$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa File: b1a9d485-3494-46cc-b104-fcee651d4b2b.roa (raw, json) Hash identifier: YZur1ysBXHB1PdFuAR+RzIaKpWXyrJirF+akvDhPxIU= Subject key identifier: 08:E3:32:1A:3C:52:E3:24:92:31:DB:C4:2D:6D:76:6D:B4:B1:20:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35DA86B57814C9046F229769D0541E2251F1B96D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa Signing time: Fri 07 Aug 2026 03:00:38 +0000 ROA not before: Fri 07 Aug 2026 03:00:38 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.79.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:da:86:b5:78:14:c9:04:6f:22:97:69:d0:54:1e:22:51:f1:b9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 03:00:38 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=dd14cb20de3560e83bd7074677422d37b7e9b8f7e77f7f495c1012c55969db22, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:35:2e:88:4a:bf:35:16:bc:51:86:92:33: 63:93:a5:9c:82:a6:dd:08:fb:d9:6c:19:7c:9b:92: ce:1b:a6:72:77:9d:bb:45:55:60:6f:6e:f6:68:75: e7:0f:e3:36:31:2b:65:b9:ff:a4:1b:55:c8:09:4b: a0:74:55:76:90:8d:f7:bc:be:53:eb:d6:58:96:84: e0:23:17:09:02:7a:80:61:fc:2d:2c:1e:ac:c6:b9: 32:1e:b2:dc:a1:cb:02:3a:57:2f:32:c9:e8:8b:0f: de:02:65:73:bf:ea:c7:1f:3f:c0:8c:24:f7:97:f5: 8b:d3:27:07:6d:fe:35:04:a5:00:19:a7:0f:21:b6: 69:06:16:21:ee:c2:70:62:2e:27:74:9d:a4:b5:4a: a0:8e:e6:ff:3f:f4:b2:23:de:f5:17:4b:b6:a8:4d: 1b:35:28:6b:54:cb:e4:d4:fc:4d:d2:89:7d:f6:5f: 98:45:15:f8:4e:e9:37:8d:d6:83:42:99:09:07:48: f0:3a:51:bf:2c:84:42:dc:a5:12:a4:39:a5:37:3d: 71:40:0c:e7:df:b4:c0:a3:49:74:20:c3:3a:85:0e: 5f:3a:81:b4:eb:7e:db:ed:f8:31:ea:33:3e:28:1c: ec:ca:02:1f:d7:37:2d:71:70:e2:31:94:84:d4:82: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E3:32:1A:3C:52:E3:24:92:31:DB:C4:2D:6D:76:6D:B4:B1:20:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 31:07:c6:e1:c9:17:4c:89:d3:75:d9:54:2f:6b:03:18:46:67: 27:b5:2a:fb:e7:ab:37:fa:37:e7:fd:5d:c7:db:43:c0:59:d9: bc:3b:f3:47:b1:ae:ce:7e:32:55:70:96:34:a9:95:29:4c:d3: af:3b:7d:dd:91:87:ef:27:dd:35:c8:66:c8:5c:17:7c:ab:23: 2b:cf:0f:8d:11:92:52:fc:11:31:c3:48:11:6d:95:22:ab:b1: 59:04:b7:5f:a7:e6:bf:80:b8:87:ed:62:c9:92:d7:8d:3a:95: 4c:04:06:a8:a7:51:a0:7d:23:84:05:f6:7b:62:48:6d:da:12: 06:d8:6e:2f:29:1c:b7:50:4e:62:eb:13:e5:0d:ab:2e:fb:ca: 6b:f1:3f:4c:37:09:b6:2f:03:df:a7:c9:21:28:a4:ee:58:bd: 6e:fe:cd:72:15:15:9b:7f:db:54:f3:e3:7d:16:01:f8:f4:5b: de:7b:82:48:82:72:de:23:e5:25:79:40:70:3f:99:0c:4b:fc: 0d:0d:a8:0a:f9:32:18:e8:d6:93:57:43:4b:4b:1f:23:09:02: af:0d:c6:84:0e:3d:99:b8:8e:01:12:64:9b:8b:20:18:0d:89: 6d:09:05:52:4a:9b:56:4f:25:d4:0c:6b:84:dd:38:ac:fe:df: 75:fb:b9:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNdqGtXgUyQRvIpdp0FQeIlHxuW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDMwMDM4WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDE0Y2IyMGRlMzU2MGU4M2JkNzA3NDY3NzQyMmQzN2I3 ZTliOGY3ZTc3ZjdmNDk1YzEwMTJjNTU5NjlkYjIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4JjUuiEq/NRa8UYaSM2OTpZyCpt0I+9lsGXybks4bpnJ3 nbtFVWBvbvZodecP4zYxK2W5/6QbVcgJS6B0VXaQjfe8vlPr1liWhOAjFwkCeoBh /C0sHqzGuTIestyhywI6Vy8yyeiLD94CZXO/6scfP8CMJPeX9YvTJwdt/jUEpQAZ pw8htmkGFiHuwnBiLid0naS1SqCO5v8/9LIj3vUXS7aoTRs1KGtUy+TU/E3SiX32 X5hFFfhO6TeN1oNCmQkHSPA6Ub8shELcpRKkOaU3PXFADOfftMCjSXQgwzqFDl86 gbTrftvt+DHqMz4oHOzKAh/XNy1xcOIxlITUglbTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCOMyGjxS4ySSMdvELW12bbSxIO0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxYTlkNDg1LTM0OTQtNDZjYy1iMTA0LWZjZWU2NTFkNGIyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2T4AwDQYJKoZIhvcNAQELBQADggEBADEHxuHJF0yJ03XZVC9rAxhGZye1 Kvvnqzf6N+f9XcfbQ8BZ2bw780exrs5+MlVwljSplSlM0687fd2Rh+8n3TXIZshc F3yrIyvPD40RklL8ETHDSBFtlSKrsVkEt1+n5r+AuIftYsmS1406lUwEBqinUaB9 I4QF9ntiSG3aEgbYbi8pHLdQTmLrE+UNqy77ymvxP0w3CbYvA9+nySEopO5YvW7+ zXIVFZt/21Tz430WAfj0W957gkiCct4j5SV5QHA/mQxL/A0NqAr5Mhjo1pNXQ0tL HyMJAq8NxoQOPZm4jgESZJuLIBgNiW0JBVJKm1ZPJdQMa4TdOKz+33X7uTQ= -----END CERTIFICATE-----Generated at Sat Aug 22 09:42:34 2026 by rpki-client