$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a645d1e4-bdce-433f-af8a-d1e1c1010b26.roa File: a645d1e4-bdce-433f-af8a-d1e1c1010b26.roa (raw, json) Hash identifier: ge7RzVvFN+Q7ypOLXuFiXCn2COpKhmJb1j7lY0y3UTo= Subject key identifier: 2F:9C:0B:20:89:55:D8:E7:95:8D:25:5A:84:2B:34:E8:9F:9E:05:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EA1EE7EA0C58CF007B06269F201E4D46E60B97F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a645d1e4-bdce-433f-af8a-d1e1c1010b26.roa Signing time: Wed 05 Aug 2026 00:31:30 +0000 ROA not before: Wed 05 Aug 2026 00:31:30 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a1:ee:7e:a0:c5:8c:f0:07:b0:62:69:f2:01:e4:d4:6e:60:b9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:31:30 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=2418f2efb5e57a897d60d8eeed74fe8dce80591949e143de366097f88fb6e763, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:57:75:6e:0e:ba:a2:3f:66:84:5e:c5:11: 7c:7a:72:57:6c:47:32:9b:21:ee:fc:02:da:27:f1: 19:fb:98:9e:40:31:5f:08:85:56:be:b8:43:5a:7c: 6e:88:53:ec:09:e5:c0:8f:7f:2b:8c:d0:61:58:a2: 98:79:8e:60:0f:09:63:aa:6c:54:56:bd:1e:2d:65: 14:4e:f0:d3:b6:72:80:50:fa:d2:e3:4c:3f:4f:cd: c5:f3:b3:35:52:c8:27:15:20:9b:56:ed:a8:99:a9: 63:39:90:c0:36:58:dc:6e:d3:be:0d:dc:9f:f5:cd: 39:4b:df:f1:e0:0e:56:9d:de:20:1c:68:c0:46:b8: 74:c9:84:99:f6:11:3f:7b:40:dd:51:2b:1d:3d:38: 2d:37:5d:f4:05:f1:a7:95:7f:80:65:6c:e6:02:79: 40:7c:37:81:e3:bc:03:f6:2e:c2:5f:b8:21:d4:21: 18:38:71:7f:63:d2:78:91:da:48:9f:40:27:a5:34: 24:86:a8:3e:8a:9f:96:ba:61:25:14:47:ec:87:90: b5:ab:8e:be:ed:27:35:d5:fe:ae:0b:68:33:e8:59: 99:7c:3e:c3:ec:d5:a7:43:61:83:a3:28:56:09:7f: a5:c0:a3:2c:a5:94:80:80:50:13:92:d1:f7:34:1f: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9C:0B:20:89:55:D8:E7:95:8D:25:5A:84:2B:34:E8:9F:9E:05:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a645d1e4-bdce-433f-af8a-d1e1c1010b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.21.0/24 Signature Algorithm: sha256WithRSAEncryption 52:7b:4d:b6:a3:fe:ad:59:d1:f3:63:e3:fc:56:b6:73:82:8a: 88:67:c0:11:95:ec:0c:30:87:12:58:a0:ea:31:7d:9c:4d:cb: eb:74:1a:ae:50:58:59:41:a1:6d:1a:4e:b0:0a:4b:54:55:a6: 75:d1:ed:6e:89:e9:28:ed:7a:50:f0:ec:b0:71:06:d7:41:0e: 54:02:fc:c1:7c:23:1f:a8:e0:99:71:81:75:3e:b6:c9:e8:ce: 2c:af:e7:b3:e3:a0:64:aa:07:8f:c8:17:23:50:19:cb:02:35: de:c4:ee:0c:7d:9a:c4:c4:68:ea:1d:6d:32:62:54:d9:9c:3a: 0a:80:97:96:78:bb:16:eb:0e:5c:06:cf:28:af:c9:5b:43:34: d7:f4:2f:8d:92:bc:8c:37:aa:49:3f:29:bf:8a:ac:5c:c1:d6: b0:41:05:5d:7b:aa:f3:76:b4:6e:c7:7e:41:df:f8:08:f4:90: cb:8b:7b:33:60:34:de:6f:d9:dd:ef:3d:c0:9f:7d:e7:57:12: 22:dd:44:ba:11:65:e1:d6:39:7f:b3:e1:21:c8:02:ed:f8:c2: 9c:87:0b:76:ce:ff:55:50:7b:18:f4:81:0d:04:fb:db:37:51: b6:1b:10:3a:17:fc:24:47:a4:53:a5:bf:3d:13:d8:0a:23:b1: d5:8f:b2:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULqHufqDFjPAHsGJp8gHk1G5guX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAzMTMwWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDE4ZjJlZmI1ZTU3YTg5N2Q2MGQ4ZWVlZDc0ZmU4ZGNl ODA1OTE5NDllMTQzZGUzNjYwOTdmODhmYjZlNzYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwVFd1bg66oj9mhF7FEXx6cldsRzKbIe78Aton8Rn7mJ5A MV8IhVa+uENafG6IU+wJ5cCPfyuM0GFYoph5jmAPCWOqbFRWvR4tZRRO8NO2coBQ +tLjTD9PzcXzszVSyCcVIJtW7aiZqWM5kMA2WNxu074N3J/1zTlL3/HgDlad3iAc aMBGuHTJhJn2ET97QN1RKx09OC03XfQF8aeVf4BlbOYCeUB8N4HjvAP2LsJfuCHU IRg4cX9j0niR2kifQCelNCSGqD6Kn5a6YSUUR+yHkLWrjr7tJzXV/q4LaDPoWZl8 PsPs1adDYYOjKFYJf6XAoyyllICAUBOS0fc0H2whAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL5wLIIlV2OeVjSVahCs06J+eBfwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NDVkMWU0LWJkY2UtNDMzZi1hZjhhLWQxZTFjMTAxMGIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYnRUwDQYJKoZIhvcNAQELBQADggEBAFJ7Tbaj/q1Z0fNj4/xWtnOCiohn wBGV7AwwhxJYoOoxfZxNy+t0Gq5QWFlBoW0aTrAKS1RVpnXR7W6J6SjtelDw7LBx BtdBDlQC/MF8Ix+o4JlxgXU+tsnoziyv57PjoGSqB4/IFyNQGcsCNd7E7gx9msTE aOodbTJiVNmcOgqAl5Z4uxbrDlwGzyivyVtDNNf0L42SvIw3qkk/Kb+KrFzB1rBB BV17qvN2tG7HfkHf+Aj0kMuLezNgNN5v2d3vPcCffedXEiLdRLoRZeHWOX+z4SHI Au34wpyHC3bO/1VQexj0gQ0E+9s3UbYbEDoX/CRHpFOlvz0T2AojsdWPsm8= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:58 2026 by rpki-client