$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4c50eb0-c31c-497f-bb1f-2a22a5ce0449.roa File: b4c50eb0-c31c-497f-bb1f-2a22a5ce0449.roa (raw, json) Hash identifier: zKmD82C2nGTewpFHOBekhrxSS0DZ0T9ioatw05Fb/5s= Subject key identifier: 15:1C:2E:E0:ED:1F:C9:FB:95:72:07:49:7C:01:47:C9:AC:EE:65:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D902766E2FBE742AC41324ABCB9D16D2064A067 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4c50eb0-c31c-497f-bb1f-2a22a5ce0449.roa Signing time: Sat 19 Sep 2026 00:00:05 +0000 ROA not before: Sat 19 Sep 2026 00:00:05 +0000 ROA not after: Fri 18 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.71.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:90:27:66:e2:fb:e7:42:ac:41:32:4a:bc:b9:d1:6d:20:64:a0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:00:05 2026 GMT Not After : Dec 18 23:59:59 2026 GMT Subject: serialNumber=f3219c922abeff69fdef051d7958385fe7a316fdcafb63e65b016e255d31dbe6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:c2:9d:7e:2c:9a:a9:1d:63:e2:d3:f0:6b: 04:5e:5a:41:df:03:c7:f0:6e:22:35:25:08:2b:d4: 9b:8f:18:71:ee:5f:b8:f9:f2:ed:ab:82:31:f4:7a: 3d:b2:c1:73:fd:f3:f7:7b:e8:b3:28:d5:3b:cc:0c: 86:24:56:2a:1c:29:7e:65:db:12:e1:17:21:53:08: c5:44:20:d1:e2:db:05:61:78:78:e2:13:c6:59:7d: 22:32:eb:8f:40:4f:82:71:7d:6c:5f:c7:88:3c:50: 38:85:a2:d9:74:32:0c:9e:15:5a:eb:12:92:82:91: 58:10:33:d0:56:5d:c1:49:91:28:9a:ad:06:81:b4: 91:8e:20:ea:69:64:49:12:b4:90:64:cc:6f:c9:ad: 85:55:16:8d:b2:7a:cc:cb:e8:f1:a7:a4:a4:12:10: 85:e9:0d:de:c9:4c:43:07:f8:ab:57:40:e6:50:9c: f7:70:52:04:8b:01:87:76:1f:ee:64:eb:54:bb:70: eb:7f:94:fd:f4:e9:8b:a2:b7:74:fa:d9:c3:76:b8: 1f:b1:6f:52:9f:47:59:de:1b:11:5f:22:ca:40:6b: 2e:99:97:0c:59:2b:8b:81:be:7b:70:51:df:95:00: ac:c1:5c:0a:6e:a0:70:a6:a9:02:6c:3b:e0:1f:94: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:2E:E0:ED:1F:C9:FB:95:72:07:49:7C:01:47:C9:AC:EE:65:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4c50eb0-c31c-497f-bb1f-2a22a5ce0449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.71.193.0/24 Signature Algorithm: sha256WithRSAEncryption 31:4e:ff:74:03:d6:1c:8f:bd:a9:71:e0:7c:00:c2:90:96:1e: f0:52:79:51:66:18:67:60:e7:66:db:84:a1:10:9d:72:dd:0a: 2d:fc:d8:d9:1c:52:b1:4c:db:ca:27:cf:e9:96:f6:91:e3:9b: fc:73:0f:96:55:5d:8f:a4:a9:27:80:2d:2b:ff:df:35:e3:9e: ef:b9:98:68:9f:09:0a:da:fa:62:e3:c8:6c:78:ad:87:a6:a7: ec:8f:96:f0:89:51:6b:1c:d0:5e:98:34:1e:02:3a:fa:74:2e: ce:2c:2f:ef:65:cf:91:d5:98:c7:b3:99:80:00:aa:6a:48:ff: 39:37:ff:97:f1:e5:db:1b:86:cd:c0:6b:c5:9e:99:33:83:db: 5c:56:ad:c9:be:11:1b:71:5a:f3:cb:f1:ff:1e:34:34:be:d0: 75:0a:1f:bc:8f:82:3a:b9:c6:5a:05:27:6c:19:62:67:9d:f6: 14:51:c2:37:51:ba:e9:2a:c8:f5:67:7d:7e:65:ea:95:5b:9a: dd:76:28:6f:f7:35:4e:60:19:a6:52:5e:c3:59:21:f5:cc:f8: 0f:35:4d:cd:ec:31:d2:cc:7c:94:4e:ca:20:c4:53:b2:a8:4a: dd:91:98:97:89:16:d9:8f:5c:74:45:63:61:a7:75:7a:f0:c7: b4:04:39:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbZAnZuL750KsQTJKvLnRbSBkoGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwOTE5MDAwMDA1WhcNMjYxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzIxOWM5MjJhYmVmZjY5ZmRlZjA1MWQ3OTU4Mzg1ZmU3 YTMxNmZkY2FmYjYzZTY1YjAxNmUyNTVkMzFkYmU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMhMKdfiyaqR1j4tPwawReWkHfA8fwbiI1JQgr1JuPGHHu X7j58u2rgjH0ej2ywXP98/d76LMo1TvMDIYkViocKX5l2xLhFyFTCMVEINHi2wVh eHjiE8ZZfSIy649AT4JxfWxfx4g8UDiFotl0MgyeFVrrEpKCkVgQM9BWXcFJkSia rQaBtJGOIOppZEkStJBkzG/JrYVVFo2yeszL6PGnpKQSEIXpDd7JTEMH+KtXQOZQ nPdwUgSLAYd2H+5k61S7cOt/lP306Yuit3T62cN2uB+xb1KfR1neGxFfIspAay6Z lwxZK4uBvntwUd+VAKzBXApuoHCmqQJsO+AflEKbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFRwu4O0fyfuVcgdJfAFHyazuZU8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0YzUwZWIwLWMzMWMtNDk3Zi1iYjFmLTJhMjJhNWNlMDQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjR8EwDQYJKoZIhvcNAQELBQADggEBADFO/3QD1hyPvalx4HwAwpCWHvBS eVFmGGdg52bbhKEQnXLdCi382NkcUrFM28onz+mW9pHjm/xzD5ZVXY+kqSeALSv/ 3zXjnu+5mGifCQra+mLjyGx4rYemp+yPlvCJUWsc0F6YNB4COvp0Ls4sL+9lz5HV mMezmYAAqmpI/zk3/5fx5dsbhs3Aa8WemTOD21xWrcm+ERtxWvPL8f8eNDS+0HUK H7yPgjq5xloFJ2wZYmed9hRRwjdRuukqyPVnfX5l6pVbmt12KG/3NU5gGaZSXsNZ IfXM+A81Tc3sMdLMfJROyiDEU7KoSt2RmJeJFtmPXHRFY2GndXrwx7QEOYY= -----END CERTIFICATE-----Generated at Sat Sep 19 12:12:13 2026 by rpki-client