$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbaebade-db19-4eda-915e-8fc7715617b2.roa File: bbaebade-db19-4eda-915e-8fc7715617b2.roa (raw, json) Hash identifier: JHywV7l87mINYi0PZ7MBvS2l/1vcLPS0j9TkrV4vhHs= Subject key identifier: E1:E0:FA:FC:8F:2C:B7:EF:C2:A8:0B:1C:62:32:55:82:95:D1:B1:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 762D421F9A372C67AF7E4860FD96EE93F0E58427 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbaebade-db19-4eda-915e-8fc7715617b2.roa Signing time: Mon 27 Jul 2026 01:40:07 +0000 ROA not before: Mon 27 Jul 2026 01:40:07 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.189.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2d:42:1f:9a:37:2c:67:af:7e:48:60:fd:96:ee:93:f0:e5:84:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:40:07 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=017011b5eee925a73dcd1914e8c005bbc164f72ae6f05bfca64cc25f0428c7dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:e0:95:a0:2c:25:62:b3:51:9b:22:ab:5c: 13:bf:59:7c:5a:f6:6d:b8:ca:2c:7c:f1:90:ef:cc: 54:63:0f:fc:d3:b8:c8:0d:e2:c1:09:09:93:0c:6a: 74:26:e3:b7:ac:00:55:51:28:f0:8b:41:32:ce:4a: 5f:ca:fc:04:e9:94:99:2e:55:7b:b8:39:40:6b:cf: dc:9c:64:96:5a:ac:7b:65:df:6d:3b:63:68:9b:2e: e1:65:9e:64:05:d1:c5:f6:d5:f6:83:ac:66:21:25: f6:42:5c:77:b7:19:bb:2d:bf:1e:da:56:ed:ef:19: 4a:c0:75:ac:6c:c1:27:d4:17:2d:e8:4b:88:4e:eb: f0:f0:e3:fb:82:d7:18:f1:9e:ac:a3:21:d8:33:de: a8:13:ee:4b:9c:9c:93:28:f8:7a:12:42:62:fe:e1: 8b:98:66:6e:32:e6:08:e6:72:4d:a0:24:1d:c1:b0: 12:22:91:b6:8f:e7:ff:f6:88:66:5e:96:ce:81:d3: 2b:3b:1a:b2:d3:b5:af:bc:94:15:50:d0:ba:47:21: c7:c8:19:93:f3:e3:6b:00:76:09:0c:39:45:c5:03: 44:51:61:24:f1:81:63:b1:fc:04:98:63:14:aa:0d: 49:a5:5f:89:f1:2b:5a:01:c9:0f:15:73:fe:08:5c: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E0:FA:FC:8F:2C:B7:EF:C2:A8:0B:1C:62:32:55:82:95:D1:B1:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbaebade-db19-4eda-915e-8fc7715617b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.189.192.0/19 Signature Algorithm: sha256WithRSAEncryption 23:c8:e4:dd:26:c3:d0:f2:fd:62:bc:06:a9:cf:2e:c0:1b:60: af:9f:5c:8a:ab:41:d0:0c:cd:ef:5d:2a:cb:90:aa:18:9f:90: dd:7a:f1:8d:91:0d:ce:fc:a6:37:9b:07:1f:31:89:7a:be:0f: 27:f8:22:c0:69:81:a6:ac:2f:f6:a4:1d:8c:3d:0d:85:d3:90: c0:12:74:0e:5f:62:b3:4a:1e:86:49:26:32:0d:97:a0:00:d9: 34:c0:f1:cb:e7:d2:bf:9d:8b:15:04:64:7f:64:9d:79:67:07: 35:12:62:6b:5f:b5:04:54:63:03:c2:80:4b:67:60:c9:cc:02: a1:62:e6:14:f2:17:cc:a6:41:ec:b2:fe:08:cb:46:b8:e2:c8: a8:c0:45:ec:6f:1a:b3:2a:e8:6a:4c:42:7a:19:94:8b:f9:df: 25:01:87:2a:39:8d:d1:c9:38:e5:9d:14:c7:22:22:5d:d3:14: 7f:42:79:73:bb:85:de:eb:41:7d:c6:26:31:b7:fa:c2:81:07: a7:f5:f3:ba:91:ca:dd:ba:f5:9c:69:16:e1:f6:9a:a3:af:02: 43:fe:e0:4a:e4:a3:02:18:d1:22:49:9a:e4:53:ba:8c:c2:f6: 98:2f:1b:d3:81:e5:9e:06:1e:8c:42:f3:ec:f9:40:28:9b:58: 24:2c:75:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdi1CH5o3LGevfkhg/Zbuk/DlhCcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDE0MDA3WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTcwMTFiNWVlZTkyNWE3M2RjZDE5MTRlOGMwMDViYmMx NjRmNzJhZTZmMDViZmNhNjRjYzI1ZjA0MjhjN2RjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEP+CVoCwlYrNRmyKrXBO/WXxa9m24yix88ZDvzFRjD/zT uMgN4sEJCZMManQm47esAFVRKPCLQTLOSl/K/ATplJkuVXu4OUBrz9ycZJZarHtl 3207Y2ibLuFlnmQF0cX21faDrGYhJfZCXHe3Gbstvx7aVu3vGUrAdaxswSfUFy3o S4hO6/Dw4/uC1xjxnqyjIdgz3qgT7kucnJMo+HoSQmL+4YuYZm4y5gjmck2gJB3B sBIikbaP5//2iGZels6B0ys7GrLTta+8lBVQ0LpHIcfIGZPz42sAdgkMOUXFA0RR YSTxgWOx/ASYYxSqDUmlX4nxK1oByQ8Vc/4IXORPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4eD6/I8st+/CqAscYjJVgpXRsWAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiYWViYWRlLWRiMTktNGVkYS05MTVlLThmYzc3MTU2MTdiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2vcAwDQYJKoZIhvcNAQELBQADggEBACPI5N0mw9Dy/WK8BqnPLsAbYK+f XIqrQdAMze9dKsuQqhifkN168Y2RDc78pjebBx8xiXq+Dyf4IsBpgaasL/akHYw9 DYXTkMASdA5fYrNKHoZJJjINl6AA2TTA8cvn0r+dixUEZH9knXlnBzUSYmtftQRU YwPCgEtnYMnMAqFi5hTyF8ymQeyy/gjLRrjiyKjARexvGrMq6GpMQnoZlIv53yUB hyo5jdHJOOWdFMciIl3TFH9CeXO7hd7rQX3GJjG3+sKBB6f187qRyt269ZxpFuH2 mqOvAkP+4ErkowIY0SJJmuRTuozC9pgvG9OB5Z4GHoxC8+z5QCibWCQsdfk= -----END CERTIFICATE-----Generated at Sat Aug 8 07:00:34 2026 by rpki-client