$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14e09e62-3a46-4ff9-a31e-fda88a9bbb13.roa File: 14e09e62-3a46-4ff9-a31e-fda88a9bbb13.roa (raw, json) Hash identifier: erD7fqLzWVEX7P0q4zReDUA+r+bonhc2khB0qDCLetY= Subject key identifier: 85:B8:83:61:8E:AC:77:56:1A:8B:14:2E:D6:8C:86:8F:B6:DE:0C:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D199B680897451719D45E9BBE9D1EAE97699794 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14e09e62-3a46-4ff9-a31e-fda88a9bbb13.roa Signing time: Sun 02 Aug 2026 01:40:38 +0000 ROA not before: Sun 02 Aug 2026 01:40:38 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:19:9b:68:08:97:45:17:19:d4:5e:9b:be:9d:1e:ae:97:69:97:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 01:40:38 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=f8bd56284a5cce2c76aa1b1f9433e13b397a37befc5e03440bdd642678f57f25, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:f3:af:21:8c:24:ba:1b:85:55:52:18:f4: 9c:16:98:26:e9:3e:c9:b4:27:92:81:58:ed:a3:23: c3:cc:e7:65:96:2a:4c:5b:2a:e0:5d:75:55:a4:9e: 00:69:94:3c:c3:43:00:5a:24:e7:08:26:fc:c6:dc: ed:08:52:d9:14:ec:7f:d6:44:7e:d5:d5:c1:01:7a: 9b:06:2a:30:68:22:f0:bb:3a:82:f8:82:15:75:9d: c5:b2:6e:d2:38:d5:dc:a5:c7:3b:6b:31:91:9b:d7: 18:cb:71:89:22:21:05:1e:fe:2e:e0:07:5e:03:c1: ac:cf:fd:da:19:b8:83:78:a9:ba:e5:9e:e2:53:b9: ec:f5:7c:ef:3c:a8:2e:f5:7b:ba:5b:cb:f5:fa:75: dc:91:cf:8f:0a:f7:f8:be:85:58:13:92:7f:3d:65: 09:5a:ce:86:a0:a8:52:63:ad:94:a3:e8:37:b6:5b: b2:b2:9e:ff:40:f7:f7:f8:30:5d:4d:43:cc:98:d2: bb:ba:ff:79:c8:7a:ba:61:17:b9:28:1a:11:05:a3: 88:97:58:40:f3:5b:0d:dc:c4:56:3a:48:9a:cb:72: e4:46:3c:21:fb:fe:b5:4b:44:3e:38:0c:6d:ba:2a: ad:17:3f:0a:8b:47:f6:1f:7c:60:b4:58:9b:19:a1: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B8:83:61:8E:AC:77:56:1A:8B:14:2E:D6:8C:86:8F:B6:DE:0C:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14e09e62-3a46-4ff9-a31e-fda88a9bbb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.221.0/24 Signature Algorithm: sha256WithRSAEncryption 96:5a:2c:03:f5:c8:a2:48:3a:68:93:a8:b2:6d:73:26:89:67: 1a:d1:c8:4d:a7:86:5c:ef:84:ef:db:d2:a0:19:1e:69:2a:eb: c3:32:1f:1c:e3:22:10:be:e7:ca:ca:86:db:26:d5:80:73:d9: ba:d8:5a:de:81:33:2f:db:aa:86:79:dd:94:f9:60:f0:ec:20: 35:dd:83:6a:ca:82:e9:d0:57:aa:b3:6f:ed:1a:65:f6:0d:c3: 08:ab:78:7d:fa:91:d6:b4:26:d3:a2:7c:d0:f8:63:5e:40:67: 69:43:a0:f1:7f:9f:3a:ec:f8:9d:7f:59:42:60:1d:5f:95:77: 69:15:82:a1:30:fb:40:fa:27:fc:b3:68:e6:3c:4d:34:46:7f: a1:c0:28:e9:45:ca:02:5d:0f:e7:94:f0:ce:31:fe:b9:9e:2d: 93:47:21:f1:46:2f:b1:91:62:8d:37:42:3d:fc:88:91:79:0a: a9:27:d5:23:db:cd:57:d3:90:9a:ef:2b:db:f0:b1:36:5c:ac: 13:68:d2:b9:23:8c:6e:a6:69:b3:6d:c1:6c:27:58:73:9e:9f: bd:e1:0c:50:66:7c:76:98:71:ab:2f:a2:a2:b8:7a:5a:f0:bc: 40:35:91:2a:d8:61:0f:c8:fc:4c:59:f3:80:5d:a1:bc:86:cb: d6:8a:84:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDRmbaAiXRRcZ1F6bvp0erpdpl5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDE0MDM4WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGJkNTYyODRhNWNjZTJjNzZhYTFiMWY5NDMzZTEzYjM5 N2EzN2JlZmM1ZTAzNDQwYmRkNjQyNjc4ZjU3ZjI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPiPOvIYwkuhuFVVIY9JwWmCbpPsm0J5KBWO2jI8PM52WW KkxbKuBddVWkngBplDzDQwBaJOcIJvzG3O0IUtkU7H/WRH7V1cEBepsGKjBoIvC7 OoL4ghV1ncWybtI41dylxztrMZGb1xjLcYkiIQUe/i7gB14DwazP/doZuIN4qbrl nuJTuez1fO88qC71e7pby/X6ddyRz48K9/i+hVgTkn89ZQlazoagqFJjrZSj6De2 W7Kynv9A9/f4MF1NQ8yY0ru6/3nIerphF7koGhEFo4iXWEDzWw3cxFY6SJrLcuRG PCH7/rVLRD44DG26Kq0XPwqLR/YffGC0WJsZoUCzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhbiDYY6sd1YaixQu1oyGj7beDDYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0ZTA5ZTYyLTNhNDYtNGZmOS1hMzFlLWZkYTg4YTliYmIxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X90wDQYJKoZIhvcNAQELBQADggEBAJZaLAP1yKJIOmiTqLJtcyaJZxrR yE2nhlzvhO/b0qAZHmkq68MyHxzjIhC+58rKhtsm1YBz2brYWt6BMy/bqoZ53ZT5 YPDsIDXdg2rKgunQV6qzb+0aZfYNwwireH36kda0JtOifND4Y15AZ2lDoPF/nzrs +J1/WUJgHV+Vd2kVgqEw+0D6J/yzaOY8TTRGf6HAKOlFygJdD+eU8M4x/rmeLZNH IfFGL7GRYo03Qj38iJF5Cqkn1SPbzVfTkJrvK9vwsTZcrBNo0rkjjG6mabNtwWwn WHOen73hDFBmfHaYcasvoqK4elrwvEA1kSrYYQ/I/ExZ84BdobyGy9aKhEw= -----END CERTIFICATE-----Generated at Sat Aug 22 07:42:58 2026 by rpki-client