$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a78423a-9c56-47a1-9157-947db4eabda9.roa File: 9a78423a-9c56-47a1-9157-947db4eabda9.roa (raw, json) Hash identifier: KyOAh1Kuy+ezpqdOXovQgbXdvTWdbUZvAl+N1iYTgnA= Subject key identifier: 48:9B:D2:75:A4:8D:EF:C6:D6:24:29:15:7D:5E:6D:80:38:B6:AE:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40BC72CD49F0349C51A9885D8E24BEA59BCD272E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a78423a-9c56-47a1-9157-947db4eabda9.roa Signing time: Sun 02 Aug 2026 01:01:34 +0000 ROA not before: Sun 02 Aug 2026 01:01:34 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.157.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bc:72:cd:49:f0:34:9c:51:a9:88:5d:8e:24:be:a5:9b:cd:27:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 01:01:34 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=0413692bb109dc9566bbfe2f950ecf8d94b3ea091394094654b464df9f01be78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:4d:1d:7c:1d:8e:55:88:07:87:a1:92:69: 93:09:2a:1c:f8:3f:86:7c:72:ec:4f:eb:cb:d6:3a: fd:35:bc:2a:85:eb:ff:f9:c8:7a:38:0f:42:6e:8d: cb:53:0b:e6:15:98:aa:3c:93:e5:4d:2c:29:d6:d7: 2c:b9:4d:c9:67:50:91:e5:d9:fb:ee:96:ec:ec:e1: 80:17:81:e3:f3:67:20:93:bb:74:b2:d6:7f:7a:e8: c2:be:f4:7f:85:fa:92:36:e4:b2:ec:54:a3:05:4b: 4a:9d:be:7d:60:20:1f:55:1c:e6:0d:35:67:dd:c7: 90:93:af:bc:97:78:69:00:b9:4b:11:ab:ef:6c:73: 27:a0:8e:1b:a3:1b:69:3f:a2:9f:47:33:92:4c:f0: eb:fc:c8:82:94:ec:65:f4:b2:c1:40:cb:1d:1c:9d: 23:80:70:61:0b:91:04:1b:86:c2:3d:b4:e2:fb:9a: 25:91:43:6a:46:3f:d8:d4:36:06:a7:1a:fc:37:7b: 71:eb:90:cf:84:70:1c:2c:1e:2b:94:5c:07:a5:6f: 3b:55:ca:1e:f3:95:6e:39:11:f5:11:9c:37:48:ef: 25:17:93:4e:87:42:89:08:14:e4:d6:52:03:c9:c8: 25:3a:6c:95:37:9a:85:8c:db:ea:2c:f1:8b:27:44: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9B:D2:75:A4:8D:EF:C6:D6:24:29:15:7D:5E:6D:80:38:B6:AE:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a78423a-9c56-47a1-9157-947db4eabda9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.72.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:44:8e:cd:69:79:31:40:15:96:3e:b0:8d:11:11:10:60:43: c8:d4:68:97:d3:db:3d:e0:1d:52:0f:7b:f9:72:8b:02:56:51: c0:17:27:50:21:94:95:c3:bb:56:39:ba:5e:95:b3:d5:52:bf: 8f:fc:c6:71:d8:fe:f7:2e:1b:10:7f:3e:20:f7:fd:f0:c0:d2: 74:19:57:19:a3:6a:3a:0f:9a:86:13:07:19:9a:06:15:5c:e3: 42:41:6f:2f:fb:1d:6a:76:fd:33:23:b3:b8:d7:89:93:89:2c: 70:3e:0f:49:4c:ab:4f:12:02:4e:34:9c:46:c4:2f:0c:52:49: 2a:72:17:89:e3:f2:4a:62:ea:a8:52:29:dd:12:21:13:5b:82: f4:8d:55:21:2c:8d:1e:8b:8e:3e:4b:9c:59:f2:17:71:e7:77: fb:73:b6:57:3a:11:63:6e:a4:71:55:a7:1b:dc:e5:24:e0:43: f5:f3:ee:f4:bb:e5:8c:8a:35:99:9b:4f:38:81:e4:90:3d:04: da:4b:3f:c9:c4:2f:a7:3d:2a:79:8b:63:8a:52:a9:67:59:78: e5:24:51:01:a3:4f:43:ee:48:cf:ae:61:2a:65:b8:d3:3b:3f: 01:e7:9f:c8:8d:7e:3a:dc:88:a8:53:c9:bf:fc:b7:81:be:18: 86:10:44:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQLxyzUnwNJxRqYhdjiS+pZvNJy4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDEwMTM0WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDEzNjkyYmIxMDlkYzk1NjZiYmZlMmY5NTBlY2Y4ZDk0 YjNlYTA5MTM5NDA5NDY1NGI0NjRkZjlmMDFiZTc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCps00dfB2OVYgHh6GSaZMJKhz4P4Z8cuxP68vWOv01vCqF 6//5yHo4D0JujctTC+YVmKo8k+VNLCnW1yy5TclnUJHl2fvuluzs4YAXgePzZyCT u3Sy1n966MK+9H+F+pI25LLsVKMFS0qdvn1gIB9VHOYNNWfdx5CTr7yXeGkAuUsR q+9scyegjhujG2k/op9HM5JM8Ov8yIKU7GX0ssFAyx0cnSOAcGELkQQbhsI9tOL7 miWRQ2pGP9jUNganGvw3e3HrkM+EcBwsHiuUXAelbztVyh7zlW45EfURnDdI7yUX k06HQokIFOTWUgPJyCU6bJU3moWM2+os8YsnRAwpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSJvSdaSN78bWJCkVfV5tgDi2rgQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhNzg0MjNhLTljNTYtNDdhMS05MTU3LTk0N2RiNGVhYmRhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2nUgwDQYJKoZIhvcNAQELBQADggEBAG5Ejs1peTFAFZY+sI0RERBgQ8jU aJfT2z3gHVIPe/lyiwJWUcAXJ1AhlJXDu1Y5ul6Vs9VSv4/8xnHY/vcuGxB/PiD3 /fDA0nQZVxmjajoPmoYTBxmaBhVc40JBby/7HWp2/TMjs7jXiZOJLHA+D0lMq08S Ak40nEbELwxSSSpyF4nj8kpi6qhSKd0SIRNbgvSNVSEsjR6Ljj5LnFnyF3Hnd/tz tlc6EWNupHFVpxvc5STgQ/Xz7vS75YyKNZmbTziB5JA9BNpLP8nEL6c9KnmLY4pS qWdZeOUkUQGjT0PuSM+uYSpluNM7PwHnn8iNfjrciKhTyb/8t4G+GIYQRDQ= -----END CERTIFICATE-----Generated at Thu Aug 20 23:32:07 2026 by rpki-client