$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8844564-4b0d-48d8-8eef-b90a033c9916.roa File: b8844564-4b0d-48d8-8eef-b90a033c9916.roa (raw, json) Hash identifier: FfJZIZ2q8OoIUDexSbBhg4yyENsXRE+gfMGkwL+iZ+U= Subject key identifier: 82:2C:E6:01:CB:A3:FF:CB:E2:05:EE:2B:AB:FB:48:85:20:C1:C3:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5547DBB2C6EA77462E2497E858F7ECF0AA1D2CB9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8844564-4b0d-48d8-8eef-b90a033c9916.roa Signing time: Thu 30 Apr 2026 00:00:41 +0000 ROA not before: Thu 30 Apr 2026 00:00:41 +0000 ROA not after: Wed 29 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.42.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:47:db:b2:c6:ea:77:46:2e:24:97:e8:58:f7:ec:f0:aa:1d:2c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:41 2026 GMT Not After : Jul 29 23:59:59 2026 GMT Subject: serialNumber=703840b19bb398e10b9599ee49c69301fd7fcea782915df23fc4e2a3b112e29f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:d5:f7:71:6e:64:43:3c:cb:4e:e1:eb:7d: fb:3d:04:b7:97:ff:1b:a7:f2:e8:bf:a3:d9:a5:d5: bc:d7:69:ff:59:ae:df:23:d6:42:8d:0d:a7:67:23: e0:39:bb:22:a0:b1:bc:75:e0:07:cd:9f:83:46:ec: bd:d8:30:98:b4:1b:a5:e0:a0:83:8d:5e:2c:f6:9c: 36:2f:07:e9:a5:68:e3:fa:22:51:0d:eb:c7:98:1e: 3e:8e:79:ca:b0:c4:44:33:f0:81:54:f9:ee:0a:4b: 38:98:10:14:3b:d4:f4:50:14:2a:55:12:67:09:93: 84:a1:96:cc:a6:4f:05:81:bb:53:78:bd:f4:dd:e2: 53:2d:cd:91:1e:01:a8:88:01:8b:b5:bf:d2:94:71: 05:d1:38:ef:4b:2a:85:1e:d1:8e:49:f3:18:05:f5: 5e:c4:9f:6b:9b:f0:09:3a:14:93:6f:5b:e1:95:9e: 29:dc:51:93:e3:e1:04:67:ca:f2:de:a9:7f:00:a9: 7f:cf:ce:ad:cf:d4:66:e5:6c:99:2c:7b:39:7c:95: e5:d2:67:ef:3a:e9:b9:11:c1:0a:56:cc:1a:1d:a4: d0:e4:8d:cf:e1:1d:6a:94:75:2e:ac:a2:59:1e:21: 89:f5:4d:b3:7b:5d:b3:bd:3f:32:84:73:25:21:cb: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:E6:01:CB:A3:FF:CB:E2:05:EE:2B:AB:FB:48:85:20:C1:C3:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8844564-4b0d-48d8-8eef-b90a033c9916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.42.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0d:5f:b6:c0:90:bc:5d:ed:46:9b:2b:87:95:93:f4:db:60:9e: fa:cd:83:c4:74:d1:55:e7:89:aa:c8:f0:b0:7b:c6:40:2e:fb: cd:cd:8e:32:8e:f0:dc:3a:0f:c1:33:2a:40:3d:7a:fe:29:fe: b5:fc:7c:33:7d:e7:76:6b:f1:69:1e:ef:1f:06:cb:66:d5:a7: fb:fb:4c:93:fb:81:e7:00:3e:c4:b3:01:42:2a:cc:ed:df:7c: fb:3f:a9:10:43:1c:ad:98:0c:6e:6b:6c:ae:2b:77:bb:00:ad: c0:e9:eb:73:60:28:d4:6a:62:1e:7b:be:b5:2e:45:69:64:bb: 8a:92:23:27:c6:a8:2d:b3:81:ab:7f:0d:78:59:73:ae:80:55: 26:ab:bf:13:80:c2:c1:7c:9b:8d:4a:05:32:b8:70:83:76:6a: 32:d4:98:bf:dc:c2:c5:a7:30:5b:31:29:ad:ad:14:3e:be:ef: 70:05:af:06:66:cd:42:2a:4a:bd:d2:f5:cf:88:11:04:04:17: 25:14:8e:0c:57:68:27:8d:81:56:6e:76:a3:f6:75:12:a7:78: 89:61:91:be:35:5d:29:1b:96:48:67:10:d0:ba:86:46:20:79: 34:7c:14:73:90:8e:8e:6b:f4:e1:d5:aa:42:14:38:88:2e:5c: 48:4a:74:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVUfbssbqd0YuJJfoWPfs8KodLLkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDMwMDAwMDQxWhcNMjYwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDM4NDBiMTliYjM5OGUxMGI5NTk5ZWU0OWM2OTMwMWZk N2ZjZWE3ODI5MTVkZjIzZmM0ZTJhM2IxMTJlMjlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKGdX3cW5kQzzLTuHrffs9BLeX/xun8ui/o9ml1bzXaf9Z rt8j1kKNDadnI+A5uyKgsbx14AfNn4NG7L3YMJi0G6XgoIONXiz2nDYvB+mlaOP6 IlEN68eYHj6OecqwxEQz8IFU+e4KSziYEBQ71PRQFCpVEmcJk4ShlsymTwWBu1N4 vfTd4lMtzZEeAaiIAYu1v9KUcQXROO9LKoUe0Y5J8xgF9V7En2ub8Ak6FJNvW+GV nincUZPj4QRnyvLeqX8AqX/Pzq3P1GblbJksezl8leXSZ+866bkRwQpWzBodpNDk jc/hHWqUdS6solkeIYn1TbN7XbO9PzKEcyUhyy15AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgizmAcuj/8viBe4rq/tIhSDBwxMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4ODQ0NTY0LTRiMGQtNDhkOC04ZWVmLWI5MGEwMzNjOTkxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjKoAwDQYJKoZIhvcNAQELBQADggEBAA1ftsCQvF3tRpsrh5WT9NtgnvrN g8R00VXniarI8LB7xkAu+83NjjKO8Nw6D8EzKkA9ev4p/rX8fDN953Zr8Wke7x8G y2bVp/v7TJP7gecAPsSzAUIqzO3ffPs/qRBDHK2YDG5rbK4rd7sArcDp63NgKNRq Yh57vrUuRWlku4qSIyfGqC2zgat/DXhZc66AVSarvxOAwsF8m41KBTK4cIN2ajLU mL/cwsWnMFsxKa2tFD6+73AFrwZmzUIqSr3S9c+IEQQEFyUUjgxXaCeNgVZudqP2 dRKneIlhkb41XSkblkhnENC6hkYgeTR8FHOQjo5r9OHVqkIUOIguXEhKdE0= -----END CERTIFICATE-----Generated at Sun May 3 17:05:23 2026 by rpki-client