$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa File: 3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa (raw, json) Hash identifier: Gm47i6/aTU3cbtMoDrisIXwRGIxS4LYD6E9sSp9Ycqw= Subject key identifier: 53:1A:93:B4:83:DF:9E:17:D6:B7:68:43:12:86:DE:BA:5B:FF:96:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23AE103B72ABF53A7AF66A1AF79AF36497DE92A1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa Signing time: Mon 03 Aug 2026 03:10:32 +0000 ROA not before: Mon 03 Aug 2026 03:10:32 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.243.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ae:10:3b:72:ab:f5:3a:7a:f6:6a:1a:f7:9a:f3:64:97:de:92:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:10:32 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=c72c1003e5db7e675c1bd43a76ae53eb7995c34816b2ee7d573865364779f022, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:59:9d:ca:23:06:1c:11:67:ef:5e:50:f4: c6:d5:5e:87:6f:13:a0:02:3f:8f:d9:44:a1:fb:41: b0:85:d8:ee:be:1a:1b:17:58:1f:d8:5c:01:4c:4e: 85:e7:0c:45:b8:2a:fc:81:3e:9b:18:91:fe:a1:08: 8d:f1:4d:a5:24:3c:0f:e3:a6:18:45:12:f3:5f:df: b4:94:95:ba:40:45:85:98:08:09:e0:54:d5:34:ec: 11:c6:6b:ae:75:2d:a1:4b:7d:d6:16:ea:c0:87:9d: 6e:dc:2c:c1:f2:ec:a1:1f:2d:2e:16:4c:c5:c1:b9: ec:d7:7d:9c:a1:cc:a6:5e:ef:fb:e5:4e:8d:20:80: fd:06:0d:23:f1:ef:e0:7c:a4:33:7a:df:b4:c0:c9: 15:e9:18:d0:be:43:b0:d7:71:21:b1:f7:bb:d7:3e: 2e:d3:8e:71:c6:f5:de:8c:4f:e1:e1:c9:b9:0e:99: b2:3b:9a:28:ca:3a:88:26:53:0a:7a:bd:65:63:51: e9:e6:d7:65:f5:e3:33:d5:44:87:e8:45:bc:71:67: c3:73:78:0e:e1:a9:3f:d9:25:23:7c:1a:3f:47:4c: fb:57:3d:d6:05:32:b4:b9:a7:88:40:1e:2b:56:9d: 8f:1a:87:6b:8b:97:88:c6:7d:13:20:de:6f:af:f2: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1A:93:B4:83:DF:9E:17:D6:B7:68:43:12:86:DE:BA:5B:FF:96:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.243.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:55:86:09:52:ad:c1:96:02:4b:de:17:24:95:36:0b:3d:e9: 5e:85:e3:3a:6c:f7:10:22:c3:85:48:ee:b6:e5:6a:b2:92:33: 8e:6a:28:ce:d0:93:26:75:ab:15:f3:b5:5f:9c:12:41:91:dc: 61:1e:f5:94:1b:19:52:d7:49:d3:ef:58:7b:97:5a:25:f0:e1: e5:b4:5c:a9:e0:2e:8d:30:12:07:05:d4:b3:c7:0e:94:5a:d3: c1:a5:89:a4:4b:5f:fc:18:3c:74:91:d1:cb:f1:ba:06:45:2f: 5f:ff:80:8e:63:70:40:3e:14:79:e5:d6:39:b9:f9:c6:9a:74: a7:a1:1f:66:a7:4b:43:d4:61:89:4b:09:b9:7e:d3:e5:b1:e5: b2:9b:06:19:fa:f3:ba:7e:f6:95:3f:2b:4a:f9:b0:46:86:eb: 73:f4:32:0a:35:d6:d5:15:19:e2:70:c2:82:f2:bd:63:11:33: bf:7a:5b:de:54:e2:0d:20:41:9b:38:e8:f6:1b:91:27:f3:41: 35:20:65:a6:1b:b3:df:60:c4:eb:4c:b1:bc:c1:f1:8e:e3:1a: 82:77:8b:a4:a2:7f:9f:59:1c:33:33:46:1e:11:3b:d9:35:ba: 84:4e:36:18:d2:a3:82:ef:1c:22:b6:6d:ed:e8:2c:f9:3b:ec: 73:c9:cf:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI64QO3Kr9Tp69moa95rzZJfekqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMxMDMyWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzJjMTAwM2U1ZGI3ZTY3NWMxYmQ0M2E3NmFlNTNlYjc5 OTVjMzQ4MTZiMmVlN2Q1NzM4NjUzNjQ3NzlmMDIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDASFmdyiMGHBFn715Q9MbVXodvE6ACP4/ZRKH7QbCF2O6+ GhsXWB/YXAFMToXnDEW4KvyBPpsYkf6hCI3xTaUkPA/jphhFEvNf37SUlbpARYWY CAngVNU07BHGa651LaFLfdYW6sCHnW7cLMHy7KEfLS4WTMXBuezXfZyhzKZe7/vl To0ggP0GDSPx7+B8pDN637TAyRXpGNC+Q7DXcSGx97vXPi7TjnHG9d6MT+HhybkO mbI7mijKOogmUwp6vWVjUenm12X14zPVRIfoRbxxZ8NzeA7hqT/ZJSN8Gj9HTPtX PdYFMrS5p4hAHitWnY8ah2uLl4jGfRMg3m+v8lsBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUxqTtIPfnhfWt2hDEobeulv/loEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMWNlZGM4LThjMzAtNGU3Ni05YjFkLWFjN2IyZTU0MWE3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28xgwDQYJKoZIhvcNAQELBQADggEBADpVhglSrcGWAkveFySVNgs96V6F 4zps9xAiw4VI7rblarKSM45qKM7QkyZ1qxXztV+cEkGR3GEe9ZQbGVLXSdPvWHuX WiXw4eW0XKngLo0wEgcF1LPHDpRa08GliaRLX/wYPHSR0cvxugZFL1//gI5jcEA+ FHnl1jm5+caadKehH2anS0PUYYlLCbl+0+Wx5bKbBhn687p+9pU/K0r5sEaG63P0 Mgo11tUVGeJwwoLyvWMRM796W95U4g0gQZs46PYbkSfzQTUgZaYbs99gxOtMsbzB 8Y7jGoJ3i6Sif59ZHDMzRh4RO9k1uoRONhjSo4LvHCK2be3oLPk77HPJzxY= -----END CERTIFICATE-----Generated at Sat Sep 19 11:18:36 2026 by rpki-client