$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/223e524d-e479-447f-b741-e8c4b9c91a6b.roa File: 223e524d-e479-447f-b741-e8c4b9c91a6b.roa (raw, json) Hash identifier: 0YmSNX989Y4r/Xq5GB6vbTBT4YV7N5a1Kr1PiCBKr6c= Subject key identifier: AB:49:0D:00:22:99:D1:A7:9D:3A:9B:A1:36:3E:9B:AE:72:E3:B7:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2898A91D07E97E88478748D8907B786541FB931F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/223e524d-e479-447f-b741-e8c4b9c91a6b.roa Signing time: Wed 05 Aug 2026 01:50:31 +0000 ROA not before: Wed 05 Aug 2026 01:50:31 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.248.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:98:a9:1d:07:e9:7e:88:47:87:48:d8:90:7b:78:65:41:fb:93:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 01:50:31 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=9bf18956d833f3d45e9d724b13a64cdabeae0d43e76138cc7c3705e3faff2b50, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:e7:a7:ba:7a:05:79:cb:69:d2:35:03:a5: 62:dd:f4:10:6e:d1:f9:19:03:10:de:2c:27:22:eb: 61:a9:7f:ac:07:f3:c4:e7:0d:a1:80:93:d1:af:39: 3b:73:65:1a:af:e2:80:bb:6a:14:4e:49:9d:d2:8b: 19:50:e6:f7:df:35:44:0b:5b:9f:8b:7c:13:df:84: 6d:63:6b:73:30:f9:10:df:d0:54:d2:f5:80:8e:48: c1:8a:26:35:b2:0c:d8:97:a0:b2:fe:da:f1:f7:ba: 4c:d9:14:fb:c4:da:cc:c7:f7:24:ce:e7:f4:2d:7d: 6b:6c:98:ce:8f:37:e2:32:f9:fd:0d:89:c1:b8:78: 3f:3b:5d:74:f9:44:7d:39:d6:44:90:99:48:db:d5: 59:cc:14:6d:dd:0b:08:67:73:c7:4e:52:35:51:e0: b0:2c:0f:d6:aa:47:4c:62:e2:e0:34:a8:57:88:15: 3d:cb:99:f0:18:f2:77:40:47:4b:b7:34:42:e7:a9: a0:dc:d4:7b:b6:b9:50:9f:24:c1:26:89:6b:b9:85: 2b:f2:25:44:75:a5:14:6d:10:2c:56:a5:f5:d6:14: 6d:cf:57:29:b2:7c:35:0b:e4:44:91:74:65:37:dd: 2c:1d:20:21:08:3b:65:de:00:84:7c:f4:fc:a4:33: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:0D:00:22:99:D1:A7:9D:3A:9B:A1:36:3E:9B:AE:72:E3:B7:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/223e524d-e479-447f-b741-e8c4b9c91a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.32.0/20 Signature Algorithm: sha256WithRSAEncryption a3:14:b3:65:77:3c:26:ea:41:30:cb:49:57:25:dc:b1:34:72: ae:bf:48:9b:65:c8:d3:60:7d:fa:e0:e4:cf:3f:76:73:f2:02: 6b:41:63:8c:e8:1e:a5:b9:92:08:39:b0:0d:d2:4e:c8:a8:7a: 1a:43:72:46:18:7a:ca:05:29:bc:a9:09:75:9b:fa:6c:fc:b1: 19:2f:6a:db:79:b2:a2:ff:d3:94:90:48:f9:44:da:2f:7a:93: 4b:c2:31:50:f2:8e:d9:0a:fe:3f:ec:2c:eb:04:6a:18:d2:a1: d0:f9:26:8d:93:f0:c4:fb:db:ce:99:cd:d5:7f:5d:6c:ee:04: c9:e6:88:1c:af:ae:c1:22:1e:a7:d5:5a:9e:d5:c4:fa:7a:9b: bd:89:2b:86:2d:00:09:d1:79:6b:51:57:6d:b3:73:fd:41:5b: b0:d1:fc:86:75:90:ea:34:e4:ea:a3:c7:d7:21:aa:d4:8c:b6: 8e:71:13:6c:09:ca:79:7a:8d:af:0b:c2:da:31:26:52:c8:61: fc:67:c8:56:32:89:ea:5c:53:37:bf:ab:4d:88:14:1e:fc:65: 73:51:de:49:29:fd:ea:5e:fe:61:d7:41:90:8c:75:90:5b:4f: c4:cd:af:30:23:15:87:5b:11:db:f1:4b:ec:d2:c2:14:f9:88: 9d:33:cd:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKJipHQfpfohHh0jYkHt4ZUH7kx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA1MDE1MDMxWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmYxODk1NmQ4MzNmM2Q0NWU5ZDcyNGIxM2E2NGNkYWJl YWUwZDQzZTc2MTM4Y2M3YzM3MDVlM2ZhZmYyYjUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8peenunoFectp0jUDpWLd9BBu0fkZAxDeLCci62Gpf6wH 88TnDaGAk9GvOTtzZRqv4oC7ahROSZ3SixlQ5vffNUQLW5+LfBPfhG1ja3Mw+RDf 0FTS9YCOSMGKJjWyDNiXoLL+2vH3ukzZFPvE2szH9yTO5/QtfWtsmM6PN+Iy+f0N icG4eD87XXT5RH051kSQmUjb1VnMFG3dCwhnc8dOUjVR4LAsD9aqR0xi4uA0qFeI FT3LmfAY8ndAR0u3NELnqaDc1Hu2uVCfJMEmiWu5hSvyJUR1pRRtECxWpfXWFG3P VymyfDUL5ESRdGU33SwdICEIO2XeAIR89PykM93tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq0kNACKZ0aedOpuhNj6brnLjt38wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyM2U1MjRkLWU0NzktNDQ3Zi1iNzQxLWU4YzRiOWM5MWE2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN+CAwDQYJKoZIhvcNAQELBQADggEBAKMUs2V3PCbqQTDLSVcl3LE0cq6/ SJtlyNNgffrg5M8/dnPyAmtBY4zoHqW5kgg5sA3STsioehpDckYYesoFKbypCXWb +mz8sRkvatt5sqL/05SQSPlE2i96k0vCMVDyjtkK/j/sLOsEahjSodD5Jo2T8MT7 286ZzdV/XWzuBMnmiByvrsEiHqfVWp7VxPp6m72JK4YtAAnReWtRV22zc/1BW7DR /IZ1kOo05Oqjx9chqtSMto5xE2wJynl6ja8LwtoxJlLIYfxnyFYyiepcUze/q02I FB78ZXNR3kkp/epe/mHXQZCMdZBbT8TNrzAjFYdbEdvxS+zSwhT5iJ0zzZ4= -----END CERTIFICATE-----Generated at Sat Aug 22 07:39:37 2026 by rpki-client