$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa File: 119dc5d3-828f-4fcb-ac13-56c9facae99f.roa (raw, json) Hash identifier: sBm9lKhMgzFEnapUpRY9gKkDr3P0Cr4RydD8Sxn01rE= Subject key identifier: E0:7C:FD:37:86:87:3E:72:48:C5:11:A4:73:B1:B0:9D:61:0D:7B:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BF2625523D61C24F2E12CBCA0457677F74FE853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa Signing time: Sat 25 Jul 2026 00:11:19 +0000 ROA not before: Sat 25 Jul 2026 00:11:19 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.50.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f2:62:55:23:d6:1c:24:f2:e1:2c:bc:a0:45:76:77:f7:4f:e8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:11:19 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=0e0b8a0238bb5337e7a4c60db604b9e3e1287ecbebae46c635f451b8a4532a96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:65:38:08:89:f4:a9:4b:37:a3:07:98:03: f8:19:48:c5:0a:77:13:08:23:b1:77:dd:a4:5f:9a: 2b:7d:09:ea:83:e8:bf:01:33:df:e5:64:69:43:29: 44:40:ff:06:b0:67:a1:73:25:4d:1b:1e:76:17:b0: f5:f2:0e:5e:f4:e9:3e:71:cf:3f:d0:8a:22:f3:1c: 6c:49:f9:55:e7:a4:52:44:a7:5c:9b:f6:e7:a8:95: 68:9a:af:a3:2b:53:ea:a2:43:d5:d2:8b:b6:37:5a: 8f:36:60:ba:52:e5:76:78:49:d4:0e:f0:9e:15:bf: 4d:e3:20:e0:49:2c:7b:3d:eb:59:64:3b:4c:41:a8: 5b:7c:8a:e2:b6:64:61:af:51:27:6a:ee:92:54:00: 5b:7d:43:96:5b:3c:04:58:35:9c:33:97:ae:55:f9: c5:55:1f:a8:23:31:0e:75:9d:46:5a:1d:40:37:a7: 72:7c:41:31:17:4f:25:d5:47:cf:d0:10:55:b1:89: 25:d8:4c:11:52:65:f5:3f:7f:ff:45:03:87:5c:20: e8:0b:68:85:2e:69:6e:a6:44:52:08:04:40:a4:28: 77:5e:82:f0:ff:80:34:15:43:85:85:90:40:5c:3f: e8:fd:a4:c1:fe:ba:1c:92:33:26:b2:f0:d9:26:5a: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:FD:37:86:87:3E:72:48:C5:11:A4:73:B1:B0:9D:61:0D:7B:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.50.128.0/17 Signature Algorithm: sha256WithRSAEncryption 88:df:d0:81:1b:05:1d:45:7c:c7:41:76:28:12:5c:d1:1e:cd: 08:39:bd:34:ea:1b:d3:78:b4:c9:de:c0:0e:93:23:67:3d:f1: e3:77:e2:83:ce:be:3c:a1:cd:42:cc:04:4e:73:92:dd:17:c6: 7d:b2:af:a2:9f:ba:27:5b:92:28:93:51:56:10:a4:50:06:1f: 39:e2:68:25:d3:f5:54:31:cb:16:a1:8d:0c:fa:0e:78:07:95: 31:7b:e7:c2:a5:c2:37:23:57:a9:02:d2:26:1d:89:0b:f7:53: 12:4b:13:7b:70:20:49:11:59:7e:ee:88:de:96:22:6c:1f:7f: a4:4c:7a:55:af:f7:da:cd:c6:ed:8b:05:36:38:18:08:25:f6: 7d:d2:08:df:f7:dc:a3:76:70:7f:17:7c:8f:3a:7a:d0:d6:ab: 32:2c:53:9e:3e:30:69:a1:e9:0a:91:76:82:0e:40:6c:4e:f1: 5e:0b:e6:04:8a:7e:a2:ee:b6:53:30:47:90:8f:57:8a:ed:22: 70:c4:81:2b:12:1f:78:27:3b:05:f9:3b:97:5e:8f:21:a1:e7: c3:a0:dc:c7:0f:7b:10:2f:e8:1c:1d:5b:fd:c0:ac:4f:33:1c: 62:af:40:b6:18:c7:d8:73:e8:bd:ef:0b:9e:d1:36:bb:4a:e2: 0c:50:32:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS/JiVSPWHCTy4Sy8oEV2d/dP6FMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAxMTE5WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTBiOGEwMjM4YmI1MzM3ZTdhNGM2MGRiNjA0YjllM2Ux Mjg3ZWNiZWJhZTQ2YzYzNWY0NTFiOGE0NTMyYTk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqnmU4CIn0qUs3oweYA/gZSMUKdxMII7F33aRfmit9CeqD 6L8BM9/lZGlDKURA/wawZ6FzJU0bHnYXsPXyDl706T5xzz/QiiLzHGxJ+VXnpFJE p1yb9ueolWiar6MrU+qiQ9XSi7Y3Wo82YLpS5XZ4SdQO8J4Vv03jIOBJLHs961lk O0xBqFt8iuK2ZGGvUSdq7pJUAFt9Q5ZbPARYNZwzl65V+cVVH6gjMQ51nUZaHUA3 p3J8QTEXTyXVR8/QEFWxiSXYTBFSZfU/f/9FA4dcIOgLaIUuaW6mRFIIBECkKHde gvD/gDQVQ4WFkEBcP+j9pMH+uhySMyay8NkmWgAZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4Hz9N4aHPnJIxRGkc7GwnWENew4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExOWRjNWQzLTgyOGYtNGZjYi1hYzEzLTU2YzlmYWNhZTk5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjMoAwDQYJKoZIhvcNAQELBQADggEBAIjf0IEbBR1FfMdBdigSXNEezQg5 vTTqG9N4tMnewA6TI2c98eN34oPOvjyhzULMBE5zkt0Xxn2yr6KfuidbkiiTUVYQ pFAGHzniaCXT9VQxyxahjQz6DngHlTF758KlwjcjV6kC0iYdiQv3UxJLE3twIEkR WX7uiN6WImwff6RMelWv99rNxu2LBTY4GAgl9n3SCN/33KN2cH8XfI86etDWqzIs U54+MGmh6QqRdoIOQGxO8V4L5gSKfqLutlMwR5CPV4rtInDEgSsSH3gnOwX5O5de jyGh58Og3McPexAv6BwdW/3ArE8zHGKvQLYYx9hz6L3vC57RNrtK4gxQMig= -----END CERTIFICATE-----Generated at Tue Jul 28 18:24:09 2026 by rpki-client