$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c35551e-a01f-4f64-b39a-f1ada190eab2.roa File: 2c35551e-a01f-4f64-b39a-f1ada190eab2.roa (raw, json) Hash identifier: IlY4D5Fw/L8V8MjdbKthcnphUZ5YYw2XXGNzD7JDLsE= Subject key identifier: 54:39:3C:DC:FE:33:50:5E:9D:BE:58:7E:84:88:97:F8:5B:B8:6D:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B8C87D02B374BD4D5B62420765E9BC40C0A8718 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c35551e-a01f-4f64-b39a-f1ada190eab2.roa Signing time: Tue 19 May 2026 00:11:22 +0000 ROA not before: Tue 19 May 2026 00:11:22 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 100.42.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8c:87:d0:2b:37:4b:d4:d5:b6:24:20:76:5e:9b:c4:0c:0a:87:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:11:22 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=241a33020f4916067c3dbf41800a664593f514a70ed9150d2c51417aa14ddcb4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:cd:98:f9:de:55:18:48:dd:e9:85:17:ae: bb:6d:0c:09:e8:4f:70:d3:eb:e6:40:78:51:75:b3: 6f:ae:55:39:9f:6c:10:ae:ab:71:e0:b1:a5:ba:76: d6:12:d8:17:22:d5:f3:7c:b7:35:86:c5:fb:69:36: 9b:9c:52:81:12:00:ac:e5:a5:c7:de:2c:25:45:da: 15:ed:5d:3b:f8:17:d6:58:c1:e4:c1:7e:ea:04:d6: 29:22:e2:70:13:4a:31:f5:6c:f2:5a:2a:f0:d5:f7: f3:35:d1:ad:45:55:8a:fd:23:58:fa:6e:1d:70:62: fa:e1:a8:18:bf:c8:92:74:16:0e:41:5d:0d:35:1c: 3b:6d:6d:28:1e:b4:27:9f:4d:e7:0b:62:da:cb:4b: ef:f5:b0:7d:cf:96:ef:1f:f5:2c:a0:ca:c0:9b:4c: 80:6c:bf:95:6e:7e:b2:03:91:e1:7d:90:76:b9:7c: d1:a8:a4:5d:c5:1e:09:94:2c:65:d4:85:90:64:29: 4b:89:17:d2:40:22:18:4b:cc:d4:51:5d:56:69:6d: e5:e7:49:00:ea:35:a9:32:61:26:35:09:c5:29:2d: 1b:fe:5f:f2:fb:73:fb:71:e3:61:5c:72:c8:79:5e: 82:da:81:25:66:d1:be:5a:94:39:27:08:e3:f7:84: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:3C:DC:FE:33:50:5E:9D:BE:58:7E:84:88:97:F8:5B:B8:6D:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c35551e-a01f-4f64-b39a-f1ada190eab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.42.64.0/20 Signature Algorithm: sha256WithRSAEncryption 23:34:04:f1:71:ae:ee:77:1e:fb:cc:a4:fd:4b:05:0c:0f:78: b6:46:be:c2:4d:4c:a3:bc:93:6d:91:11:93:6b:fc:32:d8:4b: 37:55:6a:34:93:4a:c1:cc:8e:4d:f9:88:eb:34:00:e4:95:dc: d7:46:d1:7a:73:63:05:a2:35:8b:8f:50:e0:66:00:57:ae:d6: 62:48:9e:34:c4:76:65:ae:1e:19:65:2f:3e:0a:b5:04:bc:09: 29:e0:01:da:9f:1e:b2:dc:bd:06:26:63:a1:d0:d2:44:4f:4c: a1:17:b0:81:62:25:56:f5:f4:14:c5:38:f9:c8:e9:41:29:cc: 45:cc:d0:97:87:80:ab:83:b3:f6:04:14:9e:09:6c:6e:79:0e: 02:98:10:78:d4:eb:f9:3f:df:97:76:3e:5d:64:a6:29:ea:91: b1:3b:c7:e4:52:c4:0d:db:8a:75:d3:97:03:b5:af:d2:12:73: ce:c5:74:2f:89:70:d8:86:2e:d1:b6:c0:9b:f5:5e:44:e7:c6: a8:70:72:71:2e:55:f8:c9:dc:0a:c8:15:64:43:f2:22:5c:c9: 1e:5d:a7:f0:42:e3:9b:15:50:eb:4d:f9:21:92:8f:95:a0:26: b7:c6:48:e9:e3:2e:74:d0:a8:72:52:b6:1a:f9:46:ed:bc:f6: 05:2b:2e:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe4yH0Cs3S9TVtiQgdl6bxAwKhxgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAxMTIyWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDFhMzMwMjBmNDkxNjA2N2MzZGJmNDE4MDBhNjY0NTkz ZjUxNGE3MGVkOTE1MGQyYzUxNDE3YWExNGRkY2I0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3js2Y+d5VGEjd6YUXrrttDAnoT3DT6+ZAeFF1s2+uVTmf bBCuq3HgsaW6dtYS2Bci1fN8tzWGxftpNpucUoESAKzlpcfeLCVF2hXtXTv4F9ZY weTBfuoE1iki4nATSjH1bPJaKvDV9/M10a1FVYr9I1j6bh1wYvrhqBi/yJJ0Fg5B XQ01HDttbSgetCefTecLYtrLS+/1sH3Plu8f9SygysCbTIBsv5VufrIDkeF9kHa5 fNGopF3FHgmULGXUhZBkKUuJF9JAIhhLzNRRXVZpbeXnSQDqNakyYSY1CcUpLRv+ X/L7c/tx42Fccsh5XoLagSVm0b5alDknCOP3hBtrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVDk83P4zUF6dvlh+hIiX+Fu4bTMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjMzU1NTFlLWEwMWYtNGY2NC1iMzlhLWYxYWRhMTkwZWFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARkKkAwDQYJKoZIhvcNAQELBQADggEBACM0BPFxru53HvvMpP1LBQwPeLZG vsJNTKO8k22REZNr/DLYSzdVajSTSsHMjk35iOs0AOSV3NdG0XpzYwWiNYuPUOBm AFeu1mJInjTEdmWuHhllLz4KtQS8CSngAdqfHrLcvQYmY6HQ0kRPTKEXsIFiJVb1 9BTFOPnI6UEpzEXM0JeHgKuDs/YEFJ4JbG55DgKYEHjU6/k/35d2Pl1kpinqkbE7 x+RSxA3binXTlwO1r9ISc87FdC+JcNiGLtG2wJv1XkTnxqhwcnEuVfjJ3ArIFWRD 8iJcyR5dp/BC45sVUOtN+SGSj5WgJrfGSOnjLnTQqHJSthr5Ru289gUrLrg= -----END CERTIFICATE-----Generated at Sat Jun 13 08:22:10 2026 by rpki-client