$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5792df6-bc33-4cc8-9de5-962486acb935.roa File: a5792df6-bc33-4cc8-9de5-962486acb935.roa (raw, json) Hash identifier: 4twozpsBoqdeDy8gyXdvYWkzO+5elzzjkdnCjugv81Y= Subject key identifier: F2:BA:5E:7A:78:B9:3B:AC:0E:D1:23:A7:4D:84:E3:A6:F0:0D:AC:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74876C1AEA43060441B6D6FB409CBC167871483C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5792df6-bc33-4cc8-9de5-962486acb935.roa Signing time: Sun 21 Jun 2026 00:00:02 +0000 ROA not before: Sun 21 Jun 2026 00:00:02 +0000 ROA not after: Sat 19 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.5.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:87:6c:1a:ea:43:06:04:41:b6:d6:fb:40:9c:bc:16:78:71:48:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 21 00:00:02 2026 GMT Not After : Sep 19 23:59:59 2026 GMT Subject: serialNumber=d15d4acfe2d16db08203e1dc489d50214773204c72b05343c4f136786f402d2b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b8:3b:05:32:4c:20:1f:5a:3d:6e:2e:85:e4: 1a:ff:5d:d7:0d:c0:a5:33:00:b7:32:e9:6d:d4:b7: f6:46:61:43:f5:bd:cd:16:17:ca:72:ad:b2:cd:52: 0e:87:df:db:5e:2a:f6:ee:63:27:e3:3c:a2:13:1f: 03:03:52:d1:49:c0:ae:84:27:65:38:87:6b:b7:8d: 30:13:c2:7b:e4:98:cd:3c:d3:d0:a2:64:17:9f:f4: 70:f8:4f:8f:b8:98:cf:a2:f5:20:da:c9:18:4d:71: 0b:b2:51:fc:16:05:68:d5:3c:53:03:a0:b2:f4:64: 57:58:60:8a:d0:05:19:9d:bf:c5:7d:7c:6e:68:55: 42:e0:4a:bd:ce:8f:f9:09:4e:bd:96:ba:07:7e:15: 49:21:ad:6f:e2:8b:8a:18:56:93:11:c5:81:d9:ff: e1:2b:cf:23:d8:bc:e9:d4:f7:22:e4:81:9a:41:7b: 5f:1f:57:42:46:44:52:06:ae:72:93:7a:e3:aa:57: df:16:cc:79:83:54:f0:25:64:d2:fb:7b:ea:d2:54: 0e:5e:e2:0b:45:02:65:d3:73:ae:01:68:4e:23:e9: dd:cf:4b:af:87:8f:0c:c6:f9:7a:c3:6e:b9:c0:46: 50:a1:2c:4a:41:76:10:07:ab:f5:fb:c0:c7:ad:b0: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:5E:7A:78:B9:3B:AC:0E:D1:23:A7:4D:84:E3:A6:F0:0D:AC:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5792df6-bc33-4cc8-9de5-962486acb935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.5.122.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:f8:da:f5:98:b8:95:28:5e:a3:fb:fb:08:37:66:0a:d4:40: 62:50:37:5f:c0:5a:a5:24:25:7f:bf:34:ae:83:ac:75:b3:07: 52:34:d8:1b:47:86:dd:05:41:b5:02:2c:fb:92:3d:f6:07:f3: 2c:6d:2d:2c:9f:71:b7:71:60:ed:5f:6a:15:0f:e1:bd:71:2d: 5b:33:0e:ac:e3:bd:41:ba:17:7c:08:a1:12:83:2f:da:e2:04: d0:f1:17:5d:35:97:53:94:c4:36:81:7c:db:5c:22:95:b4:0f: 7e:29:2a:70:22:f9:7f:cd:f7:44:e3:05:71:dd:3f:92:88:bd: e3:fa:2b:52:ec:f5:e4:bf:51:66:7b:b2:7e:60:09:96:ee:3d: 2b:a2:df:c8:80:4b:5f:ba:57:93:1a:e0:84:4b:a4:08:b6:61: 9a:f4:dd:a5:e4:4c:64:60:13:ca:e1:99:53:85:2d:53:73:cc: 2b:4c:24:5b:96:f9:7c:87:a3:9a:dc:65:de:f6:fb:d9:c0:ab: 40:24:74:49:43:85:20:c2:e4:99:ff:3c:85:33:6e:4e:fc:04: 43:b6:01:47:e0:71:ab:d2:6e:0a:d3:cc:44:43:72:18:bd:a8: dd:d6:3b:3c:1f:b0:35:2a:68:d7:dc:4e:be:1f:c8:ce:02:44: 57:f0:78:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdIdsGupDBgRBttb7QJy8FnhxSDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNjIxMDAwMDAyWhcNMjYwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTVkNGFjZmUyZDE2ZGIwODIwM2UxZGM0ODlkNTAyMTQ3 NzMyMDRjNzJiMDUzNDNjNGYxMzY3ODZmNDAyZDJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmuDsFMkwgH1o9bi6F5Br/XdcNwKUzALcy6W3Ut/ZGYUP1 vc0WF8pyrbLNUg6H39teKvbuYyfjPKITHwMDUtFJwK6EJ2U4h2u3jTATwnvkmM08 09CiZBef9HD4T4+4mM+i9SDayRhNcQuyUfwWBWjVPFMDoLL0ZFdYYIrQBRmdv8V9 fG5oVULgSr3Oj/kJTr2Wugd+FUkhrW/ii4oYVpMRxYHZ/+ErzyPYvOnU9yLkgZpB e18fV0JGRFIGrnKTeuOqV98WzHmDVPAlZNL7e+rSVA5e4gtFAmXTc64BaE4j6d3P S6+HjwzG+XrDbrnARlChLEpBdhAHq/X7wMetsLhLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8rpeeni5O6wO0SOnTYTjpvANrKAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1NzkyZGY2LWJjMzMtNGNjOC05ZGU1LTk2MjQ4NmFjYjkzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADBXowDQYJKoZIhvcNAQELBQADggEBAFv42vWYuJUoXqP7+wg3ZgrUQGJQ N1/AWqUkJX+/NK6DrHWzB1I02BtHht0FQbUCLPuSPfYH8yxtLSyfcbdxYO1fahUP 4b1xLVszDqzjvUG6F3wIoRKDL9riBNDxF101l1OUxDaBfNtcIpW0D34pKnAi+X/N 90TjBXHdP5KIveP6K1Ls9eS/UWZ7sn5gCZbuPSui38iAS1+6V5Ma4IRLpAi2YZr0 3aXkTGRgE8rhmVOFLVNzzCtMJFuW+XyHo5rcZd72+9nAq0AkdElDhSDC5Jn/PIUz bk78BEO2AUfgcavSbgrTzERDchi9qN3WOzwfsDUqaNfcTr4fyM4CRFfweJk= -----END CERTIFICATE-----Generated at Sat Jun 27 06:45:59 2026 by rpki-client