$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc69b3e-5ab4-4233-8240-2bb3c7bfbf76.roa File: ffc69b3e-5ab4-4233-8240-2bb3c7bfbf76.roa (raw, json) Hash identifier: oWtM6N9y+miqijL31j6z9aNjwdcvB0nDJufWjiSsFGk= Subject key identifier: 89:E1:94:0E:9E:14:46:85:67:4D:48:B3:F6:5E:0A:21:B9:80:50:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0921F296A61C874BDAD125DBB06C50814753B68B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc69b3e-5ab4-4233-8240-2bb3c7bfbf76.roa Signing time: Sun 19 Jul 2026 00:00:42 +0000 ROA not before: Sun 19 Jul 2026 00:00:42 +0000 ROA not after: Sat 17 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.42.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:21:f2:96:a6:1c:87:4b:da:d1:25:db:b0:6c:50:81:47:53:b6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:00:42 2026 GMT Not After : Oct 17 23:59:59 2026 GMT Subject: serialNumber=bff0aa2103e22297137c6bf1b7260dd6aa11db2a736d66082bb707bf515728e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:00:56:f4:a0:43:9a:d3:df:3f:32:76:66: b0:39:1d:a8:48:87:64:72:f4:09:1c:8d:0e:65:3f: eb:1f:b2:cb:e8:45:61:4d:30:e2:de:c8:1d:4e:1e: 6f:0f:4f:94:84:75:3e:61:56:36:d2:9a:11:08:95: 6d:c7:78:2c:e4:f2:be:17:12:0d:40:88:45:a0:f4: 76:03:ee:36:04:4d:91:00:5c:92:c8:8c:26:90:4a: df:70:a2:98:f2:06:a8:81:0f:a5:50:48:26:d0:1a: b1:0f:3d:bf:82:60:ca:14:20:f6:ee:13:26:83:a3: 19:e2:19:43:f6:49:f5:49:3b:69:4f:a9:a5:b9:53: a7:4e:6b:2d:86:55:d7:64:2f:06:15:db:d8:1d:b5: 41:c3:fd:d8:c8:27:17:08:f9:46:e8:1c:97:0c:28: 85:d3:55:6b:49:2f:39:f8:98:ff:d9:00:a7:d6:e6: a6:59:4d:f1:30:c5:65:b1:c3:df:46:d5:39:cd:62: a0:89:8a:5a:bc:93:f5:18:7a:73:51:78:52:89:bb: d4:9d:82:6c:2d:b1:59:1f:67:91:71:33:57:87:fc: 32:55:bb:2a:3d:99:76:a7:3d:90:1c:8f:da:f1:99: b5:53:7a:26:e6:f1:b0:a5:86:1c:44:f3:49:7d:82: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E1:94:0E:9E:14:46:85:67:4D:48:B3:F6:5E:0A:21:B9:80:50:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc69b3e-5ab4-4233-8240-2bb3c7bfbf76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:ad:8d:22:17:4c:c1:99:a6:b4:f3:eb:f5:68:33:86:bf:3d: ba:a3:c1:f5:9d:3d:bd:61:78:03:12:f6:29:ff:0f:44:06:1c: fd:c9:7e:94:d6:ae:05:a5:8a:6b:eb:99:97:67:6f:15:3c:8b: a1:e4:c9:36:50:05:b7:a6:62:4b:cb:3f:2c:29:a6:dc:32:c2: 47:1d:da:a3:22:66:ae:7a:d4:43:d8:bb:e1:c2:6a:62:d8:70: 04:e6:ce:33:cc:71:01:65:33:09:64:75:f3:ea:6e:e5:6a:5c: fa:51:42:ad:84:04:93:84:08:c6:d3:a8:6e:7f:10:bf:e6:c2: 4a:d8:f3:ab:a2:9f:18:a4:8a:6c:30:0e:47:be:7b:6b:c7:64: 26:ad:a7:cd:6a:9c:ed:2f:68:83:d7:ee:f5:23:6c:67:5a:c5: 42:53:c0:8f:b4:e5:d4:86:73:8b:19:c9:e2:f0:80:28:6c:e6: 04:78:2e:bb:a9:56:3b:3d:2a:86:d0:6d:38:d3:ff:08:39:bb: ac:df:0f:88:33:fc:6c:8d:1f:ee:fa:d8:63:1a:9e:9b:ed:1b: fe:95:11:61:83:d8:37:9d:be:2a:0b:50:7f:54:93:37:3d:dd: 2f:a8:17:31:f5:61:00:0e:c5:e4:40:6d:82:89:56:e0:c9:82: e9:2d:26:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCSHylqYch0va0SXbsGxQgUdTtoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE5MDAwMDQyWhcNMjYxMDE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmYwYWEyMTAzZTIyMjk3MTM3YzZiZjFiNzI2MGRkNmFh MTFkYjJhNzM2ZDY2MDgyYmI3MDdiZjUxNTcyOGU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXhQBW9KBDmtPfPzJ2ZrA5HahIh2Ry9AkcjQ5lP+sfssvo RWFNMOLeyB1OHm8PT5SEdT5hVjbSmhEIlW3HeCzk8r4XEg1AiEWg9HYD7jYETZEA XJLIjCaQSt9wopjyBqiBD6VQSCbQGrEPPb+CYMoUIPbuEyaDoxniGUP2SfVJO2lP qaW5U6dOay2GVddkLwYV29gdtUHD/djIJxcI+UboHJcMKIXTVWtJLzn4mP/ZAKfW 5qZZTfEwxWWxw99G1TnNYqCJilq8k/UYenNReFKJu9SdgmwtsVkfZ5FxM1eH/DJV uyo9mXanPZAcj9rxmbVTeibm8bClhhxE80l9gvK/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUieGUDp4URoVnTUiz9l4KIbmAUGgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmYzY5YjNlLTVhYjQtNDIzMy04MjQwLTJiYjNjN2JmYmY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjKjANBgkqhkiG9w0BAQsFAAOCAQEAKK2NIhdMwZmmtPPr9Wgzhr89uqPB 9Z09vWF4AxL2Kf8PRAYc/cl+lNauBaWKa+uZl2dvFTyLoeTJNlAFt6ZiS8s/LCmm 3DLCRx3aoyJmrnrUQ9i74cJqYthwBObOM8xxAWUzCWR18+pu5Wpc+lFCrYQEk4QI xtOobn8Qv+bCStjzq6KfGKSKbDAOR757a8dkJq2nzWqc7S9og9fu9SNsZ1rFQlPA j7Tl1IZzixnJ4vCAKGzmBHguu6lWOz0qhtBtONP/CDm7rN8PiDP8bI0f7vrYYxqe m+0b/pURYYPYN52+KgtQf1STNz3dL6gXMfVhAA7F5EBtgolW4MmC6S0mWg== -----END CERTIFICATE-----Generated at Tue Sep 15 13:20:42 2026 by rpki-client