$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e14a9800-7327-4a16-8af4-a48309afa9a7.roa File: e14a9800-7327-4a16-8af4-a48309afa9a7.roa (raw, json) Hash identifier: CzqkrYqo+2bjP7z9JCh6F3+E3uspSC1z5Us3zCHHsTI= Subject key identifier: 18:B9:F2:20:0A:1B:0E:3F:C9:C0:D7:BC:9D:7C:AD:BE:FF:D0:B5:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 279982B8DF484FA7070D7053D042AB5E423F26BD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e14a9800-7327-4a16-8af4-a48309afa9a7.roa Signing time: Thu 23 Jul 2026 14:40:07 +0000 ROA not before: Thu 23 Jul 2026 14:40:07 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.4.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:99:82:b8:df:48:4f:a7:07:0d:70:53:d0:42:ab:5e:42:3f:26:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 23 14:40:07 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=160312d6f7e718df600577d086eb4bbb7a87d0fce66a2192094b608704cb8466, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:80:b6:ae:fe:1b:7f:c7:ce:43:46:30:32: fd:79:64:11:54:65:01:f2:5b:23:d0:a0:e0:c1:11: 0c:da:51:23:c7:8e:b7:ac:b5:33:62:d2:69:18:ee: 26:25:c8:61:55:da:eb:44:96:e3:ef:f5:06:4c:e1: 93:5e:6f:6d:d2:c1:96:b5:55:8c:02:fb:18:e7:6e: 4b:5c:89:66:e2:9f:30:47:a0:b8:98:04:e5:bc:39: cf:a9:0f:4c:e5:40:fa:eb:55:02:e3:05:22:b3:00: f7:49:a0:39:7f:9b:c5:4c:b0:a2:40:41:0a:18:eb: be:03:dc:51:c8:02:a0:b2:62:87:40:29:1b:ed:ae: a8:94:5e:7c:99:29:10:e2:97:b6:49:b7:18:42:6d: a6:25:30:a6:b3:50:c7:f9:f7:3e:cc:b6:1c:84:f5: f2:85:53:78:b7:37:10:e7:68:db:bd:b7:bb:a8:22: 10:e0:de:f4:24:a5:13:b6:15:c5:10:7a:e3:6c:50: e3:70:04:c0:ff:8c:1b:a2:2f:42:a4:36:53:6a:16: 87:b9:0c:bd:b6:bf:5a:15:2d:91:41:37:3e:8d:91: 7d:2e:d0:f7:13:f9:ea:b5:5d:bc:b2:0a:45:e6:46: b4:c6:e3:d2:41:a7:66:67:e3:5c:fc:ac:fd:cb:c2: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B9:F2:20:0A:1B:0E:3F:C9:C0:D7:BC:9D:7C:AD:BE:FF:D0:B5:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e14a9800-7327-4a16-8af4-a48309afa9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.32.0/20 Signature Algorithm: sha256WithRSAEncryption 23:e1:49:82:ab:0a:98:e6:c8:ea:18:cd:5c:a0:eb:d8:81:9a: fb:34:0e:49:e2:5a:b9:78:ae:1e:a8:66:2e:41:4c:f8:4b:41: ce:45:07:fc:65:5a:5d:ff:7c:2f:b3:64:73:c5:9a:3c:59:19: 9b:62:d1:d1:86:d0:b8:d1:f8:a7:46:51:75:fb:28:d3:ea:b1: 56:87:41:f3:0f:eb:1e:c0:ce:98:91:3f:fa:bc:e1:e1:77:81: 16:ed:24:18:f6:0d:62:06:1f:3d:71:68:62:a9:a5:f1:55:5c: d4:dc:7f:33:32:52:4e:06:2c:4f:7f:22:5f:93:a6:2d:63:76: b4:27:9b:cb:56:71:5c:6a:24:87:28:ab:19:66:f9:da:01:54: b7:39:e2:0b:68:88:c8:0f:5e:7a:b3:5c:66:b0:97:72:5c:83: 72:08:52:8f:1a:38:d0:ed:b0:01:e2:8b:0d:ea:5b:bf:b3:5e: ab:dc:01:60:1f:4f:36:39:86:cb:6b:3c:ca:f6:43:03:cb:5f: 4d:fd:9d:74:c8:e3:cf:d1:d6:bd:c0:33:73:b7:dd:02:dc:21: 01:a0:f5:d0:6e:fb:20:91:10:bb:d5:f3:a2:e4:08:ad:67:cc: 34:be:d9:f2:32:af:80:60:a1:75:2c:d0:9e:77:bc:60:1d:e4: 64:d2:b8:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ5mCuN9IT6cHDXBT0EKrXkI/Jr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIzMTQ0MDA3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjAzMTJkNmY3ZTcxOGRmNjAwNTc3ZDA4NmViNGJiYjdh ODdkMGZjZTY2YTIxOTIwOTRiNjA4NzA0Y2I4NDY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx3YC2rv4bf8fOQ0YwMv15ZBFUZQHyWyPQoODBEQzaUSPH jrestTNi0mkY7iYlyGFV2utEluPv9QZM4ZNeb23SwZa1VYwC+xjnbktciWbinzBH oLiYBOW8Oc+pD0zlQPrrVQLjBSKzAPdJoDl/m8VMsKJAQQoY674D3FHIAqCyYodA KRvtrqiUXnyZKRDil7ZJtxhCbaYlMKazUMf59z7MthyE9fKFU3i3NxDnaNu9t7uo IhDg3vQkpRO2FcUQeuNsUONwBMD/jBuiL0KkNlNqFoe5DL22v1oVLZFBNz6NkX0u 0PcT+eq1XbyyCkXmRrTG49JBp2Zn41z8rP3LwvGdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGLnyIAobDj/JwNe8nXytvv/QtVkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxNGE5ODAwLTczMjctNGExNi04YWY0LWE0ODMwOWFmYTlhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDBCAwDQYJKoZIhvcNAQELBQADggEBACPhSYKrCpjmyOoYzVyg69iBmvs0 DkniWrl4rh6oZi5BTPhLQc5FB/xlWl3/fC+zZHPFmjxZGZti0dGG0LjR+KdGUXX7 KNPqsVaHQfMP6x7AzpiRP/q84eF3gRbtJBj2DWIGHz1xaGKppfFVXNTcfzMyUk4G LE9/Il+Tpi1jdrQnm8tWcVxqJIcoqxlm+doBVLc54gtoiMgPXnqzXGawl3Jcg3II Uo8aONDtsAHiiw3qW7+zXqvcAWAfTzY5hstrPMr2QwPLX039nXTI48/R1r3AM3O3 3QLcIQGg9dBu+yCRELvV86LkCK1nzDS+2fIyr4BgoXUs0J53vGAd5GTSuNA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:49:27 2026 by rpki-client