$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa File: 119dc5d3-828f-4fcb-ac13-56c9facae99f.roa (raw, json) Hash identifier: PQnRMWMxuGOqTmYFAPXHaiDX2QvnMkLpIn3ZrvRRCSU= Subject key identifier: 5D:EB:99:02:3C:9D:8E:AE:3E:FF:3F:CB:21:A7:0D:AC:33:D5:7A:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 348ADC9F799954FF4B37C06EF66C5A97CD49B497 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa Signing time: Wed 06 May 2026 00:10:08 +0000 ROA not before: Wed 06 May 2026 00:10:08 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.50.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8a:dc:9f:79:99:54:ff:4b:37:c0:6e:f6:6c:5a:97:cd:49:b4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:10:08 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=0591ad31f32bf099fff0887561bb60e1141fc0ea09f8b3d37f5aa8ea139d082b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:76:b5:57:fd:76:24:00:c0:b3:ad:e7:30: e8:ed:6d:5e:89:58:22:b7:28:ac:ac:5f:4c:20:d0: c0:50:9a:07:f0:2c:5b:45:cf:03:16:f4:87:b2:cd: 9e:70:54:cb:d0:a4:f5:91:09:7f:8c:0d:ab:66:1b: 8a:93:55:ea:14:94:2d:24:c5:6d:98:1b:eb:da:2a: e2:91:ed:e3:3d:29:1f:6c:8f:0a:f3:60:76:4a:4c: 1c:ba:35:99:e8:3f:5b:5a:4d:4f:98:03:f5:cb:07: f8:16:40:02:28:d7:4c:85:51:69:43:b5:3d:61:24: 5d:3b:c0:9d:29:1a:ad:a7:0f:5a:e2:0e:fc:fa:3f: 22:10:51:fc:bd:ea:83:50:f8:57:84:5e:2c:f2:ce: 21:5b:14:9a:b9:f9:22:c4:85:ee:5d:5e:55:51:05: 4c:6e:d7:94:55:7b:9d:7f:24:16:a2:31:6d:ce:de: e9:19:e4:00:81:c7:c9:74:ac:ce:78:c8:41:96:a6: 11:a6:0c:4b:e5:40:f4:a5:73:b8:83:22:91:d1:5f: ba:7a:0c:5a:c7:76:24:d6:42:0b:2d:31:b2:5a:7d: 4c:72:a6:d3:c6:7a:32:7c:d3:c5:f2:2a:6d:32:fd: af:2b:25:74:d7:44:bd:09:c6:0e:89:99:bd:3f:92: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:99:02:3C:9D:8E:AE:3E:FF:3F:CB:21:A7:0D:AC:33:D5:7A:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.50.128.0/17 Signature Algorithm: sha256WithRSAEncryption 57:8a:6e:ea:ac:0c:70:9d:10:be:4b:7a:1f:ad:f5:82:a8:2c: 03:be:ee:67:5c:37:c2:52:e7:2d:be:45:f9:c3:84:f2:17:ee: 5a:b0:ad:e6:e5:69:80:a7:53:ff:a2:22:60:73:8e:ea:ce:ab: 24:42:33:7e:4b:2e:c3:0c:18:c9:7b:9f:6e:93:43:4a:32:55: bc:a4:fc:da:35:aa:97:39:9d:70:4a:1a:0e:47:7b:e1:47:45: 70:25:fa:9e:96:62:4e:93:6b:fa:ff:ab:16:af:13:0f:d6:28: e0:b4:2e:f5:fe:7d:d0:88:cb:ae:46:b3:ab:07:08:f0:f2:7b: a6:5d:8e:0e:a3:ec:f7:54:be:10:39:f2:b5:31:49:0e:d8:5b: 92:ed:ae:b9:86:1a:ce:06:71:9b:e7:26:5f:c4:44:0e:4d:d6: 20:ed:d7:bf:de:d0:2f:53:40:05:ef:19:39:3b:8f:65:a4:4b: 98:7f:d6:71:c8:1e:d1:36:75:e3:6a:35:dc:66:b2:74:a9:65: f3:3e:e2:03:1c:19:11:0a:42:f4:9e:9b:5f:f4:9b:8b:90:e7: 6c:63:15:a7:7b:ba:17:89:af:9a:d8:01:f4:65:d1:d0:42:a8: 8b:88:3d:ec:8f:49:bb:00:19:e2:b3:ed:fc:26:16:68:b3:1f: cd:ab:44:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNIrcn3mZVP9LN8Bu9mxal81JtJcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAxMDA4WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTkxYWQzMWYzMmJmMDk5ZmZmMDg4NzU2MWJiNjBlMTE0 MWZjMGVhMDlmOGIzZDM3ZjVhYThlYTEzOWQwODJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDASHa1V/12JADAs63nMOjtbV6JWCK3KKysX0wg0MBQmgfw LFtFzwMW9IeyzZ5wVMvQpPWRCX+MDatmG4qTVeoUlC0kxW2YG+vaKuKR7eM9KR9s jwrzYHZKTBy6NZnoP1taTU+YA/XLB/gWQAIo10yFUWlDtT1hJF07wJ0pGq2nD1ri Dvz6PyIQUfy96oNQ+FeEXizyziFbFJq5+SLEhe5dXlVRBUxu15RVe51/JBaiMW3O 3ukZ5ACBx8l0rM54yEGWphGmDEvlQPSlc7iDIpHRX7p6DFrHdiTWQgstMbJafUxy ptPGejJ808XyKm0y/a8rJXTXRL0Jxg6Jmb0/ko59AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXeuZAjydjq4+/z/LIacNrDPVegMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExOWRjNWQzLTgyOGYtNGZjYi1hYzEzLTU2YzlmYWNhZTk5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjMoAwDQYJKoZIhvcNAQELBQADggEBAFeKbuqsDHCdEL5Leh+t9YKoLAO+ 7mdcN8JS5y2+RfnDhPIX7lqwreblaYCnU/+iImBzjurOqyRCM35LLsMMGMl7n26T Q0oyVbyk/No1qpc5nXBKGg5He+FHRXAl+p6WYk6Ta/r/qxavEw/WKOC0LvX+fdCI y65Gs6sHCPDye6Zdjg6j7PdUvhA58rUxSQ7YW5LtrrmGGs4GcZvnJl/ERA5N1iDt 17/e0C9TQAXvGTk7j2WkS5h/1nHIHtE2deNqNdxmsnSpZfM+4gMcGREKQvSem1/0 m4uQ52xjFad7uheJr5rYAfRl0dBCqIuIPeyPSbsAGeKz7fwmFmizH82rRLI= -----END CERTIFICATE-----Generated at Tue May 12 21:52:17 2026 by rpki-client