$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d8e305d-a0de-4382-afec-aa9f9eff612a.roa File: 5d8e305d-a0de-4382-afec-aa9f9eff612a.roa (raw, json) Hash identifier: NRBNe8UEQ2MMj/XTX5iAJrBJW9zn1vYVNOPKBEzCYfA= Subject key identifier: 2F:EB:C3:83:41:7A:40:0D:12:B9:BC:92:A6:9E:D2:52:C7:C7:24:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D9F3388DD3CB992F531AA2F7CBF9EDEF42BF85C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d8e305d-a0de-4382-afec-aa9f9eff612a.roa Signing time: Fri 07 Aug 2026 03:31:12 +0000 ROA not before: Fri 07 Aug 2026 03:31:12 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9f:33:88:dd:3c:b9:92:f5:31:aa:2f:7c:bf:9e:de:f4:2b:f8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 03:31:12 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=d97f8519312d73b3e18ab35099995f5d924c2ddb4dda07b4e1c5dea068ff5146, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:7e:e2:86:4b:11:48:49:ec:81:17:87:1d: 45:19:ff:6f:3c:64:5f:c9:56:b0:66:f3:e7:7a:83: 0b:cb:1f:2b:fa:c3:d6:c2:0c:35:74:6b:19:93:0a: 4c:58:ef:ca:4b:2b:4b:8f:c7:2f:c8:35:f1:e9:e4: ae:e2:8a:9f:9f:08:c7:a0:9a:ce:fd:56:97:3a:0e: c3:03:11:67:1e:c1:18:af:de:cb:ab:18:b9:d5:29: 09:5a:65:f6:e9:60:4c:1f:a7:35:44:2d:de:45:05: 5f:5a:b6:42:09:5c:94:21:7e:9f:3a:6f:2d:ad:3f: b2:c3:37:f9:1b:12:c2:ba:4f:ea:3f:65:9d:41:9d: cb:e2:e8:4f:59:7e:30:f8:60:69:1c:4a:b4:be:54: fe:99:f1:e1:2a:db:21:9f:52:eb:87:ac:bd:47:40: 91:38:49:48:14:23:08:06:bf:57:59:eb:92:52:bc: d9:f1:ef:e3:a1:54:2c:b2:58:fa:8f:a0:5a:b6:6c: 43:9c:01:28:26:cb:b4:15:19:e1:6a:49:e0:c1:d8: 93:b0:33:ba:46:7c:13:b3:51:71:86:5b:c8:b7:d9: 8c:21:62:d5:6e:02:71:b7:83:48:54:90:2f:b0:17: f2:92:af:8e:f4:04:03:d5:70:75:13:26:74:a7:d4: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:C3:83:41:7A:40:0D:12:B9:BC:92:A6:9E:D2:52:C7:C7:24:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d8e305d-a0de-4382-afec-aa9f9eff612a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:02:23:e3:72:72:1b:b2:f5:03:72:f6:95:fd:fc:65:f7:86: a3:1a:ce:eb:8b:18:fc:c4:36:38:03:17:b4:5d:91:a1:24:b5: a9:6c:69:a9:ca:f2:05:97:e8:f1:80:1f:aa:cd:f9:1c:38:1d: 15:4b:4b:ec:59:22:47:24:03:d5:0d:8d:0c:37:fe:fd:91:1c: 54:50:fc:a4:e5:a2:2d:7f:aa:74:df:cd:70:ba:5f:e4:ab:ac: 2f:98:e9:95:46:8a:34:03:a2:c6:e0:ef:7f:79:9e:f8:eb:8e: 62:9f:db:69:90:af:da:c9:53:d0:54:ba:1b:ab:68:b8:c0:af: 80:69:f6:db:2e:83:89:48:51:23:2e:25:8c:ba:60:3c:5c:45: d6:ad:f8:a6:83:34:ac:ca:2b:ec:11:4b:d7:42:fa:ff:ee:c3: 16:d5:07:da:a8:a3:f1:80:72:38:97:e8:d7:82:6b:c5:4d:7c: 48:d1:75:fe:1b:08:e0:77:90:f9:eb:64:7d:10:dc:ee:9f:27: 4e:21:ff:7a:44:90:e2:c3:f3:6d:45:7f:a8:2d:a4:bb:37:98: bb:4f:e2:1a:3c:29:2b:73:dc:20:46:85:c8:69:9b:72:63:24: 73:cf:d9:2d:df:8e:01:22:65:f6:01:9c:c1:73:f7:3c:b6:9a: 25:97:87:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXZ8ziN08uZL1MaovfL+e3vQr+FwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDMzMTEyWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTdmODUxOTMxMmQ3M2IzZTE4YWIzNTA5OTk5NWY1ZDky NGMyZGRiNGRkYTA3YjRlMWM1ZGVhMDY4ZmY1MTQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBgX7ihksRSEnsgReHHUUZ/288ZF/JVrBm8+d6gwvLHyv6 w9bCDDV0axmTCkxY78pLK0uPxy/INfHp5K7iip+fCMegms79Vpc6DsMDEWcewRiv 3surGLnVKQlaZfbpYEwfpzVELd5FBV9atkIJXJQhfp86by2tP7LDN/kbEsK6T+o/ ZZ1Bncvi6E9ZfjD4YGkcSrS+VP6Z8eEq2yGfUuuHrL1HQJE4SUgUIwgGv1dZ65JS vNnx7+OhVCyyWPqPoFq2bEOcASgmy7QVGeFqSeDB2JOwM7pGfBOzUXGGW8i32Ywh YtVuAnG3g0hUkC+wF/KSr470BAPVcHUTJnSn1LYdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL+vDg0F6QA0SubySpp7SUsfHJCowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkOGUzMDVkLWEwZGUtNDM4Mi1hZmVjLWFhOWY5ZWZmNjEyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDrHAwDQYJKoZIhvcNAQELBQADggEBAF8CI+Nychuy9QNy9pX9/GX3hqMa zuuLGPzENjgDF7RdkaEktalsaanK8gWX6PGAH6rN+Rw4HRVLS+xZIkckA9UNjQw3 /v2RHFRQ/KTloi1/qnTfzXC6X+SrrC+Y6ZVGijQDosbg7395nvjrjmKf22mQr9rJ U9BUuhuraLjAr4Bp9tsug4lIUSMuJYy6YDxcRdat+KaDNKzKK+wRS9dC+v/uwxbV B9qoo/GAcjiX6NeCa8VNfEjRdf4bCOB3kPnrZH0Q3O6fJ04h/3pEkOLD821Ff6gt pLs3mLtP4ho8KStz3CBGhchpm3JjJHPP2S3fjgEiZfYBnMFz9zy2miWXh24= -----END CERTIFICATE-----Generated at Sat Aug 22 07:42:21 2026 by rpki-client