$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa File: bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa (raw, json) Hash identifier: sQREyWd/lZET18M22bwAKCiorYw4cjeEDn1Dmx3U/Sk= Subject key identifier: 37:DC:BC:CF:78:A5:B3:11:19:44:D1:4F:28:F1:8E:04:59:4A:43:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CBB5F10BAB33898B9E79A1D1A8E62A51AFFC64F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa Signing time: Thu 23 Jul 2026 14:10:28 +0000 ROA not before: Thu 23 Jul 2026 14:10:28 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bb:5f:10:ba:b3:38:98:b9:e7:9a:1d:1a:8e:62:a5:1a:ff:c6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 23 14:10:28 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=2b4b3a72ef6561365f78abb4889d3e008c9dff50ccf88c0665c5f8e0f5e45b8a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:6a:1f:93:00:34:7c:d8:b6:ac:1d:e0:91: a1:af:fc:46:17:d4:95:c6:8f:b0:be:22:96:70:59: cf:ed:3b:9b:8f:6b:ac:93:dd:0a:61:b2:ae:85:ae: 0d:69:db:1c:32:af:42:e2:22:86:2c:d7:48:0d:c1: a9:31:4f:96:80:fa:ff:71:bd:dd:2a:c9:3c:b2:85: 84:d4:54:e6:e2:51:03:6e:22:74:f1:8c:55:dc:2c: 5f:74:f6:72:d7:6e:93:1c:8d:82:42:d5:e7:9f:70: 79:49:0c:60:0a:1a:77:83:f9:11:74:82:3d:21:b5: 03:bd:bd:4b:09:90:41:db:c6:cd:e8:60:8a:1e:44: 81:a9:28:bd:02:f6:0e:3f:c3:13:42:9c:2d:e6:7b: 70:dc:94:07:b3:6f:fb:ff:8c:52:36:a3:11:51:5d: 65:bb:4e:a1:6f:fb:99:56:df:9d:f4:75:ad:d2:31: 9c:cd:f5:c5:72:78:f4:7d:e1:56:cd:b3:4c:69:d1: 99:b7:79:36:33:fa:a0:68:ac:52:fa:d2:fe:f5:e5: a0:25:07:53:af:a0:68:a5:1a:46:3d:91:53:3c:3c: e2:4f:42:89:b2:0a:43:b4:f0:61:96:9f:33:dd:d2: e1:29:1d:ac:0a:0f:58:2d:44:5b:8c:38:33:64:00: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DC:BC:CF:78:A5:B3:11:19:44:D1:4F:28:F1:8E:04:59:4A:43:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.3.3.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c1:c3:8d:17:29:bd:96:44:ff:47:6c:c6:b0:2b:ce:cd:ec: a9:59:97:c5:55:0c:58:97:29:18:de:7e:01:af:54:60:77:a9: 2f:96:21:eb:ac:40:a1:9c:cf:5e:b6:32:a4:0a:33:87:94:8c: a6:00:09:ed:26:8b:43:11:4d:a5:a4:64:11:41:b3:a6:ef:05: ef:eb:40:aa:0d:62:1e:0a:da:59:26:f5:70:fa:d3:1c:1e:be: c8:df:b3:30:ba:2f:23:ff:0f:5d:2d:91:98:39:0b:19:ad:37: 15:e4:d5:3e:b4:64:0a:e8:11:27:5a:44:51:1b:b6:1f:54:7c: 2c:99:c2:c4:75:14:e4:10:3b:87:b7:c6:7c:b6:8a:92:0d:1b: 2a:1d:fc:47:45:33:43:e0:9e:50:c6:94:3b:0d:80:94:bd:a8: 1f:af:99:68:9c:a5:71:1c:85:11:32:08:89:8b:91:e0:dd:58: b4:b4:4d:06:32:32:b8:d9:af:1c:32:5d:28:ff:44:a3:64:03: ca:4b:48:5b:f1:91:54:2c:0c:82:59:a5:fe:3c:44:33:b6:df: 62:8e:6c:c7:d0:ff:d2:ef:c5:c2:5b:ca:e5:3f:eb:b8:64:a2: df:7c:40:00:51:da:dd:b8:0b:cb:9e:39:f8:7f:f4:72:ca:ed: 9b:7e:89:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXLtfELqzOJi555odGo5ipRr/xk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIzMTQxMDI4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjRiM2E3MmVmNjU2MTM2NWY3OGFiYjQ4ODlkM2UwMDhj OWRmZjUwY2NmODhjMDY2NWM1ZjhlMGY1ZTQ1YjhhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYCmofkwA0fNi2rB3gkaGv/EYX1JXGj7C+IpZwWc/tO5uP a6yT3Qphsq6Frg1p2xwyr0LiIoYs10gNwakxT5aA+v9xvd0qyTyyhYTUVObiUQNu InTxjFXcLF909nLXbpMcjYJC1eefcHlJDGAKGneD+RF0gj0htQO9vUsJkEHbxs3o YIoeRIGpKL0C9g4/wxNCnC3me3DclAezb/v/jFI2oxFRXWW7TqFv+5lW3530da3S MZzN9cVyePR94VbNs0xp0Zm3eTYz+qBorFL60v715aAlB1OvoGilGkY9kVM8POJP QomyCkO08GGWnzPd0uEpHawKD1gtRFuMODNkANsJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN9y8z3ilsxEZRNFPKPGOBFlKQ7EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JlYzdiODljLWMyMGUtNGI3MC1iZjM2LTQzZTA5ZWNkMWY3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAwMwDQYJKoZIhvcNAQELBQADggEBAFjBw40XKb2WRP9HbMawK87N7KlZ l8VVDFiXKRjefgGvVGB3qS+WIeusQKGcz162MqQKM4eUjKYACe0mi0MRTaWkZBFB s6bvBe/rQKoNYh4K2lkm9XD60xwevsjfszC6LyP/D10tkZg5CxmtNxXk1T60ZAro ESdaRFEbth9UfCyZwsR1FOQQO4e3xny2ipINGyod/EdFM0PgnlDGlDsNgJS9qB+v mWicpXEchREyCImLkeDdWLS0TQYyMrjZrxwyXSj/RKNkA8pLSFvxkVQsDIJZpf48 RDO232KObMfQ/9LvxcJbyuU/67hkot98QABR2t24C8ueOfh/9HLK7Zt+iSM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:43:20 2026 by rpki-client