$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa File: abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa (raw, json) Hash identifier: arn8Lg4+oX4+tEyH0aZo06DLoJDk+ulq0iLNZRX5zV4= Subject key identifier: 07:68:6A:2C:28:07:C9:61:C8:0E:B6:57:31:CE:E3:67:01:E0:05:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D9E9A40B2F250D4EF834C65F6B1113E61816C16 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa Signing time: Tue 04 Aug 2026 02:21:22 +0000 ROA not before: Tue 04 Aug 2026 02:21:22 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9e:9a:40:b2:f2:50:d4:ef:83:4c:65:f6:b1:11:3e:61:81:6c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:21:22 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=95b5e32e8cd5a72a1bad99c2e335f29406d1b8480fb9e3d68703bf15a9d0c9bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:e1:78:3d:3f:da:0a:45:12:cc:2b:fa:58: 31:ee:4b:48:36:a4:14:41:50:d1:47:fe:dc:cc:82: 91:d7:fa:8d:34:8f:74:a6:66:57:bc:ca:e2:21:bd: 5a:4b:be:0b:f4:87:6f:06:1d:09:5e:76:e5:bd:2c: 0f:ef:1b:00:7f:f5:33:04:05:84:b7:cd:ea:c9:5c: 80:99:06:b8:77:bd:f4:f5:de:43:75:55:c2:5b:aa: a8:5b:a4:75:2f:45:1d:a4:2f:73:48:b6:c0:18:2a: 3f:dc:84:bb:73:00:e7:2e:5e:c6:b7:da:9c:6e:fe: d1:41:48:56:ad:5f:a7:32:b9:6e:ad:d6:ec:0a:0c: 0a:be:af:af:be:46:ae:c9:c8:c9:a7:2e:b7:42:5b: b1:4a:8b:56:a8:3f:51:0d:e7:c8:d1:41:e4:56:6e: ee:82:e4:47:70:b8:eb:e7:8f:a8:f9:78:cc:69:bd: ea:c6:fc:93:57:59:b2:d9:cf:37:ef:79:c0:f1:5d: 23:03:71:64:a6:3e:54:a0:bc:a3:3f:29:d3:de:d0: b6:24:3c:8f:ec:b8:c8:9d:ca:09:0d:58:c5:1a:df: 85:12:5f:e9:c9:29:23:0b:da:37:62:7b:71:21:2f: e9:70:c2:0f:8f:9d:c8:71:17:cc:9c:ae:8b:59:43: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:68:6A:2C:28:07:C9:61:C8:0E:B6:57:31:CE:E3:67:01:E0:05:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abfa8cec-4fb4-41fa-9101-2f83a4c46bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:d4:97:b3:1c:1d:cf:ab:5b:24:28:88:8e:dc:62:99:32:96: 2f:d5:07:c0:ec:cf:6a:3a:6b:da:43:28:16:e5:d1:9b:60:bd: bf:6e:37:e8:56:25:d8:66:28:c0:ed:9a:a2:72:ae:27:ce:f7: 1c:0d:66:34:7d:07:8f:95:82:60:97:65:c2:48:eb:a3:e2:47: c6:27:cd:a1:a8:9f:b9:62:a6:85:bf:36:59:de:62:32:90:6f: 10:fe:72:3d:7c:b1:a7:01:b7:51:b5:16:29:f7:9c:01:09:d0: 5c:db:ea:f3:70:ce:07:23:e6:3a:8e:ea:7d:60:b9:c7:40:6a: b0:40:7c:78:51:ef:f8:e0:56:96:eb:f1:53:13:a7:fa:4f:d9: c5:4e:d0:5b:33:3f:40:2d:72:51:27:81:48:34:fe:dd:58:4c: ac:16:a8:38:94:ee:a2:82:2b:ce:e0:28:4d:17:76:b4:9a:76: 69:9e:b1:3a:75:b6:d3:a6:4a:c4:df:56:15:c6:5a:8f:bf:11: 36:ad:8f:da:ee:28:ad:4a:98:f1:24:2a:5a:28:a7:da:da:47: c4:10:49:b9:1f:99:5b:31:16:09:3d:40:ff:d6:74:3c:29:cb: b9:63:0f:f7:94:38:7d:e2:3b:d0:f5:71:69:69:55:25:97:e9: cf:a8:06:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbZ6aQLLyUNTvg0xl9rERPmGBbBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIyMTIyWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWI1ZTMyZThjZDVhNzJhMWJhZDk5YzJlMzM1ZjI5NDA2 ZDFiODQ4MGZiOWUzZDY4NzAzYmYxNWE5ZDBjOWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMg+F4PT/aCkUSzCv6WDHuS0g2pBRBUNFH/tzMgpHX+o00 j3SmZle8yuIhvVpLvgv0h28GHQleduW9LA/vGwB/9TMEBYS3zerJXICZBrh3vfT1 3kN1VcJbqqhbpHUvRR2kL3NItsAYKj/chLtzAOcuXsa32pxu/tFBSFatX6cyuW6t 1uwKDAq+r6++Rq7JyMmnLrdCW7FKi1aoP1EN58jRQeRWbu6C5EdwuOvnj6j5eMxp verG/JNXWbLZzzfvecDxXSMDcWSmPlSgvKM/KdPe0LYkPI/suMidygkNWMUa34US X+nJKSML2jdie3EhL+lwwg+PnchxF8ycrotZQ/pLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUB2hqLCgHyWHIDrZXMc7jZwHgBSowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiZmE4Y2VjLTRmYjQtNDFmYS05MTAxLTJmODNhNGM0NmJiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoIzANBgkqhkiG9w0BAQsFAAOCAQEAb9SXsxwdz6tbJCiIjtximTKWL9UH wOzPajpr2kMoFuXRm2C9v2436FYl2GYowO2aonKuJ873HA1mNH0Hj5WCYJdlwkjr o+JHxifNoaifuWKmhb82Wd5iMpBvEP5yPXyxpwG3UbUWKfecAQnQXNvq83DOByPm Oo7qfWC5x0BqsEB8eFHv+OBWluvxUxOn+k/ZxU7QWzM/QC1yUSeBSDT+3VhMrBao OJTuooIrzuAoTRd2tJp2aZ6xOnW206ZKxN9WFcZaj78RNq2P2u4orUqY8SQqWiin 2tpHxBBJuR+ZWzEWCT1A/9Z0PCnLuWMP95Q4feI70PVxaWlVJZfpz6gGDQ== -----END CERTIFICATE-----Generated at Thu Sep 17 15:34:44 2026 by rpki-client