$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa File: 96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa (raw, json) Hash identifier: kKZe+ANqPb/XmciK/38f5bRxDzuk20NnZczZLs+bf5I= Subject key identifier: 7F:8E:E1:BA:3B:B2:C3:B9:5E:D0:E0:B7:BE:84:C9:CE:30:29:2F:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B8D29D974C0AAA1505233AEF46CE46A4DC5CF0F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa Signing time: Mon 03 Aug 2026 03:21:28 +0000 ROA not before: Mon 03 Aug 2026 03:21:28 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.237.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8d:29:d9:74:c0:aa:a1:50:52:33:ae:f4:6c:e4:6a:4d:c5:cf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:21:28 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=b25ce49b1755b6533b38c686d9bad7265abb5fafec7b2f305b725e1e8cb665a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:98:72:d1:73:40:2c:7b:1e:44:6b:b4:08: 86:bd:6f:a2:a8:c3:78:16:15:98:62:16:ee:af:84: dd:cf:f9:09:94:00:5b:ee:fd:e6:3d:32:f8:d8:79: 58:67:46:16:3d:ce:8b:12:53:f7:41:c9:d2:52:8a: cb:d4:fa:35:dd:56:2b:9f:02:08:97:f4:d2:d4:eb: 39:e5:ac:a0:e5:0a:48:9d:52:61:fa:76:49:8b:e0: 1f:a7:76:ea:aa:6b:97:ad:37:33:95:c4:07:01:0e: 30:74:ee:09:c1:5b:b7:f5:86:99:b7:4c:49:33:d6: 88:18:6f:9c:bc:ca:f6:57:a6:c4:35:e5:0f:3b:b3: 3e:90:45:75:ed:51:8b:77:1f:a8:e2:36:e1:83:22: a6:95:8c:56:fe:65:b5:f9:4d:33:6e:82:42:6a:42: 5c:46:e3:ef:6c:9a:c7:4c:06:88:82:70:04:7d:55: d0:ed:96:3f:96:4a:9a:98:07:03:7e:60:be:33:05: 55:25:54:c1:00:1d:1f:51:c9:5b:2f:32:21:17:df: 3c:0c:99:da:2d:01:16:a9:94:0f:0d:e8:ff:6c:0b: f8:43:16:2e:af:ba:e9:d4:20:1c:e2:fe:ae:7c:5a: 20:a6:88:25:31:f5:7a:ad:80:d4:bc:b5:e0:4e:0f: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:E1:BA:3B:B2:C3:B9:5E:D0:E0:B7:BE:84:C9:CE:30:29:2F:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.237.224.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:49:6e:3b:31:f9:98:ab:04:e8:fc:22:a9:05:b7:c1:c2:7d: 54:4a:ad:a1:d0:e1:9c:b7:a7:12:e0:33:b8:4d:9d:6b:a5:34: 76:8c:46:f4:7d:72:d9:6b:65:69:d3:c6:c3:a9:5e:bc:d9:fd: d6:a7:b3:ed:e9:d0:82:14:5b:a0:ab:2e:b1:bb:9f:71:b4:7d: 37:7b:dd:5e:0a:9b:4d:72:05:0c:50:2a:d6:0c:84:98:78:0d: 2a:fd:84:0e:92:5a:d3:db:34:d3:00:d5:b0:8c:30:0a:a2:ed: d3:b3:3e:79:89:fd:c6:0c:27:17:2f:58:9b:ee:ed:72:6e:c6: 14:cb:8d:97:ab:57:5b:2c:19:df:7f:9c:fd:2f:2c:5c:dd:0b: e5:03:86:67:fe:e8:cc:8d:5b:85:95:ea:78:a5:d5:d9:e6:a3: 6a:40:49:3d:c7:17:9c:68:ac:f5:a4:4c:98:37:55:62:02:a1: c2:f8:38:ed:89:7d:99:b4:b6:70:c3:f3:02:28:31:df:f1:a5: 72:40:2e:af:73:64:3a:f0:6b:24:ee:f3:46:d4:59:91:d7:78: 35:8d:ce:3a:5e:3d:77:da:c1:08:be:d2:00:ec:12:a3:e1:10: d4:d6:06:61:1c:78:e0:5e:b5:a7:82:af:85:a7:9d:9b:6c:6b: 40:73:e1:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK40p2XTAqqFQUjOu9Gzkak3Fzw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMyMTI4WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjVjZTQ5YjE3NTViNjUzM2IzOGM2ODZkOWJhZDcyNjVh YmI1ZmFmZWM3YjJmMzA1YjcyNWUxZThjYjY2NWE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYb5hy0XNALHseRGu0CIa9b6Kow3gWFZhiFu6vhN3P+QmU AFvu/eY9MvjYeVhnRhY9zosSU/dBydJSisvU+jXdViufAgiX9NLU6znlrKDlCkid UmH6dkmL4B+nduqqa5etNzOVxAcBDjB07gnBW7f1hpm3TEkz1ogYb5y8yvZXpsQ1 5Q87sz6QRXXtUYt3H6jiNuGDIqaVjFb+ZbX5TTNugkJqQlxG4+9smsdMBoiCcAR9 VdDtlj+WSpqYBwN+YL4zBVUlVMEAHR9RyVsvMiEX3zwMmdotARaplA8N6P9sC/hD Fi6vuunUIBzi/q58WiCmiCUx9XqtgNS8teBODzS3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf47hujuyw7le0OC3voTJzjApL7gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2YWQzNmQyLTZmOGUtNDZmOS04NTMwLWJiZmEyMzEwOWZhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27eAwDQYJKoZIhvcNAQELBQADggEBAH5Jbjsx+ZirBOj8IqkFt8HCfVRK raHQ4Zy3pxLgM7hNnWulNHaMRvR9ctlrZWnTxsOpXrzZ/dans+3p0IIUW6CrLrG7 n3G0fTd73V4Km01yBQxQKtYMhJh4DSr9hA6SWtPbNNMA1bCMMAqi7dOzPnmJ/cYM JxcvWJvu7XJuxhTLjZerV1ssGd9/nP0vLFzdC+UDhmf+6MyNW4WV6nil1dnmo2pA ST3HF5xorPWkTJg3VWICocL4OO2JfZm0tnDD8wIoMd/xpXJALq9zZDrwayTu80bU WZHXeDWNzjpePXfawQi+0gDsEqPhENTWBmEceOBetaeCr4WnnZtsa0Bz4fc= -----END CERTIFICATE-----Generated at Sat Aug 8 07:00:22 2026 by rpki-client