$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa File: aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa (raw, json) Hash identifier: QBN396runEUYkX6G1+q2W7FaRjSkr1d3djwXqcveMIA= Subject key identifier: E3:E1:CD:AD:00:72:60:B6:3A:6D:EB:EE:32:64:AD:2A:E8:8A:BA:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05FCD4B4B6C1D90DA4F130C6ACCE07100B3DA14D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa Signing time: Sat 25 Jul 2026 00:40:09 +0000 ROA not before: Sat 25 Jul 2026 00:40:09 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.100.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fc:d4:b4:b6:c1:d9:0d:a4:f1:30:c6:ac:ce:07:10:0b:3d:a1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:40:09 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=42b05448194771caf6f13c81007332073e04f20a61dbb8087821e8d5e5854d92, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:73:7e:21:4e:a7:e8:2a:d2:78:65:83:4c: 5c:09:8a:65:e0:a5:64:f0:3f:e9:f7:7b:d1:b7:f1: 5e:a6:ee:c7:72:16:c1:bd:8f:59:45:05:27:33:11: 04:d2:a3:17:7f:8b:75:0c:db:34:bd:b2:4e:ec:03: d5:28:66:11:d9:de:b1:7a:c7:dc:32:4b:9f:81:54: 4a:8d:91:e4:92:cc:0a:31:d3:5a:fd:69:78:8b:7f: e3:dd:24:cc:9b:6d:c0:89:25:03:6d:ba:8e:9c:a1: 20:c4:ce:51:2b:00:58:ee:01:00:65:d2:f5:1f:77: ff:bf:fb:93:57:d0:d9:4d:07:88:69:b3:57:10:2e: 95:12:96:d5:bd:6b:6e:3c:ff:a3:15:44:2d:b3:e8: 3c:2d:3d:8c:58:5a:c1:4b:c4:44:73:36:72:1c:e7: d4:95:d9:9f:d3:b7:f3:6a:c0:f7:0b:4a:e4:8b:32: fb:30:b2:99:3b:58:d2:18:04:9d:77:c5:84:4f:55: fd:db:eb:07:b9:28:a4:7a:c4:07:94:ad:2f:9a:df: ba:62:57:1e:73:f8:c2:51:76:e5:60:41:bd:ac:d3: 76:02:8e:2d:18:32:30:a2:6b:a6:f8:85:c6:79:92: f4:7f:72:04:fb:ed:2b:58:04:d3:96:05:7f:fe:30: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E1:CD:AD:00:72:60:B6:3A:6D:EB:EE:32:64:AD:2A:E8:8A:BA:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:83:01:2f:65:9a:3e:bf:ad:93:b6:23:f2:12:3b:6a:e7:b4: 8f:ec:67:e5:fd:1c:a7:5a:d8:ec:60:95:45:3a:48:cd:ab:8b: 5b:b5:fd:fc:b6:d4:b5:4b:87:19:4b:69:03:0d:d4:ee:19:7b: 8a:fc:20:62:84:61:b3:b0:f8:68:6e:04:71:c1:dc:94:9e:d0: b5:cd:cf:7b:4c:ea:6c:47:1b:4c:45:bc:dd:a0:a6:0f:d1:0d: 3f:f9:6c:83:9d:c3:a5:0c:4e:22:df:0a:a0:e4:08:a8:78:a7: 6c:4e:de:ce:e6:50:03:98:d0:ae:33:d9:a1:2f:75:74:24:2a: f4:b5:22:f9:dd:f5:59:0f:51:32:5e:dc:31:b0:fd:2d:e8:e0: b4:35:e8:d5:bd:68:70:c9:c0:b5:d5:47:51:9d:c8:7d:0b:b3: 8e:d0:eb:5e:db:19:36:53:10:f4:e5:13:21:dc:4d:f7:ce:3c: 5e:8e:7f:42:b2:09:56:79:c8:68:c8:cb:c2:e6:69:8b:3d:04: 28:cd:d2:16:4d:e1:d2:75:7a:78:05:31:5f:cd:6c:90:5e:ac: a7:10:6c:d2:85:a6:4e:a5:64:af:8b:13:1d:64:2f:b4:3b:2c: 2f:0d:8c:b5:62:10:64:65:ee:d6:09:b9:08:7b:80:9c:11:2a: 50:1b:fd:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBfzUtLbB2Q2k8TDGrM4HEAs9oU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDA0MDA5WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmIwNTQ0ODE5NDc3MWNhZjZmMTNjODEwMDczMzIwNzNl MDRmMjBhNjFkYmI4MDg3ODIxZThkNWU1ODU0ZDkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX+HN+IU6n6CrSeGWDTFwJimXgpWTwP+n3e9G38V6m7sdy FsG9j1lFBSczEQTSoxd/i3UM2zS9sk7sA9UoZhHZ3rF6x9wyS5+BVEqNkeSSzAox 01r9aXiLf+PdJMybbcCJJQNtuo6coSDEzlErAFjuAQBl0vUfd/+/+5NX0NlNB4hp s1cQLpUSltW9a248/6MVRC2z6DwtPYxYWsFLxERzNnIc59SV2Z/Tt/NqwPcLSuSL Mvswspk7WNIYBJ13xYRPVf3b6we5KKR6xAeUrS+a37piVx5z+MJRduVgQb2s03YC ji0YMjCia6b4hcZ5kvR/cgT77StYBNOWBX/+MAHDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4+HNrQByYLY6bevuMmStKuiKuqwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlYzU2MDZkLWI4YTQtNDZmMi1iN2NlLTFkNmY3NWJlZjM5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ZDANBgkqhkiG9w0BAQsFAAOCAQEApIMBL2WaPr+tk7Yj8hI7aue0j+xn 5f0cp1rY7GCVRTpIzauLW7X9/LbUtUuHGUtpAw3U7hl7ivwgYoRhs7D4aG4EccHc lJ7Qtc3Pe0zqbEcbTEW83aCmD9ENP/lsg53DpQxOIt8KoOQIqHinbE7ezuZQA5jQ rjPZoS91dCQq9LUi+d31WQ9RMl7cMbD9LejgtDXo1b1ocMnAtdVHUZ3IfQuzjtDr XtsZNlMQ9OUTIdxN9848Xo5/QrIJVnnIaMjLwuZpiz0EKM3SFk3h0nV6eAUxX81s kF6spxBs0oWmTqVkr4sTHWQvtDssLw2MtWIQZGXu1gm5CHuAnBEqUBv9HA== -----END CERTIFICATE-----Generated at Tue Jul 28 14:50:01 2026 by rpki-client