$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dc52347-2f0f-40a7-a06e-6d3c31161942.roa File: 8dc52347-2f0f-40a7-a06e-6d3c31161942.roa (raw, json) Hash identifier: RMMzgbAp2btMTqhnDTi/NUYzwdBtwOV/uO6hmG+Grxw= Subject key identifier: 96:FA:8E:42:EF:E1:D3:36:74:7D:5D:43:9A:AC:26:6C:44:E8:49:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C359956FC101879383EFCDB0D63A8949FFA2ECC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dc52347-2f0f-40a7-a06e-6d3c31161942.roa Signing time: Mon 03 Aug 2026 03:01:03 +0000 ROA not before: Mon 03 Aug 2026 03:01:03 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:35:99:56:fc:10:18:79:38:3e:fc:db:0d:63:a8:94:9f:fa:2e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:01:03 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=9b7739054341e3db160549e3658daa2e1104c8ae2a8e8a5c14b67d8f2870858e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:9a:a8:bb:97:17:be:e8:11:a1:c9:4e:79: 95:be:5f:3b:c5:68:58:27:6a:4a:40:98:ff:eb:8c: cc:70:b7:a1:39:1c:4a:70:02:91:ae:c3:38:43:68: e4:16:3e:c0:9c:3e:73:a2:3a:69:c2:9c:c0:4e:fc: 56:fc:84:81:6d:93:c2:65:7b:cd:63:d1:43:22:cc: de:c1:9f:05:ae:0a:0e:0b:59:d3:83:0e:60:eb:c7: 38:a7:66:79:4b:3f:42:54:34:94:c9:c7:49:35:7c: 98:82:42:e5:85:4a:d6:7c:bf:9f:42:3d:05:87:e9: 17:e5:cb:22:90:c1:0b:eb:04:e6:bf:1a:49:bb:bc: 1e:e8:56:14:3a:38:b5:14:4b:81:7c:72:d2:36:56: f4:05:da:e9:c3:06:6d:55:f2:6a:5b:d4:cf:fd:83: 77:09:1a:ac:41:a1:61:74:3b:2b:5b:31:17:d9:27: 92:07:26:b3:49:6f:68:b3:ea:1b:e2:eb:cc:6d:b5: 03:7b:f9:5c:ea:d3:25:b4:3a:8c:fb:7b:d1:66:10: f2:08:bb:6a:9b:5f:9e:74:e6:f0:82:60:c6:fc:66: 86:e1:7a:ca:13:b5:17:df:67:fc:45:5f:af:5e:af: c2:5b:f7:36:a1:84:1e:4a:2d:24:14:d3:1b:6a:db: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FA:8E:42:EF:E1:D3:36:74:7D:5D:43:9A:AC:26:6C:44:E8:49:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dc52347-2f0f-40a7-a06e-6d3c31161942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:ad:20:c6:b4:c3:d3:60:c8:da:31:ba:59:6d:59:ba:40:39: 48:3c:f7:0d:87:6d:ba:95:1f:94:36:03:61:57:75:43:8d:50: c6:06:b5:4f:6d:5d:3b:0f:8a:44:77:e1:01:14:5e:30:85:f7: 2a:5f:64:9e:cd:18:cc:f7:8e:ad:63:09:53:cf:38:a6:62:1d: 56:c6:af:61:a6:fd:d6:c4:8b:a4:aa:0a:d0:97:0e:1a:a4:a5: 8a:5c:5d:39:c1:c8:0d:c7:33:97:ab:a5:2c:31:81:f4:53:7e: 8c:5d:8f:32:6a:5d:06:69:98:90:11:02:f9:48:f8:b8:b9:20: 9c:00:6e:85:b1:25:4e:40:5d:c6:ee:ce:3f:c5:d1:85:4c:d0: 6d:37:d5:7d:df:c9:1c:6f:10:9e:84:c4:f9:25:ad:d1:cc:f3: 93:ed:40:21:5f:bf:41:47:b4:61:76:3c:09:40:c5:ed:c6:3f: 8e:af:55:c7:06:cd:ee:d4:78:e8:c2:2b:91:c3:b6:01:a0:c8: 8d:c2:89:a6:3a:e5:64:19:c7:15:dc:e3:bd:fd:37:c6:dd:82: c8:1e:23:41:cf:b9:66:7b:a7:25:58:ed:ab:23:66:09:d1:bc: e7:f5:c9:6f:55:f0:b5:9c:0c:f1:3d:9f:2c:37:80:40:e0:ec: 8b:d4:e8:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDDWZVvwQGHk4PvzbDWOolJ/6LswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMwMTAzWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Yjc3MzkwNTQzNDFlM2RiMTYwNTQ5ZTM2NThkYWEyZTEx MDRjOGFlMmE4ZThhNWMxNGI2N2Q4ZjI4NzA4NThlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfy5qou5cXvugRoclOeZW+XzvFaFgnakpAmP/rjMxwt6E5 HEpwApGuwzhDaOQWPsCcPnOiOmnCnMBO/Fb8hIFtk8Jle81j0UMizN7BnwWuCg4L WdODDmDrxzinZnlLP0JUNJTJx0k1fJiCQuWFStZ8v59CPQWH6RflyyKQwQvrBOa/ Gkm7vB7oVhQ6OLUUS4F8ctI2VvQF2unDBm1V8mpb1M/9g3cJGqxBoWF0OytbMRfZ J5IHJrNJb2iz6hvi68xttQN7+Vzq0yW0Ooz7e9FmEPIIu2qbX5505vCCYMb8Zobh esoTtRffZ/xFX69er8Jb9zahhB5KLSQU0xtq20PHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlvqOQu/h0zZ0fV1DmqwmbEToSXQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkYzUyMzQ3LTJmMGYtNDBhNy1hMDZlLTZkM2MzMTE2MTk0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2wwAwDQYJKoZIhvcNAQELBQADggEBAA6tIMa0w9NgyNoxulltWbpAOUg8 9w2HbbqVH5Q2A2FXdUONUMYGtU9tXTsPikR34QEUXjCF9ypfZJ7NGMz3jq1jCVPP OKZiHVbGr2Gm/dbEi6SqCtCXDhqkpYpcXTnByA3HM5erpSwxgfRTfoxdjzJqXQZp mJARAvlI+Li5IJwAboWxJU5AXcbuzj/F0YVM0G031X3fyRxvEJ6ExPklrdHM85Pt QCFfv0FHtGF2PAlAxe3GP46vVccGze7UeOjCK5HDtgGgyI3CiaY65WQZxxXc4739 N8bdgsgeI0HPuWZ7pyVY7asjZgnRvOf1yW9V8LWcDPE9nyw3gEDg7IvU6O0= -----END CERTIFICATE-----Generated at Sat Aug 22 09:37:17 2026 by rpki-client