$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24c1b164-1e16-47fd-82f2-efe4d71ef363.roa File: 24c1b164-1e16-47fd-82f2-efe4d71ef363.roa (raw, json) Hash identifier: PFlpYG7nZ7HTPJ+F3zjEK3+38fw5vgDuhno2Hdhuu+I= Subject key identifier: BB:CD:FB:99:A8:76:1E:21:45:11:0D:D0:8F:9B:97:C6:6F:D2:98:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75455D5171B67E98F1A6D1F7536CE7C4B3F204D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24c1b164-1e16-47fd-82f2-efe4d71ef363.roa Signing time: Mon 27 Jul 2026 00:30:52 +0000 ROA not before: Mon 27 Jul 2026 00:30:52 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.54.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:45:5d:51:71:b6:7e:98:f1:a6:d1:f7:53:6c:e7:c4:b3:f2:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:30:52 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=b59d901f100d7ec4d90a7eb9da03846ad4db212960b5d5c57df9fccf41246402, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:d7:d2:74:17:b7:4f:f1:00:1b:6a:50:1a: 59:b2:0d:74:dc:e3:ba:b7:11:ae:e2:91:b5:b4:9f: 5b:7e:f7:99:91:95:e8:d6:ba:f1:aa:ce:ea:2f:f9: c9:ac:13:6d:50:3c:f4:51:8f:83:04:2b:be:74:fe: 99:2a:3b:b9:88:7f:7d:38:e7:ae:49:da:46:24:4c: eb:00:23:40:7f:49:96:98:7f:9a:d2:55:8a:ea:14: b1:dc:2b:6a:a5:ea:d0:15:2c:cf:e7:29:00:e6:89: 9d:91:a0:25:f3:88:ad:c4:9c:da:c4:b2:6f:75:27: 17:2f:4b:ca:6b:5e:7d:c7:05:eb:6f:9c:9e:9c:e6: 72:49:44:f9:c5:7d:61:c5:88:6d:e6:72:f0:72:56: 4d:cc:7a:f3:99:c1:c4:ca:1b:ce:8a:26:09:eb:27: 1c:61:ad:b4:40:ca:4b:02:d2:48:90:42:76:3b:53: 55:1a:80:72:ba:a9:23:6f:a8:f3:21:e3:3d:43:00: cd:a5:9b:17:b8:6a:83:9b:ff:e8:b0:0d:48:74:8e: a9:0c:4b:27:22:89:bf:3d:fc:5b:89:76:7c:f3:d7: c3:dd:f8:c2:25:bb:cd:df:b1:fd:44:10:3e:69:6f: cd:08:fd:a5:b6:d9:34:f0:84:3f:3e:d2:34:e8:03: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:FB:99:A8:76:1E:21:45:11:0D:D0:8F:9B:97:C6:6F:D2:98:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24c1b164-1e16-47fd-82f2-efe4d71ef363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.32.0/19 Signature Algorithm: sha256WithRSAEncryption 12:38:50:7a:38:6a:e8:5e:96:5c:70:e4:b9:64:65:1f:21:d6: 96:6f:04:e6:ed:10:10:07:75:3e:d3:b5:e7:fc:c5:6c:6b:14: ee:f9:e3:45:e0:91:71:13:d4:5f:ac:bc:9c:29:20:48:60:04: 34:de:67:15:70:cb:76:76:8a:2c:1f:76:08:73:3f:1d:f6:3d: 3f:88:d4:bb:1e:c8:7a:84:9e:82:52:01:a1:eb:dc:72:3c:4f: f8:b3:40:a1:96:56:19:f2:9f:8e:30:bc:1e:9f:34:72:71:cd: 83:81:d5:07:c6:87:ae:a2:b7:73:6f:08:c7:45:d5:35:ed:cf: 71:2d:09:a6:bc:f3:e5:c3:d1:6c:40:10:95:40:d6:b8:68:ce: 1e:f8:8a:24:9a:4d:24:df:b4:c6:c9:e3:ef:f6:6e:cf:18:90: 42:11:9b:36:fd:89:ba:93:b7:7c:39:1e:bf:9f:9d:28:3c:18: c4:38:97:d3:8e:2e:7c:69:c8:d4:94:ad:02:6a:60:46:34:c0: 76:49:ff:73:5b:9b:20:fa:46:18:9b:7f:03:af:c9:d4:b5:f0: 7e:20:1f:24:02:b0:a6:c1:9e:21:2a:a7:74:e7:cb:cf:dd:14: 8b:e1:9f:0b:cd:36:22:83:78:2c:48:df:12:8d:27:5f:23:1f: 00:2b:64:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdUVdUXG2fpjxptH3U2znxLPyBNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMDUyWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTlkOTAxZjEwMGQ3ZWM0ZDkwYTdlYjlkYTAzODQ2YWQ0 ZGIyMTI5NjBiNWQ1YzU3ZGY5ZmNjZjQxMjQ2NDAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkFdfSdBe3T/EAG2pQGlmyDXTc47q3Ea7ikbW0n1t+95mR lejWuvGqzuov+cmsE21QPPRRj4MEK750/pkqO7mIf304565J2kYkTOsAI0B/SZaY f5rSVYrqFLHcK2ql6tAVLM/nKQDmiZ2RoCXziK3EnNrEsm91JxcvS8prXn3HBetv nJ6c5nJJRPnFfWHFiG3mcvByVk3MevOZwcTKG86KJgnrJxxhrbRAyksC0kiQQnY7 U1UagHK6qSNvqPMh4z1DAM2lmxe4aoOb/+iwDUh0jqkMSyciib89/FuJdnzz18Pd +MIlu83fsf1EED5pb80I/aW22TTwhD8+0jToA+gPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu837mah2HiFFEQ3Qj5uXxm/SmCwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YzFiMTY0LTFlMTYtNDdmZC04MmYyLWVmZTRkNzFlZjM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUjNiAwDQYJKoZIhvcNAQELBQADggEBABI4UHo4auhellxw5LlkZR8h1pZv BObtEBAHdT7Ttef8xWxrFO7540XgkXET1F+svJwpIEhgBDTeZxVwy3Z2iiwfdghz Px32PT+I1LseyHqEnoJSAaHr3HI8T/izQKGWVhnyn44wvB6fNHJxzYOB1QfGh66i t3NvCMdF1TXtz3EtCaa88+XD0WxAEJVA1rhozh74iiSaTSTftMbJ4+/2bs8YkEIR mzb9ibqTt3w5Hr+fnSg8GMQ4l9OOLnxpyNSUrQJqYEY0wHZJ/3NbmyD6RhibfwOv ydS18H4gHyQCsKbBniEqp3Tny8/dFIvhnwvNNiKDeCxI3xKNJ18jHwArZD0= -----END CERTIFICATE-----Generated at Tue Jul 28 16:01:49 2026 by rpki-client