$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa File: 0f893b02-709b-4a20-ab74-f859a710b1be.roa (raw, json) Hash identifier: qRkPzK1Hi9ZZsgWCiOHIQ81YZAiNkA4tLWrAsZX+CVM= Subject key identifier: 27:DD:59:A6:97:73:32:77:BD:E6:B7:86:01:BB:C4:5E:88:AA:7A:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 246BD171E3BD66619F087C40439AF6A39DB4AA9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa Signing time: Wed 20 May 2026 00:30:12 +0000 ROA not before: Wed 20 May 2026 00:30:12 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.128.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6b:d1:71:e3:bd:66:61:9f:08:7c:40:43:9a:f6:a3:9d:b4:aa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:30:12 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=87b8ab9bffd1774bb5685035359707e50fe2ad1925ac8006ca8b56e8597774ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:c4:33:fd:3a:ea:4d:cd:4c:5a:39:1d:cc: 9e:98:89:05:9a:36:2e:17:ee:62:fb:f2:70:c8:be: 43:ea:a1:43:cc:90:5a:e0:a1:de:cb:87:cf:43:81: c5:1f:a0:2a:b1:e4:f6:e2:0a:fa:6f:78:09:2e:8c: 5e:f1:cb:83:1f:0d:c3:82:fc:24:37:23:c4:95:9c: e3:fe:2c:a6:0b:2b:75:ce:0a:76:77:99:76:da:45: ad:31:42:f7:97:3c:1d:1a:10:3b:f8:2b:8e:48:76: 5b:f9:cb:b2:06:03:4d:63:02:4b:aa:e7:a6:af:6f: 0c:1b:eb:32:13:d6:f4:7d:0d:b0:e8:e6:a7:49:c7: 8a:e4:bf:35:46:f9:68:2f:5d:cd:a0:72:f3:8b:72: 72:55:c5:dd:ad:53:fb:35:a1:ff:ae:d2:bb:3b:91: 85:44:38:e8:22:a8:64:cb:e4:77:d9:47:de:fb:2b: 04:4b:3d:53:b2:80:c9:c4:b6:d0:ae:45:54:cd:58: 1e:26:26:e2:9e:68:f9:20:8a:5d:3d:88:15:f0:d8: 15:da:4f:0e:0a:09:93:f6:c9:5f:16:f4:9a:4c:c4: e2:9c:3c:85:de:53:89:3e:93:50:14:15:93:eb:67: c8:05:c5:2a:93:a6:e1:00:13:ac:d8:36:d9:9b:35: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DD:59:A6:97:73:32:77:BD:E6:B7:86:01:BB:C4:5E:88:AA:7A:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f893b02-709b-4a20-ab74-f859a710b1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4d:e5:ac:51:66:d5:0c:1d:56:6b:7a:07:e0:f2:fd:be:cf:f8: 4f:16:10:09:80:64:8e:97:ec:3a:15:1b:db:42:78:9a:dd:86: fb:1b:9a:55:85:d6:76:95:ff:96:63:8f:42:97:66:5c:cb:04: 06:64:d5:08:7c:f9:3f:73:b9:ff:e8:89:87:23:8c:1d:cd:1c: ba:b2:62:46:ab:24:7b:35:61:c8:41:3f:23:5e:ef:15:3f:60: 69:93:34:82:36:2a:d8:42:bb:82:e1:15:e4:2c:52:9b:7b:c5: 26:aa:d3:32:54:c6:b4:b6:97:b8:93:80:ea:6c:cf:13:d4:00: 01:a3:d8:9d:0f:f9:fb:bb:51:71:29:e0:ee:b4:40:c9:3e:75: 30:34:87:16:2b:c0:aa:7d:7f:7d:7e:7c:dc:94:2d:d5:7c:80: ac:b5:d6:df:3a:b5:95:48:d5:b7:4d:11:80:b0:2e:f5:5e:f5: 45:b6:be:41:27:2b:60:81:af:e9:73:5b:b8:d3:4f:8b:95:25: b3:42:45:8d:c2:6a:7c:73:aa:4f:ed:0e:17:be:95:3f:6d:9a: 51:fb:8e:21:62:a5:69:a1:6e:b0:2a:2d:ca:35:a6:75:a5:d1: a7:fd:33:30:71:87:ac:7d:a8:c7:b5:96:0a:f4:91:fa:c3:9b: 5a:b0:3a:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJGvRceO9ZmGfCHxAQ5r2o520qpswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAzMDEyWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2I4YWI5YmZmZDE3NzRiYjU2ODUwMzUzNTk3MDdlNTBm ZTJhZDE5MjVhYzgwMDZjYThiNTZlODU5Nzc3NGFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp/MQz/TrqTc1MWjkdzJ6YiQWaNi4X7mL78nDIvkPqoUPM kFrgod7Lh89DgcUfoCqx5PbiCvpveAkujF7xy4MfDcOC/CQ3I8SVnOP+LKYLK3XO CnZ3mXbaRa0xQveXPB0aEDv4K45Idlv5y7IGA01jAkuq56avbwwb6zIT1vR9DbDo 5qdJx4rkvzVG+WgvXc2gcvOLcnJVxd2tU/s1of+u0rs7kYVEOOgiqGTL5HfZR977 KwRLPVOygMnEttCuRVTNWB4mJuKeaPkgil09iBXw2BXaTw4KCZP2yV8W9JpMxOKc PIXeU4k+k1AUFZPrZ8gFxSqTpuEAE6zYNtmbNaWxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ91ZppdzMne95reGAbvEXoiqeh0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmODkzYjAyLTcwOWItNGEyMC1hYjc0LWY4NTlhNzEwYjFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYjgEAwDQYJKoZIhvcNAQELBQADggEBAE3lrFFm1QwdVmt6B+Dy/b7P+E8W EAmAZI6X7DoVG9tCeJrdhvsbmlWF1naV/5Zjj0KXZlzLBAZk1Qh8+T9zuf/oiYcj jB3NHLqyYkarJHs1YchBPyNe7xU/YGmTNII2KthCu4LhFeQsUpt7xSaq0zJUxrS2 l7iTgOpszxPUAAGj2J0P+fu7UXEp4O60QMk+dTA0hxYrwKp9f31+fNyULdV8gKy1 1t86tZVI1bdNEYCwLvVe9UW2vkEnK2CBr+lzW7jTT4uVJbNCRY3Canxzqk/tDhe+ lT9tmlH7jiFipWmhbrAqLco1pnWl0af9MzBxh6x9qMe1lgr0kfrDm1qwOgk= -----END CERTIFICATE-----Generated at Sat Jun 13 10:05:30 2026 by rpki-client