$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b375cfb-c594-4719-8ced-254505eae482.roa File: 0b375cfb-c594-4719-8ced-254505eae482.roa (raw, json) Hash identifier: yrqai7gAk4dsKdbt+o0V7h9fFho16FqiecQYuxtHe4o= Subject key identifier: C7:AB:6A:C0:33:30:A2:B7:77:09:F5:C7:83:00:F4:EA:60:CC:23:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31895CDC90BF933907B5489C3FBFF23075B2687E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b375cfb-c594-4719-8ced-254505eae482.roa Signing time: Sat 08 Aug 2026 00:40:07 +0000 ROA not before: Sat 08 Aug 2026 00:40:07 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:89:5c:dc:90:bf:93:39:07:b5:48:9c:3f:bf:f2:30:75:b2:68:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 8 00:40:07 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=4e3df6d9af46ad32562ca6e72ba48003cbcb313ea1bae8014cb3222c9d8eaeeb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:13:aa:8d:57:44:b0:b4:7b:7f:97:3a:b0: fb:f4:e2:02:0a:93:4e:13:45:1f:11:c6:0d:f3:25: 74:c4:bf:d6:d1:5b:b1:73:88:40:78:5b:a7:5d:4e: fe:00:54:d5:34:d1:46:3b:5e:31:c1:53:2b:f4:6b: 08:8a:e7:16:9d:e5:3b:94:65:45:84:1b:72:b1:17: 3e:77:3b:50:9f:27:de:7d:20:45:2d:a3:72:40:1a: a0:ac:61:20:56:1a:8a:92:9c:d3:6a:3e:a0:69:8f: 1c:96:20:d8:aa:d7:7a:ef:a7:b0:71:47:ad:84:01: 86:ef:a8:39:f4:f3:fe:3e:24:88:23:e1:8f:81:d6: 70:ca:73:1e:fc:49:5b:d2:58:75:b5:6c:fd:e7:64: 38:9f:32:f6:97:32:ca:d5:c9:a7:08:f3:9c:b5:00: da:90:40:84:c7:31:bc:b9:0b:3a:1b:91:4b:fd:10: 0e:09:02:86:22:00:01:57:25:78:58:5c:9f:14:2c: 68:0d:0d:2d:81:cd:0d:33:b0:cc:8d:ab:4b:c2:df: c6:63:a1:55:cd:bd:a0:19:08:b6:ca:32:f5:b9:19: 01:a9:2f:35:52:fa:3a:83:87:b6:05:63:76:b7:dc: e1:cc:62:a9:9e:1a:8b:01:8e:69:17:89:12:16:3a: cb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:6A:C0:33:30:A2:B7:77:09:F5:C7:83:00:F4:EA:60:CC:23:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b375cfb-c594-4719-8ced-254505eae482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.150.0/23 Signature Algorithm: sha256WithRSAEncryption 98:95:86:5c:c7:8b:b9:c7:1f:98:57:a3:3c:85:bf:cb:c5:6d: 7b:1c:3d:d8:82:5f:c6:72:bc:62:9f:de:a0:63:42:1b:44:4f: 58:d4:25:14:33:ae:35:63:cd:5d:e8:fb:7b:68:62:4a:ee:cd: 77:7e:9b:4a:e9:44:62:4c:1b:4d:f9:14:17:8d:61:da:09:a7: a1:29:9f:ee:ee:ee:b8:18:fb:07:a1:65:6a:bf:f4:c2:0d:07: 04:b2:7d:bf:cf:53:d6:fd:3c:66:a5:cf:10:a2:65:c8:bf:10: e0:0e:7c:7f:b9:87:d9:69:4c:06:0f:35:1d:65:30:27:42:e6: 9c:f7:3e:35:00:b7:35:c9:e3:9b:df:94:8a:0c:95:ef:94:48: 81:b9:2e:a1:42:91:4d:87:b7:02:79:2b:6b:c8:f9:78:73:f5: 0a:34:53:4f:e8:10:02:4e:64:53:28:27:2b:52:ad:38:e3:d7: 0e:3a:ec:ee:fe:0c:9e:de:7f:25:0b:f0:e5:c4:c4:0d:fb:c7: 28:af:38:40:5d:97:3a:50:45:1f:17:9f:34:87:9b:cf:71:03: b7:77:d1:08:74:35:fd:a1:d8:3f:4d:8b:d9:12:75:cb:a1:05: 16:e0:14:a9:7c:b2:d8:d5:9c:86:af:d7:d2:79:c4:a2:8a:f2: a5:58:21:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMYlc3JC/kzkHtUicP7/yMHWyaH4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA4MDA0MDA3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTNkZjZkOWFmNDZhZDMyNTYyY2E2ZTcyYmE0ODAwM2Ni Y2IzMTNlYTFiYWU4MDE0Y2IzMjIyYzlkOGVhZWViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLxxOqjVdEsLR7f5c6sPv04gIKk04TRR8Rxg3zJXTEv9bR W7FziEB4W6ddTv4AVNU00UY7XjHBUyv0awiK5xad5TuUZUWEG3KxFz53O1CfJ959 IEUto3JAGqCsYSBWGoqSnNNqPqBpjxyWINiq13rvp7BxR62EAYbvqDn08/4+JIgj 4Y+B1nDKcx78SVvSWHW1bP3nZDifMvaXMsrVyacI85y1ANqQQITHMby5CzobkUv9 EA4JAoYiAAFXJXhYXJ8ULGgNDS2BzQ0zsMyNq0vC38ZjoVXNvaAZCLbKMvW5GQGp LzVS+jqDh7YFY3a33OHMYqmeGosBjmkXiRIWOssdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx6tqwDMword3CfXHgwD06mDMI2wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBiMzc1Y2ZiLWM1OTQtNDcxOS04Y2VkLTI1NDUwNWVhZTQ4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvJYwDQYJKoZIhvcNAQELBQADggEBAJiVhlzHi7nHH5hXozyFv8vFbXsc PdiCX8ZyvGKf3qBjQhtET1jUJRQzrjVjzV3o+3toYkruzXd+m0rpRGJMG035FBeN YdoJp6Epn+7u7rgY+wehZWq/9MINBwSyfb/PU9b9PGalzxCiZci/EOAOfH+5h9lp TAYPNR1lMCdC5pz3PjUAtzXJ45vflIoMle+USIG5LqFCkU2HtwJ5K2vI+Xhz9Qo0 U0/oEAJOZFMoJytSrTjj1w467O7+DJ7efyUL8OXExA37xyivOEBdlzpQRR8XnzSH m89xA7d30Qh0Nf2h2D9Ni9kSdcuhBRbgFKl8stjVnIav19J5xKKK8qVYIUQ= -----END CERTIFICATE-----Generated at Sat Aug 22 10:14:37 2026 by rpki-client