$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009712a8-daee-436a-80fc-9eaa7d1b2878.roa File: 009712a8-daee-436a-80fc-9eaa7d1b2878.roa (raw, json) Hash identifier: nPyzSQh3px75FYw8ly8F7i33VcIqy/zhN04oANSe28g= Subject key identifier: 5D:E4:21:88:47:20:2E:73:3A:01:00:42:79:22:EB:38:5E:EB:05:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 618A11CFFF97BF4401291498044576E9FABFEC10 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009712a8-daee-436a-80fc-9eaa7d1b2878.roa Signing time: Fri 07 Aug 2026 03:31:35 +0000 ROA not before: Fri 07 Aug 2026 03:31:35 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8a:11:cf:ff:97:bf:44:01:29:14:98:04:45:76:e9:fa:bf:ec:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 03:31:35 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=f68890d8890a1cdc5c87abeb27cca24583e0111669c09870db89371062330f36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:20:e2:e6:34:ef:1c:7c:4f:0a:bc:f3:4c: 1f:33:65:74:1e:7c:19:21:53:e6:d7:5c:ef:3a:8e: 79:25:3f:86:59:eb:f4:fb:a0:81:64:f5:5b:2a:8d: 15:47:87:47:fa:70:7e:b6:83:73:8c:e6:ac:ec:34: 13:69:ff:47:f8:1f:ed:6b:02:89:5e:70:35:b0:01: 56:b7:ee:cc:b9:a9:76:6a:49:21:6a:ff:e4:68:7f: 08:e7:4a:b2:04:e8:1b:ab:e3:e1:ae:46:4a:48:57: 38:23:b5:f3:67:d9:ef:f3:bc:60:9c:df:75:a8:e2: 8f:e6:c9:27:23:1f:2b:f9:ad:71:9d:6c:36:e4:b1: cf:29:d3:fc:43:c6:35:cb:9d:d7:32:72:52:94:bf: 1e:d0:df:a1:c7:b0:26:cd:f8:f8:6f:28:6c:2d:53: b6:fa:f0:51:82:c4:33:19:59:42:9f:d1:3f:63:bb: 17:48:88:08:39:5e:71:c7:e5:46:7f:b9:40:1c:d5: 69:ad:e3:83:3b:b6:c4:89:0e:a4:1b:cf:83:2d:1b: ed:28:77:78:2e:73:80:44:b8:7a:e6:52:50:19:eb: 5c:bd:a6:39:c8:5d:28:16:21:1d:79:4e:13:ba:5e: a2:eb:34:23:de:39:7b:69:a3:4f:a9:b6:2a:0d:f7: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:21:88:47:20:2E:73:3A:01:00:42:79:22:EB:38:5E:EB:05:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009712a8-daee-436a-80fc-9eaa7d1b2878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.106.0/23 Signature Algorithm: sha256WithRSAEncryption 60:a6:f8:16:6d:32:8d:04:b3:26:cc:89:61:e0:75:be:a8:0a: ea:17:cd:80:45:8c:e5:76:77:7a:82:04:08:bd:26:14:1f:76: 97:c7:3f:f4:b6:e2:58:31:c7:68:6c:6a:6b:a1:ea:49:03:7d: 16:7f:2d:e5:06:fa:a6:64:6e:76:46:c5:a5:bb:28:15:79:40: 50:9f:9a:36:ce:43:d2:91:8f:b1:bb:95:b8:2a:52:2f:fd:47: 31:d7:1a:65:f4:c2:bf:97:1f:dc:ed:1a:6f:75:06:8c:34:d5: 74:6f:54:3c:e0:0c:e2:33:aa:7d:fd:9e:13:a1:22:aa:38:e9: a0:37:3b:99:53:03:13:7b:bf:83:f8:13:bb:ec:1c:b2:4e:70: d0:27:11:f3:4f:d5:5f:9d:78:cf:a5:a6:57:cd:65:c4:02:a4: 01:84:8b:25:b1:1c:42:3b:f0:6c:ca:4e:84:9e:e6:c8:e5:c7: 7a:f0:cd:32:2b:26:2d:b1:89:26:ce:23:71:f5:98:20:d8:70: 69:52:1c:0a:3f:05:fc:24:cc:3d:67:cd:a1:69:fa:a5:b8:37: 14:61:25:47:50:ab:d5:41:b3:2a:60:fb:1b:d8:27:a6:ba:59: e3:5e:73:c6:b4:88:60:c6:de:b2:b4:ee:c1:a3:da:cb:67:53: 95:49:f1:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYYoRz/+Xv0QBKRSYBEV26fq/7BAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDMzMTM1WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjg4OTBkODg5MGExY2RjNWM4N2FiZWIyN2NjYTI0NTgz ZTAxMTE2NjljMDk4NzBkYjg5MzcxMDYyMzMwZjM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgcyDi5jTvHHxPCrzzTB8zZXQefBkhU+bXXO86jnklP4ZZ 6/T7oIFk9VsqjRVHh0f6cH62g3OM5qzsNBNp/0f4H+1rAolecDWwAVa37sy5qXZq SSFq/+RofwjnSrIE6Bur4+GuRkpIVzgjtfNn2e/zvGCc33Wo4o/myScjHyv5rXGd bDbksc8p0/xDxjXLndcyclKUvx7Q36HHsCbN+PhvKGwtU7b68FGCxDMZWUKf0T9j uxdIiAg5XnHH5UZ/uUAc1Wmt44M7tsSJDqQbz4MtG+0od3guc4BEuHrmUlAZ61y9 pjnIXSgWIR15ThO6XqLrNCPeOXtpo0+ptioN92X9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXeQhiEcgLnM6AQBCeSLrOF7rBbEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwOTcxMmE4LWRhZWUtNDM2YS04MGZjLTllYWE3ZDFiMjg3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE272owDQYJKoZIhvcNAQELBQADggEBAGCm+BZtMo0EsybMiWHgdb6oCuoX zYBFjOV2d3qCBAi9JhQfdpfHP/S24lgxx2hsamuh6kkDfRZ/LeUG+qZkbnZGxaW7 KBV5QFCfmjbOQ9KRj7G7lbgqUi/9RzHXGmX0wr+XH9ztGm91Bow01XRvVDzgDOIz qn39nhOhIqo46aA3O5lTAxN7v4P4E7vsHLJOcNAnEfNP1V+deM+lplfNZcQCpAGE iyWxHEI78GzKToSe5sjlx3rwzTIrJi2xiSbOI3H1mCDYcGlSHAo/BfwkzD1nzaFp +qW4NxRhJUdQq9VBsypg+xvYJ6a6WeNec8a0iGDG3rK07sGj2stnU5VJ8Zw= -----END CERTIFICATE-----Generated at Sat Aug 22 08:41:50 2026 by rpki-client