$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa File: 40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa (raw, json) Hash identifier: J9Jk3jIcUHrz8OdMOEuih+lBsxl1qAgAyGHQ1YCTl/0= Subject key identifier: 8C:72:19:5E:71:4E:61:9B:BF:B9:25:90:4B:4B:4C:0E:F3:C0:40:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03FAF775D216360FC17F9CD1BDAE9EE61E000242 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa Signing time: Fri 07 Aug 2026 01:00:07 +0000 ROA not before: Fri 07 Aug 2026 01:00:07 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.153.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fa:f7:75:d2:16:36:0f:c1:7f:9c:d1:bd:ae:9e:e6:1e:00:02:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 01:00:07 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=1a6e90c7006c325a5ecb294c4338502c50fe3d72922c6867415359c88979c4a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:89:ed:92:e7:0f:68:03:91:cc:44:87:f6: 76:5d:c6:bc:f4:1a:ee:87:df:b8:61:90:9c:7b:9e: 73:b2:28:3f:45:ea:91:7f:f6:5f:c1:5c:a4:e4:35: b8:f1:95:d5:fc:57:b1:a7:02:7e:e3:20:68:81:34: b5:ae:4f:13:3f:0a:68:68:42:01:99:a3:bd:55:50: 94:e0:ee:11:a5:b2:7c:44:17:49:93:46:24:0f:c2: 89:72:d4:42:2c:98:e3:a7:39:c6:ee:30:d6:29:19: dd:03:38:7c:42:b7:22:f9:24:ed:33:9d:27:4b:0f: 3a:93:f0:d6:fc:2d:36:1b:46:6e:73:2e:6f:cd:f2: a5:93:d3:e5:cf:14:2b:d8:dd:6b:ff:39:dc:57:52: 50:41:92:0d:83:b8:23:41:f1:e6:17:55:f9:be:1c: 41:b7:9d:7c:3a:87:7b:90:22:db:52:fc:18:9d:49: 32:04:86:01:2b:2e:bf:40:c0:d7:5f:2b:0f:f9:ea: 58:3b:b3:1e:d4:3f:6c:86:37:d8:0f:78:7e:d8:63: 96:35:53:17:ab:dc:fe:b1:c2:f3:8e:d6:51:7e:ae: ee:4d:bd:75:93:29:8b:02:21:ad:bf:35:58:ad:9c: e1:a3:1e:02:68:00:b3:56:3c:60:f2:d5:0e:65:fb: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:72:19:5E:71:4E:61:9B:BF:B9:25:90:4B:4B:4C:0E:F3:C0:40:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.153.0.0/22 Signature Algorithm: sha256WithRSAEncryption 71:f5:bf:75:7d:86:35:ec:98:0b:30:6f:4f:51:89:d6:41:6a: 52:22:0e:c3:4e:fb:e5:e5:ac:b9:d6:1c:5f:d5:79:18:ac:ea: 97:19:ce:da:41:b9:de:f8:50:06:fc:b7:57:0e:72:ed:7d:95: 6b:1f:02:b4:0e:e2:00:39:6d:a1:41:d8:ca:ac:6b:9a:2b:d7: 14:aa:c6:5b:75:86:9c:97:42:4e:16:36:77:09:20:bb:41:3b: 0f:98:4b:51:ec:8e:4b:1e:54:ca:e1:d7:9a:54:88:9c:06:2e: ed:52:f0:16:cc:44:5f:ab:a9:87:cf:cf:df:70:98:45:04:0f: 50:f5:b3:0d:39:91:af:4f:c5:53:5b:16:e5:1b:e1:57:18:b0: 74:b6:88:af:9e:4f:1a:83:39:1e:e6:e5:8b:89:70:b8:cf:56: 81:1c:52:c9:b9:b9:44:01:81:93:7c:e2:10:3f:a3:78:83:fe: 48:b1:99:1b:cf:50:ae:56:d3:24:8c:e5:78:d7:cd:89:76:b3: 70:58:c7:67:0a:f1:c9:a1:51:92:fd:fa:e4:7f:e2:40:79:61: 4d:bd:a2:dd:ee:83:e2:d0:1d:7f:d6:ad:91:0f:94:ad:fc:25: be:5d:66:c5:73:38:1c:df:4f:95:0f:92:bd:b9:96:d0:d8:90: 19:c0:11:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA/r3ddIWNg/Bf5zRva6e5h4AAkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDEwMDA3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTZlOTBjNzAwNmMzMjVhNWVjYjI5NGM0MzM4NTAyYzUw ZmUzZDcyOTIyYzY4Njc0MTUzNTljODg5NzljNGE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfh4ntkucPaAORzESH9nZdxrz0Gu6H37hhkJx7nnOyKD9F 6pF/9l/BXKTkNbjxldX8V7GnAn7jIGiBNLWuTxM/CmhoQgGZo71VUJTg7hGlsnxE F0mTRiQPwoly1EIsmOOnOcbuMNYpGd0DOHxCtyL5JO0znSdLDzqT8Nb8LTYbRm5z Lm/N8qWT0+XPFCvY3Wv/OdxXUlBBkg2DuCNB8eYXVfm+HEG3nXw6h3uQIttS/Bid STIEhgErLr9AwNdfKw/56lg7sx7UP2yGN9gPeH7YY5Y1Uxer3P6xwvOO1lF+ru5N vXWTKYsCIa2/NVitnOGjHgJoALNWPGDy1Q5l+7lLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjHIZXnFOYZu/uSWQS0tMDvPAQMEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwZWY1Y2M0LWY4NjgtNGRmOC1iZjI3LTBlM2QxYjE4MTAwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjmQAwDQYJKoZIhvcNAQELBQADggEBAHH1v3V9hjXsmAswb09RidZBalIi DsNO++XlrLnWHF/VeRis6pcZztpBud74UAb8t1cOcu19lWsfArQO4gA5baFB2Mqs a5or1xSqxlt1hpyXQk4WNncJILtBOw+YS1HsjkseVMrh15pUiJwGLu1S8BbMRF+r qYfPz99wmEUED1D1sw05ka9PxVNbFuUb4VcYsHS2iK+eTxqDOR7m5YuJcLjPVoEc Usm5uUQBgZN84hA/o3iD/kixmRvPUK5W0ySM5XjXzYl2s3BYx2cK8cmhUZL9+uR/ 4kB5YU29ot3ug+LQHX/WrZEPlK38Jb5dZsVzOBzfT5UPkr25ltDYkBnAEc0= -----END CERTIFICATE-----Generated at Sat Aug 22 10:27:09 2026 by rpki-client