$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b52555de-711f-42d0-9d83-e2a057b2ebab.roa File: b52555de-711f-42d0-9d83-e2a057b2ebab.roa (raw, json) Hash identifier: Gt5yMBQXM3+4Tb1DvYbjkXhoK2nQn5H6mqsHY3l5BCA= Subject key identifier: 68:F1:EA:AA:9B:A6:AB:FE:04:3B:B7:F8:3D:36:D0:B7:1F:FD:4C:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F943B654434120447D62C97822CB5E9BF29B876 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b52555de-711f-42d0-9d83-e2a057b2ebab.roa Signing time: Tue 21 Jul 2026 16:48:02 +0000 ROA not before: Tue 21 Jul 2026 16:48:02 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.128.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:94:3b:65:44:34:12:04:47:d6:2c:97:82:2c:b5:e9:bf:29:b8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 16:48:02 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=83762db49f62d91326839176b45f1fdaee5fd3320e1e67bd81266b13c962d311, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:95:6a:a1:47:3d:f3:f5:9b:fc:22:2c:d9: aa:10:4b:2a:6e:b8:8d:ea:29:2a:d6:86:e5:2b:75: 90:0d:cc:f5:2e:8e:2b:19:69:b0:b7:50:44:36:58: 3f:76:42:f2:85:72:de:be:05:ee:33:87:f5:d1:94: 8f:73:81:6f:b6:98:d1:29:8f:6d:b1:e3:18:4c:11: e4:9a:24:8d:a5:c9:b0:fb:69:6c:63:ad:24:92:7f: 4c:74:e9:df:94:9a:6a:48:9d:dd:55:ad:1c:d4:42: d3:56:69:7c:07:59:16:0e:06:f7:ef:52:23:df:5b: b3:ff:35:14:61:af:1d:45:58:d7:b5:75:e4:bb:c5: 90:68:2a:82:0e:21:a0:59:9b:14:00:c5:ea:3e:29: 08:fb:80:e1:7b:d0:37:3f:74:94:c4:0d:ba:8a:ce: 23:0f:cd:e3:a5:b8:3b:4e:62:9d:14:78:89:a7:b3: fa:52:cf:d2:f4:dd:14:d4:39:ab:1d:6f:b5:7c:e6: f4:f3:a0:c7:97:04:81:c5:29:3a:47:d6:4a:e9:d9: 95:ed:3a:1c:aa:e9:6b:46:3e:a2:31:49:fd:33:87: 0a:70:df:c1:d9:79:cc:1c:ef:2b:b4:9e:6b:15:36: 0a:73:b7:4c:bd:02:d0:34:ed:21:7d:4d:12:d6:85: 60:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F1:EA:AA:9B:A6:AB:FE:04:3B:B7:F8:3D:36:D0:B7:1F:FD:4C:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b52555de-711f-42d0-9d83-e2a057b2ebab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.128.128.0/19 Signature Algorithm: sha256WithRSAEncryption 31:0c:50:78:2d:1c:17:b1:0a:35:7a:67:23:6c:b5:81:cd:f3: 9c:59:44:1e:52:e3:33:a3:d1:92:e6:f9:3c:6f:1b:cb:e1:78: a3:a1:ad:65:4f:e7:ce:d4:f7:e2:2b:10:17:0f:6a:ab:2b:4b: d5:36:45:8a:37:cb:eb:ab:9c:6c:aa:4f:82:3a:98:52:47:43: 30:4e:01:04:57:ea:a4:7d:b0:96:d2:f1:d9:c4:84:43:23:b5: 97:c9:ae:0e:0f:4f:92:63:41:05:5f:80:7c:a6:fd:04:a5:31: f4:86:6a:d9:aa:93:f7:02:1b:6e:c2:57:72:21:7d:e6:bb:f0: 82:d8:88:42:b1:07:ae:d7:56:4c:17:1d:8d:b3:70:45:f9:f5: 2b:c2:b2:63:c8:23:c0:98:94:ba:b9:56:fd:0b:1a:7f:43:f8: 2f:60:ba:ed:71:1f:b6:f8:d6:4d:1d:1f:15:64:44:91:e7:ac: 3b:25:11:ea:eb:5f:fb:15:8a:4b:ef:99:33:c4:6c:c8:5d:80: 21:14:2c:5a:76:d2:53:da:51:3f:62:f1:5c:cd:f4:6b:5b:0e: 40:12:9a:6e:f5:93:9e:c0:6d:98:c1:31:6f:b8:4b:7c:60:80: be:65:c9:0a:01:95:74:d8:1f:47:54:db:d3:7a:16:52:04:3b: d5:80:e9:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX5Q7ZUQ0EgRH1iyXgiy16b8puHYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMTY0ODAyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mzc2MmRiNDlmNjJkOTEzMjY4MzkxNzZiNDVmMWZkYWVl NWZkMzMyMGUxZTY3YmQ4MTI2NmIxM2M5NjJkMzExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf3ZVqoUc98/Wb/CIs2aoQSypuuI3qKSrWhuUrdZANzPUu jisZabC3UEQ2WD92QvKFct6+Be4zh/XRlI9zgW+2mNEpj22x4xhMEeSaJI2lybD7 aWxjrSSSf0x06d+UmmpInd1VrRzUQtNWaXwHWRYOBvfvUiPfW7P/NRRhrx1FWNe1 deS7xZBoKoIOIaBZmxQAxeo+KQj7gOF70Dc/dJTEDbqKziMPzeOluDtOYp0UeImn s/pSz9L03RTUOasdb7V85vTzoMeXBIHFKTpH1krp2ZXtOhyq6WtGPqIxSf0zhwpw 38HZecwc7yu0nmsVNgpzt0y9AtA07SF9TRLWhWA3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaPHqqpumq/4EO7f4PTbQtx/9TE8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MjU1NWRlLTcxMWYtNDJkMC05ZDgzLWUyYTA1N2IyZWJhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUjgIAwDQYJKoZIhvcNAQELBQADggEBADEMUHgtHBexCjV6ZyNstYHN85xZ RB5S4zOj0ZLm+TxvG8vheKOhrWVP587U9+IrEBcPaqsrS9U2RYo3y+urnGyqT4I6 mFJHQzBOAQRX6qR9sJbS8dnEhEMjtZfJrg4PT5JjQQVfgHym/QSlMfSGatmqk/cC G27CV3Ihfea78ILYiEKxB67XVkwXHY2zcEX59SvCsmPII8CYlLq5Vv0LGn9D+C9g uu1xH7b41k0dHxVkRJHnrDslEerrX/sVikvvmTPEbMhdgCEULFp20lPaUT9i8VzN 9GtbDkASmm71k57AbZjBMW+4S3xggL5lyQoBlXTYH0dU29N6FlIEO9WA6Vc= -----END CERTIFICATE-----Generated at Thu Jul 23 23:40:51 2026 by rpki-client