$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8622532-3f9f-49f5-ad52-fe2a10508dbc.roa File: a8622532-3f9f-49f5-ad52-fe2a10508dbc.roa (raw, json) Hash identifier: wfaqWJT+c09PLrTjNFiN23ePE6geAvb6+xSCivDLvGw= Subject key identifier: 15:C7:FD:C1:CA:BC:99:AB:FE:C4:7B:36:EC:5E:68:4B:79:67:DA:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01BDF1639E41CCDB62093D12413FC06630B46A7C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8622532-3f9f-49f5-ad52-fe2a10508dbc.roa Signing time: Mon 03 Aug 2026 03:20:11 +0000 ROA not before: Mon 03 Aug 2026 03:20:11 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bd:f1:63:9e:41:cc:db:62:09:3d:12:41:3f:c0:66:30:b4:6a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:20:11 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=c687796da1ddd19143da135518c2722ef2040888831b31650a26afc86ae71e62, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:78:09:d5:e6:4b:10:61:1a:fb:82:24:a3: 09:2e:f3:80:3a:c0:0a:e4:bb:52:f5:e8:eb:3d:75: 37:c8:ee:20:d3:f6:ce:70:fc:2c:86:8b:0c:57:49: 75:cc:11:ee:19:7e:aa:1f:f0:6d:11:bc:7c:fc:6d: 4d:85:f8:fb:d3:52:ac:d0:38:0d:a6:14:5f:0c:71: f6:29:95:ac:c6:90:41:46:b1:7e:5b:ba:db:a7:3a: 2a:8a:49:43:5e:45:81:2c:35:ee:12:a1:02:65:cf: df:e4:33:dd:8b:07:65:68:2b:90:b8:46:ac:05:96: dc:de:e6:1d:eb:97:bd:87:55:0b:93:2c:09:58:70: 28:6e:cd:16:c4:51:27:f1:1b:52:b7:33:8b:f0:16: df:ce:6e:c9:cd:91:ed:f1:39:2b:97:45:07:34:45: 52:99:87:7d:22:4a:1f:46:b2:4c:11:21:51:ac:52: e9:d1:a3:e4:8e:53:b3:03:4a:ac:49:2b:6c:34:fe: d1:53:18:ff:e9:77:40:f4:3a:34:83:ed:0d:ab:f5: c7:4f:6b:45:f4:68:70:cf:90:f4:40:7e:e1:ff:83: a2:d7:28:4b:b1:fb:9d:61:1b:f8:5e:ef:49:7c:4a: 11:27:e4:12:6c:45:a1:41:ac:1c:a4:2b:ee:99:74: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C7:FD:C1:CA:BC:99:AB:FE:C4:7B:36:EC:5E:68:4B:79:67:DA:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8622532-3f9f-49f5-ad52-fe2a10508dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3a:c9:ae:12:5b:75:a3:d0:64:54:1a:fe:9f:55:8d:17:9f:73: 3c:fb:1d:89:62:7b:dc:d2:50:14:25:3b:64:74:8f:37:5e:93: 96:b7:60:fe:e0:6c:88:c2:d7:0d:ad:e7:b0:6e:f1:9e:bf:53: 8e:62:d4:cd:05:1d:ff:69:48:8d:f8:57:b9:5f:26:6e:bc:87: 5f:55:2b:8b:9d:36:be:6b:17:4d:7e:c1:37:85:f3:70:3e:65: 29:77:e8:79:af:6b:c9:45:9b:df:b8:c3:7e:32:21:06:b0:ce: 6d:68:d9:70:eb:17:ab:e5:f3:92:b0:5b:45:69:87:50:5c:78: 0a:3c:27:95:cc:43:0e:6f:34:e5:a5:9e:32:85:1a:95:e0:7c: d4:25:40:40:a3:43:83:39:4d:3d:fc:00:6c:fb:5a:65:88:c4: ae:0b:ac:cb:bb:a3:cc:4d:2e:7f:6b:bf:13:f4:84:db:a1:03: 32:4a:c1:1f:ee:13:50:5f:17:9a:64:cd:a1:90:55:1d:8c:9f: 95:b9:ab:da:fb:4f:62:b2:2c:87:c8:46:4d:27:79:70:8d:3f: 2d:d7:81:54:43:63:1e:68:5a:b9:fe:6a:3e:5d:56:1f:6b:79: 68:bc:0b:32:04:9f:1e:fd:65:cc:a8:b3:80:f4:1c:ff:f7:4d: e8:08:23:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAb3xY55BzNtiCT0SQT/AZjC0anwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMyMDExWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjg3Nzk2ZGExZGRkMTkxNDNkYTEzNTUxOGMyNzIyZWYy MDQwODg4ODMxYjMxNjUwYTI2YWZjODZhZTcxZTYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuxngJ1eZLEGEa+4Ikowku84A6wArku1L16Os9dTfI7iDT 9s5w/CyGiwxXSXXMEe4Zfqof8G0RvHz8bU2F+PvTUqzQOA2mFF8McfYplazGkEFG sX5butunOiqKSUNeRYEsNe4SoQJlz9/kM92LB2VoK5C4RqwFltze5h3rl72HVQuT LAlYcChuzRbEUSfxG1K3M4vwFt/ObsnNke3xOSuXRQc0RVKZh30iSh9GskwRIVGs UunRo+SOU7MDSqxJK2w0/tFTGP/pd0D0OjSD7Q2r9cdPa0X0aHDPkPRAfuH/g6LX KEux+51hG/he70l8ShEn5BJsRaFBrBykK+6ZdN4zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFcf9wcq8mav+xHs27F5oS3ln2hswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4NjIyNTMyLTNmOWYtNDlmNS1hZDUyLWZlMmExMDUwOGRiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc29QAwDQYJKoZIhvcNAQELBQADggEBADrJrhJbdaPQZFQa/p9VjRefczz7 HYlie9zSUBQlO2R0jzdek5a3YP7gbIjC1w2t57Bu8Z6/U45i1M0FHf9pSI34V7lf Jm68h19VK4udNr5rF01+wTeF83A+ZSl36Hmva8lFm9+4w34yIQawzm1o2XDrF6vl 85KwW0Vph1BceAo8J5XMQw5vNOWlnjKFGpXgfNQlQECjQ4M5TT38AGz7WmWIxK4L rMu7o8xNLn9rvxP0hNuhAzJKwR/uE1BfF5pkzaGQVR2Mn5W5q9r7T2KyLIfIRk0n eXCNPy3XgVRDYx5oWrn+aj5dVh9reWi8CzIEnx79Zcyos4D0HP/3TegII34= -----END CERTIFICATE-----Generated at Sat Aug 22 07:42:12 2026 by rpki-client