$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa File: a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa (raw, json) Hash identifier: I1Kvegi0NaMMtdBPjOOhVjhLGHxEvDHzzZpG4LfqW0o= Subject key identifier: E5:96:3E:E1:9B:B3:2C:32:80:78:BD:00:99:6A:45:10:E5:02:99:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 603FD603E0BB8ECA3D88C480D7FE766753C4110D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa Signing time: Fri 07 Aug 2026 03:11:28 +0000 ROA not before: Fri 07 Aug 2026 03:11:28 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3f:d6:03:e0:bb:8e:ca:3d:88:c4:80:d7:fe:76:67:53:c4:11:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 03:11:28 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=893ee5b472569569a39d4c3169e7f0e9a2b12c45d224612b640fc26c38a38af5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:69:e1:2c:a5:fb:0c:bc:b7:b6:ae:66:4b: 58:bd:ad:aa:ae:64:81:f4:a3:f0:0a:57:fb:6c:c8: f3:8e:62:78:ca:1d:a6:53:7f:3d:07:04:be:fd:8a: a1:9f:3c:4a:bb:b8:73:d6:c4:74:47:84:df:c1:3b: 1b:8e:05:ba:fe:77:48:c0:ad:4a:c8:af:c7:b1:86: 92:88:0c:03:90:41:77:77:30:be:1b:b7:1c:4c:ca: 11:0b:d5:fe:67:27:dd:9a:c5:0f:e0:cd:5c:6e:0d: 35:09:0e:9a:62:3c:24:4b:14:6a:83:88:31:e6:de: 54:9e:87:68:04:7f:7b:6f:b9:c1:4f:80:49:b8:cf: f5:ff:fb:b2:7a:04:ef:90:7c:d0:b4:0c:11:9e:cb: ba:c6:03:99:a4:8a:69:c9:8c:ff:71:f3:85:20:82: da:95:a2:a7:e5:7b:19:06:4c:b7:13:62:99:ec:a2: f5:6f:95:97:1e:bf:73:f0:96:9b:71:01:db:7c:79: ff:3c:5c:d3:43:7e:e0:45:f6:19:06:b5:b5:ce:ee: cf:a0:d7:1e:2b:73:06:30:ef:7e:7f:f7:5f:01:85: 1c:10:44:38:23:9f:89:8f:df:bd:b1:36:65:73:b3: 7b:5d:b7:8f:a5:19:11:28:5a:98:1a:9f:24:6d:c4: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:3E:E1:9B:B3:2C:32:80:78:BD:00:99:6A:45:10:E5:02:99:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.54.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:66:cf:4a:52:e6:ec:1b:bb:f2:83:2d:92:37:e4:be:ca:cb: 79:1c:38:e8:78:fa:c3:9f:a7:a5:ed:de:b0:86:de:0c:2d:3c: 64:5b:38:a2:d7:0e:9f:b8:5d:28:8c:89:d5:e9:1c:47:9f:c2: 60:09:29:c0:18:e2:cb:07:79:1f:34:9e:51:2b:af:0d:83:e0: 09:79:c5:20:47:59:be:98:b2:4d:e2:ec:2a:7a:cf:f7:d9:91: 4a:f0:4e:01:d4:ed:ba:50:87:4c:47:ad:9b:6e:58:32:95:c8: 4f:a7:1d:5e:c5:df:6d:df:0f:bc:e1:0c:06:f5:36:a9:f3:ea: 08:41:a6:7c:d1:03:13:ee:1e:98:ef:bf:b4:3e:27:45:18:eb: 0d:08:cc:c6:9f:11:e6:eb:ba:4c:75:1b:6b:63:fe:cb:40:46: 89:a7:18:a7:13:46:65:92:5f:6f:c7:c4:dd:4c:fc:b4:d5:5a: 78:54:8f:de:ce:17:07:52:24:ac:4c:c3:30:a4:87:99:6c:32: c3:e7:4f:d1:61:61:9a:d0:cb:03:5c:05:a9:47:a1:7f:a9:d8: b7:d4:d7:9d:52:13:4d:19:a5:a4:39:36:a4:f1:d6:60:98:14: 6b:3e:6d:d0:aa:7e:b4:80:f0:5b:3b:47:4a:19:10:10:b2:df: 90:4a:27:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYD/WA+C7jso9iMSA1/52Z1PEEQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDMxMTI4WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTNlZTViNDcyNTY5NTY5YTM5ZDRjMzE2OWU3ZjBlOWEy YjEyYzQ1ZDIyNDYxMmI2NDBmYzI2YzM4YTM4YWY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkamnhLKX7DLy3tq5mS1i9raquZIH0o/AKV/tsyPOOYnjK HaZTfz0HBL79iqGfPEq7uHPWxHRHhN/BOxuOBbr+d0jArUrIr8exhpKIDAOQQXd3 ML4btxxMyhEL1f5nJ92axQ/gzVxuDTUJDppiPCRLFGqDiDHm3lSeh2gEf3tvucFP gEm4z/X/+7J6BO+QfNC0DBGey7rGA5mkimnJjP9x84UggtqVoqflexkGTLcTYpns ovVvlZcev3PwlptxAdt8ef88XNNDfuBF9hkGtbXO7s+g1x4rcwYw735/918BhRwQ RDgjn4mP372xNmVzs3tdt4+lGREoWpganyRtxJXLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5ZY+4ZuzLDKAeL0AmWpFEOUCmcUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzOGZiYmU3LWVlM2EtNDM0Mi04ZDE3LWZiM2RkZDQ5ZTI5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE27zYwDQYJKoZIhvcNAQELBQADggEBAExmz0pS5uwbu/KDLZI35L7Ky3kc OOh4+sOfp6Xt3rCG3gwtPGRbOKLXDp+4XSiMidXpHEefwmAJKcAY4ssHeR80nlEr rw2D4Al5xSBHWb6Ysk3i7Cp6z/fZkUrwTgHU7bpQh0xHrZtuWDKVyE+nHV7F323f D7zhDAb1Nqnz6ghBpnzRAxPuHpjvv7Q+J0UY6w0IzMafEebrukx1G2tj/stARomn GKcTRmWSX2/HxN1M/LTVWnhUj97OFwdSJKxMwzCkh5lsMsPnT9FhYZrQywNcBalH oX+p2LfU151SE00ZpaQ5NqTx1mCYFGs+bdCqfrSA8Fs7R0oZEBCy35BKJxA= -----END CERTIFICATE-----Generated at Sat Sep 19 11:18:35 2026 by rpki-client