$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa File: 8a416471-7293-44b5-9ae4-b83a744da832.roa (raw, json) Hash identifier: DJpVD+4WgFAf0eJCBL5Y5bz13S22DkuoHiOEvNV6p5o= Subject key identifier: 20:70:CB:4D:52:5E:11:8A:3A:86:AD:9F:1E:C6:D8:AC:9C:34:9A:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1534BC9C92B0072530B293F9E6D46A851F56C2C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa Signing time: Sun 19 Jul 2026 00:00:41 +0000 ROA not before: Sun 19 Jul 2026 00:00:41 +0000 ROA not after: Sat 17 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.42.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:34:bc:9c:92:b0:07:25:30:b2:93:f9:e6:d4:6a:85:1f:56:c2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:00:41 2026 GMT Not After : Oct 17 23:59:59 2026 GMT Subject: serialNumber=68c197c863073d813ed26a4d4f44483d8905c2d03bbf1d375d83ff821863a900, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:27:e5:e3:9f:88:dc:53:79:3b:d8:05:af: 7e:dc:82:0b:ae:84:7c:12:b8:1a:30:b9:52:1a:44: 8e:38:f0:b4:d9:36:38:06:d8:c3:4a:cd:4f:43:6b: 07:1f:00:a7:12:93:1b:1a:35:86:56:d3:35:e2:e7: c2:cf:b0:42:05:45:12:52:93:e1:36:d1:00:68:83: 8e:97:7a:8d:00:c5:a5:a2:44:b7:05:ad:f1:01:f5: 54:62:2b:29:fa:14:27:c1:c1:29:63:73:a9:c6:4d: f4:9b:2d:20:31:7d:06:d2:94:8e:39:af:6d:ba:63: cd:a8:33:df:53:ee:f0:82:d3:30:e5:24:08:8d:0c: f9:b1:ce:c7:15:ef:88:b5:7b:35:5a:35:20:e9:51: a0:3c:3e:3a:e9:e3:58:86:7b:49:7b:08:95:9c:28: 28:48:15:ed:29:ba:78:df:a9:20:dd:21:68:38:dc: 95:be:95:4c:c7:9d:1d:be:68:1b:f0:e0:34:23:6f: 46:e2:d9:5d:38:ce:35:06:89:f2:40:41:58:da:5d: eb:a3:06:ff:0b:a5:a3:a2:9c:15:25:ea:21:03:41: 0f:29:cd:a2:69:e0:8e:ef:c1:5c:92:c2:b7:01:3d: b2:50:c8:7c:8b:96:03:56:db:86:db:ef:70:1d:81: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:70:CB:4D:52:5E:11:8A:3A:86:AD:9F:1E:C6:D8:AC:9C:34:9A:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:e3:bc:e1:d2:a6:b8:32:19:55:37:16:a0:fd:4e:94:d5:84: 42:9a:b7:a4:1c:b1:d9:05:60:07:53:03:01:b9:31:e6:ea:b5: 66:5f:d2:84:98:97:7c:c7:9a:47:44:f3:f3:88:1e:9b:ee:99: 7b:36:3c:e8:7d:3c:71:dc:1b:b2:c4:ed:a0:ab:a1:fb:00:39: a5:46:bc:71:6f:ff:1e:63:2b:f7:b6:09:21:5c:e0:7f:d2:5d: d3:56:72:3a:7a:be:10:62:eb:33:34:69:0b:bb:5c:ab:43:c1: 55:81:a0:88:72:9a:fe:20:bb:97:cf:99:21:46:79:75:30:c0: bd:7e:8a:dc:f7:a1:97:fa:7b:48:70:9d:5f:19:7e:cd:42:be: af:4b:ef:11:d8:33:19:b7:7d:21:25:16:d6:09:24:1d:b2:bf: 25:08:4d:60:3f:c8:31:66:d2:81:1a:d3:77:83:6e:62:c3:b8: 55:43:21:d8:92:ac:db:9f:cd:a9:a6:86:59:2e:53:0a:6c:49: de:ef:96:f8:1f:32:a0:48:dc:be:19:c5:9e:6f:fd:12:50:da: f6:ab:e7:16:94:1d:86:36:0c:6d:94:50:d8:a4:c5:05:ac:12: e5:72:03:48:87:bd:cf:e6:e4:60:a4:af:38:3e:f5:6c:fc:81: 59:62:90:86 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFTS8nJKwByUwspP55tRqhR9WwsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE5MDAwMDQxWhcNMjYxMDE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGMxOTdjODYzMDczZDgxM2VkMjZhNGQ0ZjQ0NDgzZDg5 MDVjMmQwM2JiZjFkMzc1ZDgzZmY4MjE4NjNhOTAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Bifl45+I3FN5O9gFr37cgguuhHwSuBowuVIaRI448LTZ NjgG2MNKzU9DawcfAKcSkxsaNYZW0zXi58LPsEIFRRJSk+E20QBog46Xeo0AxaWi RLcFrfEB9VRiKyn6FCfBwSljc6nGTfSbLSAxfQbSlI45r226Y82oM99T7vCC0zDl JAiNDPmxzscV74i1ezVaNSDpUaA8Pjrp41iGe0l7CJWcKChIFe0punjfqSDdIWg4 3JW+lUzHnR2+aBvw4DQjb0bi2V04zjUGifJAQVjaXeujBv8LpaOinBUl6iEDQQ8p zaJp4I7vwVySwrcBPbJQyHyLlgNW24bb73AdgYL9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIHDLTVJeEYo6hq2fHsbYrJw0mqgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhNDE2NDcxLTcyOTMtNDRiNS05YWU0LWI4M2E3NDRkYTgzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjKjANBgkqhkiG9w0BAQsFAAOCAQEAqOO84dKmuDIZVTcWoP1OlNWEQpq3 pByx2QVgB1MDAbkx5uq1Zl/ShJiXfMeaR0Tz84gem+6ZezY86H08cdwbssTtoKuh +wA5pUa8cW//HmMr97YJIVzgf9Jd01ZyOnq+EGLrMzRpC7tcq0PBVYGgiHKa/iC7 l8+ZIUZ5dTDAvX6K3Pehl/p7SHCdXxl+zUK+r0vvEdgzGbd9ISUW1gkkHbK/JQhN YD/IMWbSgRrTd4NuYsO4VUMh2JKs25/NqaaGWS5TCmxJ3u+W+B8yoEjcvhnFnm/9 ElDa9qvnFpQdhjYMbZRQ2KTFBawS5XIDSIe9z+bkYKSvOD71bPyBWWKQhg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:09 2026 by rpki-client