$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa File: 35dd8080-5375-4755-bea9-982f40526ea4.roa (raw, json) Hash identifier: v/FOskV6CEx2q9LFgjQ3kQ5BnchxfCxK1ETLWjacDp4= Subject key identifier: 8A:39:91:B1:0A:60:C8:7F:0F:84:AD:8C:13:95:56:43:76:2F:7A:2E Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 3DEEDE854EAFF5809EB0E18658379DFE50F86367 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa Signing time: Mon 27 Jul 2026 00:00:39 +0000 ROA not before: Mon 27 Jul 2026 00:00:39 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 7224 IP address blocks: 172.96.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ee:de:85:4e:af:f5:80:9e:b0:e1:86:58:37:9d:fe:50:f8:63:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jul 27 00:00:39 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=e5b244f5e3d9ba757ae4c25c272e00c0eb7b221d631c7383ab3e8b23c6bad494, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:21:72:25:f0:bf:8d:02:4d:44:2f:f8:a7: 6f:cf:b2:ce:4f:65:5a:07:ff:d4:5e:8f:e2:6f:61: 0b:d4:bf:ff:f5:6b:f6:a6:8a:95:35:92:e4:89:3e: c4:3a:38:06:38:f0:1b:e5:1a:3d:d3:8e:80:f1:f7: f5:e4:b8:7d:e6:6a:e8:dd:81:15:96:6c:ab:0e:5a: 98:58:77:3e:01:b4:31:b8:c7:7c:fb:d6:e3:fd:ee: 7c:37:d4:64:a2:f3:83:8b:d3:dd:98:69:23:ef:06: 8c:d9:8a:84:a7:36:3d:f9:ad:71:8b:3d:53:ff:67: 12:3a:f0:35:7b:81:a1:ed:8f:44:67:e3:12:3b:37: ef:0f:dd:d6:ae:73:ec:09:cd:ff:30:ce:1c:71:fd: 2a:e4:75:90:d1:a1:9a:47:ed:b7:03:22:49:7f:98: ec:37:40:aa:ab:64:8a:9e:8f:8c:4e:e2:a1:ff:78: 8e:11:60:79:ec:ad:16:e7:fc:30:c6:d7:91:76:44: c3:c2:0e:99:df:a7:6f:a8:a6:ab:25:0c:7f:44:e7: e8:ac:7c:01:f0:78:cd:94:94:5d:19:78:4b:2a:2e: 0a:81:79:b2:8b:60:da:69:c4:75:be:7f:67:35:8e: 4c:44:0b:5b:c5:8e:04:46:11:1f:ac:6c:0f:fa:32: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:39:91:B1:0A:60:C8:7F:0F:84:AD:8C:13:95:56:43:76:2F:7A:2E X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:a8:fd:6c:db:10:88:25:b1:71:cf:0a:97:58:3a:25:a8:cb: 91:9e:69:76:32:f7:8d:a6:0f:32:24:2d:47:f5:6f:b7:3a:98: 70:8a:ba:48:bc:2d:02:05:7c:44:25:9e:80:91:69:ac:16:e6: 53:91:f1:0b:72:4c:72:44:7a:32:43:dd:c4:cb:fc:73:a6:f4: 27:cc:35:b7:75:1a:ad:56:61:66:32:54:65:a8:96:bb:e5:47: af:5a:4a:0d:6a:6b:0c:a9:3e:cd:53:46:5a:c3:73:90:f9:d1: 50:6a:93:64:39:ba:96:b0:45:78:ff:56:48:4f:b2:93:97:12: d7:ac:75:ad:70:a2:b9:55:47:19:59:f5:a8:0f:7e:79:2f:35: ed:ec:04:4a:5f:85:16:6d:6e:62:2f:17:e0:ab:66:53:de:b7: 6a:64:48:4a:86:96:54:76:99:68:7f:16:62:bc:c3:61:e7:d9: 1d:ad:bb:20:e5:a2:67:ee:c0:25:5a:ee:61:30:1b:55:0f:ed: 99:af:16:94:35:f2:fa:37:51:5f:36:00:2d:08:af:88:3c:a7: ac:9e:c9:49:21:3b:db:87:15:46:fa:4c:dc:6b:64:9f:ad:11: ef:8a:9d:e6:d5:43:13:70:12:99:94:04:4e:1a:5b:40:53:f7: 69:ed:45:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPe7ehU6v9YCesOGGWDed/lD4Y2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYwNzI3MDAwMDM5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWIyNDRmNWUzZDliYTc1N2FlNGMyNWMyNzJlMDBjMGVi N2IyMjFkNjMxYzczODNhYjNlOGIyM2M2YmFkNDk0MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ4SFyJfC/jQJNRC/4p2/Pss5PZVoH/9Rej+JvYQvUv//1 a/amipU1kuSJPsQ6OAY48BvlGj3TjoDx9/XkuH3maujdgRWWbKsOWphYdz4BtDG4 x3z71uP97nw31GSi84OL092YaSPvBozZioSnNj35rXGLPVP/ZxI68DV7gaHtj0Rn 4xI7N+8P3dauc+wJzf8wzhxx/SrkdZDRoZpH7bcDIkl/mOw3QKqrZIqej4xO4qH/ eI4RYHnsrRbn/DDG15F2RMPCDpnfp2+opqslDH9E5+isfAHweM2UlF0ZeEsqLgqB ebKLYNppxHW+f2c1jkxEC1vFjgRGER+sbA/6MpKVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUijmRsQpgyH8PhK2ME5VWQ3Yvei4wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzM1ZGQ4MDgwLTUzNzUtNDc1NS1iZWE5LTk4MmY0MDUyNmVhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASsYGAwDQYJKoZIhvcNAQELBQADggEBAAyo/WzbEIglsXHPCpdYOiWoy5Ge aXYy942mDzIkLUf1b7c6mHCKuki8LQIFfEQlnoCRaawW5lOR8QtyTHJEejJD3cTL /HOm9CfMNbd1Gq1WYWYyVGWolrvlR69aSg1qawypPs1TRlrDc5D50VBqk2Q5upaw RXj/VkhPspOXEtesda1worlVRxlZ9agPfnkvNe3sBEpfhRZtbmIvF+CrZlPet2pk SEqGllR2mWh/FmK8w2Hn2R2tuyDlomfuwCVa7mEwG1UP7ZmvFpQ18vo3UV82AC0I r4g8p6yeyUkhO9uHFUb6TNxrZJ+tEe+KnebVQxNwEpmUBE4aW0BT92ntRe8= -----END CERTIFICATE-----Generated at Tue Jul 28 20:12:39 2026 by rpki-client