$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa File: 7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa (raw, json) Hash identifier: Os5/NL808RUQcYxeB/q/EnZC/JbkpfIVV/nc5ewSqlg= Subject key identifier: 20:88:9A:8B:80:19:4D:A2:00:50:C5:E5:B1:90:65:5A:9E:C0:03:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C01A42E5CA985EAD3F3134E558301644B8DB986 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa Signing time: Sun 02 Aug 2026 00:10:07 +0000 ROA not before: Sun 02 Aug 2026 00:10:07 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.0.0.0/10 maxlen: 10 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:01:a4:2e:5c:a9:85:ea:d3:f3:13:4e:55:83:01:64:4b:8d:b9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 00:10:07 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=7beca6664a98184b118f349eef1745373b31737e7fae59f1624ac64353490041, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:b8:c6:34:a9:3a:ff:fd:e8:e7:2b:d6:71: f1:37:2e:d1:0c:c3:ea:74:ec:04:3a:53:df:09:d6: 26:7b:eb:90:ce:4e:d6:bf:f5:69:46:e0:e6:07:dd: 39:34:1d:bf:c1:45:44:fe:c1:13:ac:d8:f0:91:ff: 51:fd:c5:b3:53:92:f6:91:6e:18:94:5d:f6:3b:54: 1d:4b:52:cd:28:89:e1:27:e9:03:b6:ac:fa:9b:12: 4e:a4:46:f2:ee:94:de:06:38:1e:b5:ef:40:11:fb: 24:67:32:44:b1:12:c7:97:20:fa:49:56:d3:34:d6: b1:77:21:a3:f2:ff:fc:31:d7:50:11:e3:72:1a:10: 97:27:1b:68:96:b2:66:3b:71:87:e4:36:d6:7b:c2: 04:18:b7:2f:2a:47:b6:03:94:03:d7:e0:c6:c0:3c: ca:5e:bc:a1:c9:d4:7e:36:84:df:10:43:19:f8:92: 6a:2f:f8:9a:4c:6e:45:61:c5:b6:f3:f3:ce:6f:81: 54:bf:ce:ad:dd:b1:98:03:f0:ed:e7:ea:d2:be:ed: ce:af:a5:84:f0:4f:24:12:36:c8:8c:64:19:78:80: 3e:8b:03:5f:5a:2f:46:a2:03:75:91:41:f8:6d:6c: e2:cf:3b:b2:8e:27:01:a4:c9:d7:4d:d1:b8:71:92: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:9A:8B:80:19:4D:A2:00:50:C5:E5:B1:90:65:5A:9E:C0:03:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.0.0.0/10 Signature Algorithm: sha256WithRSAEncryption 34:10:1c:c1:47:2e:88:e4:64:ec:91:36:97:ed:82:f4:a8:61: ed:43:3d:d6:be:ef:61:2c:9b:5a:5e:fe:cc:c7:ea:53:36:4f: 18:97:1c:b8:3d:e1:72:b6:e0:5f:7d:bb:fa:1a:cd:a3:2c:a4: f8:43:2c:53:f9:1d:a3:9e:d0:a5:2e:89:bc:e8:06:74:d0:f3: 3e:ee:91:46:3a:b6:6c:47:7e:04:20:4d:9e:95:80:06:c9:eb: 30:61:a1:56:ab:ce:fe:93:5b:c7:4c:af:89:72:56:d3:fa:9b: 3e:6d:a6:4f:b7:0a:6c:f6:07:79:73:aa:7b:75:3d:88:fb:27: 6f:62:d2:94:c5:eb:d5:00:6d:7a:f0:d7:13:5a:cb:1d:6a:9c: ae:2a:63:90:f1:9e:ac:c8:34:d7:e5:fe:e9:15:db:1d:b6:a8: 67:2e:e1:55:4f:69:58:2a:d1:6b:b9:31:e8:cb:c5:30:3f:0c: 3e:9b:e9:46:63:14:7b:7f:83:d5:6b:d1:b1:19:f9:f2:20:3b: d1:f6:b9:58:40:f6:bc:12:32:f9:ec:58:c8:51:1a:f2:c8:34: ee:aa:19:ae:80:e0:0f:cc:c9:d7:ca:38:70:33:a9:6a:75:55: d9:90:8f:64:a1:e4:49:f8:25:1f:2c:6b:dc:80:d0:8c:2d:8e: 13:a5:3d:fe -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHAGkLlypherT8xNOVYMBZEuNuYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDAxMDA3WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmVjYTY2NjRhOTgxODRiMTE4ZjM0OWVlZjE3NDUzNzNi MzE3MzdlN2ZhZTU5ZjE2MjRhYzY0MzUzNDkwMDQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtWrjGNKk6//3o5yvWcfE3LtEMw+p07AQ6U98J1iZ765DO Tta/9WlG4OYH3Tk0Hb/BRUT+wROs2PCR/1H9xbNTkvaRbhiUXfY7VB1LUs0oieEn 6QO2rPqbEk6kRvLulN4GOB6170AR+yRnMkSxEseXIPpJVtM01rF3IaPy//wx11AR 43IaEJcnG2iWsmY7cYfkNtZ7wgQYty8qR7YDlAPX4MbAPMpevKHJ1H42hN8QQxn4 kmov+JpMbkVhxbbz885vgVS/zq3dsZgD8O3n6tK+7c6vpYTwTyQSNsiMZBl4gD6L A19aL0aiA3WRQfhtbOLPO7KOJwGkyddN0bhxkjKNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIIiai4AZTaIAUMXlsZBlWp7AAywwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkMzk0NGEyLTVmMjctNDJhNi1hZDA4LTBmNGYxOTE0YmE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwYDADANBgkqhkiG9w0BAQsFAAOCAQEANBAcwUcuiORk7JE2l+2C9Khh7UM9 1r7vYSybWl7+zMfqUzZPGJccuD3hcrbgX327+hrNoyyk+EMsU/kdo57QpS6JvOgG dNDzPu6RRjq2bEd+BCBNnpWABsnrMGGhVqvO/pNbx0yviXJW0/qbPm2mT7cKbPYH eXOqe3U9iPsnb2LSlMXr1QBtevDXE1rLHWqcripjkPGerMg01+X+6RXbHbaoZy7h VU9pWCrRa7kx6MvFMD8MPpvpRmMUe3+D1WvRsRn58iA70fa5WED2vBIy+exYyFEa 8sg07qoZroDgD8zJ18o4cDOpanVV2ZCPZKHkSfglHyxr3IDQjC2OE6U9/g== -----END CERTIFICATE-----Generated at Sat Aug 22 09:37:17 2026 by rpki-client