$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1564f4a-7df0-4932-af96-1ebffff2e421.roa File: b1564f4a-7df0-4932-af96-1ebffff2e421.roa (raw, json) Hash identifier: phzm++diOnuIFnAh4bZMRWQW6jUEiKNouteCFMwDwiQ= Subject key identifier: BE:7F:31:64:83:A9:22:FA:DB:D0:95:00:F1:A8:AB:11:AF:F0:3A:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CD7AFCCFC9FF676135193CA7F7CE5C8326C71A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1564f4a-7df0-4932-af96-1ebffff2e421.roa Signing time: Sat 08 Aug 2026 00:11:16 +0000 ROA not before: Sat 08 Aug 2026 00:11:16 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 72.29.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:af:cc:fc:9f:f6:76:13:51:93:ca:7f:7c:e5:c8:32:6c:71:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:11:16 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=59557a08e0b60e7a51538648a6cdeabd4bc8bbef98acbae81b441515399feca5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a6:90:93:36:f9:b7:63:2c:af:89:d3:c3:63: a5:fa:b1:38:6b:bf:77:ba:1e:92:09:38:82:ab:2e: cc:bf:17:60:64:70:36:cd:19:17:63:be:b3:a0:c2: 72:fb:4b:ea:87:d7:56:18:69:7f:20:1b:04:69:29: fe:aa:59:a1:fb:7a:3d:66:83:9a:5b:63:3b:c3:c1: ba:3e:da:35:fd:21:28:4d:ae:d3:89:41:b0:47:33: d1:e3:4b:3a:94:f1:dd:7b:f7:cb:42:97:29:3d:e9: ce:c9:ad:12:e8:04:b4:7c:62:4c:43:fd:fd:9f:fa: 79:2f:f6:84:9b:00:96:8c:41:07:20:65:45:2c:eb: 8e:55:c2:34:ca:1b:73:c8:d0:9d:7d:d6:6e:d4:c5: a9:40:6c:69:15:17:0d:bd:8a:bd:3b:07:d8:bf:04: 94:ce:22:fe:34:0b:3d:26:2b:48:36:7d:92:81:9c: 23:f7:c7:37:4c:86:05:c0:32:3f:f6:ce:54:2a:f9: f2:f5:28:c9:9e:63:be:2d:55:c3:d2:78:d5:85:a4: 6b:5b:0e:c7:cd:04:75:72:8b:38:61:e3:a7:5c:fa: 4c:3d:45:78:c3:84:90:f7:e0:ca:62:8b:6a:fc:af: 2e:a3:75:f9:c5:e2:9e:02:d0:a9:16:d1:2e:23:82: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7F:31:64:83:A9:22:FA:DB:D0:95:00:F1:A8:AB:11:AF:F0:3A:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1564f4a-7df0-4932-af96-1ebffff2e421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.29.0.0/19 Signature Algorithm: sha256WithRSAEncryption 3f:97:d2:4f:c1:99:69:b9:dd:67:af:96:cb:00:da:8e:14:49: 58:7d:eb:1f:9d:dc:aa:96:ba:a5:6f:7e:01:9e:56:84:e6:74: 45:0f:36:fb:62:f1:da:d1:52:31:3f:54:89:37:20:fb:6e:66: 47:5e:a7:0c:7c:1e:e8:19:b9:20:6b:65:0a:a6:d0:68:ba:33: ee:da:0d:3f:7e:b8:ac:f3:23:e6:83:d5:05:7a:96:ab:0d:50: 74:dd:7c:bf:20:65:2b:d0:dd:01:67:d7:3c:c6:56:c0:b0:4f: 3f:b8:55:c0:16:db:3a:da:3e:26:44:e2:f9:4f:f7:96:d3:c3: d5:45:8c:91:63:44:3f:31:35:78:b8:88:e9:ed:a4:3e:7e:e2: 90:b6:77:90:ef:7c:4c:26:c9:02:97:94:75:f2:b3:1c:8e:ba: 25:14:da:ac:3a:c5:1e:20:97:c1:2a:e1:7d:33:9c:3a:b4:c0: 33:7a:c9:62:03:c3:cf:c9:49:10:db:9c:62:c3:e6:2c:e6:50: 14:22:08:c6:6c:75:b4:98:29:f3:d4:a1:ab:11:a9:47:ba:02: a6:a9:33:05:4f:3e:4c:33:8f:4e:16:f6:b9:48:81:4c:99:60: 3d:6e:90:51:13:da:8f:53:96:d6:06:54:52:ba:37:36:20:aa: 97:17:d0:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfNevzPyf9nYTUZPKf3zlyDJscaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAxMTE2WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTU1N2EwOGUwYjYwZTdhNTE1Mzg2NDhhNmNkZWFiZDRi YzhiYmVmOThhY2JhZTgxYjQ0MTUxNTM5OWZlY2E1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIppCTNvm3YyyvidPDY6X6sThrv3e6HpIJOIKrLsy/F2Bk cDbNGRdjvrOgwnL7S+qH11YYaX8gGwRpKf6qWaH7ej1mg5pbYzvDwbo+2jX9IShN rtOJQbBHM9HjSzqU8d1798tClyk96c7JrRLoBLR8YkxD/f2f+nkv9oSbAJaMQQcg ZUUs645VwjTKG3PI0J191m7UxalAbGkVFw29ir07B9i/BJTOIv40Cz0mK0g2fZKB nCP3xzdMhgXAMj/2zlQq+fL1KMmeY74tVcPSeNWFpGtbDsfNBHVyizhh46dc+kw9 RXjDhJD34Mpii2r8ry6jdfnF4p4C0KkW0S4jgonnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvn8xZIOpIvrb0JUA8airEa/wOq0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxNTY0ZjRhLTdkZjAtNDkzMi1hZjk2LTFlYmZmZmYyZTQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVIHQAwDQYJKoZIhvcNAQELBQADggEBAD+X0k/BmWm53WevlssA2o4USVh9 6x+d3KqWuqVvfgGeVoTmdEUPNvti8drRUjE/VIk3IPtuZkdepwx8HugZuSBrZQqm 0Gi6M+7aDT9+uKzzI+aD1QV6lqsNUHTdfL8gZSvQ3QFn1zzGVsCwTz+4VcAW2zra PiZE4vlP95bTw9VFjJFjRD8xNXi4iOntpD5+4pC2d5DvfEwmyQKXlHXysxyOuiUU 2qw6xR4gl8Eq4X0znDq0wDN6yWIDw8/JSRDbnGLD5izmUBQiCMZsdbSYKfPUoasR qUe6AqapMwVPPkwzj04W9rlIgUyZYD1ukFET2o9TltYGVFK6NzYgqpcX0IE= -----END CERTIFICATE-----Generated at Thu Sep 17 17:52:44 2026 by rpki-client