$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa File: 19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa (raw, json) Hash identifier: yCN93RxOsscHc4ERWAYHx4n3frcQ1JxeR7+JlRUKTKE= Subject key identifier: 44:5E:13:08:AE:7F:3D:67:20:F0:56:70:A3:60:E4:E0:9D:B6:85:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FCAF74894CCA0C9DB405F66A840125FC453023E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa Signing time: Mon 03 Aug 2026 02:01:03 +0000 ROA not before: Mon 03 Aug 2026 02:01:03 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ca:f7:48:94:cc:a0:c9:db:40:5f:66:a8:40:12:5f:c4:53:02:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:01:03 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=18068ffe52d690723c0466db3b3118a9b7a61a43def4f8008c5818a6d179e206, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:cd:7f:1f:9d:65:7e:ee:4c:35:f6:7d:10: a4:6e:a4:dc:ee:d4:5a:de:dc:c1:9e:ae:81:9d:2e: 9d:9e:e0:fc:47:cf:08:3c:11:52:84:d4:58:82:cf: 9c:af:89:a3:74:fb:6b:4a:88:78:4a:12:93:17:47: ae:dd:5f:ac:93:74:20:ac:8c:a1:bc:7f:19:52:15: fd:48:d5:54:ce:85:c4:ca:38:ae:a2:d3:49:1b:97: 66:af:98:4c:5e:cd:6f:bd:b5:9c:c8:94:f8:18:31: 4b:85:38:ce:95:33:81:53:1f:8f:5b:56:e9:bd:24: fc:9a:09:6b:7f:b1:07:3c:77:94:44:fa:13:d4:79: 26:b7:6d:c2:d0:1b:65:00:22:44:58:c7:27:65:c0: 54:2a:7b:9c:f8:50:98:e8:67:8f:79:9b:89:30:ff: f7:a7:f4:03:fc:4f:71:79:82:11:cc:ae:85:73:6b: 06:7a:6e:34:d6:3f:40:b7:15:b8:0f:9d:de:50:14: a2:35:62:d2:ea:66:43:5e:3b:b5:e0:de:c6:87:8d: f0:05:45:d4:c8:66:eb:ff:a4:4e:af:a0:19:44:00: 02:a3:69:60:a6:75:77:71:d5:83:07:63:8d:ac:b8: 2b:00:06:50:00:d2:5f:3c:6a:7c:c9:8d:f0:dc:d5: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5E:13:08:AE:7F:3D:67:20:F0:56:70:A3:60:E4:E0:9D:B6:85:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19942597-bc32-40b1-ac29-c19e9c9fd9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.19.0.0/17 Signature Algorithm: sha256WithRSAEncryption b8:80:b7:60:6f:77:da:04:09:c8:1c:65:76:70:4c:e4:38:91: 3b:9b:97:9d:ba:f3:b3:75:d4:16:21:13:6e:45:61:ae:fd:34: 36:2d:31:9b:a2:97:59:d8:d4:a9:a6:fa:4c:ae:9b:89:bc:3a: 9b:49:93:4c:3b:46:32:6f:80:41:ff:83:aa:c1:61:7d:16:24: ab:e6:04:22:5c:48:f8:8e:f7:9c:aa:32:e9:b9:f7:ec:90:d4: 50:41:46:cf:cf:9c:a0:5f:f6:c0:0b:5c:9d:4d:15:03:5a:95: 57:dc:75:97:dd:92:fb:84:1c:64:77:93:c2:9f:84:0e:37:94: 60:54:d3:1f:13:cc:42:ad:fc:0f:ba:a3:e0:2e:e2:f9:d0:85: f0:83:41:69:25:4f:b4:00:a4:16:6e:1a:c3:71:2e:15:25:ce: f1:c6:8b:2e:e0:df:f7:96:04:7a:1f:5a:dd:80:e8:5e:35:58: d4:60:36:54:95:4e:27:03:01:1b:5b:62:48:f5:9b:34:b6:4b: db:ec:18:07:35:8e:78:f6:2e:69:11:dd:85:0d:b6:84:59:8e: 84:1e:32:a8:e0:c1:40:b5:cd:c6:e7:14:7b:fd:6a:96:3c:82: 79:6b:15:a4:2d:6c:f2:64:47:46:b9:b6:a3:9f:e7:67:49:c0: e2:19:33:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT8r3SJTMoMnbQF9mqEASX8RTAj4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIwMTAzWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODA2OGZmZTUyZDY5MDcyM2MwNDY2ZGIzYjMxMThhOWI3 YTYxYTQzZGVmNGY4MDA4YzU4MThhNmQxNzllMjA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4o81/H51lfu5MNfZ9EKRupNzu1Fre3MGeroGdLp2e4PxH zwg8EVKE1FiCz5yviaN0+2tKiHhKEpMXR67dX6yTdCCsjKG8fxlSFf1I1VTOhcTK OK6i00kbl2avmExezW+9tZzIlPgYMUuFOM6VM4FTH49bVum9JPyaCWt/sQc8d5RE +hPUeSa3bcLQG2UAIkRYxydlwFQqe5z4UJjoZ495m4kw//en9AP8T3F5ghHMroVz awZ6bjTWP0C3FbgPnd5QFKI1YtLqZkNeO7Xg3saHjfAFRdTIZuv/pE6voBlEAAKj aWCmdXdx1YMHY42suCsABlAA0l88anzJjfDc1aPrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURF4TCK5/PWcg8FZwo2Dk4J22hR0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5OTQyNTk3LWJjMzItNDBiMS1hYzI5LWMxOWU5YzlmZDljZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQEwAwDQYJKoZIhvcNAQELBQADggEBALiAt2Bvd9oECcgcZXZwTOQ4kTub l52687N11BYhE25FYa79NDYtMZuil1nY1Kmm+kyum4m8OptJk0w7RjJvgEH/g6rB YX0WJKvmBCJcSPiO95yqMum59+yQ1FBBRs/PnKBf9sALXJ1NFQNalVfcdZfdkvuE HGR3k8KfhA43lGBU0x8TzEKt/A+6o+Au4vnQhfCDQWklT7QApBZuGsNxLhUlzvHG iy7g3/eWBHofWt2A6F41WNRgNlSVTicDARtbYkj1mzS2S9vsGAc1jnj2LmkR3YUN toRZjoQeMqjgwUC1zcbnFHv9apY8gnlrFaQtbPJkR0a5tqOf52dJwOIZMxQ= -----END CERTIFICATE-----Generated at Mon Aug 3 05:37:44 2026 by rpki-client