$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ddd3ff0-6590-4eba-a38b-4ae9c226dfc5.roa File: 2ddd3ff0-6590-4eba-a38b-4ae9c226dfc5.roa (raw, json) Hash identifier: e7hTp80LNUZKY3B1/Ni8ju8sRq3ECWqFjRd4M7Qj5vo= Subject key identifier: 65:75:61:49:F9:DD:5B:FC:79:7C:3A:93:00:96:24:A7:CE:8D:CF:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12E9891C5456F1C89F6AFF82DF589F86785EF61D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ddd3ff0-6590-4eba-a38b-4ae9c226dfc5.roa Signing time: Mon 03 Aug 2026 03:40:06 +0000 ROA not before: Mon 03 Aug 2026 03:40:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e9:89:1c:54:56:f1:c8:9f:6a:ff:82:df:58:9f:86:78:5e:f6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:40:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=d02e76bf16ccb04d86dc24ef686583e3035cd074971a9d4bdcdd9dc388ff6c9e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:7d:5b:2c:7c:b1:48:eb:7c:ce:92:61:97: 19:16:23:de:b1:94:96:a4:78:9c:98:64:a1:9d:1d: bb:1c:6c:33:4c:5a:fa:43:aa:ab:bd:cf:43:24:7a: 09:9d:5b:d0:74:d9:b3:82:da:e6:c5:c5:0e:77:e4: 98:bc:83:59:30:2f:cb:6e:21:02:ac:b8:52:3e:72: aa:3b:12:82:2f:4b:bc:39:cc:6a:ec:36:b0:2d:d8: aa:65:05:44:1d:31:89:e5:44:d5:aa:77:4c:40:49: 75:c4:aa:ef:f0:6f:1f:35:c4:3d:d1:2e:17:30:50: fe:40:8b:81:b9:82:9b:31:ed:a3:5f:e5:cd:95:b1: 58:e8:f0:f1:75:d6:c6:dc:79:49:02:d5:c5:d1:ca: c7:65:88:fa:82:d3:84:f0:9c:9a:c3:ca:78:1b:d0: e6:00:34:da:3d:5b:78:94:c9:a5:c7:07:53:fa:b2: bb:45:46:0c:76:6d:bf:79:83:1f:2d:69:33:88:9b: dd:fb:9d:8d:a9:2f:07:f6:64:49:10:c8:d6:be:bd: 98:3f:2d:3d:9f:af:99:c4:08:97:73:cf:fd:bc:0f: b9:3e:a7:8e:ac:8b:f7:3f:31:f9:80:30:e1:c2:e4: 98:8b:a2:39:59:36:91:c4:03:02:66:cf:5e:db:9b: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:75:61:49:F9:DD:5B:FC:79:7C:3A:93:00:96:24:A7:CE:8D:CF:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ddd3ff0-6590-4eba-a38b-4ae9c226dfc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.128.0/18 Signature Algorithm: sha256WithRSAEncryption a1:31:69:c5:7b:63:e4:a2:4e:72:51:35:71:5b:db:21:79:fa: 8a:5d:37:dc:04:89:7e:0c:67:43:64:c2:ad:14:db:ba:fd:f2: 3b:b2:53:92:d8:b9:eb:ae:65:1b:ac:5e:83:b2:fb:3a:af:8b: f4:4c:57:cd:64:6a:9e:3a:e0:be:12:3e:ea:aa:c5:15:ca:d0: b7:ce:1c:9e:6d:b6:eb:14:73:3e:9c:67:0f:6c:32:c1:3b:82: b4:80:c4:f2:6d:e9:29:7e:60:a4:75:7c:69:f4:43:da:c5:00: 14:90:bc:67:58:70:8b:db:4c:0b:35:8a:cd:8c:2f:11:2d:5d: b4:5c:43:c4:27:02:95:6f:20:64:7f:37:5c:b2:c3:fe:9b:e6: d5:4c:55:01:f6:4c:f1:e1:26:0f:d2:5e:fa:64:d6:e6:60:c2: 41:4c:21:d2:86:07:55:ec:60:bc:40:de:0c:27:19:3d:2d:e7: f7:3c:a4:d0:80:71:3f:57:95:9f:32:04:30:33:92:43:12:75: a5:6e:67:d6:ab:52:06:53:b2:53:bf:d2:ae:df:35:a0:0c:d0: 72:f9:b6:f0:a4:1d:be:8d:72:c7:ac:d5:2c:ab:3d:39:3c:ef: 51:17:ff:25:bc:31:12:d3:54:97:97:fe:cd:d7:aa:90:6a:f7: c4:7c:35:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEumJHFRW8cifav+C31ifhnhe9h0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDM0MDA2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDJlNzZiZjE2Y2NiMDRkODZkYzI0ZWY2ODY1ODNlMzAz NWNkMDc0OTcxYTlkNGJkY2RkOWRjMzg4ZmY2YzllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4fH1bLHyxSOt8zpJhlxkWI96xlJakeJyYZKGdHbscbDNM WvpDqqu9z0MkegmdW9B02bOC2ubFxQ535Ji8g1kwL8tuIQKsuFI+cqo7EoIvS7w5 zGrsNrAt2KplBUQdMYnlRNWqd0xASXXEqu/wbx81xD3RLhcwUP5Ai4G5gpsx7aNf 5c2VsVjo8PF11sbceUkC1cXRysdliPqC04TwnJrDyngb0OYANNo9W3iUyaXHB1P6 srtFRgx2bb95gx8taTOIm937nY2pLwf2ZEkQyNa+vZg/LT2fr5nECJdzz/28D7k+ p46si/c/MfmAMOHC5JiLojlZNpHEAwJmz17bm+FLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZXVhSfndW/x5fDqTAJYkp86Nz6kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkZGQzZmYwLTY1OTAtNGViYS1hMzhiLTRhZTljMjI2ZGZjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2w4AwDQYJKoZIhvcNAQELBQADggEBAKExacV7Y+SiTnJRNXFb2yF5+opd N9wEiX4MZ0Nkwq0U27r98juyU5LYueuuZRusXoOy+zqvi/RMV81kap464L4SPuqq xRXK0LfOHJ5ttusUcz6cZw9sMsE7grSAxPJt6Sl+YKR1fGn0Q9rFABSQvGdYcIvb TAs1is2MLxEtXbRcQ8QnApVvIGR/N1yyw/6b5tVMVQH2TPHhJg/SXvpk1uZgwkFM IdKGB1XsYLxA3gwnGT0t5/c8pNCAcT9XlZ8yBDAzkkMSdaVuZ9arUgZTslO/0q7f NaAM0HL5tvCkHb6Ncses1SyrPTk871EX/yW8MRLTVJeX/s3XqpBq98R8NZ8= -----END CERTIFICATE-----Generated at Tue Sep 15 10:59:31 2026 by rpki-client