$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59f5622d-1ca3-4310-a7bb-9aeda3799734.roa File: 59f5622d-1ca3-4310-a7bb-9aeda3799734.roa (raw, json) Hash identifier: b2YG0b+Oz/Qh4GRiBNJSAPsHDR2gotZU+e1fHVh1EVI= Subject key identifier: 26:BF:94:58:DB:BD:B2:4E:AE:5C:FE:44:AB:A9:CE:5C:D9:62:44:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36FA3A97A0A7F01821510E95E37FB77E6F231DD0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59f5622d-1ca3-4310-a7bb-9aeda3799734.roa Signing time: Fri 17 Jul 2026 00:01:02 +0000 ROA not before: Fri 17 Jul 2026 00:01:02 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fa:3a:97:a0:a7:f0:18:21:51:0e:95:e3:7f:b7:7e:6f:23:1d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 17 00:01:02 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=01c08a4c8e25668c85b12faeee11f89da729d3e4b4d8dc66cfc74d7f20fd8617, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:27:37:95:72:70:0e:f3:3e:13:04:85:dd: b3:de:79:6e:38:88:bc:97:4b:27:e8:b4:2f:32:23: bc:5c:bc:41:c3:4a:55:44:ad:ae:20:47:76:64:ce: d6:40:a5:25:07:3b:68:8d:a3:05:3f:9d:8a:5b:88: 90:5d:05:f4:03:bb:84:1f:28:50:1b:fa:94:8c:81: 14:bc:8f:e8:d9:c2:bf:54:f8:1f:b0:22:26:0f:24: 8b:93:98:24:db:97:c6:e0:5b:b6:db:9c:e8:b9:8d: 53:75:69:7f:90:a7:82:19:2f:0e:dc:20:55:80:2f: 54:eb:d5:f7:c5:01:f0:1b:1d:6b:e8:d1:a4:6b:ee: 49:8b:0c:23:48:2e:1f:77:03:3d:78:ff:89:0a:53: b1:47:90:83:3d:a7:bf:2d:8f:ed:6f:0b:e9:6d:5c: 23:68:0d:9e:61:bb:ef:7a:f5:03:a2:a2:63:7c:64: 6a:1e:e8:44:41:61:24:42:cd:45:75:69:f7:ac:99: 7e:f9:21:44:f7:29:0a:6c:12:c6:f7:cd:18:1c:84: 9f:ac:da:87:89:63:4d:8c:63:4d:fd:b9:e2:06:0f: 23:ac:cb:19:cf:b2:ea:60:4f:2a:c0:4d:9d:22:f5: 2b:a8:29:72:fe:ba:31:84:da:31:d5:e6:17:c8:86: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:94:58:DB:BD:B2:4E:AE:5C:FE:44:AB:A9:CE:5C:D9:62:44:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59f5622d-1ca3-4310-a7bb-9aeda3799734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:a2:fb:2a:46:83:62:55:76:34:ed:a3:76:9e:31:10:1e:76: c1:68:f9:18:05:b6:fd:d0:d0:96:d4:49:56:c4:10:07:59:e6: 4e:5e:9c:a7:81:ff:d5:6e:ee:81:8b:fe:f1:31:fc:de:12:b8: b5:9f:e2:cd:da:dc:fd:72:6a:48:8f:eb:01:8f:66:55:35:20: 92:ca:ec:2f:b2:42:f1:57:19:c8:1a:67:36:b2:33:73:c1:7b: 8a:7f:d0:34:53:4d:8a:13:29:75:90:48:13:e7:5c:c0:b0:25: d6:89:65:81:0e:87:a3:d9:54:28:18:65:7c:19:7a:e8:65:a1: f0:3c:3e:78:fc:d1:e0:a0:2b:1e:b0:86:9a:e7:16:1b:61:58: 5e:2a:55:36:21:df:1a:27:b2:f4:ba:f4:d6:7d:84:df:4a:0e: b4:e6:1e:9f:3b:cc:af:5b:f6:71:25:27:5a:2f:83:71:2f:8d: 43:38:30:38:47:f1:b9:07:c0:a8:51:d6:7b:a5:9d:6a:79:a3: bb:87:9a:a1:26:a7:da:39:6a:24:a2:b0:79:94:a7:b7:e5:82: 57:c3:5e:03:24:df:9c:76:6c:a0:e1:a0:9d:e7:3e:69:f9:2a: 3e:a2:2b:23:8d:79:5d:7e:31:42:00:33:db:32:b8:47:18:f4: a3:f0:94:92 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNvo6l6Cn8BghUQ6V43+3fm8jHdAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMTAyWhcNMjYxMDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWMwOGE0YzhlMjU2NjhjODViMTJmYWVlZTExZjg5ZGE3 MjlkM2U0YjRkOGRjNjZjZmM3NGQ3ZjIwZmQ4NjE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXaSc3lXJwDvM+EwSF3bPeeW44iLyXSyfotC8yI7xcvEHD SlVEra4gR3ZkztZApSUHO2iNowU/nYpbiJBdBfQDu4QfKFAb+pSMgRS8j+jZwr9U +B+wIiYPJIuTmCTbl8bgW7bbnOi5jVN1aX+Qp4IZLw7cIFWAL1Tr1ffFAfAbHWvo 0aRr7kmLDCNILh93Az14/4kKU7FHkIM9p78tj+1vC+ltXCNoDZ5hu+969QOiomN8 ZGoe6ERBYSRCzUV1afesmX75IUT3KQpsEsb3zRgchJ+s2oeJY02MY039ueIGDyOs yxnPsupgTyrATZ0i9SuoKXL+ujGE2jHV5hfIhuIZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJr+UWNu9sk6uXP5Eq6nOXNliRIMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ZjU2MjJkLTFjYTMtNDMxMC1hN2JiLTlhZWRhMzc5OTczNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQvTANBgkqhkiG9w0BAQsFAAOCAQEADaL7KkaDYlV2NO2jdp4xEB52wWj5 GAW2/dDQltRJVsQQB1nmTl6cp4H/1W7ugYv+8TH83hK4tZ/izdrc/XJqSI/rAY9m VTUgksrsL7JC8VcZyBpnNrIzc8F7in/QNFNNihMpdZBIE+dcwLAl1ollgQ6Ho9lU KBhlfBl66GWh8Dw+ePzR4KArHrCGmucWG2FYXipVNiHfGiey9Lr01n2E30oOtOYe nzvMr1v2cSUnWi+DcS+NQzgwOEfxuQfAqFHWe6Wdanmju4eaoSan2jlqJKKweZSn t+WCV8NeAyTfnHZsoOGgnec+afkqPqIrI415XX4xQgAz2zK4Rxj0o/CUkg== -----END CERTIFICATE-----Generated at Tue Jul 21 02:23:42 2026 by rpki-client