$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56685d8c-40ae-464e-aea3-a65888fef63d.roa File: 56685d8c-40ae-464e-aea3-a65888fef63d.roa (raw, json) Hash identifier: s6G2JuVaPsKgYlJyFhYYmnej5CLT0SVv2dFANFcS5JA= Subject key identifier: 4F:AA:C1:4A:B7:58:59:14:A2:BF:1E:7B:40:25:35:2A:3B:FB:7E:F5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F8F12553ECD091A8C4B17EDDD993B2AE2EF1F87 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56685d8c-40ae-464e-aea3-a65888fef63d.roa Signing time: Fri 07 Aug 2026 01:00:10 +0000 ROA not before: Fri 07 Aug 2026 01:00:10 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.94.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8f:12:55:3e:cd:09:1a:8c:4b:17:ed:dd:99:3b:2a:e2:ef:1f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 01:00:10 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=5a971edefd306bd36ae8f63a8d294e75486f3197d7748d70037695f30217c75c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:3a:3b:fe:f6:bc:3e:f1:47:3b:07:11:81: ee:51:5d:6e:1b:ea:c9:c0:13:b4:45:c7:9b:08:3c: 0a:c4:bd:e7:28:bc:25:af:f0:82:70:21:29:38:a5: 86:75:db:2d:3c:1c:45:aa:5f:fb:a0:cb:9e:aa:2c: 94:32:26:f5:14:73:56:03:c8:e8:ee:bd:38:1a:38: 89:8d:93:c6:26:87:35:80:b7:db:60:35:5c:0a:37: a6:21:20:16:a5:72:34:0a:7d:9a:4d:9d:9b:64:8b: 56:c0:a8:ed:a0:97:a2:f1:c8:0e:19:ba:a9:87:f7: d5:92:52:1f:de:1b:4e:ea:cb:4a:8e:96:8a:72:cc: 3a:d0:99:db:0b:ef:48:e0:20:19:70:2c:59:0b:c9: 50:3f:7c:eb:19:90:0c:f2:33:68:88:03:9d:81:98: 56:9c:fb:14:47:57:5b:4c:70:a2:1f:c4:21:57:49: 34:13:ba:8b:1d:91:cf:7a:9f:b0:40:88:6d:8d:a4: ce:f1:f2:56:db:47:63:ed:df:9d:b2:87:45:b3:50: ca:a1:3e:a5:b0:6e:1a:b9:c4:92:53:0d:2f:58:ba: e1:6e:77:03:30:46:2e:fb:04:ac:b1:9d:c4:ce:81: dc:65:07:b0:89:0d:92:21:f1:ec:80:3e:d5:16:75: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AA:C1:4A:B7:58:59:14:A2:BF:1E:7B:40:25:35:2A:3B:FB:7E:F5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56685d8c-40ae-464e-aea3-a65888fef63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.94.80.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:75:04:b5:6a:64:e1:37:67:6e:94:be:1f:31:4d:29:68:d1: 41:4e:6d:2d:4b:97:39:d9:27:ae:8a:b1:b1:54:ae:15:5a:fb: 6c:ce:97:e2:04:51:95:b7:f6:ae:e4:fa:2c:c2:5a:bd:91:d7: f1:83:7c:bf:60:1e:5f:e4:8f:81:17:b0:d4:bb:61:5e:3f:be: ba:0a:b6:5d:88:c2:97:64:8b:43:bd:3e:0c:d1:bf:b8:0a:1e: 6a:fa:80:9c:6b:bf:af:03:3d:d8:3d:b0:4d:cc:bb:8b:d5:13: ed:2f:10:b0:c8:ef:59:d1:43:c8:b7:98:ee:f9:16:74:5a:6b: 2e:cf:5c:74:cf:e3:23:ae:77:64:f9:b0:03:f2:1d:03:9e:20: 3a:e5:3b:a1:86:37:7c:66:fb:b1:93:d8:c7:32:be:fd:c8:35: 13:92:59:2a:a0:d1:d3:c3:c0:f7:1b:f5:0d:07:3f:ff:23:4f: 5c:60:2a:18:ed:b2:b0:ce:b2:d2:06:90:69:73:f4:d9:4d:af: fa:c1:1d:30:a4:d0:87:ba:de:d7:70:d8:26:82:72:37:b9:bd: c1:0b:7e:8a:17:bf:4b:85:2d:69:3a:63:ce:0e:0c:01:a6:ee: c9:2f:29:63:69:40:a9:ff:7a:54:73:0f:47:fd:c0:67:cc:65: f5:90:8f:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb48SVT7NCRqMSxft3Zk7KuLvH4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDEwMDEwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTk3MWVkZWZkMzA2YmQzNmFlOGY2M2E4ZDI5NGU3NTQ4 NmYzMTk3ZDc3NDhkNzAwMzc2OTVmMzAyMTdjNzVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3sDo7/va8PvFHOwcRge5RXW4b6snAE7RFx5sIPArEveco vCWv8IJwISk4pYZ12y08HEWqX/ugy56qLJQyJvUUc1YDyOjuvTgaOImNk8YmhzWA t9tgNVwKN6YhIBalcjQKfZpNnZtki1bAqO2gl6LxyA4ZuqmH99WSUh/eG07qy0qO lopyzDrQmdsL70jgIBlwLFkLyVA/fOsZkAzyM2iIA52BmFac+xRHV1tMcKIfxCFX STQTuosdkc96n7BAiG2NpM7x8lbbR2Pt352yh0WzUMqhPqWwbhq5xJJTDS9YuuFu dwMwRi77BKyxncTOgdxlB7CJDZIh8eyAPtUWdQU5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT6rBSrdYWRSivx57QCU1Kjv7fvUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2Njg1ZDhjLTQwYWUtNDY0ZS1hZWEzLWE2NTg4OGZlZjYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2XlAwDQYJKoZIhvcNAQELBQADggEBAGp1BLVqZOE3Z26Uvh8xTSlo0UFO bS1LlznZJ66KsbFUrhVa+2zOl+IEUZW39q7k+izCWr2R1/GDfL9gHl/kj4EXsNS7 YV4/vroKtl2Iwpdki0O9PgzRv7gKHmr6gJxrv68DPdg9sE3Mu4vVE+0vELDI71nR Q8i3mO75FnRaay7PXHTP4yOud2T5sAPyHQOeIDrlO6GGN3xm+7GT2Mcyvv3INROS WSqg0dPDwPcb9Q0HP/8jT1xgKhjtsrDOstIGkGlz9NlNr/rBHTCk0Ie63tdw2CaC cje5vcELfooXv0uFLWk6Y84ODAGm7skvKWNpQKn/elRzD0f9wGfMZfWQj1E= -----END CERTIFICATE-----Generated at Sat Aug 22 07:42:40 2026 by rpki-client