$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf3b81f5-4705-4dbe-a7df-5f78cf65bd35.roa File: bf3b81f5-4705-4dbe-a7df-5f78cf65bd35.roa (raw, json) Hash identifier: wxEV8KuGS31zEZyc4t6XA8z1vBuDnoO9Q5dNQ3zzmRk= Subject key identifier: 26:5F:92:D9:09:54:41:6D:A9:5B:01:55:C5:6C:E7:05:2F:27:5D:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DAC769BA9122A4EC2B2CDE93E85CDB30EC369F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf3b81f5-4705-4dbe-a7df-5f78cf65bd35.roa Signing time: Sat 01 Aug 2026 00:50:53 +0000 ROA not before: Sat 01 Aug 2026 00:50:53 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ac:76:9b:a9:12:2a:4e:c2:b2:cd:e9:3e:85:cd:b3:0e:c3:69:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 1 00:50:53 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=683931576cffcab5e9a064a34c6481551deb383e5d889b87fa323750aa54be83, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c5:2a:c4:06:cc:1b:16:7a:33:b2:15:47:76: 7b:70:bf:fa:3a:84:ab:44:77:c3:1c:58:20:bc:5d: 58:c1:e2:8a:07:b2:6a:b4:9d:f0:64:05:62:77:ff: 97:24:92:c2:ef:d8:01:07:96:9d:06:5f:bc:93:b6: ef:f4:11:83:10:8c:11:95:75:76:67:1f:9e:bb:f2: 14:37:3d:ad:d5:8a:f5:6d:8e:47:85:c8:0f:8f:49: 4a:d6:43:96:77:19:98:fa:e7:5f:62:ee:cc:20:44: 0c:96:2d:35:22:19:d6:f8:2e:cc:cb:32:b9:be:7d: 3f:ef:e5:b0:39:11:c5:01:ae:6c:d4:bf:87:7f:8f: 1a:3c:b1:16:91:80:35:a2:70:8d:c2:2a:43:c2:07: 95:58:00:18:f1:ec:94:b6:95:c4:c4:80:4f:39:28: fa:9c:4f:9d:1e:15:73:79:5f:35:c7:60:6a:dd:98: 91:1e:de:77:0e:7e:10:c3:bc:65:4e:c1:30:37:d4: 3e:d4:18:8a:1d:79:5d:88:a8:36:cc:a2:2a:4a:a5: 2e:7f:11:3e:20:62:e3:21:09:e3:ff:e6:f9:4c:91: 89:bf:89:81:1b:89:7d:36:53:49:18:e9:97:97:6f: 4a:95:d3:04:1b:65:b8:14:67:85:08:c0:01:d0:d8: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5F:92:D9:09:54:41:6D:A9:5B:01:55:C5:6C:E7:05:2F:27:5D:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf3b81f5-4705-4dbe-a7df-5f78cf65bd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.123.0/24 Signature Algorithm: sha256WithRSAEncryption ae:4f:70:8e:a8:fd:1b:db:46:bf:58:30:90:96:bb:42:17:cd: 4d:45:8c:eb:6d:db:64:72:20:c1:24:1b:e5:0e:da:35:b7:09: 8e:bc:63:9b:6b:8b:5c:7b:23:14:71:29:50:54:28:da:6a:da: f1:e9:59:4c:fa:58:59:29:c9:c4:26:d9:97:17:90:bf:f4:2d: 30:4b:37:31:5b:20:99:91:29:ce:cd:32:62:ab:8a:09:e3:5c: 8e:5d:30:3a:8d:33:81:14:1d:94:9a:20:ca:91:32:c9:96:88: 0a:9c:7c:bb:6e:91:4b:bb:2f:a3:a4:05:e8:c0:8c:2e:d5:48: e9:b2:40:50:bc:75:c5:b2:f1:ba:2e:b3:62:89:0f:c9:43:32: 18:c8:bb:fb:87:36:95:e4:06:51:6d:9e:fa:4d:37:b4:10:9f: 7f:2d:f6:10:ac:b5:dc:a5:08:26:e7:f7:5d:6f:42:4a:92:a0: 13:9a:0c:92:3a:b0:29:11:51:7c:1b:04:09:3c:64:d4:1c:e1: b9:88:9a:33:3f:ff:c3:fd:2b:e8:43:19:5b:9f:c4:51:d0:f9: 80:fc:46:0d:8d:60:8c:e2:6d:9d:e2:7c:ea:a0:2a:91:5d:28: f0:45:97:6b:13:51:75:75:ce:43:97:0e:f5:64:af:98:fd:82: 99:80:00:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPax2m6kSKk7Css3pPoXNsw7DafgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDA1MDUzWhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODM5MzE1NzZjZmZjYWI1ZTlhMDY0YTM0YzY0ODE1NTFk ZWIzODNlNWQ4ODliODdmYTMyMzc1MGFhNTRiZTgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuxSrEBswbFnozshVHdntwv/o6hKtEd8McWCC8XVjB4ooH smq0nfBkBWJ3/5ckksLv2AEHlp0GX7yTtu/0EYMQjBGVdXZnH5678hQ3Pa3VivVt jkeFyA+PSUrWQ5Z3GZj6519i7swgRAyWLTUiGdb4LszLMrm+fT/v5bA5EcUBrmzU v4d/jxo8sRaRgDWicI3CKkPCB5VYABjx7JS2lcTEgE85KPqcT50eFXN5XzXHYGrd mJEe3ncOfhDDvGVOwTA31D7UGIodeV2IqDbMoipKpS5/ET4gYuMhCeP/5vlMkYm/ iYEbiX02U0kY6ZeXb0qV0wQbZbgUZ4UIwAHQ2ES7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJl+S2QlUQW2pWwFVxWznBS8nXU0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmM2I4MWY1LTQ3MDUtNGRiZS1hN2RmLTVmNzhjZjY1YmQzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3HswDQYJKoZIhvcNAQELBQADggEBAK5PcI6o/RvbRr9YMJCWu0IXzU1F jOtt22RyIMEkG+UO2jW3CY68Y5tri1x7IxRxKVBUKNpq2vHpWUz6WFkpycQm2ZcX kL/0LTBLNzFbIJmRKc7NMmKrignjXI5dMDqNM4EUHZSaIMqRMsmWiAqcfLtukUu7 L6OkBejAjC7VSOmyQFC8dcWy8bous2KJD8lDMhjIu/uHNpXkBlFtnvpNN7QQn38t 9hCstdylCCbn911vQkqSoBOaDJI6sCkRUXwbBAk8ZNQc4bmImjM//8P9K+hDGVuf xFHQ+YD8Rg2NYIzibZ3ifOqgKpFdKPBFl2sTUXV1zkOXDvVkr5j9gpmAAKo= -----END CERTIFICATE-----Generated at Sat Sep 19 11:19:39 2026 by rpki-client