$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/742a3407-0660-4f97-bc04-03a78799f449.roa File: 742a3407-0660-4f97-bc04-03a78799f449.roa (raw, json) Hash identifier: pz7AZw1Ts1C7Mdv8UIu/cIB0zCjWg/W5v57f/YVFN38= Subject key identifier: BA:74:98:87:6D:C3:D7:B6:60:44:A1:14:D1:7E:29:8E:EF:7C:C6:6F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3825E479F9B50BED96882290E8C1C71EBD39B35B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/742a3407-0660-4f97-bc04-03a78799f449.roa Signing time: Sun 02 Aug 2026 00:30:48 +0000 ROA not before: Sun 02 Aug 2026 00:30:48 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:25:e4:79:f9:b5:0b:ed:96:88:22:90:e8:c1:c7:1e:bd:39:b3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 00:30:48 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=685b0976ae3a64a1fa3d53a95ef05835dbc9cb1a8ae109f4955ec482b830f445, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:a9:d9:8a:9c:db:a5:5a:97:53:8a:1f:14: bf:75:08:7d:90:e8:95:ff:89:cd:fd:2e:f4:fd:c2: e8:99:7c:f4:52:83:95:f0:0a:1e:4f:c8:f3:fc:0d: de:d9:86:c0:fb:cf:40:03:5c:4b:67:02:e4:29:0d: bf:7d:12:48:63:c1:24:99:f1:3a:62:fe:8f:7a:33: bd:c5:3a:1c:db:10:44:02:58:e2:3c:1d:7a:62:2e: c1:f7:31:f7:62:8d:12:71:e7:02:80:8e:74:f0:d7: 2f:c9:29:7f:0b:31:ee:89:b8:56:cf:78:9c:3c:75: 43:71:a9:cd:1e:d6:08:43:8c:39:2d:e8:e0:a4:0c: a9:fd:0b:14:98:0a:ac:b3:e6:16:0b:6a:b5:8a:a7: d1:c4:28:0c:0f:27:a9:a0:e0:a0:4c:ff:69:f5:65: 8c:ed:7c:f5:25:47:57:5c:bf:c1:50:98:d9:c4:0c: 70:d4:a9:7b:96:ea:ff:2f:84:b7:bb:d6:ca:a7:20: 0f:0b:55:4e:2d:a8:0d:79:0a:30:3a:18:a3:a0:8b: e2:60:1d:e5:72:0b:14:76:02:70:04:79:af:1c:6f: 04:bc:74:b8:96:e8:7b:b2:30:74:2b:84:fd:71:de: 4d:f3:95:7d:e3:4f:f3:4a:4a:df:18:65:3c:40:67: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:74:98:87:6D:C3:D7:B6:60:44:A1:14:D1:7E:29:8E:EF:7C:C6:6F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/742a3407-0660-4f97-bc04-03a78799f449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.133.0/24 Signature Algorithm: sha256WithRSAEncryption 85:07:57:ed:67:61:b6:f1:02:f1:84:4a:c5:20:ee:0e:19:12: db:e2:37:57:e8:11:7f:b7:d5:c3:c2:5f:80:98:d4:a8:20:ba: c0:41:a6:85:1b:4e:0f:4a:fb:7c:b3:ac:d8:f7:af:52:2a:10: 5b:6f:5c:32:45:a5:44:c1:2a:0c:48:6d:52:50:6d:3f:a3:62: 0e:bb:4a:ac:bd:b0:d9:d2:c7:a7:99:fa:1f:90:6a:6a:72:8c: 53:d7:e8:a9:a1:2a:69:ab:21:9e:4e:b8:76:a9:9d:f8:f1:0b: 4d:ac:bb:61:05:63:ec:ad:37:30:64:da:5a:ae:cf:31:8a:f7: 28:90:b7:b7:96:5d:cf:57:69:31:d3:89:10:bd:19:b7:6d:50: 6f:53:74:00:09:40:7d:2c:27:7d:30:ed:34:e0:c7:89:c5:d2: af:77:2d:9f:aa:5d:5d:c0:d1:2b:6a:ad:86:8d:27:0f:97:d4: 6d:0e:d1:d9:8b:c0:6f:38:eb:23:cd:25:de:6f:aa:6d:1f:86: 26:33:1f:bb:f9:cc:22:4c:f1:99:9a:ac:b1:e2:8d:63:ea:b4: 01:83:2c:3f:b3:70:7d:3a:fa:f1:55:f3:2a:30:4e:c3:1c:b8: e3:a4:81:65:1d:ca:2c:fb:af:32:b8:cb:22:17:bc:d8:50:bd: ce:c9:d2:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOCXkefm1C+2WiCKQ6MHHHr05s1swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDAzMDQ4WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODViMDk3NmFlM2E2NGExZmEzZDUzYTk1ZWYwNTgzNWRi YzljYjFhOGFlMTA5ZjQ5NTVlYzQ4MmI4MzBmNDQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb7qnZipzbpVqXU4ofFL91CH2Q6JX/ic39LvT9wuiZfPRS g5XwCh5PyPP8Dd7ZhsD7z0ADXEtnAuQpDb99EkhjwSSZ8Tpi/o96M73FOhzbEEQC WOI8HXpiLsH3MfdijRJx5wKAjnTw1y/JKX8LMe6JuFbPeJw8dUNxqc0e1ghDjDkt 6OCkDKn9CxSYCqyz5hYLarWKp9HEKAwPJ6mg4KBM/2n1ZYztfPUlR1dcv8FQmNnE DHDUqXuW6v8vhLe71sqnIA8LVU4tqA15CjA6GKOgi+JgHeVyCxR2AnAEea8cbwS8 dLiW6HuyMHQrhP1x3k3zlX3jT/NKSt8YZTxAZ5BjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUunSYh23D17ZgRKEU0X4pju98xm8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0MmEzNDA3LTA2NjAtNGY5Ny1iYzA0LTAzYTc4Nzk5ZjQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fIUwDQYJKoZIhvcNAQELBQADggEBAIUHV+1nYbbxAvGESsUg7g4ZEtvi N1foEX+31cPCX4CY1KggusBBpoUbTg9K+3yzrNj3r1IqEFtvXDJFpUTBKgxIbVJQ bT+jYg67Sqy9sNnSx6eZ+h+QampyjFPX6KmhKmmrIZ5OuHapnfjxC02su2EFY+yt NzBk2lquzzGK9yiQt7eWXc9XaTHTiRC9GbdtUG9TdAAJQH0sJ30w7TTgx4nF0q93 LZ+qXV3A0StqrYaNJw+X1G0O0dmLwG846yPNJd5vqm0fhiYzH7v5zCJM8ZmarLHi jWPqtAGDLD+zcH06+vFV8yowTsMcuOOkgWUdyiz7rzK4yyIXvNhQvc7J0jE= -----END CERTIFICATE-----Generated at Sat Aug 8 07:02:52 2026 by rpki-client