgUv3sRWT9ViI/ACPhUik5Qlof/7I tWOnmDlDwqdyQbPXlKnfGJ+qM1A+ovLJJo8QRhlxvohVCD0ydpJuK0GFRRkXhv7e QMKifVyXef3YcOyny4pGz1uB5koZ0o+gGgQy0li3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2R+xmwvvbNBwQaxUQAcugyiRZEwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZjMjYyM2JmLTdkZGUtNGE3Mi1iZjRiLWU4ZWFjODBjZDc3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQkzANBgkqhkiG9w0BAQsFAAOCAQEAVmBnK3KGYjrnEa+CuU5cxOw+Pdgz CgAqfwILGEhOdWOgqPLZ12gGW7sB6ON+zTfCKZdf1YeFRbBGX5xH0L2FQNthTRhU m19vzHCW+u/+a4xFmNxWwanceF/c2u5ndCGjPyf+q5H7I3+WjUomdxfeHcWiu8Kw sPSYB7GBMGVdX5Xxb1IsqEGtnstgxJ/88d33FdEMOHAkhxbcuZU2d0P4nWGz1bee /pFELCHY67DSd65VsSZS0HWqAtzMMIiqn33rK1zgKkhK2F1d0dX4vkaAjsFOA8So KD+YEyt0v/LZailhhavyi2uJLz0kL2ivCstH3lsmsTaOeqEomYp9YtdJvQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:06 2026 by rpki-client