$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90583941-1bcf-4e74-bcaa-673fdfaefcea.roa File: 90583941-1bcf-4e74-bcaa-673fdfaefcea.roa (raw, json) Hash identifier: ZC3VkpOLscbvU5sOqE+bFoey4GyZCPvjs87Y1z2JJqw= Subject key identifier: 34:2E:CD:82:49:4B:EE:4F:BC:90:5C:B4:C2:B3:00:42:48:CB:A0:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6376FC4DF29CE076FA1DEC68594774297F20221D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90583941-1bcf-4e74-bcaa-673fdfaefcea.roa Signing time: Thu 17 Sep 2026 17:33:37 +0000 ROA not before: Thu 17 Sep 2026 17:33:37 +0000 ROA not after: Wed 16 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:76:fc:4d:f2:9c:e0:76:fa:1d:ec:68:59:47:74:29:7f:20:22:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 17 17:33:37 2026 GMT Not After : Dec 16 23:59:59 2026 GMT Subject: serialNumber=292dc2d54ea156b41fa144d3a1cc34979ee5c8b998a51bf4a6ce807b2dc3a6e0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:af:13:74:85:55:0b:1f:3d:09:97:00:9d: 96:4d:8d:6d:90:60:3d:b5:90:1e:f6:7e:e1:77:0e: 05:4e:99:8a:b9:22:bb:12:98:20:2b:8d:64:53:27: 98:24:8a:b1:bd:13:17:f9:58:fd:ee:6c:68:29:d2: ec:d9:95:59:8a:4b:53:3a:31:fe:63:d6:d3:e9:65: 60:5b:fe:60:57:07:6f:dd:a9:7e:59:2c:71:ad:26: 2c:d9:30:82:f7:ae:dc:87:af:67:97:63:4f:bf:47: dd:1d:3f:d5:61:ed:f8:b3:b2:41:39:fe:88:71:a8: 65:61:e5:da:2f:57:b9:d3:38:b4:58:e9:9c:ff:22: 79:a9:38:3d:b2:c7:55:63:28:2c:0f:c8:6e:23:05: 61:9e:d4:28:d7:63:ff:e1:a4:01:16:58:71:c0:bb: a3:36:40:f0:31:f2:90:2d:59:5b:83:ef:1c:39:8a: 72:f5:a6:fd:2b:82:97:83:5f:60:39:6f:a9:88:5c: 41:00:b1:22:4d:9e:c5:6f:0d:52:b1:ea:48:46:43: 81:d9:5c:4d:32:4b:13:4d:b5:56:5d:7d:6b:62:cb: 23:0d:5e:f4:c0:8b:5a:06:99:4e:1d:09:bc:71:bc: 48:8a:8d:ef:20:f0:0e:73:fc:79:89:da:68:9c:51: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2E:CD:82:49:4B:EE:4F:BC:90:5C:B4:C2:B3:00:42:48:CB:A0:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90583941-1bcf-4e74-bcaa-673fdfaefcea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.0.0/19 Signature Algorithm: sha256WithRSAEncryption 73:94:9f:63:2d:fa:53:5f:60:85:e0:87:6e:15:08:42:ce:26: 3d:c2:23:af:96:85:28:94:4d:e5:36:27:dd:5f:6b:be:95:d6: 95:bb:f7:82:79:24:03:04:9b:e2:68:36:99:9e:81:6a:b6:7e: fa:62:ae:7f:be:43:e5:71:0b:47:8a:2f:53:c1:81:ea:d5:30: 3e:59:7f:7c:2b:94:f9:71:75:d4:f8:16:3b:37:86:b8:aa:15: 6e:b4:46:67:cd:f0:10:63:50:f4:a4:29:ba:71:5e:ad:f7:5e: 90:83:a6:d2:2d:4e:1b:81:4c:a3:20:7f:bb:5b:5c:ee:93:1d: 0c:d5:15:83:09:6e:ea:6e:85:7e:52:57:d4:af:52:43:fe:9d: ab:3a:b9:e0:1f:55:b2:46:a2:13:a6:48:bf:b8:21:9d:9a:a0: ce:b5:9e:5e:7e:b4:6d:01:44:e4:b8:33:ea:bf:e8:e1:81:2d: d3:14:b3:ff:d9:63:ae:e4:f3:d7:dc:4e:c2:fd:4f:b2:ea:ae: fc:02:17:9c:11:76:42:fd:fa:63:93:e8:d6:cd:59:f3:90:c4: 7f:2a:1e:22:93:52:6a:cc:39:98:73:35:87:a0:a5:9e:25:05: 8b:b2:13:7f:fc:ed:a4:f3:d8:d0:ae:5a:d8:58:ec:43:de:11: 46:d1:eb:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY3b8TfKc4Hb6HexoWUd0KX8gIh0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwOTE3MTczMzM3WhcNMjYxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTJkYzJkNTRlYTE1NmI0MWZhMTQ0ZDNhMWNjMzQ5Nzll ZTVjOGI5OThhNTFiZjRhNmNlODA3YjJkYzNhNmUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5L68TdIVVCx89CZcAnZZNjW2QYD21kB72fuF3DgVOmYq5 IrsSmCArjWRTJ5gkirG9Exf5WP3ubGgp0uzZlVmKS1M6Mf5j1tPpZWBb/mBXB2/d qX5ZLHGtJizZMIL3rtyHr2eXY0+/R90dP9Vh7fizskE5/ohxqGVh5dovV7nTOLRY 6Zz/InmpOD2yx1VjKCwPyG4jBWGe1CjXY//hpAEWWHHAu6M2QPAx8pAtWVuD7xw5 inL1pv0rgpeDX2A5b6mIXEEAsSJNnsVvDVKx6khGQ4HZXE0ySxNNtVZdfWtiyyMN XvTAi1oGmU4dCbxxvEiKje8g8A5z/HmJ2micUThXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNC7NgklL7k+8kFy0wrMAQkjLoI0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwNTgzOTQxLTFiY2YtNGU3NC1iY2FhLTY3M2ZkZmFlZmNlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUDIQAwDQYJKoZIhvcNAQELBQADggEBAHOUn2Mt+lNfYIXgh24VCELOJj3C I6+WhSiUTeU2J91fa76V1pW794J5JAMEm+JoNpmegWq2fvpirn++Q+VxC0eKL1PB gerVMD5Zf3wrlPlxddT4Fjs3hriqFW60RmfN8BBjUPSkKbpxXq33XpCDptItThuB TKMgf7tbXO6THQzVFYMJbupuhX5SV9SvUkP+nas6ueAfVbJGohOmSL+4IZ2aoM61 nl5+tG0BROS4M+q/6OGBLdMUs//ZY67k89fcTsL9T7LqrvwCF5wRdkL9+mOT6NbN WfOQxH8qHiKTUmrMOZhzNYegpZ4lBYuyE3/87aTz2NCuWthY7EPeEUbR66A= -----END CERTIFICATE-----Generated at Sat Sep 19 12:07:15 2026 by rpki-client