$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41aa5604-2dd4-489a-b935-155c1723713b.roa File: 41aa5604-2dd4-489a-b935-155c1723713b.roa (raw, json) Hash identifier: vYmjheNO2Tp5ge6+08fBfgosv8TMtiFE0nqv7wzBZNA= Subject key identifier: 3A:63:E2:F5:33:01:47:46:D5:04:14:1E:F8:A7:E8:44:97:FD:8D:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AF18301ED24E5B02B6CACCAF34530273321031D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41aa5604-2dd4-489a-b935-155c1723713b.roa Signing time: Sun 02 Aug 2026 00:21:34 +0000 ROA not before: Sun 02 Aug 2026 00:21:34 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f1:83:01:ed:24:e5:b0:2b:6c:ac:ca:f3:45:30:27:33:21:03:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 00:21:34 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=20b98da8f6325c4560cd7053ed9fe21272abccf26b6e00d18679fc1e25e0a62d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:5c:bd:80:f7:b8:85:21:9c:a9:20:91:cb: 62:22:89:ab:d8:b1:e3:68:62:54:22:75:10:47:90: c6:f8:22:d2:d8:f7:46:da:79:c3:62:ee:61:9f:4d: ba:d1:c0:c7:62:19:d2:c8:73:c2:fa:7f:c4:85:a7: 88:5e:ab:a3:b7:1a:e5:f4:17:a3:8d:b6:e3:fd:8f: 49:06:99:3a:19:75:35:5e:30:c3:44:1c:24:25:c9: 38:4b:05:64:f9:2c:ec:05:18:69:7c:53:c9:96:49: 2e:8b:6b:9d:1a:b7:94:c8:76:0f:c7:29:19:20:06: 31:94:d6:3f:a0:b0:19:10:09:b7:e2:84:af:73:ae: 69:b1:92:57:4d:3f:a8:da:4a:eb:85:1f:33:a1:8e: 4a:ae:2d:d5:8b:d5:98:a1:06:aa:89:2d:72:e8:9e: c8:6d:10:8d:30:20:ff:f4:a7:16:cd:e5:a2:3a:ca: 90:67:86:7e:0b:b4:7e:15:45:fa:27:07:b5:4b:5c: 6d:ec:dc:88:63:ba:47:d6:95:9e:5f:83:19:81:d2: 18:d0:c8:b5:7f:e8:77:7b:22:4f:5c:fb:85:02:6a: e6:fe:9c:43:cc:c2:cf:09:57:cc:4e:70:75:b7:c5: 93:c8:c6:cb:a9:1c:6a:ce:f5:e6:a7:31:3f:4b:4a: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:63:E2:F5:33:01:47:46:D5:04:14:1E:F8:A7:E8:44:97:FD:8D:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41aa5604-2dd4-489a-b935-155c1723713b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.134.0/24 Signature Algorithm: sha256WithRSAEncryption 11:a1:b1:9c:9d:a5:4c:08:42:62:81:8d:ef:bb:d4:bd:df:90: 9a:c7:68:0e:96:b6:2c:4c:ae:dc:a4:ff:51:c6:39:9a:c3:d4: 8e:ee:ae:72:d9:8b:59:9a:f9:3d:a7:ce:9c:36:dc:84:23:93: ab:75:d2:ca:b1:e0:03:d4:8c:52:20:29:09:d0:37:dc:b6:b9: 24:23:c3:c8:60:d9:70:9d:d6:d8:5d:dd:57:bc:84:8e:38:7d: 0f:15:f0:c3:d5:83:be:30:c6:6d:c8:3d:1c:48:48:dd:26:2c: dd:c6:f7:89:33:57:94:42:dc:1f:9e:05:03:a8:4e:89:74:e0: 79:cb:80:9f:44:e0:7b:95:15:dc:b0:1b:6b:1d:07:f0:5b:8c: 4b:c9:36:3f:0c:a1:b0:2c:78:21:6d:af:69:a3:97:7b:58:c9: c2:31:d1:35:13:7e:a9:41:99:33:9b:0c:00:43:32:42:8f:e2: 0c:e9:8a:34:72:35:f4:22:1e:22:68:79:f1:11:ac:f7:6c:9e: 6f:0d:b6:5f:05:98:d8:3c:39:fc:0f:61:db:c8:c8:77:e1:d6: 3d:56:37:f1:71:f7:f4:c6:38:37:d0:56:c4:5a:66:57:2a:51: 17:14:8a:13:f6:af:cc:85:c1:0e:8d:d1:29:99:19:24:7b:a2: 03:72:05:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGvGDAe0k5bArbKzK80UwJzMhAx0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDAyMTM0WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGI5OGRhOGY2MzI1YzQ1NjBjZDcwNTNlZDlmZTIxMjcy YWJjY2YyNmI2ZTAwZDE4Njc5ZmMxZTI1ZTBhNjJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOHly9gPe4hSGcqSCRy2IiiavYseNoYlQidRBHkMb4ItLY 90baecNi7mGfTbrRwMdiGdLIc8L6f8SFp4heq6O3GuX0F6ONtuP9j0kGmToZdTVe MMNEHCQlyThLBWT5LOwFGGl8U8mWSS6La50at5TIdg/HKRkgBjGU1j+gsBkQCbfi hK9zrmmxkldNP6jaSuuFHzOhjkquLdWL1ZihBqqJLXLonshtEI0wIP/0pxbN5aI6 ypBnhn4LtH4VRfonB7VLXG3s3IhjukfWlZ5fgxmB0hjQyLV/6Hd7Ik9c+4UCaub+ nEPMws8JV8xOcHW3xZPIxsupHGrO9eanMT9LSgM5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOmPi9TMBR0bVBBQe+KfoRJf9jbEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxYWE1NjA0LTJkZDQtNDg5YS1iOTM1LTE1NWMxNzIzNzEzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fIYwDQYJKoZIhvcNAQELBQADggEBABGhsZydpUwIQmKBje+71L3fkJrH aA6WtixMrtyk/1HGOZrD1I7urnLZi1ma+T2nzpw23IQjk6t10sqx4APUjFIgKQnQ N9y2uSQjw8hg2XCd1thd3Ve8hI44fQ8V8MPVg74wxm3IPRxISN0mLN3G94kzV5RC 3B+eBQOoTol04HnLgJ9E4HuVFdywG2sdB/BbjEvJNj8MobAseCFtr2mjl3tYycIx 0TUTfqlBmTObDABDMkKP4gzpijRyNfQiHiJoefERrPdsnm8Ntl8FmNg8OfwPYdvI yHfh1j1WN/Fx9/TGODfQVsRaZlcqURcUihP2r8yFwQ6N0SmZGSR7ogNyBTs= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:53 2026 by rpki-client