$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0540d13-421c-417c-9344-a1e60df520cc.roa File: b0540d13-421c-417c-9344-a1e60df520cc.roa (raw, json) Hash identifier: 9+KxVO8/e+x3J2NT9AC/RX0rQaT/9GBFYFnPy5gLWEk= Subject key identifier: 48:E0:72:E9:E3:2B:91:02:04:0A:E4:1B:F9:9D:FA:40:71:01:3A:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44A1998A37D07D22FA1210CA29477CEBBD28486F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0540d13-421c-417c-9344-a1e60df520cc.roa Signing time: Tue 28 Jul 2026 22:03:00 +0000 ROA not before: Tue 28 Jul 2026 22:03:00 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.235.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a1:99:8a:37:d0:7d:22:fa:12:10:ca:29:47:7c:eb:bd:28:48:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 28 22:03:00 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=b5d3acacaea42be3ec8c313c43a3f31bde47cfbb0a9d0544c53571349669f3a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:07:46:9a:4e:a4:8a:6f:d3:e9:c7:be:0e: dd:e7:b8:4e:0b:e8:2b:04:d9:56:7f:56:b9:0d:fa: ba:ff:2c:31:35:e0:5c:00:81:4c:b3:5b:17:62:dc: 85:29:93:e9:d2:5f:6b:5c:f0:d1:fe:a2:95:c0:43: 14:e5:15:71:4b:4a:03:13:54:92:72:7e:af:ac:e9: 91:08:39:fb:93:4e:f0:0a:98:12:f0:08:4d:98:f6: 2d:ae:89:8f:b8:81:71:0d:a3:d5:73:d1:1f:4b:cb: 24:96:e2:32:6f:a6:a2:a8:3d:87:a8:ae:c4:f4:60: b4:c0:29:5a:f9:df:04:1b:b8:e4:51:bc:91:c2:81: 69:44:a8:0a:80:35:43:db:3a:17:1f:d4:6a:9d:35: ab:77:af:d4:a1:e5:b2:35:eb:6f:cd:1e:de:14:ea: 2c:39:1a:df:1b:0c:2c:65:4b:c8:3a:5f:57:00:30: 36:84:ee:4b:b8:00:74:0d:54:0f:d1:d5:a0:af:2d: ce:c7:58:21:14:c2:3b:16:00:9b:08:dc:5b:9c:af: 1d:97:16:93:30:f0:27:23:cf:32:9c:d8:65:6e:7d: 17:5a:ee:63:0d:ed:fc:07:71:d5:84:23:19:5d:60: 78:e3:2d:89:71:a3:6f:ae:67:20:0c:45:3d:3d:7a: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:72:E9:E3:2B:91:02:04:0A:E4:1B:F9:9D:FA:40:71:01:3A:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0540d13-421c-417c-9344-a1e60df520cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.235.160.0/19 Signature Algorithm: sha256WithRSAEncryption b7:14:76:e8:db:c2:93:16:24:aa:29:50:d5:f5:03:95:09:18: 31:20:ca:9d:09:03:22:18:3d:c0:72:2d:77:b1:88:f8:88:de: 40:87:f7:da:b0:0d:33:a1:96:44:f1:87:be:df:1d:1d:49:c0: 60:47:ae:aa:90:d4:16:76:8c:ce:fc:8a:14:a1:d6:00:a8:4e: 28:11:4e:40:ff:73:5b:b6:2e:25:99:ff:1c:94:ff:56:3a:90: 47:33:dd:da:41:58:a2:62:94:18:03:45:b8:a0:cf:e3:a2:76: 65:da:e8:b2:99:4e:ca:7d:ed:29:fa:ed:72:80:10:fc:84:01: d0:76:17:ba:11:ac:fe:38:0d:24:3f:3f:7d:8d:5f:97:93:33: 2d:5c:31:17:53:c9:e2:68:55:76:70:ff:2c:cd:9f:3d:08:15: 22:32:93:71:db:6d:1d:8d:8c:9c:70:19:0f:14:c5:61:9b:82: a6:f1:c3:06:6f:30:98:8b:a3:dc:18:56:c9:71:8b:5c:a5:d1: 78:cf:39:62:05:de:91:d5:bb:eb:5b:ed:79:9e:2c:8f:4c:56: 42:ce:b5:e2:fa:83:8a:93:da:e0:0e:96:fd:64:31:54:a0:84: 5d:84:75:7c:d0:1c:59:b6:9e:0c:e0:de:73:16:cc:ac:e9:f7: 8f:16:62:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURKGZijfQfSL6EhDKKUd8670oSG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MjIwMzAwWhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWQzYWNhY2FlYTQyYmUzZWM4YzMxM2M0M2EzZjMxYmRl NDdjZmJiMGE5ZDA1NDRjNTM1NzEzNDk2NjlmM2E0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjbAdGmk6kim/T6ce+Dt3nuE4L6CsE2VZ/VrkN+rr/LDE1 4FwAgUyzWxdi3IUpk+nSX2tc8NH+opXAQxTlFXFLSgMTVJJyfq+s6ZEIOfuTTvAK mBLwCE2Y9i2uiY+4gXENo9Vz0R9LyySW4jJvpqKoPYeorsT0YLTAKVr53wQbuORR vJHCgWlEqAqANUPbOhcf1GqdNat3r9Sh5bI162/NHt4U6iw5Gt8bDCxlS8g6X1cA MDaE7ku4AHQNVA/R1aCvLc7HWCEUwjsWAJsI3Fucrx2XFpMw8CcjzzKc2GVufRda 7mMN7fwHcdWEIxldYHjjLYlxo2+uZyAMRT09eqG1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSOBy6eMrkQIECuQb+Z36QHEBOlgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwNTQwZDEzLTQyMWMtNDE3Yy05MzQ0LWExZTYwZGY1MjBjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUo66AwDQYJKoZIhvcNAQELBQADggEBALcUdujbwpMWJKopUNX1A5UJGDEg yp0JAyIYPcByLXexiPiI3kCH99qwDTOhlkTxh77fHR1JwGBHrqqQ1BZ2jM78ihSh 1gCoTigRTkD/c1u2LiWZ/xyU/1Y6kEcz3dpBWKJilBgDRbigz+OidmXa6LKZTsp9 7Sn67XKAEPyEAdB2F7oRrP44DSQ/P32NX5eTMy1cMRdTyeJoVXZw/yzNnz0IFSIy k3HbbR2NjJxwGQ8UxWGbgqbxwwZvMJiLo9wYVslxi1yl0XjPOWIF3pHVu+tb7Xme LI9MVkLOteL6g4qT2uAOlv1kMVSghF2EdXzQHFm2ngzg3nMWzKzp948WYjI= -----END CERTIFICATE-----Generated at Mon Aug 3 05:37:18 2026 by rpki-client