$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa File: 8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa (raw, json) Hash identifier: je/R6/lAinM9nnSxtjksLFGJD69CWjbeJMsHs+2GS3o= Subject key identifier: AD:34:45:DC:9B:F4:4E:B3:54:8F:17:C1:DE:F9:9B:9D:D4:89:81:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78EF915E06743C65C36DD5E31C44EC9D2BC6AF29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa Signing time: Wed 20 May 2026 00:30:14 +0000 ROA not before: Wed 20 May 2026 00:30:14 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.60.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ef:91:5e:06:74:3c:65:c3:6d:d5:e3:1c:44:ec:9d:2b:c6:af:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:30:14 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=1fea9790c0916db2d86ff22cc8a8cc7a5b7e9b996fab7c17d7b44cd772c808e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:ac:41:23:de:5b:55:f1:22:b1:a7:0b:b6: 07:f8:b9:73:67:d2:b1:fc:1c:b1:f6:59:31:6f:81: 5a:0e:3e:f8:bd:53:e3:23:43:57:18:8c:f8:06:31: dd:3d:ba:d6:8b:33:c9:d1:23:4a:64:bc:9a:e8:76: 66:21:23:c2:53:54:47:40:29:e8:db:9c:d7:64:c8: 5f:ca:08:be:6d:4d:15:9b:a2:c1:8d:01:4d:cd:21: 32:6c:94:0f:19:d8:b1:62:78:a7:66:93:ea:d0:42: 00:43:52:b7:d9:3d:bd:a0:65:9b:df:bd:ec:24:48: 23:a7:e3:0d:dd:e1:15:6c:0d:85:3c:bf:2a:ec:c9: d0:10:d7:88:a7:7c:18:08:75:ff:c3:b0:d1:09:cd: f7:6e:a7:bc:3a:d7:2f:c6:d4:47:f9:a8:02:c5:ed: fc:d0:ec:ca:37:53:a7:ad:91:15:af:7b:c2:6b:05: 8a:93:b5:1a:a6:3b:25:8a:f4:f6:07:80:39:62:02: f7:f7:87:96:33:e4:43:a0:d8:d7:b0:95:0e:bd:08: f9:48:59:d0:f3:50:2c:c4:bb:50:00:73:0a:fd:93: 92:b9:65:df:93:e5:49:6b:67:e0:7c:ec:50:4d:ad: a0:be:aa:11:5f:e2:c8:e0:63:91:53:6d:b5:eb:42: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:45:DC:9B:F4:4E:B3:54:8F:17:C1:DE:F9:9B:9D:D4:89:81:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.60.0.0/15 Signature Algorithm: sha256WithRSAEncryption b5:4c:ea:64:36:21:fc:89:63:27:02:02:d6:cf:dd:be:23:45: 08:d1:14:2e:7a:40:57:2d:5b:4d:4d:ab:06:21:ec:26:b8:39: fc:dc:2b:b6:00:10:d1:67:05:95:e4:8b:f2:21:be:08:bb:54: 39:fa:26:91:cb:e1:e7:de:e6:5f:c1:ce:14:d7:2c:62:9c:9b: f3:4a:3e:3e:38:d2:ec:ea:2a:ec:bc:56:7d:5d:45:70:79:d0: 0f:39:51:52:69:39:24:24:7f:c9:2d:ed:32:b2:ad:f1:4e:21: 64:f4:db:f2:6d:5b:12:30:b1:ae:61:b1:b0:f8:e1:4f:41:18: 7c:5e:8b:05:86:b8:b2:13:a9:60:b5:27:1a:83:32:d2:4c:a6: cd:d6:9c:a5:ee:60:03:1b:5b:17:0c:bd:3a:19:d3:ed:b9:4c: 61:c2:c4:57:3f:a6:21:9f:41:80:55:de:9f:99:46:41:5e:7a: e2:8d:2d:9d:1c:9b:5c:ac:c1:76:15:cb:b2:06:45:76:78:cc: a6:ba:48:d9:e9:4c:0e:7e:d1:2f:cc:07:03:5b:95:b2:ed:28: 95:53:90:1f:c2:7a:30:87:b1:f3:ea:ed:d4:11:83:64:e6:6d: 9a:b1:1b:0a:97:15:3d:d0:d2:8c:4f:d1:71:5b:67:2d:9d:63: 25:22:75:8f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeO+RXgZ0PGXDbdXjHETsnSvGrykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAzMDE0WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmVhOTc5MGMwOTE2ZGIyZDg2ZmYyMmNjOGE4Y2M3YTVi N2U5Yjk5NmZhYjdjMTdkN2I0NGNkNzcyYzgwOGUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQpqxBI95bVfEisacLtgf4uXNn0rH8HLH2WTFvgVoOPvi9 U+MjQ1cYjPgGMd09utaLM8nRI0pkvJrodmYhI8JTVEdAKejbnNdkyF/KCL5tTRWb osGNAU3NITJslA8Z2LFieKdmk+rQQgBDUrfZPb2gZZvfvewkSCOn4w3d4RVsDYU8 vyrsydAQ14infBgIdf/DsNEJzfdup7w61y/G1Ef5qALF7fzQ7Mo3U6etkRWve8Jr BYqTtRqmOyWK9PYHgDliAvf3h5Yz5EOg2NewlQ69CPlIWdDzUCzEu1AAcwr9k5K5 Zd+T5UlrZ+B87FBNraC+qhFf4sjgY5FTbbXrQjKZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrTRF3Jv0TrNUjxfB3vmbndSJgWIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkMDEyNzNhLTkxYmYtNDNkZC04OGQ3LWVkYTYxZTdiNzVmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjPDANBgkqhkiG9w0BAQsFAAOCAQEAtUzqZDYh/IljJwIC1s/dviNFCNEU LnpAVy1bTU2rBiHsJrg5/NwrtgAQ0WcFleSL8iG+CLtUOfomkcvh597mX8HOFNcs Ypyb80o+PjjS7Ooq7LxWfV1FcHnQDzlRUmk5JCR/yS3tMrKt8U4hZPTb8m1bEjCx rmGxsPjhT0EYfF6LBYa4shOpYLUnGoMy0kymzdacpe5gAxtbFwy9OhnT7blMYcLE Vz+mIZ9BgFXen5lGQV564o0tnRybXKzBdhXLsgZFdnjMprpI2elMDn7RL8wHA1uV su0olVOQH8J6MIex8+rt1BGDZOZtmrEbCpcVPdDSjE/RcVtnLZ1jJSJ1jw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:48 2026 by rpki-client