$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4410e21e-cfe2-4c98-a0ed-b80647078428.roa File: 4410e21e-cfe2-4c98-a0ed-b80647078428.roa (raw, json) Hash identifier: PkEIaBML63dtxLBALzHJVSEvFUeDW9X4D4P7+ExpFs4= Subject key identifier: 67:40:BB:5A:47:6A:FD:1E:47:DD:59:F1:0D:19:62:36:86:61:EF:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E583D025B25E5BD82C8DE40CE593392B92600A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4410e21e-cfe2-4c98-a0ed-b80647078428.roa Signing time: Wed 20 May 2026 00:21:56 +0000 ROA not before: Wed 20 May 2026 00:21:56 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.54.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:3d:02:5b:25:e5:bd:82:c8:de:40:ce:59:33:92:b9:26:00:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:21:56 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=c3a8c72877d1e3750ea947919cb891341563473164f4186a440de59dbe7e259d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:4c:e0:67:ee:21:3c:32:dc:ce:d2:41:45: 59:5d:00:c1:a8:15:08:27:a4:c9:14:6a:b7:1d:c2: a9:31:35:4b:38:f2:cc:fe:4f:91:93:6f:a9:b9:1e: fa:c0:4e:46:22:b1:03:5b:cf:e5:22:a2:cd:fd:7b: 99:67:d5:48:9a:6a:d4:c6:60:8a:b6:ff:77:71:23: 37:4e:a5:7f:51:1b:be:3a:db:aa:1c:fe:6b:db:c1: 47:88:9a:77:78:b3:73:17:11:a3:08:f1:ef:28:4f: 87:4e:b1:1f:64:a9:e7:82:df:15:cd:6e:8f:65:d6: f8:ff:51:da:29:fa:e2:0c:a8:9f:18:aa:e2:4f:aa: 22:21:ae:cf:f9:db:bd:64:2c:0f:0a:bf:84:01:cf: ea:df:4e:4f:6d:8b:9c:3a:f9:7f:3d:40:2d:b5:55: 01:ac:6b:1e:92:00:fe:e3:c6:fb:99:79:24:5e:4f: 07:cf:71:85:e8:70:a0:2f:58:8c:e6:fb:f0:82:36: de:88:70:d1:0a:41:e3:f4:e3:c7:7e:46:19:c7:ba: a9:4e:f5:94:91:2f:d7:01:67:30:c2:aa:1a:dc:bc: 35:97:8e:db:3c:13:d9:3f:f1:91:ef:aa:e9:12:f6: 0f:6e:2d:e7:cb:dc:e6:55:69:5e:c4:8c:45:4b:0f: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:40:BB:5A:47:6A:FD:1E:47:DD:59:F1:0D:19:62:36:86:61:EF:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4410e21e-cfe2-4c98-a0ed-b80647078428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.60.0/24 Signature Algorithm: sha256WithRSAEncryption b7:2d:7f:bd:ff:8e:95:c6:c6:5d:2d:ef:90:4d:d9:c2:63:67: 8d:38:12:5a:70:65:72:53:07:0b:65:8d:df:bd:e5:44:86:f5: da:f2:e2:ae:10:f6:82:c6:9c:b9:96:87:c1:bb:d0:c1:48:d6: 37:f3:a6:c4:9d:a7:7c:92:37:0e:14:49:05:2b:0b:aa:bd:c8: ed:e9:04:e3:cd:ef:c7:a4:56:5f:31:08:d4:a4:04:2f:78:0e: 29:9e:c8:7d:9c:24:9e:98:67:ad:a4:af:8d:69:03:62:50:45: 35:cd:33:5d:96:f1:bf:f5:d2:55:75:5c:39:44:31:cf:df:4b: f3:05:8b:7d:bf:e7:3e:a7:64:ce:4c:e1:a7:5e:cf:7d:0b:fe: 71:f7:74:06:4a:78:d8:41:ff:31:ea:5c:00:0e:3f:76:c3:27: f1:5c:14:c5:29:35:45:70:c0:52:a1:43:9b:f2:35:5d:10:15: 3e:32:08:39:3e:48:1a:a5:29:10:b9:e6:a4:46:55:6f:72:e5: cc:8a:34:e4:a9:46:04:c2:99:4e:67:fc:2f:96:e3:d7:61:ef: 94:c8:ec:82:b3:b6:66:31:cc:5f:75:60:31:85:50:be:f4:5c: 0d:a1:14:33:30:43:23:9f:8a:2a:91:ba:8b:15:f0:89:91:39: 2a:93:48:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXlg9Alsl5b2CyN5AzlkzkrkmAKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAyMTU2WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2E4YzcyODc3ZDFlMzc1MGVhOTQ3OTE5Y2I4OTEzNDE1 NjM0NzMxNjRmNDE4NmE0NDBkZTU5ZGJlN2UyNTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSiUzgZ+4hPDLcztJBRVldAMGoFQgnpMkUarcdwqkxNUs4 8sz+T5GTb6m5HvrATkYisQNbz+Uios39e5ln1UiaatTGYIq2/3dxIzdOpX9RG746 26oc/mvbwUeImnd4s3MXEaMI8e8oT4dOsR9kqeeC3xXNbo9l1vj/Udop+uIMqJ8Y quJPqiIhrs/5271kLA8Kv4QBz+rfTk9ti5w6+X89QC21VQGsax6SAP7jxvuZeSRe TwfPcYXocKAvWIzm+/CCNt6IcNEKQeP048d+RhnHuqlO9ZSRL9cBZzDCqhrcvDWX jts8E9k/8ZHvqukS9g9uLefL3OZVaV7EjEVLD2YbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ0C7Wkdq/R5H3VnxDRliNoZh758wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0MTBlMjFlLWNmZTItNGM5OC1hMGVkLWI4MDY0NzA3ODQyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjNjwwDQYJKoZIhvcNAQELBQADggEBALctf73/jpXGxl0t75BN2cJjZ404 ElpwZXJTBwtljd+95USG9dry4q4Q9oLGnLmWh8G70MFI1jfzpsSdp3ySNw4USQUr C6q9yO3pBOPN78ekVl8xCNSkBC94DimeyH2cJJ6YZ62kr41pA2JQRTXNM12W8b/1 0lV1XDlEMc/fS/MFi32/5z6nZM5M4adez30L/nH3dAZKeNhB/zHqXAAOP3bDJ/Fc FMUpNUVwwFKhQ5vyNV0QFT4yCDk+SBqlKRC55qRGVW9y5cyKNOSpRgTCmU5n/C+W 49dh75TI7IKztmYxzF91YDGFUL70XA2hFDMwQyOfiiqRuosV8ImROSqTSJU= -----END CERTIFICATE-----Generated at Sat Jun 13 07:11:07 2026 by rpki-client