$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa File: 07653354-62e0-4912-98f0-2c22354ec38a.roa (raw, json) Hash identifier: u0SPvGAwioxpxkTdcT6mJhSKimG3JWgC/5XKJCDHA10= Subject key identifier: 4B:DC:00:8D:DF:7B:39:FF:0A:9D:E6:E9:5D:6D:DE:1D:8D:A9:AF:EB Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 053D97A9F799454413A1E4E1AC9D993D2FD27217 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa Signing time: Fri 07 Aug 2026 00:50:06 +0000 ROA not before: Fri 07 Aug 2026 00:50:06 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3d:97:a9:f7:99:45:44:13:a1:e4:e1:ac:9d:99:3d:2f:d2:72:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 7 00:50:06 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=158b6153da0120ffe76aed7d3b74baf0c04f8aa1176f227185f0ff1f0d7027f2, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:82:06:7c:25:1f:53:60:05:af:b3:94:31: b4:89:06:cc:a6:89:27:96:23:8d:99:5a:48:d6:0c: cc:8c:29:04:74:fa:5a:65:ad:af:a1:83:d7:48:be: 34:ad:37:7b:08:a4:e4:f6:e0:f5:ff:fb:0b:8a:2e: a5:75:e0:90:c3:5d:6e:4c:9c:59:ff:68:47:cc:31: 5f:8f:9d:88:e5:35:8f:4c:4a:2d:df:39:47:bd:58: d4:c7:8e:20:12:f1:a4:8d:e3:81:e9:1f:6a:59:88: 7d:27:1d:77:99:16:24:13:fd:5c:07:73:87:d8:56: 31:27:a2:bd:85:49:a2:2a:8b:7a:07:91:da:f0:16: 3d:16:b2:ab:48:b3:2d:dd:d9:88:23:e7:ef:0a:79: 8b:c4:1b:e3:39:0a:61:5d:7d:2a:68:1a:e2:b7:ec: e7:04:97:27:cd:0b:c3:b0:d2:f3:11:a4:63:43:79: e3:bf:af:a1:58:2c:bb:85:e4:45:f9:94:68:c9:8f: 92:bd:2e:68:3f:f0:2d:3d:21:12:c5:41:77:5f:87: 5f:15:af:d6:89:f2:3d:95:43:5d:27:8e:d5:37:6f: 3f:b1:7d:c9:0a:ec:3e:8c:03:92:d2:7c:79:19:e5: 67:7b:a8:20:b9:84:ea:b7:84:a3:a9:df:c4:2d:fd: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DC:00:8D:DF:7B:39:FF:0A:9D:E6:E9:5D:6D:DE:1D:8D:A9:AF:EB X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.32.0/19 Signature Algorithm: sha256WithRSAEncryption 08:ef:33:41:e5:82:0c:1c:23:15:76:d0:26:79:10:1d:9c:4f: ed:a1:56:82:47:a5:eb:0a:08:71:2d:03:f7:51:70:24:4f:90: 15:55:dc:b8:43:79:05:a2:77:6a:fb:d2:42:ba:bf:5a:1d:56: 58:5e:e6:e9:82:98:69:e4:08:de:a5:d1:82:a2:4b:38:40:b8: d5:f7:29:1f:94:47:79:6c:54:b9:51:8e:53:59:d8:6a:52:ce: fd:6d:39:1b:dd:49:c5:d2:80:f6:aa:03:ab:de:ac:31:c7:c0: 36:15:d4:ec:43:b6:8c:a8:71:ab:f0:18:cb:6e:6d:ce:83:ab: fb:6f:c5:6e:f1:a0:ba:71:c4:08:d9:4f:de:a6:7c:82:d2:aa: 71:db:16:51:8a:82:7f:d0:b6:7c:c5:bd:67:c7:31:d8:c7:86: 84:d6:34:6f:87:a2:68:6f:ba:9c:bc:d0:80:0d:cd:55:01:61: e9:8f:f1:f3:53:1e:f5:6f:b2:ad:d8:88:22:58:64:05:a6:9e: 7c:47:0f:e2:3b:bb:cd:be:fd:b5:d3:b1:bd:d9:14:07:b8:87: 04:5d:84:0c:e3:f1:e5:20:e8:ea:17:93:28:d3:36:24:f4:34: 06:f9:e6:be:be:40:0e:0c:fa:09:a6:ee:07:71:f8:de:93:7d: c3:50:98:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBT2XqfeZRUQToeThrJ2ZPS/SchcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwODA3MDA1MDA2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNThiNjE1M2RhMDEyMGZmZTc2YWVkN2QzYjc0YmFmMGMw NGY4YWExMTc2ZjIyNzE4NWYwZmYxZjBkNzAyN2YyMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQK4IGfCUfU2AFr7OUMbSJBsymiSeWI42ZWkjWDMyMKQR0 +lplra+hg9dIvjStN3sIpOT24PX/+wuKLqV14JDDXW5MnFn/aEfMMV+PnYjlNY9M Si3fOUe9WNTHjiAS8aSN44HpH2pZiH0nHXeZFiQT/VwHc4fYVjEnor2FSaIqi3oH kdrwFj0WsqtIsy3d2Ygj5+8KeYvEG+M5CmFdfSpoGuK37OcElyfNC8Ow0vMRpGND eeO/r6FYLLuF5EX5lGjJj5K9Lmg/8C09IRLFQXdfh18Vr9aJ8j2VQ10njtU3bz+x fckK7D6MA5LSfHkZ5Wd7qCC5hOq3hKOp38Qt/Tr/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS9wAjd97Of8KnebpXW3eHY2pr+swHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzA3NjUzMzU0LTYyZTAtNDkxMi05OGYwLTJjMjIzNTRlYzM4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVgfyAwDQYJKoZIhvcNAQELBQADggEBAAjvM0HlggwcIxV20CZ5EB2cT+2h VoJHpesKCHEtA/dRcCRPkBVV3LhDeQWid2r70kK6v1odVlhe5umCmGnkCN6l0YKi SzhAuNX3KR+UR3lsVLlRjlNZ2GpSzv1tORvdScXSgPaqA6verDHHwDYV1OxDtoyo cavwGMtubc6Dq/tvxW7xoLpxxAjZT96mfILSqnHbFlGKgn/QtnzFvWfHMdjHhoTW NG+Homhvupy80IANzVUBYemP8fNTHvVvsq3YiCJYZAWmnnxHD+I7u82+/bXTsb3Z FAe4hwRdhAzj8eUg6OoXkyjTNiT0NAb55r6+QA4M+gmm7gdx+N6TfcNQmHg= -----END CERTIFICATE-----Generated at Thu Sep 3 12:58:01 2026 by rpki-client