$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ac607e2-58f3-49a5-8ba5-942111dd4093.roa File: 3ac607e2-58f3-49a5-8ba5-942111dd4093.roa (raw, json) Hash identifier: Ds/WUcz1jK0VwWlFnlIXrg644zXYLT9vichgcscaiuA= Subject key identifier: E8:D1:36:77:2C:96:83:45:E0:17:8A:49:11:F7:1D:22:B9:F4:FA:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19B23697872A9F666012F6C10A9CE718A7492D56 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ac607e2-58f3-49a5-8ba5-942111dd4093.roa Signing time: Tue 21 Jul 2026 05:03:01 +0000 ROA not before: Tue 21 Jul 2026 05:03:01 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b2:36:97:87:2a:9f:66:60:12:f6:c1:0a:9c:e7:18:a7:49:2d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 21 05:03:01 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=da447d65b2d404277a2abddb3bf648ca42931638abb4937b6066b5307f0484d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:ef:57:4a:d8:10:0c:3c:cb:79:5b:7c:65: a8:c2:44:54:55:45:d5:27:a3:7f:6b:d5:a1:48:cc: b5:be:d9:ef:51:78:9d:59:a6:4d:50:12:5c:86:f2: 03:3f:c8:51:cc:48:53:a7:2f:68:f4:e8:76:a5:cc: dd:25:cd:6b:a5:03:55:7a:0f:2f:68:48:33:25:ac: ca:92:dc:dc:f3:55:49:7a:2b:f0:49:78:1b:bd:0d: 3a:bd:61:01:9e:f0:e2:7e:d5:89:39:8a:05:dd:b9: d1:61:36:4a:5e:67:d2:9f:71:a9:e7:97:65:4d:e0: 38:84:1b:b4:27:ca:f9:74:48:be:94:9b:d1:71:50: de:aa:e4:e1:4f:ef:02:aa:ea:ff:75:cd:d6:8a:ae: c7:bd:3e:29:f7:78:b5:40:a4:80:5e:72:30:70:f6: 12:44:b4:0a:43:8f:31:38:f8:5c:07:cd:0c:ba:17: 41:ea:ae:05:72:9f:d4:d2:5e:0e:c3:be:e9:90:de: 68:e5:43:df:ff:92:56:51:45:6e:33:30:d2:69:8f: e7:74:68:e8:d8:ee:9a:85:db:76:31:8f:e1:ab:e6: 02:ce:53:1f:f4:2e:fe:07:87:10:5b:28:de:25:d3: 1b:50:ab:ef:4c:cd:a4:0e:4e:e2:d6:a2:14:b9:4c: be:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D1:36:77:2C:96:83:45:E0:17:8A:49:11:F7:1D:22:B9:F4:FA:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ac607e2-58f3-49a5-8ba5-942111dd4093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:db:7a:37:97:31:0d:3c:92:a4:d1:34:b3:09:bf:e5:a6:75: ed:4a:0e:f7:4e:71:cd:41:aa:c2:00:1d:57:22:fc:fa:ec:97: ef:39:5b:9d:2c:a3:3b:9c:dd:ce:c1:db:4e:1b:52:ae:94:14: 39:86:77:f1:c6:52:8d:67:c5:e9:8c:16:c9:b5:de:32:29:90: fd:7c:cb:ad:ac:88:ca:5c:61:8f:48:74:9b:48:50:65:84:94: 19:61:07:6c:b2:9d:f7:3a:39:8f:d6:41:2d:11:c9:93:38:31: f7:29:ab:95:ae:73:eb:c3:69:72:22:f3:3e:95:5a:3b:f2:9d: 4b:03:0f:c1:ae:43:38:5c:10:3b:3e:c8:10:22:52:5c:3b:39: 0b:89:69:66:82:1e:c6:e7:31:9b:0f:38:8f:d5:90:f5:b7:31: 6a:b4:d1:d1:a5:5a:55:74:5f:98:1c:b5:dc:39:1e:c5:f2:8a: e9:8c:7d:e1:66:3e:c0:44:c0:ff:ac:3d:7e:fc:44:c0:e9:b2: ae:63:92:1b:41:ed:c2:be:61:c0:f2:9e:73:fa:4d:01:1b:4a: d0:db:8a:83:2a:b2:c5:4f:d5:17:aa:dc:59:6b:46:c4:16:9e: c1:c4:ab:da:c8:c7:83:63:6c:34:95:b9:58:25:4a:c0:2b:36: ab:24:73:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGbI2l4cqn2ZgEvbBCpznGKdJLVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIxMDUwMzAxWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTQ0N2Q2NWIyZDQwNDI3N2EyYWJkZGIzYmY2NDhjYTQy OTMxNjM4YWJiNDkzN2I2MDY2YjUzMDdmMDQ4NGQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhju9XStgQDDzLeVt8ZajCRFRVRdUno39r1aFIzLW+2e9R eJ1Zpk1QElyG8gM/yFHMSFOnL2j06HalzN0lzWulA1V6Dy9oSDMlrMqS3NzzVUl6 K/BJeBu9DTq9YQGe8OJ+1Yk5igXdudFhNkpeZ9Kfcannl2VN4DiEG7Qnyvl0SL6U m9FxUN6q5OFP7wKq6v91zdaKrse9Pin3eLVApIBecjBw9hJEtApDjzE4+FwHzQy6 F0HqrgVyn9TSXg7DvumQ3mjlQ9//klZRRW4zMNJpj+d0aOjY7pqF23Yxj+Gr5gLO Ux/0Lv4HhxBbKN4l0xtQq+9MzaQOTuLWohS5TL4vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6NE2dyyWg0XgF4pJEfcdIrn0+g8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhYzYwN2UyLTU4ZjMtNDlhNS04YmE1LTk0MjExMWRkNDA5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2toAwDQYJKoZIhvcNAQELBQADggEBAHvbejeXMQ08kqTRNLMJv+Wmde1K DvdOcc1BqsIAHVci/Prsl+85W50sozuc3c7B204bUq6UFDmGd/HGUo1nxemMFsm1 3jIpkP18y62siMpcYY9IdJtIUGWElBlhB2yynfc6OY/WQS0RyZM4Mfcpq5Wuc+vD aXIi8z6VWjvynUsDD8GuQzhcEDs+yBAiUlw7OQuJaWaCHsbnMZsPOI/VkPW3MWq0 0dGlWlV0X5gctdw5HsXyiumMfeFmPsBEwP+sPX78RMDpsq5jkhtB7cK+YcDynnP6 TQEbStDbioMqssVP1Req3FlrRsQWnsHEq9rIx4NjbDSVuVglSsArNqskc/A= -----END CERTIFICATE-----Generated at Fri Jul 24 02:06:49 2026 by rpki-client