$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52c519a5-dd9f-4c20-a402-3c75d1da1527.roa File: 52c519a5-dd9f-4c20-a402-3c75d1da1527.roa (raw, json) Hash identifier: 1YUO0hLl5qbxmKAAHjvWWIYuRKG5zU6nUVohAeWEFvo= Subject key identifier: 85:FA:A7:CB:03:B9:34:19:F2:49:12:6A:DB:E2:4D:CF:3C:04:8D:F3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D16B754735BC12ADC8456B48D7AE7C97A21B98B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52c519a5-dd9f-4c20-a402-3c75d1da1527.roa Signing time: Fri 07 Aug 2026 01:21:00 +0000 ROA not before: Fri 07 Aug 2026 01:21:00 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 18.253.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:16:b7:54:73:5b:c1:2a:dc:84:56:b4:8d:7a:e7:c9:7a:21:b9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 01:21:00 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=29ef3541deed579f8300961ecf4d1023c0f640494fd7e5ba31f9e59674e8e385, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:9e:0c:e4:35:d3:88:54:ae:aa:3b:dd:d8: 9f:36:93:4e:7b:78:d1:15:56:fb:88:9b:4f:9a:6b: 8b:e2:c3:13:e6:52:99:4b:aa:f6:70:8a:db:f4:28: e5:bc:d8:a3:bd:a9:ae:31:16:9d:6a:93:65:33:1c: fd:14:fd:e6:ad:04:c2:ec:54:4e:0f:3e:28:38:11: 11:13:f4:e8:f3:52:46:6e:f8:49:48:4b:e1:23:6c: 73:e7:12:8b:32:2f:cc:6f:fb:93:98:dc:53:77:04: 3d:47:0a:85:40:ec:49:b4:32:4f:b1:98:d0:9d:54: 0c:c0:ce:ea:96:d8:0d:80:22:46:d6:95:17:f2:14: f9:b6:2e:3d:ad:81:0c:be:42:2c:77:ad:9a:fe:d1: c5:a5:29:a7:2d:36:71:d4:95:db:4d:d9:2a:da:02: 0f:05:46:fd:fa:2e:60:3e:85:05:d8:4d:d1:a9:cf: 1f:6c:15:fa:fe:72:50:4d:17:6c:ff:42:fa:16:11: 15:ac:f8:b5:13:b9:68:cb:e4:29:46:82:96:28:0a: 62:ec:a4:a9:3f:ee:95:d2:a3:8a:b0:15:f2:52:5f: 4f:95:e2:d7:a1:2c:50:99:67:7f:75:ee:5c:94:77: e8:d5:b2:be:6b:9a:17:72:70:83:51:a1:e9:f3:45: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FA:A7:CB:03:B9:34:19:F2:49:12:6A:DB:E2:4D:CF:3C:04:8D:F3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52c519a5-dd9f-4c20-a402-3c75d1da1527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.32.0/19 Signature Algorithm: sha256WithRSAEncryption 07:e5:72:e8:ce:8d:a4:52:89:da:f6:e5:1b:93:35:dd:ed:db: 9f:05:9f:99:e1:2c:8e:4d:19:07:68:23:fb:16:6e:d7:30:1c: c1:01:35:31:b4:2f:5c:17:7e:5d:dc:24:26:b9:63:60:5c:92: b4:ea:d5:3a:71:82:8b:74:6f:55:58:55:0f:c1:6b:9d:b0:b8: 4c:a1:d8:f1:49:32:35:29:b8:76:5c:d7:11:69:30:e9:9b:bc: fa:d7:48:d5:98:37:3c:2e:30:b0:dc:a6:89:19:b0:57:03:6d: b2:05:da:06:41:94:ad:49:ca:cd:e8:b6:b2:23:ac:07:0e:a0: 4a:32:3b:32:ff:78:b9:61:cf:5a:68:53:b0:a2:fd:d9:78:c3: d4:73:cf:cf:9a:e6:ca:e4:25:a5:78:60:5a:c2:6c:6f:43:f1: 5e:f9:db:34:09:43:e1:07:28:36:af:b7:5e:5c:16:1b:b2:49: 9c:7f:9a:6b:0c:55:c7:a6:00:09:16:4f:18:e6:77:47:8e:c2: 26:15:6a:32:fd:fa:a4:9e:19:32:04:f3:42:a2:18:a4:e3:40: 6d:17:1a:86:6d:7d:da:00:7c:54:9e:5f:0c:23:94:88:5b:60: 34:2f:0e:52:85:cc:f9:b8:dd:2f:a3:03:8c:1d:9d:aa:b4:8f: bd:7c:fd:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTRa3VHNbwSrchFa0jXrnyXohuYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDEyMTAwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWVmMzU0MWRlZWQ1NzlmODMwMDk2MWVjZjRkMTAyM2Mw ZjY0MDQ5NGZkN2U1YmEzMWY5ZTU5Njc0ZThlMzg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn4p4M5DXTiFSuqjvd2J82k057eNEVVvuIm0+aa4viwxPm UplLqvZwitv0KOW82KO9qa4xFp1qk2UzHP0U/eatBMLsVE4PPig4ERET9OjzUkZu +ElIS+EjbHPnEosyL8xv+5OY3FN3BD1HCoVA7Em0Mk+xmNCdVAzAzuqW2A2AIkbW lRfyFPm2Lj2tgQy+Qix3rZr+0cWlKactNnHUldtN2SraAg8FRv36LmA+hQXYTdGp zx9sFfr+clBNF2z/QvoWERWs+LUTuWjL5ClGgpYoCmLspKk/7pXSo4qwFfJSX0+V 4tehLFCZZ3917lyUd+jVsr5rmhdycINRoenzReFhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhfqnywO5NBnySRJq2+JNzzwEjfMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyYzUxOWE1LWRkOWYtNGMyMC1hNDAyLTNjNzVkMWRhMTUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUS/SAwDQYJKoZIhvcNAQELBQADggEBAAflcujOjaRSidr25RuTNd3t258F n5nhLI5NGQdoI/sWbtcwHMEBNTG0L1wXfl3cJCa5Y2BckrTq1Tpxgot0b1VYVQ/B a52wuEyh2PFJMjUpuHZc1xFpMOmbvPrXSNWYNzwuMLDcpokZsFcDbbIF2gZBlK1J ys3otrIjrAcOoEoyOzL/eLlhz1poU7Ci/dl4w9Rzz8+a5srkJaV4YFrCbG9D8V75 2zQJQ+EHKDavt15cFhuySZx/mmsMVcemAAkWTxjmd0eOwiYVajL9+qSeGTIE80Ki GKTjQG0XGoZtfdoAfFSeXwwjlIhbYDQvDlKFzPm43S+jA4wdnaq0j718/X8= -----END CERTIFICATE-----Generated at Sat Aug 8 08:09:53 2026 by rpki-client