$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aff5dea2-ed68-4f40-a2c4-b1a1dfba0253.roa File: aff5dea2-ed68-4f40-a2c4-b1a1dfba0253.roa (raw, json) Hash identifier: 5ypDcYrsIox6PRMGQon/vJHVVBhUFpBbzyUUVo6rA2w= Subject key identifier: A6:AB:6A:A8:A9:3E:A8:09:9D:BE:C4:12:83:37:F9:14:E8:03:C4:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D1511441211629C4B3EBCE974816DC23DDDCFB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aff5dea2-ed68-4f40-a2c4-b1a1dfba0253.roa Signing time: Mon 27 Jul 2026 01:50:49 +0000 ROA not before: Mon 27 Jul 2026 01:50:49 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.96.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:15:11:44:12:11:62:9c:4b:3e:bc:e9:74:81:6d:c2:3d:dd:cf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:50:49 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=27d1ddfea64be482aff8d01dc355e4e8e533169e11c20901d64dd8d7ae1b6dfa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:55:ee:15:f9:6e:8f:58:43:64:82:b8:bf: 5a:7b:27:99:be:b0:53:21:56:5a:69:a6:34:71:ab: 17:03:e4:99:3f:15:b3:fe:e6:2d:eb:00:ed:a8:6e: 5b:fe:0c:e2:74:45:48:8f:e8:f5:34:39:1e:db:eb: 41:f8:2d:47:f3:ab:21:bc:a3:88:45:06:76:a8:f4: d6:ef:ac:47:f7:bc:d6:60:e2:20:00:e8:4c:79:b4: 10:75:10:bb:2d:be:75:8c:0c:3a:7b:0e:54:13:71: 0a:cc:19:90:18:87:cc:8a:a0:39:92:a0:97:02:ae: 1e:d9:85:6c:88:af:91:20:54:1f:97:df:61:eb:5b: 7f:81:e1:7e:fb:b2:9d:92:33:62:17:5e:8c:3a:54: b6:76:be:6b:a6:c7:1e:b0:93:bc:51:0e:29:fb:d7: a5:b2:9d:0d:de:91:31:70:fe:97:1d:fd:82:c5:2a: 35:be:9c:80:e5:88:fe:41:23:59:ba:91:ef:b1:c2: 64:f4:4a:f7:8b:08:22:d0:96:fb:52:6e:5d:1e:e7: b9:44:f2:05:12:dc:f8:8d:90:24:fb:08:f5:3e:0c: 6d:cf:52:40:e7:c7:d6:99:3a:e3:ab:88:16:40:77: a5:38:d7:f7:fb:57:6c:86:a3:04:4f:86:e9:fe:84: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AB:6A:A8:A9:3E:A8:09:9D:BE:C4:12:83:37:F9:14:E8:03:C4:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aff5dea2-ed68-4f40-a2c4-b1a1dfba0253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.96.0.0/15 Signature Algorithm: sha256WithRSAEncryption a9:e7:7c:fe:34:e0:2a:42:fc:c5:c4:e8:d8:9c:ac:33:e9:07: 0f:60:07:86:03:ca:02:06:4f:ac:fc:10:e1:91:88:4e:cd:59: 45:f2:7a:c6:b0:73:b2:17:f6:1e:d4:1d:5f:6a:ee:1a:82:29: 9b:de:1a:22:f4:63:30:56:6b:56:56:dc:01:84:17:38:48:ae: 35:f3:8c:76:03:50:55:9a:dc:a9:9c:23:58:86:20:43:58:d7: 07:9a:ea:d0:37:39:2c:66:93:13:0d:8c:1b:0c:a7:7d:fc:2b: 69:33:c9:f4:c3:be:d3:9b:3d:14:24:31:66:d9:21:b3:d3:a0: 14:18:ac:d4:91:e3:8a:8b:cc:59:51:0c:ba:54:5e:92:2f:e7: da:88:9c:95:90:98:af:36:ff:48:9b:4d:65:df:b0:17:dd:bc: 84:62:cc:2d:0a:0d:03:d8:d1:3f:58:65:76:ea:78:83:36:73: 4e:cd:4a:fd:e1:e8:55:4e:cc:15:2e:94:6d:38:56:ea:78:11: ff:9a:62:c4:26:a9:9f:ac:34:82:9b:c9:ed:41:c4:cf:e4:ff: 74:f3:93:95:c2:27:64:0e:56:01:8a:95:fa:e4:79:c2:b3:f4: a4:ec:d5:6b:1e:8b:6d:62:ef:04:41:fe:f3:d5:b8:42:92:50: c8:81:4e:ca -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbRURRBIRYpxLPrzpdIFtwj3dz7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDE1MDQ5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2QxZGRmZWE2NGJlNDgyYWZmOGQwMWRjMzU1ZTRlOGU1 MzMxNjllMTFjMjA5MDFkNjRkZDhkN2FlMWI2ZGZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5U1XuFfluj1hDZIK4v1p7J5m+sFMhVlpppjRxqxcD5Jk/ FbP+5i3rAO2oblv+DOJ0RUiP6PU0OR7b60H4LUfzqyG8o4hFBnao9NbvrEf3vNZg 4iAA6Ex5tBB1ELstvnWMDDp7DlQTcQrMGZAYh8yKoDmSoJcCrh7ZhWyIr5EgVB+X 32HrW3+B4X77sp2SM2IXXow6VLZ2vmumxx6wk7xRDin716WynQ3ekTFw/pcd/YLF KjW+nIDliP5BI1m6ke+xwmT0SveLCCLQlvtSbl0e57lE8gUS3PiNkCT7CPU+DG3P UkDnx9aZOuOriBZAd6U41/f7V2yGowRPhun+hBo7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpqtqqKk+qAmdvsQSgzf5FOgDxAUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmZjVkZWEyLWVkNjgtNGY0MC1hMmM0LWIxYTFkZmJhMDI1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEDYDANBgkqhkiG9w0BAQsFAAOCAQEAqed8/jTgKkL8xcTo2JysM+kHD2AH hgPKAgZPrPwQ4ZGITs1ZRfJ6xrBzshf2HtQdX2ruGoIpm94aIvRjMFZrVlbcAYQX OEiuNfOMdgNQVZrcqZwjWIYgQ1jXB5rq0Dc5LGaTEw2MGwynffwraTPJ9MO+05s9 FCQxZtkhs9OgFBis1JHjiovMWVEMulReki/n2oiclZCYrzb/SJtNZd+wF928hGLM LQoNA9jRP1hldup4gzZzTs1K/eHoVU7MFS6UbThW6ngR/5pixCapn6w0gpvJ7UHE z+T/dPOTlcInZA5WAYqV+uR5wrP0pOzVax6LbWLvBEH+89W4QpJQyIFOyg== -----END CERTIFICATE-----Generated at Sat Aug 22 08:40:01 2026 by rpki-client