$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa File: 38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa (raw, json) Hash identifier: Deqj0ZfW5D0VChkHzNCWbla5dJgJWfSIxsNagl8VRYs= Subject key identifier: 48:6C:72:41:18:3B:9E:4E:A5:68:FA:BA:1C:AB:28:4B:9A:EF:AB:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54414F7E7E0536313E252CDA511D90349C5F7AAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa Signing time: Mon 20 Jul 2026 00:41:32 +0000 ROA not before: Mon 20 Jul 2026 00:41:32 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:41:4f:7e:7e:05:36:31:3e:25:2c:da:51:1d:90:34:9c:5f:7a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:41:32 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=b18b7d5bb9e462088a448af6a15d0fa6b42660e9914f30682ceaaf6386cff51e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:1b:45:c3:81:a0:e7:31:36:3f:47:2c:dd: 11:ec:9d:1f:c5:a5:85:e4:63:18:3d:bc:ef:e9:2d: 5e:c1:6d:d8:19:0b:15:37:82:55:14:2d:3a:0e:df: ca:dd:83:81:9c:8b:c1:cf:a3:78:ef:36:b9:01:0c: 1f:ff:1f:53:9b:2c:bc:4b:c1:57:ab:e2:b3:15:15: 94:a5:28:fd:20:c1:13:51:f1:cf:b5:e9:fd:22:b1: b3:a2:2f:37:f7:d6:7c:e3:c1:bc:79:2e:4d:34:3d: 00:5a:9a:36:1c:9a:ea:95:57:46:9c:16:77:03:f6: ab:25:3d:9d:7a:71:81:a2:ad:9c:e2:e0:74:56:ba: 1d:4e:76:71:f5:ce:42:73:6e:fb:70:d0:c9:04:71: 1b:a8:8d:0c:dd:c9:95:90:14:ce:ac:3f:44:ca:1e: c7:d2:a8:81:b2:e3:87:a0:f6:d9:8a:c9:18:90:7a: ee:ae:ab:e4:66:29:70:58:2e:d7:8c:36:a1:92:98: 3d:4d:c5:47:a3:94:dc:4c:81:1d:2a:22:5c:4a:50: f8:49:dc:29:aa:33:ab:18:63:55:b9:a7:78:27:1d: 84:dc:41:b7:48:cb:8f:64:69:12:d4:96:ec:fb:ce: ae:59:ce:43:27:3e:2b:ba:b5:78:76:8d:75:95:e8: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:72:41:18:3B:9E:4E:A5:68:FA:BA:1C:AB:28:4B:9A:EF:AB:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e0a1eb-3034-410b-90e3-e19ffb48fc1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:b4:49:3f:d0:4f:eb:86:dd:c9:e4:9f:b6:6b:7e:ab:72:cd: a9:91:44:f7:8f:71:26:31:d1:3e:b7:65:b5:3a:cb:f7:3b:c5: 6b:60:60:5f:de:7c:5a:2b:8c:35:d6:32:c9:59:45:63:cf:d0: 1b:12:e5:c2:5a:20:16:dc:fd:0a:1d:49:98:a1:e5:7e:98:d7: be:88:ab:99:c8:28:1b:59:b2:c2:51:52:a9:c7:58:08:3f:1c: f1:eb:39:db:0a:07:6b:ae:51:0f:27:fc:ee:0a:c1:42:d0:18: f8:b4:42:a3:86:ef:71:28:60:0a:ba:57:fb:96:c8:a6:5b:02: f4:1b:27:09:9c:6b:49:64:01:dc:61:ec:dc:db:40:b7:2b:57: 73:af:48:40:a5:d9:78:d5:aa:92:ef:81:0c:90:2e:c1:f6:8c: e2:7b:b7:2f:fc:11:70:b7:17:15:be:68:13:8c:70:9c:1e:52: 76:61:0e:97:d5:23:79:2e:f2:0f:81:56:31:6c:f3:83:91:96: 91:b9:79:e0:1a:c9:1f:5d:43:37:92:e8:f8:72:4c:c4:a6:c0: 33:4d:9f:94:87:12:5a:47:cd:07:bb:53:e2:ee:6f:ef:aa:6f: a4:73:56:d0:71:9b:0a:f4:d2:42:44:ef:5a:a5:e9:8c:52:9f: 86:02:be:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVEFPfn4FNjE+JSzaUR2QNJxfeqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA0MTMyWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMThiN2Q1YmI5ZTQ2MjA4OGE0NDhhZjZhMTVkMGZhNmI0 MjY2MGU5OTE0ZjMwNjgyY2VhYWY2Mzg2Y2ZmNTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxKRtFw4Gg5zE2P0cs3RHsnR/FpYXkYxg9vO/pLV7BbdgZ CxU3glUULToO38rdg4Gci8HPo3jvNrkBDB//H1ObLLxLwVer4rMVFZSlKP0gwRNR 8c+16f0isbOiLzf31nzjwbx5Lk00PQBamjYcmuqVV0acFncD9qslPZ16cYGirZzi 4HRWuh1OdnH1zkJzbvtw0MkEcRuojQzdyZWQFM6sP0TKHsfSqIGy44eg9tmKyRiQ eu6uq+RmKXBYLteMNqGSmD1NxUejlNxMgR0qIlxKUPhJ3CmqM6sYY1W5p3gnHYTc QbdIy49kaRLUluz7zq5ZzkMnPiu6tXh2jXWV6C+PAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSGxyQRg7nk6laPq6HKsoS5rvqxowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ZTBhMWViLTMwMzQtNDEwYi05MGUzLWUxOWZmYjQ4ZmMxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4IzANBgkqhkiG9w0BAQsFAAOCAQEANrRJP9BP64bdyeSftmt+q3LNqZFE 949xJjHRPrdltTrL9zvFa2BgX958WiuMNdYyyVlFY8/QGxLlwlogFtz9Ch1JmKHl fpjXvoirmcgoG1mywlFSqcdYCD8c8es52woHa65RDyf87grBQtAY+LRCo4bvcShg CrpX+5bIplsC9BsnCZxrSWQB3GHs3NtAtytXc69IQKXZeNWqku+BDJAuwfaM4nu3 L/wRcLcXFb5oE4xwnB5SdmEOl9UjeS7yD4FWMWzzg5GWkbl54BrJH11DN5Lo+HJM xKbAM02flIcSWkfNB7tT4u5v76pvpHNW0HGbCvTSQkTvWqXpjFKfhgK+RQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:57 2026 by rpki-client