$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa File: 4a16c82f-9a66-43d2-baee-321bf1a6f141.roa (raw, json) Hash identifier: kI9icmpB3EgRDTCHOMhsbR0A6c2lioTcDW3q5PvLR1o= Subject key identifier: D6:36:AD:47:F5:04:D1:98:BE:F1:53:A0:47:91:11:72:15:B2:D2:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 612FA6D69A8CD174390D9A8679E5DF8244C04FD4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa Signing time: Fri 24 Jul 2026 00:30:15 +0000 ROA not before: Fri 24 Jul 2026 00:30:15 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2f:a6:d6:9a:8c:d1:74:39:0d:9a:86:79:e5:df:82:44:c0:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:30:15 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=ddfcc15ad41ed6a8f002894158c259f3d42d727f3fc50975590e76e06a1794b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:8f:43:93:87:9a:f0:d1:da:bb:d1:b6:78: 75:c6:31:34:53:60:65:3a:a3:c8:44:04:5d:c5:40: 70:bb:e2:86:5c:1a:45:7e:c0:3b:ac:b8:2c:22:8b: 39:e6:2e:65:c8:2b:63:57:2e:cf:75:84:6e:42:0d: 6e:e9:35:6a:da:bc:98:bb:3c:f0:81:e4:13:01:f2: a8:1d:da:5b:ef:00:6b:03:e2:9a:b6:77:0f:85:af: 96:22:05:39:18:ef:61:61:71:ee:e1:d2:82:da:6b: 63:ba:23:ff:7c:c0:98:45:cd:5b:b6:3e:9c:4d:00: 89:4a:69:ab:59:05:fa:5d:28:9a:1c:0d:25:fb:5b: ef:e4:0a:ef:b3:fe:6a:2a:ee:98:c0:45:01:bf:66: 31:b1:fb:ba:ca:9d:45:26:44:08:f3:6d:b1:21:24: e4:82:67:89:1e:f4:b2:ed:24:41:93:0c:aa:80:06: 46:e6:67:90:6e:7d:0a:1d:4d:6f:5c:4e:b1:5d:4a: 97:f0:fa:87:b7:e3:08:86:9d:8b:2b:db:f7:f6:8e: c2:6f:9c:33:0a:d8:09:55:4e:ff:6d:4e:76:3c:d0: b7:05:65:e3:af:92:fc:04:a0:09:b4:0a:c1:bf:b7: 9a:2b:3d:b4:be:83:a6:48:2a:8c:8e:d9:d7:57:ab: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:36:AD:47:F5:04:D1:98:BE:F1:53:A0:47:91:11:72:15:B2:D2:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption ba:b3:ef:65:1e:a6:94:73:c7:7f:a5:85:87:02:eb:24:8c:bb: 9b:93:3a:15:2c:bf:e5:68:26:54:05:48:df:a0:62:2f:ff:5c: 4e:80:bd:12:6b:f4:eb:ee:cc:b6:cd:1a:8b:d7:3b:0d:d8:81: 4c:49:8e:06:76:89:71:fe:c7:19:04:49:0e:57:78:b1:7d:97: 68:29:c5:e6:fb:c1:50:33:6a:1e:89:15:b8:b8:a1:fb:aa:09: d1:8b:1e:3c:cb:b6:2a:ff:06:0a:8c:1f:a8:f8:45:72:a1:1e: bd:17:c8:0a:38:ea:76:6d:4c:19:1f:d7:6a:8d:85:98:41:55: 86:8d:d5:d9:33:46:53:50:94:a4:39:1c:ad:c5:42:3c:b2:63: 47:24:43:2d:22:d3:ba:31:06:87:6e:c9:74:a7:15:74:11:3f: a3:8a:e5:87:c5:db:03:75:44:aa:57:36:0b:1e:a0:91:ae:d9: 8a:6e:6f:db:b6:81:8e:5d:5d:f3:af:ce:2c:9b:65:f9:21:b4: 17:1a:46:fb:b8:01:1d:7d:fb:e2:22:39:b3:c7:2c:01:e5:a2: 2d:4d:a3:6f:1b:67:98:a9:3b:2a:ca:3d:f1:f7:24:6d:b3:51: b5:8f:d7:3a:ab:53:13:d7:a9:ee:22:8b:f7:43:c4:94:8c:2e: 4e:4f:02:24 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYS+m1pqM0XQ5DZqGeeXfgkTAT9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAzMDE1WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGZjYzE1YWQ0MWVkNmE4ZjAwMjg5NDE1OGMyNTlmM2Q0 MmQ3MjdmM2ZjNTA5NzU1OTBlNzZlMDZhMTc5NGIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6QY9Dk4ea8NHau9G2eHXGMTRTYGU6o8hEBF3FQHC74oZc GkV+wDusuCwiiznmLmXIK2NXLs91hG5CDW7pNWravJi7PPCB5BMB8qgd2lvvAGsD 4pq2dw+Fr5YiBTkY72Fhce7h0oLaa2O6I/98wJhFzVu2PpxNAIlKaatZBfpdKJoc DSX7W+/kCu+z/moq7pjARQG/ZjGx+7rKnUUmRAjzbbEhJOSCZ4ke9LLtJEGTDKqA BkbmZ5BufQodTW9cTrFdSpfw+oe34wiGnYsr2/f2jsJvnDMK2AlVTv9tTnY80LcF ZeOvkvwEoAm0CsG/t5orPbS+g6ZIKoyO2ddXq1eVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1jatR/UE0Zi+8VOgR5ERchWy0hwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMTZjODJmLTlhNjYtNDNkMi1iYWVlLTMyMWJmMWE2ZjE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyEDANBgkqhkiG9w0BAQsFAAOCAQEAurPvZR6mlHPHf6WFhwLrJIy7m5M6 FSy/5WgmVAVI36BiL/9cToC9Emv06+7Mts0ai9c7DdiBTEmOBnaJcf7HGQRJDld4 sX2XaCnF5vvBUDNqHokVuLih+6oJ0YsePMu2Kv8GCowfqPhFcqEevRfICjjqdm1M GR/Xao2FmEFVho3V2TNGU1CUpDkcrcVCPLJjRyRDLSLTujEGh27JdKcVdBE/o4rl h8XbA3VEqlc2Cx6gka7Zim5v27aBjl1d86/OLJtl+SG0FxpG+7gBHX374iI5s8cs AeWiLU2jbxtnmKk7Kso98fckbbNRtY/XOqtTE9ep7iKL90PElIwuTk8CJA== -----END CERTIFICATE-----Generated at Tue Jul 28 14:51:57 2026 by rpki-client