$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9e8f4f-538b-40a7-8959-829f09f79955.roa File: 2f9e8f4f-538b-40a7-8959-829f09f79955.roa (raw, json) Hash identifier: 9KNLp2TCxVKtFfqeQ11kMmiHNSEb/KTRsdklUN6Ogog= Subject key identifier: 42:38:64:3C:89:A4:63:08:08:55:52:1A:92:41:C6:AA:D1:D0:BF:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 180ED2222945D962C98F4506E4DF3B99A30E6F6D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9e8f4f-538b-40a7-8959-829f09f79955.roa Signing time: Mon 03 Aug 2026 01:41:20 +0000 ROA not before: Mon 03 Aug 2026 01:41:20 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.52.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0e:d2:22:29:45:d9:62:c9:8f:45:06:e4:df:3b:99:a3:0e:6f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:41:20 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=df4bb37e2fca0076fb0552d971c835cf31ea552641ee00561c02ab6b9f03772a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:a3:6e:fd:b0:4f:95:e9:10:6f:5f:cb:db: 4a:32:56:0a:fb:2b:a5:93:34:24:b0:4d:c4:38:f4: 4f:3e:89:a5:49:d8:62:f4:60:7a:e6:5e:de:91:02: 7d:38:71:77:19:14:15:59:dc:b1:3a:db:2b:47:65: 96:6f:4d:15:d3:59:92:ed:2c:f9:d7:fb:cf:ac:19: 62:db:4d:39:92:e0:1a:95:1e:3c:9f:73:4c:ea:71: 2d:6b:f8:4d:5b:02:99:55:37:55:07:d4:b9:9d:75: 0d:48:4b:18:c3:4c:9a:54:a5:91:8c:28:cd:ca:ab: 41:db:9a:29:99:2f:8f:8e:e5:a2:1d:15:a9:c3:b8: 88:a3:2a:71:92:ce:d2:e7:1e:bc:cd:cb:94:95:cd: 78:dd:d7:04:6c:45:7a:77:24:73:c5:47:dc:5d:cc: 3e:81:80:c3:c3:4c:5a:cb:fc:08:35:73:8a:4c:31: f1:80:54:8a:6c:24:f0:b1:9a:52:ba:52:74:ae:92: 7b:09:e5:d5:51:3a:1d:65:72:a1:0c:f7:93:46:71: 92:fc:0b:fd:b5:77:09:5f:48:b8:b3:d1:7b:b2:09: ed:ed:a3:19:c4:74:e2:0b:90:a8:3b:07:6c:18:df: 5f:03:45:4c:4c:12:2a:20:e4:76:48:84:ca:d9:d8: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:64:3C:89:A4:63:08:08:55:52:1A:92:41:C6:AA:D1:D0:BF:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9e8f4f-538b-40a7-8959-829f09f79955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.52.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:67:31:f3:19:6a:d8:e8:6a:23:8f:e4:e8:98:01:c4:8a:cb: 43:8e:aa:60:e5:8b:49:4f:10:b6:13:64:0e:57:11:1e:d7:19: 67:71:5f:61:3f:c5:a2:45:76:9c:2f:0a:38:d5:ab:4f:aa:5c: 94:26:96:5d:ad:64:df:41:df:18:ae:7b:dd:ee:70:97:44:d9: df:e2:18:98:9c:b6:3b:3c:26:5c:0f:e6:cc:15:5f:be:2c:c2: ef:59:5d:50:37:b5:03:69:0d:27:ae:e8:13:82:80:15:d2:76: 8c:1a:f4:18:44:79:e4:46:76:c3:a1:fa:c6:ce:b9:15:c4:ef: 2e:e1:a8:cd:64:cc:80:1a:82:b8:c6:2d:a3:83:55:d4:6f:ad: 9e:35:a2:02:a7:01:ff:e3:0e:59:b9:2d:75:fb:a0:0e:cb:2e: 7f:86:67:55:2a:a7:21:d2:98:13:cd:5e:e3:cd:15:2c:af:83: a4:3a:ce:d3:00:fd:a1:71:6b:68:b0:ae:69:72:22:74:f6:70: 01:7f:db:f8:88:88:31:d6:07:1b:96:cf:1b:62:f2:c4:ea:d7: 92:f3:82:88:a7:d2:cd:38:5d:00:e4:ec:53:75:14:ad:54:08: 9a:19:25:c7:f5:30:bc:6f:ff:3b:b8:d3:b4:b9:a5:20:55:54: ee:2d:72:15 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGA7SIilF2WLJj0UG5N87maMOb20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDE0MTIwWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjRiYjM3ZTJmY2EwMDc2ZmIwNTUyZDk3MWM4MzVjZjMx ZWE1NTI2NDFlZTAwNTYxYzAyYWI2YjlmMDM3NzJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe46Nu/bBPlekQb1/L20oyVgr7K6WTNCSwTcQ49E8+iaVJ 2GL0YHrmXt6RAn04cXcZFBVZ3LE62ytHZZZvTRXTWZLtLPnX+8+sGWLbTTmS4BqV Hjyfc0zqcS1r+E1bAplVN1UH1LmddQ1ISxjDTJpUpZGMKM3Kq0HbmimZL4+O5aId FanDuIijKnGSztLnHrzNy5SVzXjd1wRsRXp3JHPFR9xdzD6BgMPDTFrL/Ag1c4pM MfGAVIpsJPCxmlK6UnSuknsJ5dVROh1lcqEM95NGcZL8C/21dwlfSLiz0XuyCe3t oxnEdOILkKg7B2wY318DRUxMEiog5HZIhMrZ2EmDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQjhkPImkYwgIVVIakkHGqtHQv/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmOWU4ZjRmLTUzOGItNDBhNy04OTU5LTgyOWYwOWY3OTk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQNDANBgkqhkiG9w0BAQsFAAOCAQEAEWcx8xlq2OhqI4/k6JgBxIrLQ46q YOWLSU8QthNkDlcRHtcZZ3FfYT/FokV2nC8KONWrT6pclCaWXa1k30HfGK573e5w l0TZ3+IYmJy2OzwmXA/mzBVfvizC71ldUDe1A2kNJ67oE4KAFdJ2jBr0GER55EZ2 w6H6xs65FcTvLuGozWTMgBqCuMYto4NV1G+tnjWiAqcB/+MOWbktdfugDssuf4Zn VSqnIdKYE81e480VLK+DpDrO0wD9oXFraLCuaXIidPZwAX/b+IiIMdYHG5bPG2Ly xOrXkvOCiKfSzThdAOTsU3UUrVQImhklx/UwvG//O7jTtLmlIFVU7i1yFQ== -----END CERTIFICATE-----Generated at Sat Aug 15 07:44:07 2026 by rpki-client