$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de9201f-4d1b-4264-9921-67f07d93f68f.roa File: 8de9201f-4d1b-4264-9921-67f07d93f68f.roa (raw, json) Hash identifier: r+9btNljiIVhxcuzGs0PMQNyuBdMqqIoZJf+4k/pC0c= Subject key identifier: 4B:12:B2:3A:6C:17:E4:4E:F5:E6:59:B1:3D:3E:75:C0:9A:EF:F4:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 172227EFAA58DDC4F5C4C656A789043AE55CC401 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de9201f-4d1b-4264-9921-67f07d93f68f.roa Signing time: Tue 21 Jul 2026 05:03:02 +0000 ROA not before: Tue 21 Jul 2026 05:03:02 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:22:27:ef:aa:58:dd:c4:f5:c4:c6:56:a7:89:04:3a:e5:5c:c4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 21 05:03:02 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=3e973ffacc22eed9a04fbdd101ccff347da64bb36130f20ba1312cafb8fc7262, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:5b:b5:59:bf:7a:7f:a0:01:cf:0e:ad:65: cd:1e:c7:7c:d7:f5:85:91:14:a6:6d:ca:52:89:3a: f0:dd:36:ba:bb:32:e6:79:74:ba:c7:c0:aa:95:44: 70:8f:d5:6d:8c:25:87:90:b3:92:12:6f:b1:ad:89: 7b:08:6e:5b:f6:f5:08:38:14:cc:b4:aa:56:79:c0: e1:14:9b:8a:10:24:eb:26:fd:e5:9a:88:bd:3c:1a: a3:e1:2b:ad:03:ef:05:a1:b5:bd:cc:b2:35:79:a8: b6:23:4d:ba:89:c9:5d:2e:b4:03:c3:4e:58:e5:fe: 22:76:a2:7a:9f:29:0a:8e:67:fe:49:40:03:3e:b0: 47:81:bb:37:61:fa:6d:cc:7c:7a:1f:79:64:a9:1f: b1:61:93:8f:31:7a:19:d4:db:65:8e:ff:f4:a6:b2: e3:07:ec:f8:76:77:df:55:8e:7a:44:e7:33:28:1a: 1f:44:5f:a8:3d:80:84:b9:61:38:b8:90:39:03:fb: 29:a5:3f:c9:e2:4d:c8:1c:f9:cc:d4:5c:d3:4b:3f: ff:85:bd:7e:2f:19:87:97:9a:de:fe:55:2d:0e:c6: c7:f9:b0:8f:3b:28:d2:e7:85:d6:89:c6:65:39:f4: 6f:2a:d4:0a:68:f0:0f:03:15:0a:79:20:31:1d:79: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:B2:3A:6C:17:E4:4E:F5:E6:59:B1:3D:3E:75:C0:9A:EF:F4:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de9201f-4d1b-4264-9921-67f07d93f68f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.128.0/20 Signature Algorithm: sha256WithRSAEncryption 08:12:7f:88:ad:1d:4d:83:54:66:8f:61:00:1a:da:f4:60:82: 01:50:b0:48:b4:b2:0a:37:cf:84:ce:f0:1b:60:3a:06:3f:9c: da:45:51:a7:ce:c8:8e:1f:33:d1:ca:b0:c0:cf:d1:d5:3c:13: e5:2c:07:74:42:ac:b3:a8:c2:f0:a5:3f:f7:f3:6a:f2:e6:34: 47:37:b7:79:90:44:b9:87:ca:d9:4c:3d:33:3d:44:fd:2e:53: 46:b1:1d:16:29:48:92:d2:c6:32:42:86:65:a3:27:1a:e4:6c: cc:7c:34:b5:cb:23:8e:3d:a6:9f:1a:a3:d2:49:6b:77:b8:ee: 2e:7e:8a:6c:04:12:34:50:f3:bc:e0:83:74:87:e5:3c:4b:ac: c3:ec:e1:24:82:c8:e3:4c:ed:7d:8f:ec:25:18:c2:96:6f:95: 87:5b:17:03:2d:45:32:ae:27:2b:03:ed:ac:b3:df:24:b7:a2: cf:40:cb:96:0d:89:be:f0:67:56:6e:fb:08:7c:30:b8:18:a8: a2:40:24:c4:85:11:8a:b3:ba:56:92:de:e5:06:d4:bb:6b:84: 3f:50:8b:45:b1:44:fe:5a:77:9e:08:0c:fe:d0:42:c5:a6:2c: 8e:61:da:f5:e9:9a:fe:98:dd:cc:f3:7c:14:1b:ed:8b:b8:81: 22:76:87:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFyIn76pY3cT1xMZWp4kEOuVcxAEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIxMDUwMzAyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTk3M2ZmYWNjMjJlZWQ5YTA0ZmJkZDEwMWNjZmYzNDdk YTY0YmIzNjEzMGYyMGJhMTMxMmNhZmI4ZmM3MjYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4b1u1Wb96f6ABzw6tZc0ex3zX9YWRFKZtylKJOvDdNrq7 MuZ5dLrHwKqVRHCP1W2MJYeQs5ISb7GtiXsIblv29Qg4FMy0qlZ5wOEUm4oQJOsm /eWaiL08GqPhK60D7wWhtb3MsjV5qLYjTbqJyV0utAPDTljl/iJ2onqfKQqOZ/5J QAM+sEeBuzdh+m3MfHofeWSpH7Fhk48xehnU22WO//SmsuMH7Ph2d99VjnpE5zMo Gh9EX6g9gIS5YTi4kDkD+ymlP8niTcgc+czUXNNLP/+FvX4vGYeXmt7+VS0Oxsf5 sI87KNLnhdaJxmU59G8q1Apo8A8DFQp5IDEdecETAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSxKyOmwX5E715lmxPT51wJrv9OkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkZTkyMDFmLTRkMWItNDI2NC05OTIxLTY3ZjA3ZDkzZjY4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2toAwDQYJKoZIhvcNAQELBQADggEBAAgSf4itHU2DVGaPYQAa2vRgggFQ sEi0sgo3z4TO8BtgOgY/nNpFUafOyI4fM9HKsMDP0dU8E+UsB3RCrLOowvClP/fz avLmNEc3t3mQRLmHytlMPTM9RP0uU0axHRYpSJLSxjJChmWjJxrkbMx8NLXLI449 pp8ao9JJa3e47i5+imwEEjRQ87zgg3SH5TxLrMPs4SSCyONM7X2P7CUYwpZvlYdb FwMtRTKuJysD7ayz3yS3os9Ay5YNib7wZ1Zu+wh8MLgYqKJAJMSFEYqzulaS3uUG 1LtrhD9Qi0WxRP5ad54IDP7QQsWmLI5h2vXpmv6Y3czzfBQb7Yu4gSJ2h7Y= -----END CERTIFICATE-----Generated at Fri Jul 24 02:06:53 2026 by rpki-client