$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da8e0172-b80f-4a86-a29b-621a1d8cac30.roa File: da8e0172-b80f-4a86-a29b-621a1d8cac30.roa (raw, json) Hash identifier: VZLiH0ievMgJYiJwU5W+jQqVH2tK/5ROHGpo4j5y54Q= Subject key identifier: 5E:32:1D:B9:25:79:F7:9B:49:6F:FD:89:DE:9C:C8:06:60:C9:70:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A3F9769A220B6A62B33482FBF1F7AF59F7AF023 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da8e0172-b80f-4a86-a29b-621a1d8cac30.roa Signing time: Thu 25 Jun 2026 00:00:04 +0000 ROA not before: Thu 25 Jun 2026 00:00:04 +0000 ROA not after: Wed 23 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.34.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:97:69:a2:20:b6:a6:2b:33:48:2f:bf:1f:7a:f5:9f:7a:f0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 25 00:00:04 2026 GMT Not After : Sep 23 23:59:59 2026 GMT Subject: serialNumber=946701716031a8de5d1626f69d91031a9ac57c069e9c56cfd5dbf6a4c0be83ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:34:ff:3c:d5:1c:56:47:45:98:4d:cc:b8: 20:40:98:40:c3:ea:9d:70:95:d2:57:46:e3:d7:79: 00:cf:70:ff:c3:4c:76:7c:60:62:99:d0:31:6b:49: b7:0e:4a:1c:08:85:3f:66:e5:32:b6:5d:d4:9b:0a: fc:3b:b9:1f:23:3e:5e:48:3a:d5:d5:68:2b:96:87: 7c:c0:9e:84:ad:a4:8f:5b:73:7f:12:a7:37:b6:29: 69:7d:1d:19:8c:e0:e2:58:7b:51:c4:8d:d3:d1:02: c4:43:87:26:69:97:27:a4:30:00:4c:a8:51:ba:c7: dd:00:ae:dd:b0:fb:9b:90:5f:dc:89:7a:5b:22:6f: 47:1b:aa:d3:2c:42:f8:7f:e5:bc:31:14:25:0a:60: d4:75:2c:1a:65:5b:3c:dc:59:32:1b:85:8e:89:46: eb:b7:92:e4:6f:f2:31:73:4c:4d:d2:4c:32:fe:d2: 04:1f:e2:de:f6:5a:96:b2:0e:6e:d9:c0:87:48:94: d3:41:ac:ed:4e:a3:61:b1:a5:33:dd:d8:8f:c5:bc: 1d:f1:6e:e5:bf:6a:99:fb:e7:f3:57:c8:20:ae:49: 81:07:20:7d:d4:3d:08:99:d9:d7:49:92:4f:e2:22: f2:41:54:a0:15:f9:43:d0:6f:71:d6:7e:4b:41:88: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:1D:B9:25:79:F7:9B:49:6F:FD:89:DE:9C:C8:06:60:C9:70:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da8e0172-b80f-4a86-a29b-621a1d8cac30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.34.100.0/24 Signature Algorithm: sha256WithRSAEncryption 73:c6:4a:b6:ab:68:e0:43:1b:96:e2:24:77:47:9b:00:12:4b: 8d:7e:16:42:cb:67:c4:e0:73:5a:b9:fc:a5:57:aa:d6:fa:1c: c7:ad:2b:fa:d7:80:6b:25:80:62:b0:6a:3f:be:2b:85:de:a8: 15:07:72:54:99:e2:2a:4c:3c:b9:97:63:93:5b:29:7a:68:20: a5:79:02:00:c7:8e:34:19:1e:6a:08:0d:b3:5e:02:15:11:13: 40:b8:4d:8e:b7:0a:0d:92:80:b6:fe:33:3d:ae:12:63:ec:72: 08:4b:73:7f:a7:cb:d6:cf:47:cb:c6:47:9e:6d:f6:04:8e:13: 98:fe:1b:f8:7f:39:c0:50:68:91:b1:5e:71:bf:8c:c7:5e:89: 91:82:93:66:09:56:bc:a0:7d:be:cd:81:24:57:8e:89:25:97: 14:a3:10:70:90:fe:f5:60:8e:5d:18:9b:d9:4a:d7:51:26:75: 9a:b9:30:e1:ad:83:7c:44:aa:4a:43:d9:8c:57:cd:f1:bc:50: 15:8e:04:f4:b7:2d:75:ec:4c:a4:70:2f:30:d0:2c:fe:03:e0: f5:4d:5f:f5:e4:fc:da:1c:51:90:f2:6b:8d:20:9e:79:19:98: 08:39:de:56:a2:5f:6f:44:c6:c7:e9:84:c6:83:79:d2:39:99: 78:d4:3c:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCj+XaaIgtqYrM0gvvx969Z968CMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjI1MDAwMDA0WhcNMjYwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDY3MDE3MTYwMzFhOGRlNWQxNjI2ZjY5ZDkxMDMxYTlh YzU3YzA2OWU5YzU2Y2ZkNWRiZjZhNGMwYmU4M2FiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzQTT/PNUcVkdFmE3MuCBAmEDD6p1wldJXRuPXeQDPcP/D THZ8YGKZ0DFrSbcOShwIhT9m5TK2XdSbCvw7uR8jPl5IOtXVaCuWh3zAnoStpI9b c38Spze2KWl9HRmM4OJYe1HEjdPRAsRDhyZplyekMABMqFG6x90Art2w+5uQX9yJ elsib0cbqtMsQvh/5bwxFCUKYNR1LBplWzzcWTIbhY6JRuu3kuRv8jFzTE3STDL+ 0gQf4t72WpayDm7ZwIdIlNNBrO1Oo2GxpTPd2I/FvB3xbuW/apn75/NXyCCuSYEH IH3UPQiZ2ddJkk/iIvJBVKAV+UPQb3HWfktBiNyJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXjIduSV595tJb/2J3pzIBmDJcFQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhOGUwMTcyLWI4MGYtNGE4Ni1hMjliLTYyMWExZDhjYWMzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjImQwDQYJKoZIhvcNAQELBQADggEBAHPGSraraOBDG5biJHdHmwASS41+ FkLLZ8Tgc1q5/KVXqtb6HMetK/rXgGslgGKwaj++K4XeqBUHclSZ4ipMPLmXY5Nb KXpoIKV5AgDHjjQZHmoIDbNeAhURE0C4TY63Cg2SgLb+Mz2uEmPscghLc3+ny9bP R8vGR55t9gSOE5j+G/h/OcBQaJGxXnG/jMdeiZGCk2YJVrygfb7NgSRXjokllxSj EHCQ/vVgjl0Ym9lK11EmdZq5MOGtg3xEqkpD2YxXzfG8UBWOBPS3LXXsTKRwLzDQ LP4D4PVNX/Xk/NocUZDya40gnnkZmAg53laiX29ExsfphMaDedI5mXjUPEc= -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:13 2026 by rpki-client