$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23d30c59-132d-4eed-9983-f3a902f71b43.roa File: 23d30c59-132d-4eed-9983-f3a902f71b43.roa (raw, json) Hash identifier: 1bGtN1+I0/grVnpwyxb/LdyPFpc1Ib29jU87gXHYX3A= Subject key identifier: F8:AF:17:03:6E:42:BF:32:81:CC:64:F8:81:36:BC:51:CA:19:A1:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33DDD34D92D7321221973BA5FF4C71B4CFC04945 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23d30c59-132d-4eed-9983-f3a902f71b43.roa Signing time: Fri 31 Jul 2026 00:20:07 +0000 ROA not before: Fri 31 Jul 2026 00:20:07 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 3.45.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:dd:d3:4d:92:d7:32:12:21:97:3b:a5:ff:4c:71:b4:cf:c0:49:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 31 00:20:07 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=dca5a048105a0db3091aac4237f352aae7a3ebe547e3b88415829012fc4e2ab7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:90:d7:29:a3:ef:e6:2a:d4:41:72:3b:fe: 2f:40:b7:b7:c5:99:2a:f4:77:6e:fb:09:44:19:33: e0:0a:ca:5f:67:ad:e6:07:21:19:b0:69:de:55:45: 1e:4a:7a:71:4b:5e:1c:25:73:a1:60:b5:90:57:8a: 6b:70:1a:45:03:9c:9d:d8:fd:7c:54:f7:67:02:2e: 90:63:b1:31:39:af:93:e3:01:d2:f6:42:c6:d2:fc: 19:ef:06:e3:15:96:6d:fd:52:db:06:8e:7d:15:f3: 76:9e:d9:40:14:52:f6:f7:3d:34:51:a8:1b:d2:79: cb:b6:d0:2b:32:2f:a0:07:19:4e:09:21:f6:5f:79: da:1a:9e:56:d6:5d:9a:28:25:92:1d:a7:dd:32:fc: 22:45:c6:97:d4:01:8b:4e:b2:e5:1a:73:6c:37:d2: 77:25:26:d6:dd:f2:e8:00:07:c1:ba:a5:91:8a:7b: e0:fa:ea:1c:5f:6b:15:25:45:b6:7b:44:26:cb:91: d5:e0:8b:bd:36:02:13:3f:4f:9f:9f:8f:28:1d:56: 32:af:4a:27:af:68:61:74:da:88:ba:27:07:c0:b4: 4a:f1:3f:a9:f0:8c:c7:4d:c2:42:fc:cd:6f:95:75: b3:80:a2:fd:a1:7e:69:67:07:a2:ea:06:a9:0b:19: ea:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AF:17:03:6E:42:BF:32:81:CC:64:F8:81:36:BC:51:CA:19:A1:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23d30c59-132d-4eed-9983-f3a902f71b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.45.64.0/18 Signature Algorithm: sha256WithRSAEncryption 90:62:c5:b5:73:ac:6e:a5:c2:82:5d:de:cd:75:01:18:31:21: d3:ec:f5:af:16:47:13:d7:6f:5f:13:c0:e9:6f:e4:2d:60:74: 26:1b:c7:74:86:b1:61:f6:05:a6:65:42:fc:91:ed:ba:6c:f8: f4:6f:dd:dd:33:74:a2:9f:7a:e2:55:a8:04:6e:50:81:a2:cc: a2:ac:28:f7:ff:82:dd:dd:91:7e:17:52:bc:b1:07:ff:4e:5a: c1:3c:cf:87:64:e3:9f:98:17:25:04:27:77:06:11:e4:fb:08: e6:c1:db:76:df:4f:5b:61:ea:cc:c8:c0:02:b7:4b:54:4a:03: 19:26:e0:ff:ce:02:98:18:19:67:c3:90:05:9e:95:71:96:38: ee:cd:01:7c:0d:18:9b:88:43:b4:39:03:04:c2:05:02:67:54: 88:47:76:d8:dd:18:f2:c1:1e:ba:a4:e6:82:83:de:3d:84:61: e3:89:8a:ad:01:68:8b:b2:81:22:47:3b:fd:de:dd:98:0a:af: 20:66:9f:8d:0d:42:02:47:16:0f:30:cf:26:01:08:3c:f5:44: b5:89:5f:90:10:f1:82:35:3e:ae:04:c7:cc:b6:fa:5f:5b:de: e1:8e:ea:82:63:52:72:3e:43:b5:c8:7d:d0:65:11:5f:b0:9a: 2d:b8:25:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM93TTZLXMhIhlzul/0xxtM/ASUUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzMxMDAyMDA3WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2E1YTA0ODEwNWEwZGIzMDkxYWFjNDIzN2YzNTJhYWU3 YTNlYmU1NDdlM2I4ODQxNTgyOTAxMmZjNGUyYWI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ZZDXKaPv5irUQXI7/i9At7fFmSr0d277CUQZM+AKyl9n reYHIRmwad5VRR5KenFLXhwlc6FgtZBXimtwGkUDnJ3Y/XxU92cCLpBjsTE5r5Pj AdL2QsbS/BnvBuMVlm39UtsGjn0V83ae2UAUUvb3PTRRqBvSecu20CsyL6AHGU4J IfZfedoanlbWXZooJZIdp90y/CJFxpfUAYtOsuUac2w30nclJtbd8ugAB8G6pZGK e+D66hxfaxUlRbZ7RCbLkdXgi702AhM/T5+fjygdVjKvSievaGF02oi6JwfAtErx P6nwjMdNwkL8zW+VdbOAov2hfmlnB6LqBqkLGepVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+K8XA25CvzKBzGT4gTa8UcoZoSEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzZDMwYzU5LTEzMmQtNGVlZC05OTgzLWYzYTkwMmY3MWI0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYDLUAwDQYJKoZIhvcNAQELBQADggEBAJBixbVzrG6lwoJd3s11ARgxIdPs 9a8WRxPXb18TwOlv5C1gdCYbx3SGsWH2BaZlQvyR7bps+PRv3d0zdKKfeuJVqARu UIGizKKsKPf/gt3dkX4XUryxB/9OWsE8z4dk45+YFyUEJ3cGEeT7CObB23bfT1th 6szIwAK3S1RKAxkm4P/OApgYGWfDkAWelXGWOO7NAXwNGJuIQ7Q5AwTCBQJnVIhH dtjdGPLBHrqk5oKD3j2EYeOJiq0BaIuygSJHO/3e3ZgKryBmn40NQgJHFg8wzyYB CDz1RLWJX5AQ8YI1Pq4Ex8y2+l9b3uGO6oJjUnI+Q7XIfdBlEV+wmi24JXI= -----END CERTIFICATE-----Generated at Sat Aug 8 07:03:35 2026 by rpki-client