$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa File: 8a416471-7293-44b5-9ae4-b83a744da832.roa (raw, json) Hash identifier: uDQae1nKuC0c0ywd+8oPRp6wdAQF6a9InRr80v3t57k= Subject key identifier: 19:EC:A5:8E:48:D8:21:18:BC:6F:A7:8A:C5:AA:12:48:8E:1B:10:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6961FCFCC7AE34A8B742EC1D01E1F4CBC760173E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa Signing time: Thu 30 Apr 2026 00:00:07 +0000 ROA not before: Thu 30 Apr 2026 00:00:07 +0000 ROA not after: Wed 29 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.42.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:61:fc:fc:c7:ae:34:a8:b7:42:ec:1d:01:e1:f4:cb:c7:60:17:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:07 2026 GMT Not After : Jul 29 23:59:59 2026 GMT Subject: serialNumber=818dfa9c91842f7915408988bec3d138d28053d318aedd9cc07b0378dc64a73a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:7d:77:46:ca:e8:d8:e8:f3:ac:be:06:44: a9:7a:61:0d:c4:67:99:e8:58:f0:e1:ea:77:45:cf: 91:24:9e:7f:a9:02:92:57:d0:99:69:78:d3:48:05: 66:a7:67:01:ba:f6:f7:b8:d3:d1:1f:cf:fd:a3:77: c5:e5:9f:ea:fa:49:e4:6a:9b:3b:86:c3:21:05:0f: 05:f9:08:66:55:c6:06:2f:a6:a6:76:8a:16:ad:a8: c3:d4:04:fb:98:db:a2:0d:51:1f:00:6e:d9:1c:3b: 8b:ef:72:96:52:6a:3c:d5:62:92:23:4c:fe:84:c4: 03:ba:ed:dc:85:e1:a8:24:3f:95:c5:f8:3e:9c:40: 26:33:79:62:0a:ee:d2:17:e7:d0:0d:bc:3c:25:1f: 7b:d6:05:2c:86:80:73:fa:4f:68:e8:be:d4:35:8f: c1:c5:2d:92:2b:a6:d9:9c:53:0f:f8:57:f4:67:64: 2c:90:92:26:1c:9a:5e:e0:ac:61:a3:4a:ac:eb:c0: dc:e5:19:67:04:4f:b4:b2:29:a6:42:cf:b4:a5:fe: a4:79:b0:d0:c1:f3:60:53:71:e8:bf:5e:af:00:05: fb:79:b4:47:72:62:ce:52:71:b1:67:7a:47:c3:3d: fb:74:64:86:6f:4e:67:ff:23:e6:ab:65:1f:52:aa: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:A5:8E:48:D8:21:18:BC:6F:A7:8A:C5:AA:12:48:8E:1B:10:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:09:5f:fb:19:60:89:8b:33:61:46:7b:cd:97:e6:a8:ae:d7: 54:13:22:03:f0:9a:b5:07:e8:38:7b:e3:96:46:a3:b2:c6:1b: eb:a5:aa:40:7b:55:6d:0d:01:f8:b2:5f:c4:dd:f6:3e:db:0b: d7:ab:81:a7:ef:aa:96:da:ac:bd:ba:88:a1:e1:bc:05:9d:83: fd:8f:cb:3e:70:3f:f5:a0:b3:16:f2:0e:12:6a:e0:81:a1:4e: bc:cb:ca:f0:76:ee:ea:c0:b4:9a:68:a0:6b:88:b5:05:48:12: 82:e9:0b:28:ae:ca:83:97:e7:21:36:33:b6:b8:84:5d:30:41: b7:39:b9:8e:62:5b:96:88:eb:f9:1f:c9:f0:6b:bb:06:c3:3f: 41:09:20:dd:cb:c7:e2:9a:86:4b:85:b9:c6:d7:82:bc:5b:f2: 8d:8b:b7:96:68:11:a5:57:5e:0a:52:42:f8:7c:06:38:c3:ea: 84:ea:52:30:78:a5:2f:63:b2:b9:29:0a:a9:fb:de:85:23:43: ad:f8:79:be:49:e9:2f:6d:da:5c:5a:f3:3f:d0:dd:22:8c:5b: a5:e6:b8:cc:4f:56:09:4a:d4:61:8c:9a:c5:99:1c:db:c4:34: f4:bf:17:12:b9:3d:67:b2:1a:18:3d:57:e3:6d:b3:a3:f9:d8: 4a:c0:83:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaWH8/MeuNKi3QuwdAeH0y8dgFz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDMwMDAwMDA3WhcNMjYwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MThkZmE5YzkxODQyZjc5MTU0MDg5ODhiZWMzZDEzOGQy ODA1M2QzMThhZWRkOWNjMDdiMDM3OGRjNjRhNzNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXLH13Rsro2OjzrL4GRKl6YQ3EZ5noWPDh6ndFz5Eknn+p ApJX0JlpeNNIBWanZwG69ve409Efz/2jd8Xln+r6SeRqmzuGwyEFDwX5CGZVxgYv pqZ2ihatqMPUBPuY26INUR8AbtkcO4vvcpZSajzVYpIjTP6ExAO67dyF4agkP5XF +D6cQCYzeWIK7tIX59ANvDwlH3vWBSyGgHP6T2jovtQ1j8HFLZIrptmcUw/4V/Rn ZCyQkiYcml7grGGjSqzrwNzlGWcET7SyKaZCz7Sl/qR5sNDB82BTcei/Xq8ABft5 tEdyYs5ScbFnekfDPft0ZIZvTmf/I+arZR9SqkWVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGeyljkjYIRi8b6eKxaoSSI4bENUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhNDE2NDcxLTcyOTMtNDRiNS05YWU0LWI4M2E3NDRkYTgzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjKjANBgkqhkiG9w0BAQsFAAOCAQEAPQlf+xlgiYszYUZ7zZfmqK7XVBMi A/CatQfoOHvjlkajssYb66WqQHtVbQ0B+LJfxN32PtsL16uBp++qltqsvbqIoeG8 BZ2D/Y/LPnA/9aCzFvIOEmrggaFOvMvK8Hbu6sC0mmiga4i1BUgSgukLKK7Kg5fn ITYztriEXTBBtzm5jmJblojr+R/J8Gu7BsM/QQkg3cvH4pqGS4W5xteCvFvyjYu3 lmgRpVdeClJC+HwGOMPqhOpSMHilL2OyuSkKqfvehSNDrfh5vknpL23aXFrzP9Dd Ioxbpea4zE9WCUrUYYyaxZkc28Q09L8XErk9Z7IaGD1X422zo/nYSsCD0g== -----END CERTIFICATE-----Generated at Mon May 4 21:39:02 2026 by rpki-client