$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa File: 35a17a79-a4f2-4fde-89fd-653cadace6b7.roa (raw, json) Hash identifier: vqDr8Hz8fi4j4+mZS7YzlCmyPeZmi5iTb/cNfQ8lI4E= Subject key identifier: 49:8A:82:4B:F0:20:C3:11:0A:C1:D6:88:26:E2:16:DE:61:4A:B4:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FC9ABD9D2BAA246AF3DFE82FA3A1A12D4BB73A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa Signing time: Tue 19 May 2026 00:30:12 +0000 ROA not before: Tue 19 May 2026 00:30:12 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.80.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c9:ab:d9:d2:ba:a2:46:af:3d:fe:82:fa:3a:1a:12:d4:bb:73:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:30:12 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=7419c9fad5037e8e552cda41559ac9a0c4366a08c9b862eb3a236c38551e77f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:5a:e8:dd:63:b6:47:a8:4f:fd:33:26:cb: 94:eb:a8:de:ca:28:3b:a2:d2:ec:50:b3:fc:c4:ab: 53:9d:96:9d:eb:dd:f1:f0:94:6d:d1:5b:db:58:fa: d3:20:0f:ab:bc:f3:5a:ff:0a:3c:be:66:ef:59:75: 9f:1e:eb:59:81:ab:50:3a:02:44:43:2d:e8:be:32: b3:50:07:11:51:4a:ea:06:07:c4:2f:b6:86:7c:5a: e7:eb:cc:af:36:49:d8:5d:bc:ea:02:e4:47:5d:91: 21:63:8c:e0:77:c2:f6:a0:41:ee:70:f9:b3:5a:12: 5c:2f:ec:0c:4d:fb:55:e9:3f:d5:3d:0c:21:85:fd: ea:66:e9:f7:80:09:15:fa:94:6e:79:82:a3:7b:fa: f0:51:dc:b5:ca:48:72:5a:30:2f:82:2e:c4:b0:7f: e7:46:86:c8:a9:9a:ac:5f:fa:62:95:20:10:1d:bd: 46:53:28:f4:19:08:3a:ec:fd:fb:1d:ff:de:34:69: 63:5e:7c:4c:2b:43:dd:0c:c0:29:b7:a8:9e:f4:d8: 6f:58:a9:2c:8b:54:1c:88:0e:25:ba:76:b7:24:5f: 2e:23:50:d6:be:28:cb:f5:66:9b:9b:5b:f8:ab:ff: 2f:a4:d8:9d:1c:74:d2:a0:c2:e8:5f:5a:b4:32:c6: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8A:82:4B:F0:20:C3:11:0A:C1:D6:88:26:E2:16:DE:61:4A:B4:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.80.168.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:86:3a:15:b0:f6:40:79:41:e9:8d:b0:7b:ca:c8:81:43:1d: 05:6f:e3:00:98:a2:41:3e:dd:63:21:13:50:39:bc:06:2a:b2: 17:36:74:88:dc:ec:63:cc:f3:29:97:5b:33:80:ca:13:c0:a8: ea:c6:46:c7:a1:7e:60:b0:00:1a:25:1e:c2:dd:92:7c:ca:50: f0:40:a1:5c:fd:c0:81:8d:0b:80:b9:34:4d:c2:d5:96:17:4b: 88:a2:17:83:8c:c6:78:2d:a6:5c:84:62:92:ac:b9:d5:3c:9b: f9:f3:3e:bb:5a:8c:90:b5:f9:8b:26:15:38:7b:41:e9:16:e7: d4:d2:fb:b6:dc:d5:af:f7:dc:53:c1:60:e7:f5:40:b9:05:b5: dd:17:41:14:da:d0:62:b2:49:2c:5b:af:07:60:05:4b:5f:7d: 10:5f:20:9c:da:9f:ac:ad:de:12:9b:10:c1:3f:73:2d:f5:8c: b7:73:8c:14:95:1f:dc:2e:2c:c6:ef:ac:d1:f0:38:b7:e4:69: 27:f8:3d:40:85:05:65:a7:83:41:d1:b6:f8:a3:bb:fd:28:af: 73:81:9e:60:a7:ee:48:91:26:e7:5b:a2:9f:11:1f:3c:04:32: 07:f9:9d:ae:21:ad:ae:6c:bb:1c:b7:50:66:b6:32:24:43:9a: ad:6a:be:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb8mr2dK6okavPf6C+joaEtS7c6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAzMDEyWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDE5YzlmYWQ1MDM3ZThlNTUyY2RhNDE1NTlhYzlhMGM0 MzY2YTA4YzliODYyZWIzYTIzNmMzODU1MWU3N2Y1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf5lro3WO2R6hP/TMmy5TrqN7KKDui0uxQs/zEq1Odlp3r 3fHwlG3RW9tY+tMgD6u881r/Cjy+Zu9ZdZ8e61mBq1A6AkRDLei+MrNQBxFRSuoG B8QvtoZ8WufrzK82SdhdvOoC5EddkSFjjOB3wvagQe5w+bNaElwv7AxN+1XpP9U9 DCGF/epm6feACRX6lG55gqN7+vBR3LXKSHJaMC+CLsSwf+dGhsipmqxf+mKVIBAd vUZTKPQZCDrs/fsd/940aWNefEwrQ90MwCm3qJ702G9YqSyLVByIDiW6drckXy4j UNa+KMv1ZpubW/ir/y+k2J0cdNKgwuhfWrQyxhkhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSYqCS/AgwxEKwdaIJuIW3mFKtAEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1YTE3YTc5LWE0ZjItNGZkZS04OWZkLTY1M2NhZGFjZTZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKUKgwDQYJKoZIhvcNAQELBQADggEBAC+GOhWw9kB5QemNsHvKyIFDHQVv 4wCYokE+3WMhE1A5vAYqshc2dIjc7GPM8ymXWzOAyhPAqOrGRsehfmCwABolHsLd knzKUPBAoVz9wIGNC4C5NE3C1ZYXS4iiF4OMxngtplyEYpKsudU8m/nzPrtajJC1 +YsmFTh7QekW59TS+7bc1a/33FPBYOf1QLkFtd0XQRTa0GKySSxbrwdgBUtffRBf IJzan6yt3hKbEME/cy31jLdzjBSVH9wuLMbvrNHwOLfkaSf4PUCFBWWng0HRtvij u/0or3OBnmCn7kiRJudbop8RHzwEMgf5na4hra5suxy3UGa2MiRDmq1qvrs= -----END CERTIFICATE-----Generated at Sat Jun 13 05:49:25 2026 by rpki-client