$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a30a777d-04a3-42b6-b66e-c0ec74007539.roa File: a30a777d-04a3-42b6-b66e-c0ec74007539.roa (raw, json) Hash identifier: Hs6CYAVn2/Ng6q1alwWdRmYVUAH8pNAm0rSfBXsfheE= Subject key identifier: F3:AB:BC:0B:8B:22:92:85:A9:00:7E:36:73:FC:47:EF:34:25:CF:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: A4CC86211CD5496FFAE703E85A45D6527EA6DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a30a777d-04a3-42b6-b66e-c0ec74007539.roa Signing time: Sat 01 Aug 2026 01:10:44 +0000 ROA not before: Sat 01 Aug 2026 01:10:44 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a4:cc:86:21:1c:d5:49:6f:fa:e7:03:e8:5a:45:d6:52:7e:a6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 1 01:10:44 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=45213d7262dacee4fbf26c83950b7421e249dbdf42f062d4cf721a9c959f2753, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ec:20:88:42:20:02:51:05:b0:f2:4c:8a:87: e9:cf:02:62:91:75:c8:63:8f:9b:c7:dc:3b:a5:6c: df:95:53:66:ee:02:c4:7a:3b:8e:33:76:30:00:2e: f5:70:97:06:67:30:65:03:90:3e:73:7f:53:2b:66: 3b:c4:0b:d3:db:59:12:00:c7:3a:70:fe:7d:93:d7: 08:ad:c8:ed:f6:fb:47:41:ee:03:b4:89:2b:35:23: 66:d5:fc:98:45:0c:10:0b:47:2d:0c:ee:a9:46:df: fa:67:5a:84:23:d6:b9:6b:b3:bf:55:83:39:20:44: 0b:b1:0d:eb:aa:58:47:0f:fe:95:98:66:70:17:e2: 40:41:e2:9f:06:fb:84:d3:e9:f8:f7:ef:23:6a:54: bc:8b:b4:aa:b6:d3:f4:c8:fa:73:bd:09:36:31:fc: 00:99:2d:b9:81:31:d8:45:9f:d1:78:1b:28:60:41: ff:0a:d1:7e:35:b5:42:ca:24:f7:97:1c:07:99:50: 50:a1:6e:50:cc:51:40:c7:fc:c7:13:c6:67:03:1a: 6a:07:85:6b:3d:c1:e4:a1:bf:01:5d:ce:84:e9:c0: 1c:24:31:45:1f:57:2b:cd:91:5a:2d:57:b2:5f:03: 29:5d:84:5a:61:7c:96:6f:de:33:d8:65:7a:a0:16: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:BC:0B:8B:22:92:85:A9:00:7E:36:73:FC:47:EF:34:25:CF:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a30a777d-04a3-42b6-b66e-c0ec74007539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.108.0/24 Signature Algorithm: sha256WithRSAEncryption 86:b5:da:2b:ed:7a:eb:37:b0:8c:cc:4c:cc:51:1b:af:81:92: 69:58:22:96:10:e0:ef:79:8b:11:00:f0:20:32:ef:6a:33:a6: 2b:c5:42:2b:a5:e4:20:9f:f1:c8:b0:b0:8a:72:39:05:6a:a4: cc:51:fc:ed:62:fb:93:6a:fe:6c:aa:63:12:ce:fb:f2:a0:17: 99:fb:88:79:06:84:df:ef:5f:fc:ab:d6:5c:de:42:d8:64:bd: f0:be:5f:ee:72:58:e1:20:0f:4e:e1:a4:1b:5f:e0:93:a8:7e: 2e:af:17:fc:dc:be:7b:13:1f:1d:02:b8:bd:a5:06:99:59:6d: e0:6c:8f:ed:28:76:44:f3:71:50:35:fe:68:49:7e:dd:2c:c6: 82:3e:3d:a4:c6:7c:ad:cb:1f:f6:e8:18:74:72:74:6d:89:ce: d1:87:3a:77:fb:0d:2d:96:d8:05:21:55:40:9c:e8:db:df:53: f2:5f:85:69:eb:28:09:fc:c7:57:b5:9a:31:5b:b2:97:58:01: 4a:01:40:d1:7a:40:ed:76:00:b0:81:07:4a:e9:d8:2a:6c:16: c3:5a:cc:76:06:b3:85:37:7f:7d:3e:ce:f4:0c:61:10:75:e6: 5b:f0:b3:78:d8:88:c3:d4:03:63:ff:94:9a:9f:03:8a:27:40: 78:8b:3e:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAKTMhiEc1Ulv+ucD6FpF1lJ+pt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDExMDQ0WhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTIxM2Q3MjYyZGFjZWU0ZmJmMjZjODM5NTBiNzQyMWUy NDlkYmRmNDJmMDYyZDRjZjcyMWE5Yzk1OWYyNzUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCB7CCIQiACUQWw8kyKh+nPAmKRdchjj5vH3DulbN+VU2bu AsR6O44zdjAALvVwlwZnMGUDkD5zf1MrZjvEC9PbWRIAxzpw/n2T1wityO32+0dB 7gO0iSs1I2bV/JhFDBALRy0M7qlG3/pnWoQj1rlrs79VgzkgRAuxDeuqWEcP/pWY ZnAX4kBB4p8G+4TT6fj37yNqVLyLtKq20/TI+nO9CTYx/ACZLbmBMdhFn9F4Gyhg Qf8K0X41tULKJPeXHAeZUFChblDMUUDH/McTxmcDGmoHhWs9weShvwFdzoTpwBwk MUUfVyvNkVotV7JfAyldhFphfJZv3jPYZXqgFvl9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU86u8C4sikoWpAH42c/xH7zQlz58wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzMGE3NzdkLTA0YTMtNDJiNi1iNjZlLWMwZWM3NDAwNzUzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3GwwDQYJKoZIhvcNAQELBQADggEBAIa12ivteus3sIzMTMxRG6+BkmlY IpYQ4O95ixEA8CAy72ozpivFQiul5CCf8ciwsIpyOQVqpMxR/O1i+5Nq/myqYxLO +/KgF5n7iHkGhN/vX/yr1lzeQthkvfC+X+5yWOEgD07hpBtf4JOofi6vF/zcvnsT Hx0CuL2lBplZbeBsj+0odkTzcVA1/mhJft0sxoI+PaTGfK3LH/boGHRydG2JztGH Onf7DS2W2AUhVUCc6NvfU/JfhWnrKAn8x1e1mjFbspdYAUoBQNF6QO12ALCBB0rp 2CpsFsNazHYGs4U3f30+zvQMYRB15lvws3jYiMPUA2P/lJqfA4onQHiLPoU= -----END CERTIFICATE-----Generated at Sat Aug 22 09:42:31 2026 by rpki-client