$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd20f029-ba30-4018-9298-a39fefd17456.roa File: bd20f029-ba30-4018-9298-a39fefd17456.roa (raw, json) Hash identifier: vNL6X3eU2dqV9r+ul4xCI7yv24fI06FVqUqiJVqblmo= Subject key identifier: 0F:A7:85:AB:D5:BD:97:9D:AA:23:7A:1E:27:CB:97:10:79:1D:B3:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3274EDB082F5490E385B6F4A9A4EF9C57D94F34F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd20f029-ba30-4018-9298-a39fefd17456.roa Signing time: Tue 21 Jul 2026 01:20:42 +0000 ROA not before: Tue 21 Jul 2026 01:20:42 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:ed:b0:82:f5:49:0e:38:5b:6f:4a:9a:4e:f9:c5:7d:94:f3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 21 01:20:42 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=fa50225ef6214c47d324c220da9ea47eadb90ce2cf5eab4b9cc0bfa65864a0fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:06:f5:e7:0a:56:02:7a:fe:54:c5:31:ff: 66:6c:40:80:35:d9:aa:96:8c:01:b0:48:08:c5:7f: 89:c8:02:18:5b:43:1c:33:6d:99:6c:9a:65:96:cf: 20:de:9f:3b:1e:d0:d4:c2:10:9d:9d:b7:48:db:40: 51:e8:14:3d:9e:17:cb:5a:10:51:bb:c9:91:e8:68: 66:f5:13:da:3f:c7:96:30:9a:f1:5b:b8:4d:24:63: 35:a3:e9:72:8a:46:97:7d:81:0e:1e:12:b1:eb:c1: 2f:be:39:fc:15:49:3b:ce:e5:c4:61:6b:9d:6e:01: 3b:d0:74:8f:4e:45:04:9f:0e:cd:66:2a:b2:c7:5d: 14:f5:1d:87:ba:bd:d2:a4:05:20:48:74:b8:02:0a: 81:cd:5e:3c:5f:d0:29:60:57:48:0e:29:2c:cf:2e: 3c:24:f5:4d:cd:63:f1:ae:cc:82:51:2d:25:9b:61: 12:46:aa:4d:47:82:dd:6b:3e:a6:e1:97:97:0f:ce: fa:dd:7f:c4:b6:fc:1d:e4:22:81:f4:ae:64:9e:2c: 52:63:44:91:38:45:75:05:52:bf:b7:4f:02:db:c6: 71:ab:0f:3f:6b:15:42:9f:9f:61:ae:76:93:1c:db: c9:fc:a4:ef:0b:23:9b:f1:25:9c:42:8a:0c:92:06: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:85:AB:D5:BD:97:9D:AA:23:7A:1E:27:CB:97:10:79:1D:B3:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd20f029-ba30-4018-9298-a39fefd17456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.64.0/18 Signature Algorithm: sha256WithRSAEncryption a3:d7:f5:70:d8:a5:d2:6d:41:74:3e:2a:56:c9:fc:20:12:aa: 77:b3:2d:eb:64:72:ae:53:7f:85:83:30:5b:fa:be:c1:0c:4c: 52:f8:8d:56:a9:46:6d:9f:99:fc:42:23:db:82:f2:b1:d4:10: 5f:29:43:bf:ec:01:33:d0:3d:7e:a0:d8:43:03:04:31:12:a2: a6:25:fe:9d:24:ae:8c:4f:2f:b3:72:9d:58:09:95:58:53:6c: 67:15:7e:ce:c8:f9:09:f1:32:95:f3:1a:85:43:e6:05:80:52: 6c:a5:4f:23:04:40:fe:2d:39:f1:73:4f:8a:da:97:2a:e8:4f: c5:cc:d3:f3:4d:7b:57:03:22:f3:2f:0d:61:8d:93:98:d5:75: 99:9c:09:aa:77:c7:ed:30:1f:8d:8a:74:2e:fe:a5:dd:42:c3: c2:66:8a:02:10:c5:0b:84:32:a1:65:75:46:73:85:54:10:1d: f9:b4:8d:a6:4b:b0:f3:a3:85:dc:cf:20:65:f9:91:47:90:73: ad:a6:d2:9b:6b:b2:0c:35:20:f3:86:93:2c:34:bd:1e:f7:50: 30:f2:37:1b:32:f8:2b:d6:5a:61:ca:db:09:8e:a9:48:f3:9e: fc:b3:57:f5:ef:0a:87:db:d4:b3:6d:de:a6:0c:15:65:8c:7b: 9f:83:d8:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMnTtsIL1SQ44W29Kmk75xX2U808wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIxMDEyMDQyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTUwMjI1ZWY2MjE0YzQ3ZDMyNGMyMjBkYTllYTQ3ZWFk YjkwY2UyY2Y1ZWFiNGI5Y2MwYmZhNjU4NjRhMGZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSzwb15wpWAnr+VMUx/2ZsQIA12aqWjAGwSAjFf4nIAhhb QxwzbZlsmmWWzyDenzse0NTCEJ2dt0jbQFHoFD2eF8taEFG7yZHoaGb1E9o/x5Yw mvFbuE0kYzWj6XKKRpd9gQ4eErHrwS++OfwVSTvO5cRha51uATvQdI9ORQSfDs1m KrLHXRT1HYe6vdKkBSBIdLgCCoHNXjxf0ClgV0gOKSzPLjwk9U3NY/GuzIJRLSWb YRJGqk1Hgt1rPqbhl5cPzvrdf8S2/B3kIoH0rmSeLFJjRJE4RXUFUr+3TwLbxnGr Dz9rFUKfn2GudpMc28n8pO8LI5vxJZxCigySBvARAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD6eFq9W9l52qI3oeJ8uXEHkds6swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkMjBmMDI5LWJhMzAtNDAxOC05Mjk4LWEzOWZlZmQxNzQ1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY25kAwDQYJKoZIhvcNAQELBQADggEBAKPX9XDYpdJtQXQ+KlbJ/CASqnez Letkcq5Tf4WDMFv6vsEMTFL4jVapRm2fmfxCI9uC8rHUEF8pQ7/sATPQPX6g2EMD BDESoqYl/p0kroxPL7NynVgJlVhTbGcVfs7I+QnxMpXzGoVD5gWAUmylTyMEQP4t OfFzT4ralyroT8XM0/NNe1cDIvMvDWGNk5jVdZmcCap3x+0wH42KdC7+pd1Cw8Jm igIQxQuEMqFldUZzhVQQHfm0jaZLsPOjhdzPIGX5kUeQc62m0ptrsgw1IPOGkyw0 vR73UDDyNxsy+CvWWmHK2wmOqUjznvyzV/XvCofb1LNt3qYMFWWMe5+D2DA= -----END CERTIFICATE-----Generated at Fri Jul 24 07:25:06 2026 by rpki-client