$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa File: 805aa163-38ec-4123-b4c1-55955c809e8a.roa (raw, json) Hash identifier: KiC737hw4/Wpqo5JtsJ7ij6BgeSLqqL4Augd1U6Em0E= Subject key identifier: B5:94:54:51:A5:69:34:A2:EC:24:77:40:8C:FE:DB:7E:50:D2:07:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 604034190D80CD23BD8E37E4572642BF80DB66B4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa Signing time: Fri 07 Aug 2026 02:10:31 +0000 ROA not before: Fri 07 Aug 2026 02:10:31 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 18.253.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:40:34:19:0d:80:cd:23:bd:8e:37:e4:57:26:42:bf:80:db:66:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 02:10:31 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=d3704781852a9e8cee6033d4fec7374593517b5c375d9fb8bdb951e069e82d11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:d8:a0:eb:88:f7:f6:4f:3b:b6:3d:c4:e1: 0c:24:4d:65:a3:67:94:62:66:eb:bb:57:b2:92:a9: e7:a1:41:a8:4f:a1:99:3f:a4:52:33:48:21:d2:7b: 69:7f:8d:c4:d9:70:27:d6:49:9e:3c:66:98:f6:56: 25:59:cc:05:7a:77:e1:4c:32:2d:49:10:23:db:08: e6:9c:24:5a:85:f6:e3:29:be:4d:fb:02:39:79:73: 5a:3d:1c:c4:ca:9a:fa:f1:04:82:f3:92:54:0b:07: 6f:79:bb:de:4f:50:a8:73:96:12:7b:72:e4:54:05: 4c:7d:ca:fb:18:a5:cb:f6:a8:5f:0a:be:bc:b9:90: f0:e4:c1:cf:6f:d7:45:9d:c2:b7:da:32:74:61:3e: 50:f2:39:5e:1e:c7:28:c5:63:cf:60:e9:f3:d7:16: 37:55:11:75:7a:1b:cb:ac:f2:05:76:cb:5d:2c:8c: df:f3:88:6c:25:a9:0a:ad:ed:ca:a3:2d:57:fe:d2: 8a:2c:2a:fb:55:22:b3:3f:5f:63:71:aa:46:66:96: e1:ec:6c:0e:1e:d4:2c:9c:c6:b1:89:dd:54:83:e2: a3:84:4a:b9:3a:5c:b3:06:38:f4:df:74:c2:58:8c: d2:c2:9f:30:48:8f:a0:48:43:06:0b:fa:4d:e4:da: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:94:54:51:A5:69:34:A2:EC:24:77:40:8C:FE:DB:7E:50:D2:07:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.0.0/24 Signature Algorithm: sha256WithRSAEncryption 04:be:3f:bc:33:0e:b9:d2:0e:0b:1c:9f:11:d7:0c:12:7e:cc: 80:20:25:b7:26:b6:e4:39:6c:cf:5e:66:e5:d0:e0:0e:a9:0c: 08:be:61:43:e4:c3:88:fb:15:c4:f3:79:21:60:57:40:c6:5e: 72:a4:f5:af:5b:76:67:3b:e9:37:58:12:34:73:0c:12:3d:66: 02:a5:43:ca:ad:f9:12:98:3e:ba:c5:08:a5:9e:4f:62:e1:22: 32:43:00:83:8e:19:12:b4:f2:a7:5f:0d:95:b5:76:6c:db:2b: 1b:67:bc:ee:b7:07:16:57:4e:aa:96:83:6b:4a:4a:4b:51:7b: 6d:70:4d:4d:41:4e:9b:51:7d:6d:5c:2b:9a:12:e1:ec:0b:b6: 37:2f:48:09:29:21:b7:2c:91:64:4f:3a:de:1b:a4:f4:c9:82: 87:2a:30:5b:33:4f:bd:ac:67:d0:1e:80:d1:2f:39:a6:de:c0: a4:99:a9:eb:28:e9:01:17:38:82:a3:75:04:98:31:d8:47:8f: 7a:9b:e8:6d:94:25:7b:bf:85:b4:ce:ef:93:9f:f7:f2:4c:f0: 88:52:61:2f:b6:22:e2:93:07:54:09:f8:13:d9:60:a3:4d:06: 31:8f:a4:d9:d4:50:f5:85:74:24:fc:a0:46:af:17:56:1c:c7: e9:2f:60:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYEA0GQ2AzSO9jjfkVyZCv4DbZrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDIxMDMxWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzcwNDc4MTg1MmE5ZThjZWU2MDMzZDRmZWM3Mzc0NTkz NTE3YjVjMzc1ZDlmYjhiZGI5NTFlMDY5ZTgyZDExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC169ig64j39k87tj3E4QwkTWWjZ5RiZuu7V7KSqeehQahP oZk/pFIzSCHSe2l/jcTZcCfWSZ48Zpj2ViVZzAV6d+FMMi1JECPbCOacJFqF9uMp vk37Ajl5c1o9HMTKmvrxBILzklQLB295u95PUKhzlhJ7cuRUBUx9yvsYpcv2qF8K vry5kPDkwc9v10WdwrfaMnRhPlDyOV4exyjFY89g6fPXFjdVEXV6G8us8gV2y10s jN/ziGwlqQqt7cqjLVf+0oosKvtVIrM/X2NxqkZmluHsbA4e1CycxrGJ3VSD4qOE Srk6XLMGOPTfdMJYjNLCnzBIj6BIQwYL+k3k2mZTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtZRUUaVpNKLsJHdAjP7bflDSB20wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwNWFhMTYzLTM4ZWMtNDEyMy1iNGMxLTU1OTU1YzgwOWU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS/QAwDQYJKoZIhvcNAQELBQADggEBAAS+P7wzDrnSDgscnxHXDBJ+zIAg JbcmtuQ5bM9eZuXQ4A6pDAi+YUPkw4j7FcTzeSFgV0DGXnKk9a9bdmc76TdYEjRz DBI9ZgKlQ8qt+RKYPrrFCKWeT2LhIjJDAIOOGRK08qdfDZW1dmzbKxtnvO63BxZX TqqWg2tKSktRe21wTU1BTptRfW1cK5oS4ewLtjcvSAkpIbcskWRPOt4bpPTJgocq MFszT72sZ9AegNEvOabewKSZqeso6QEXOIKjdQSYMdhHj3qb6G2UJXu/hbTO75Of 9/JM8IhSYS+2IuKTB1QJ+BPZYKNNBjGPpNnUUPWFdCT8oEavF1Ycx+kvYBM= -----END CERTIFICATE-----Generated at Sat Sep 19 13:02:21 2026 by rpki-client