$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a84a9c15-fe2c-4623-b52e-0ec39458440e.roa File: a84a9c15-fe2c-4623-b52e-0ec39458440e.roa (raw, json) Hash identifier: IJvZPQF9sdNdYDGrr05D4wDhfZ/CxFPUDmgBOqOahJw= Subject key identifier: 07:00:02:FE:46:65:5F:28:0C:BF:8C:06:CA:5D:80:9D:84:5D:14:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 036D2E3B09BB6D943B6B7EDB36F10FAEE9FAC04A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a84a9c15-fe2c-4623-b52e-0ec39458440e.roa Signing time: Sun 02 Aug 2026 01:21:11 +0000 ROA not before: Sun 02 Aug 2026 01:21:11 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6d:2e:3b:09:bb:6d:94:3b:6b:7e:db:36:f1:0f:ae:e9:fa:c0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 01:21:11 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=9247ccafdf6627c442e3f32ea76fedad10e99307b465ac8ce131d3a9482b3f00, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:88:67:51:7b:1c:43:4e:5e:1f:de:9b:58: d8:a1:ca:74:34:22:af:1c:59:7b:96:fb:8f:81:eb: 59:ae:81:11:24:44:b0:29:c6:33:df:01:61:ad:1c: f2:39:5a:c9:64:02:da:e8:e9:d2:65:5c:0b:d8:bb: 76:4c:0f:f6:6e:81:ca:4a:98:82:a1:29:e8:f1:9b: 22:77:db:04:91:03:ff:ea:b7:8e:91:51:07:94:18: fa:81:43:c2:e2:a2:5b:56:f6:d9:cb:d4:f8:a1:49: c7:e1:62:71:42:61:62:66:ff:63:33:54:2d:d6:15: ee:48:f6:ff:ef:ac:6b:b7:3f:13:31:c1:50:d5:74: cd:2a:e6:82:ec:7e:8a:f7:15:c4:56:eb:f2:9a:b9: f3:99:a3:99:a3:1e:91:5e:fc:0d:60:85:7f:42:0c: d1:30:a0:75:29:7a:5d:68:fb:1a:c6:95:67:da:e5: 99:69:04:2f:13:c0:e8:d8:20:34:62:8c:5c:24:99: 27:ca:81:d5:ab:53:03:03:11:eb:ff:06:e1:d9:6a: ab:32:73:db:b1:f1:91:94:c6:2b:68:7e:8c:1a:00: b1:bd:ef:0e:9a:c3:3e:89:a4:76:4b:64:d8:43:88: d7:b9:a9:61:18:08:8c:73:fb:ae:47:d1:3b:27:22: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:02:FE:46:65:5F:28:0C:BF:8C:06:CA:5D:80:9D:84:5D:14:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a84a9c15-fe2c-4623-b52e-0ec39458440e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.155.0/24 Signature Algorithm: sha256WithRSAEncryption 69:01:d0:66:2c:ae:fd:8c:cc:af:62:93:0a:11:ee:f9:6a:20: bc:b2:d8:f7:af:40:aa:9d:55:a5:0a:5e:2f:45:a1:3a:92:3f: 35:fd:2b:8c:e7:5d:a3:d3:ec:c5:44:99:22:f9:2f:4e:e1:e2: 1c:10:5f:3d:8a:f6:ab:79:8a:bb:d6:25:56:50:ab:0c:74:1d: 04:3d:22:0d:66:70:40:9f:ab:5d:0d:81:83:97:95:08:9d:c6: 43:57:d9:f1:c4:00:5f:42:83:0c:b4:35:8c:e5:c7:ae:69:0b: 4b:6c:80:a5:97:f6:61:06:df:a7:87:cd:b3:93:5c:4d:23:94: a8:84:bf:64:b3:b3:6c:ea:d4:96:ef:37:68:01:d8:db:6a:4e: 4f:c3:fe:b0:1a:9a:36:d4:7a:b6:b9:98:84:e7:2e:79:c7:11: 4a:88:51:af:df:0b:d8:be:50:f6:4e:92:ca:f9:74:6b:66:03: 14:b8:4e:4d:21:30:d6:87:4c:ee:e1:b1:6c:3c:e7:01:29:80: f5:50:88:74:7a:89:ab:3d:0e:e5:9d:08:23:10:a8:32:bb:f0: a1:03:2f:7a:a6:3b:c9:88:a7:ce:af:51:dc:48:10:b9:c4:2b: c4:6d:19:07:c6:00:30:96:f8:c3:e8:59:ae:31:8c:ae:3b:91: c0:b2:ed:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA20uOwm7bZQ7a37bNvEPrun6wEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDEyMTExWhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjQ3Y2NhZmRmNjYyN2M0NDJlM2YzMmVhNzZmZWRhZDEw ZTk5MzA3YjQ2NWFjOGNlMTMxZDNhOTQ4MmIzZjAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZRYhnUXscQ05eH96bWNihynQ0Iq8cWXuW+4+B61mugREk RLApxjPfAWGtHPI5WslkAtro6dJlXAvYu3ZMD/ZugcpKmIKhKejxmyJ32wSRA//q t46RUQeUGPqBQ8LioltW9tnL1PihScfhYnFCYWJm/2MzVC3WFe5I9v/vrGu3PxMx wVDVdM0q5oLsfor3FcRW6/KaufOZo5mjHpFe/A1ghX9CDNEwoHUpel1o+xrGlWfa 5ZlpBC8TwOjYIDRijFwkmSfKgdWrUwMDEev/BuHZaqsyc9ux8ZGUxitofowaALG9 7w6awz6JpHZLZNhDiNe5qWEYCIxz+65H0TsnIkY3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBwAC/kZlXygMv4wGyl2AnYRdFOUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4NGE5YzE1LWZlMmMtNDYyMy1iNTJlLTBlYzM5NDU4NDQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fJswDQYJKoZIhvcNAQELBQADggEBAGkB0GYsrv2MzK9ikwoR7vlqILyy 2PevQKqdVaUKXi9FoTqSPzX9K4znXaPT7MVEmSL5L07h4hwQXz2K9qt5irvWJVZQ qwx0HQQ9Ig1mcECfq10NgYOXlQidxkNX2fHEAF9Cgwy0NYzlx65pC0tsgKWX9mEG 36eHzbOTXE0jlKiEv2Szs2zq1JbvN2gB2NtqTk/D/rAamjbUera5mITnLnnHEUqI Ua/fC9i+UPZOksr5dGtmAxS4Tk0hMNaHTO7hsWw85wEpgPVQiHR6ias9DuWdCCMQ qDK78KEDL3qmO8mIp86vUdxIELnEK8RtGQfGADCW+MPoWa4xjK47kcCy7XM= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:38 2026 by rpki-client