$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9726032-5914-4d64-af65-99fa3331da41.roa File: a9726032-5914-4d64-af65-99fa3331da41.roa (raw, json) Hash identifier: XZtuX/lPGGqBSS9B/rAhpD99zNwrUhZ+YFjXC1C13D8= Subject key identifier: DD:60:84:47:C2:36:54:B5:CA:BA:8B:35:65:D7:F0:66:0D:4A:D1:5F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65C132765977C2C3BF703BC48855D59CB89A4416 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9726032-5914-4d64-af65-99fa3331da41.roa Signing time: Fri 07 Aug 2026 03:30:15 +0000 ROA not before: Fri 07 Aug 2026 03:30:15 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c1:32:76:59:77:c2:c3:bf:70:3b:c4:88:55:d5:9c:b8:9a:44:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 03:30:15 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=352da832781dec6187d21f24d3d38dab809e16c9ce5332a2e04f883ae667420f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:a6:95:ce:ae:8e:80:86:56:84:22:2f:b8: 1b:ed:68:dd:c4:6b:69:01:6c:1b:88:ec:63:ce:5b: 24:20:76:62:1a:1a:00:13:eb:0e:ec:ed:ba:9e:ed: 75:f9:bc:c5:09:31:f7:c2:fd:ca:10:82:90:61:5b: b1:fc:6f:af:b0:61:04:9d:4b:5d:4a:cf:3b:84:12: 88:31:2b:43:ad:e6:dd:bb:df:ba:83:93:6a:6d:9d: 99:74:f8:cd:8f:aa:13:99:6b:32:11:1c:55:fc:0b: 3f:f0:3c:9f:17:ab:5b:31:e2:7b:45:96:42:71:90: 80:2a:ca:0b:5f:12:d5:9a:af:af:63:38:3d:9f:4d: a2:03:07:74:34:9a:9e:27:76:60:e2:e6:24:94:b7: f7:bf:e0:7b:34:1f:72:d3:f4:a6:c9:43:ea:e1:70: d8:e1:22:d7:17:88:0d:9a:4c:b3:f3:6b:76:7f:5a: 08:47:75:56:cb:0f:31:86:5d:24:c4:49:59:dc:d2: 42:5c:a3:b6:ad:dc:6d:f6:25:04:72:83:fe:7a:89: cc:09:ce:3e:10:ac:75:88:e6:c4:c5:82:a6:87:93: 5b:8c:34:0a:fd:e7:c1:f7:9f:50:b3:00:fd:d6:e0: 9f:9b:af:88:b6:0d:e0:28:0e:ac:b1:89:58:83:b9: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:84:47:C2:36:54:B5:CA:BA:8B:35:65:D7:F0:66:0D:4A:D1:5F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9726032-5914-4d64-af65-99fa3331da41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:e8:6d:5a:fd:49:24:c0:fb:bb:5d:50:c2:8a:c5:d4:fe:33: d4:0c:03:21:d6:96:39:83:01:32:63:c5:dc:32:7a:73:b3:01: 30:56:b2:af:5d:73:f3:1e:a4:45:ad:1a:21:ad:ba:1e:b6:63: 37:6f:7a:43:bc:37:49:d6:98:55:1c:ca:0a:a4:e3:3d:43:09: ea:79:68:00:00:d3:79:bb:07:97:f3:bb:ab:c5:f8:95:43:f8: 7c:0d:3c:76:b1:96:d9:4a:e8:59:80:2a:18:cf:45:48:c5:41: 6b:94:1f:3c:03:bc:9c:c6:f6:25:5c:10:88:e5:5c:27:db:21: 8e:02:8a:0f:60:5f:45:ae:93:4a:56:ca:98:89:96:76:f2:ad: 51:3e:e4:1e:f2:b7:aa:54:5b:70:6c:4f:37:26:65:9d:ce:64: 49:2b:88:94:a7:26:1d:f8:a7:dd:62:ce:48:c0:a1:95:85:6a: b2:95:74:95:48:f7:64:9c:fe:01:14:e5:3b:57:40:2c:30:fc: b1:db:51:fe:e7:90:08:69:24:de:8d:ca:f5:77:8c:04:da:01: 5c:c2:1a:29:c9:3c:15:04:7d:88:a0:09:8f:2b:25:95:dd:20: 0c:b1:33:d2:08:51:1d:a7:c3:27:4c:d4:5a:9f:bd:60:33:4c: e4:95:ae:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZcEydll3wsO/cDvEiFXVnLiaRBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDMzMDE1WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTJkYTgzMjc4MWRlYzYxODdkMjFmMjRkM2QzOGRhYjgw OWUxNmM5Y2U1MzMyYTJlMDRmODgzYWU2Njc0MjBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKnKaVzq6OgIZWhCIvuBvtaN3Ea2kBbBuI7GPOWyQgdmIa GgAT6w7s7bqe7XX5vMUJMffC/coQgpBhW7H8b6+wYQSdS11KzzuEEogxK0Ot5t27 37qDk2ptnZl0+M2PqhOZazIRHFX8Cz/wPJ8Xq1sx4ntFlkJxkIAqygtfEtWar69j OD2fTaIDB3Q0mp4ndmDi5iSUt/e/4Hs0H3LT9KbJQ+rhcNjhItcXiA2aTLPza3Z/ WghHdVbLDzGGXSTESVnc0kJco7at3G32JQRyg/56icwJzj4QrHWI5sTFgqaHk1uM NAr958H3n1CzAP3W4J+br4i2DeAoDqyxiViDucdhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3WCER8I2VLXKuos1ZdfwZg1K0V8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5NzI2MDMyLTU5MTQtNGQ2NC1hZjY1LTk5ZmEzMzMxZGE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDpwAwDQYJKoZIhvcNAQELBQADggEBACrobVr9SSTA+7tdUMKKxdT+M9QM AyHWljmDATJjxdwyenOzATBWsq9dc/MepEWtGiGtuh62YzdvekO8N0nWmFUcygqk 4z1DCep5aAAA03m7B5fzu6vF+JVD+HwNPHaxltlK6FmAKhjPRUjFQWuUHzwDvJzG 9iVcEIjlXCfbIY4Cig9gX0Wuk0pWypiJlnbyrVE+5B7yt6pUW3BsTzcmZZ3OZEkr iJSnJh34p91izkjAoZWFarKVdJVI92Sc/gEU5TtXQCww/LHbUf7nkAhpJN6NyvV3 jATaAVzCGinJPBUEfYigCY8rJZXdIAyxM9IIUR2nwydM1FqfvWAzTOSVroo= -----END CERTIFICATE-----Generated at Sat Aug 22 07:42:17 2026 by rpki-client