$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa File: fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa (raw, json) Hash identifier: yQneyNSA4QKdjWEk+mMcM62UwrCu+rfm90FXB1qRV8g= Subject key identifier: 2D:E6:B3:82:A4:0F:76:5E:4C:29:C3:8D:4B:DB:CA:76:76:36:5A:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CF7B2A577D2D1EC550097B9DED287B0BC6C6F2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa Signing time: Thu 23 Jul 2026 00:30:50 +0000 ROA not before: Thu 23 Jul 2026 00:30:50 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.178.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f7:b2:a5:77:d2:d1:ec:55:00:97:b9:de:d2:87:b0:bc:6c:6f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:30:50 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=0b34820d09e80fc43f2c9d8fec7111d1d6687063396f7a7fa458aa560546227d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:e8:1f:8f:2d:bf:b6:46:b7:f7:31:5f:cc: 66:10:ff:fb:ad:a4:b8:1a:42:e9:92:43:f1:d8:52: 16:c3:0d:57:bb:0f:a7:0e:f7:cc:ce:25:a4:58:47: bb:18:a5:7b:40:b8:9d:38:38:e4:84:0c:8a:17:65: e0:a9:7d:3b:94:eb:42:f6:9d:d9:44:b7:bc:aa:c6: 73:ad:9b:5c:df:7a:18:25:39:2c:6c:a5:40:f8:57: d8:79:71:0b:11:52:ac:2c:d3:d8:f2:55:0d:cb:dc: 3f:53:a4:df:68:d0:c9:18:97:fb:2d:8b:c1:b4:05: c6:23:64:d9:25:99:0d:78:b1:68:0b:08:22:25:f3: db:71:7d:21:b1:cb:0b:46:78:ce:15:1b:6e:23:14: b2:1d:08:cc:6e:55:33:bf:fb:2c:0d:7f:b5:e3:ea: b4:f2:f8:b0:8d:72:62:8d:54:f8:0a:d9:00:57:83: 83:af:59:ae:2f:71:0f:11:fe:19:b7:40:36:26:7f: ae:20:e4:56:59:78:3d:d4:56:a2:ea:74:e1:54:8d: 81:9c:79:f3:17:c7:14:c4:21:8a:0a:63:f5:1d:a6: 0b:dd:e2:bc:f3:7c:6c:97:5c:da:be:52:c6:4c:42: 84:04:cc:4b:47:13:ac:fa:7b:9d:34:c0:1c:78:54: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:B3:82:A4:0F:76:5E:4C:29:C3:8D:4B:DB:CA:76:76:36:5A:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.178.0.0/15 Signature Algorithm: sha256WithRSAEncryption 71:3c:76:c0:f3:04:57:a9:16:91:69:7f:6b:02:e2:e0:d3:d7: ee:05:49:1a:be:a2:7c:46:a3:20:ca:50:c1:57:af:1a:3f:0d: 1a:05:f2:de:d4:17:31:3c:6f:ab:a8:fe:ac:55:c1:3f:09:39: 24:75:a5:1b:2b:80:66:9a:f3:21:4e:a4:27:2a:8b:d0:97:35: f2:b4:65:56:84:d8:19:90:4d:dd:e8:8b:eb:1b:e3:12:51:be: fd:4d:0e:64:8a:5c:ad:43:a9:e4:64:85:f3:58:02:6c:f6:0b: 87:91:03:d0:5a:d7:59:71:c8:56:f4:99:32:1e:d9:cb:bb:77: 84:de:3e:d6:58:29:e4:b3:e4:d5:4c:76:37:dd:ee:6a:3d:76: ab:7e:1c:a3:cb:fe:b7:0b:2e:a7:ac:1c:29:3e:fa:b1:78:1f: a5:9a:03:ff:e8:d5:16:07:42:4e:d4:85:89:23:64:9c:08:01: 3b:52:7b:c8:f6:8a:f8:db:7c:b3:62:46:32:61:3e:c3:c0:08: 74:55:7e:e3:fe:24:d8:3a:45:85:c1:17:24:cd:d0:4a:cf:34: 41:3c:ea:ce:b6:52:df:5a:d0:4a:30:3c:a6:37:0e:6b:57:8a: 00:87:52:43:d9:9a:2f:7e:71:19:c3:1e:b9:82:f5:a2:80:ee: ee:55:a2:a7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTPeypXfS0exVAJe53tKHsLxsbyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAzMDUwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjM0ODIwZDA5ZTgwZmM0M2YyYzlkOGZlYzcxMTFkMWQ2 Njg3MDYzMzk2ZjdhN2ZhNDU4YWE1NjA1NDYyMjdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWgOgfjy2/tka39zFfzGYQ//utpLgaQumSQ/HYUhbDDVe7 D6cO98zOJaRYR7sYpXtAuJ04OOSEDIoXZeCpfTuU60L2ndlEt7yqxnOtm1zfehgl OSxspUD4V9h5cQsRUqws09jyVQ3L3D9TpN9o0MkYl/sti8G0BcYjZNklmQ14sWgL CCIl89txfSGxywtGeM4VG24jFLIdCMxuVTO/+ywNf7Xj6rTy+LCNcmKNVPgK2QBX g4OvWa4vcQ8R/hm3QDYmf64g5FZZeD3UVqLqdOFUjYGcefMXxxTEIYoKY/Udpgvd 4rzzfGyXXNq+UsZMQoQEzEtHE6z6e500wBx4VF1rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULeazgqQPdl5MKcONS9vKdnY2WngwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlNjhhMGRkLWYxMTQtNGVhOC05OTc5LTI2ZTZlYzczMmVkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQsjANBgkqhkiG9w0BAQsFAAOCAQEAcTx2wPMEV6kWkWl/awLi4NPX7gVJ Gr6ifEajIMpQwVevGj8NGgXy3tQXMTxvq6j+rFXBPwk5JHWlGyuAZprzIU6kJyqL 0Jc18rRlVoTYGZBN3eiL6xvjElG+/U0OZIpcrUOp5GSF81gCbPYLh5ED0FrXWXHI VvSZMh7Zy7t3hN4+1lgp5LPk1Ux2N93uaj12q34co8v+twsup6wcKT76sXgfpZoD /+jVFgdCTtSFiSNknAgBO1J7yPaK+Nt8s2JGMmE+w8AIdFV+4/4k2DpFhcEXJM3Q Ss80QTzqzrZS31rQSjA8pjcOa1eKAIdSQ9maL35xGcMeuYL1ooDu7lWipw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:37:44 2026 by rpki-client