$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/402382f8-0933-4286-b5d7-3e59a42a07fb.roa File: 402382f8-0933-4286-b5d7-3e59a42a07fb.roa (raw, json) Hash identifier: oGPxrmUITiJdPkTpuisWhIu2zl+noklAGUnA03/BI5Q= Subject key identifier: A7:17:B4:D7:EA:6B:88:B2:E0:ED:0D:79:EF:4C:53:5B:0D:E0:70:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D3D502F264186929A67C4B01AF79B014C92207B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/402382f8-0933-4286-b5d7-3e59a42a07fb.roa Signing time: Sat 01 Aug 2026 01:00:10 +0000 ROA not before: Sat 01 Aug 2026 01:00:10 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 141.185.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3d:50:2f:26:41:86:92:9a:67:c4:b0:1a:f7:9b:01:4c:92:20:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 1 01:00:10 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=1eae4a7e86a06d097a4c1f7db0e9e9d9831d21dad8c06b24beb846176a9d08aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:cf:02:89:68:72:9e:73:ee:b9:7b:3b:ad: 1f:fc:ee:b4:c4:6e:0d:e3:e1:1d:14:d9:a9:51:19: fb:dd:c8:13:6a:c0:e2:a0:0b:a4:4f:21:89:1f:84: 02:bd:aa:23:29:bc:fc:d1:8a:10:2c:92:9d:0f:72: ec:d4:b5:e0:d4:fb:66:6a:21:e1:3a:29:34:56:db: f3:e1:f0:9f:4a:35:c6:0d:23:e0:97:eb:ca:ac:22: 0c:d5:1d:0f:58:89:16:e3:f3:4d:b7:5a:a2:b9:a5: 44:11:82:10:a5:36:52:78:3b:b8:9f:6c:51:53:20: bd:e4:82:ec:f3:f2:be:0c:ae:f3:88:2f:65:53:cf: 91:1c:aa:14:a9:4f:a6:60:fb:20:77:65:7c:ca:a1: 7c:c8:f7:a2:c2:b6:14:f6:d8:21:0d:9e:f1:a0:fb: cc:f3:4c:1c:7f:d8:5b:9a:b8:99:24:c6:3e:6e:2a: d1:6c:8c:d5:ef:49:3b:2f:c9:e2:8d:fd:3b:79:79: 1a:00:95:82:96:a8:2c:df:12:42:da:36:68:a8:5e: dd:91:0c:2a:a6:4b:00:a7:03:b8:85:f1:db:db:33: a7:6e:f9:11:41:0b:ea:a6:c1:ff:4d:c0:b7:f1:be: e8:61:84:bc:37:97:de:df:49:5f:4b:67:10:34:52: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:B4:D7:EA:6B:88:B2:E0:ED:0D:79:EF:4C:53:5B:0D:E0:70:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/402382f8-0933-4286-b5d7-3e59a42a07fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:74:b6:19:be:75:09:09:5a:c8:63:49:8e:9b:0d:c2:f0:bc: cd:ef:b2:c9:74:e3:9f:59:75:3b:c3:b8:f2:f6:2b:cc:22:d4: 44:76:8a:f3:5a:51:c1:b8:07:c2:1d:9d:fe:66:42:a7:a6:42: fb:9d:72:48:88:09:88:b0:f3:07:4a:26:27:6f:b8:11:a9:e4: a2:2b:e0:8b:4b:0b:f8:db:d2:b7:70:4f:a6:be:1f:14:aa:c3: 2a:9a:64:8a:fc:fc:e1:89:64:f7:bd:ea:54:ca:fa:35:c7:18: bf:f8:86:2f:6d:7a:ee:70:94:d7:69:ca:48:ce:bd:51:e3:df: 82:3b:9a:89:73:cf:3d:96:b1:7c:90:70:8e:8c:47:af:9d:be: 98:ec:d7:9c:56:bf:c7:b7:8a:35:c6:e4:b9:a9:9d:c9:67:54: 03:8e:38:77:9c:12:3a:3c:fc:3e:37:78:55:9c:c9:89:43:16: b3:09:ce:a3:7e:4d:be:99:19:b2:50:96:07:81:47:3c:8a:2e: 3f:3a:82:17:40:8f:54:53:15:e0:92:87:2e:83:9a:ef:db:d2: dd:50:9c:83:f8:6f:c4:03:83:3d:fe:7b:63:02:02:5c:c1:8e: db:31:4a:12:92:6d:ed:4f:ea:ef:85:2d:d4:69:2c:12:c7:ef: b1:88:62:8a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDT1QLyZBhpKaZ8SwGvebAUySIHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDEwMDEwWhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWFlNGE3ZTg2YTA2ZDA5N2E0YzFmN2RiMGU5ZTlkOTgz MWQyMWRhZDhjMDZiMjRiZWI4NDYxNzZhOWQwOGFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHtc8CiWhynnPuuXs7rR/87rTEbg3j4R0U2alRGfvdyBNq wOKgC6RPIYkfhAK9qiMpvPzRihAskp0PcuzUteDU+2ZqIeE6KTRW2/Ph8J9KNcYN I+CX68qsIgzVHQ9YiRbj8023WqK5pUQRghClNlJ4O7ifbFFTIL3kguzz8r4MrvOI L2VTz5EcqhSpT6Zg+yB3ZXzKoXzI96LCthT22CENnvGg+8zzTBx/2FuauJkkxj5u KtFsjNXvSTsvyeKN/Tt5eRoAlYKWqCzfEkLaNmioXt2RDCqmSwCnA7iF8dvbM6du +RFBC+qmwf9NwLfxvuhhhLw3l97fSV9LZxA0UqXVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpxe01+priLLg7Q1570xTWw3gcAYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwMjM4MmY4LTA5MzMtNDI4Ni1iNWQ3LTNlNTlhNDJhMDdmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCNuTANBgkqhkiG9w0BAQsFAAOCAQEAGHS2Gb51CQlayGNJjpsNwvC8ze+y yXTjn1l1O8O48vYrzCLURHaK81pRwbgHwh2d/mZCp6ZC+51ySIgJiLDzB0omJ2+4 Eankoivgi0sL+NvSt3BPpr4fFKrDKppkivz84Ylk973qVMr6NccYv/iGL2167nCU 12nKSM69UePfgjuaiXPPPZaxfJBwjoxHr52+mOzXnFa/x7eKNcbkuamdyWdUA444 d5wSOjz8Pjd4VZzJiUMWswnOo35NvpkZslCWB4FHPIouPzqCF0CPVFMV4JKHLoOa 79vS3VCcg/hvxAODPf57YwICXMGO2zFKEpJt7U/q74Ut1GksEsfvsYhiig== -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:23 2026 by rpki-client