$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca0b77d9-d118-43ac-a104-91410e5e22f3.roa File: ca0b77d9-d118-43ac-a104-91410e5e22f3.roa (raw, json) Hash identifier: LpSGq92rMGXNJxiPRdoJfdu/l+xgXQVNfMK3IQbDTQI= Subject key identifier: 6A:D8:0B:DD:B9:63:05:96:84:AC:DA:F6:F1:87:15:FB:60:2B:A5:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AF354DD5EC787D4A2A9B84F092C34C3CC6CAFC8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca0b77d9-d118-43ac-a104-91410e5e22f3.roa Signing time: Mon 03 Aug 2026 03:10:11 +0000 ROA not before: Mon 03 Aug 2026 03:10:11 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.206.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f3:54:dd:5e:c7:87:d4:a2:a9:b8:4f:09:2c:34:c3:cc:6c:af:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:10:11 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=04a9803638823566cc1a92032998a965e36eb9bf2283c7aa6b288caa9662143b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:56:6f:c1:f4:4e:30:1b:f1:e2:2b:6c:dc: d6:57:dd:92:03:63:07:a2:7c:39:30:6e:c1:09:cb: ce:bb:41:bd:0d:26:93:f0:a7:4e:88:c5:b7:e8:8a: 34:90:69:c4:af:b5:81:ad:ba:47:37:10:90:c2:85: 67:06:5c:f0:18:dd:02:c4:9e:5b:52:26:81:05:cf: 19:93:0c:30:49:12:52:13:a4:4e:20:11:04:81:ce: a0:06:99:4c:1c:ec:83:f2:20:de:d3:ab:23:14:67: 77:c3:76:56:2c:2b:18:d0:fa:53:b3:94:21:aa:6b: 56:50:b4:f1:35:e9:2a:fb:06:b5:81:e7:d5:11:32: e5:60:1e:ce:b3:85:17:e9:16:a6:a8:1b:80:40:dd: 41:e9:08:4a:77:83:83:fe:19:f2:91:ce:d4:d2:f3: 42:d7:b5:9e:f6:f6:95:cf:dd:43:1b:56:2d:21:d6: 4c:38:59:0a:da:5a:65:f6:12:92:eb:20:5d:da:8f: f3:4f:23:ba:a0:39:cb:64:52:d2:90:96:08:05:76: 7b:13:df:46:c2:87:3e:a3:3a:bf:91:0b:19:e4:79: 68:b2:a7:29:d4:5d:da:a2:dc:3b:b5:99:6d:3c:22: e0:e4:39:b3:5b:69:21:4c:7d:d3:12:91:08:8b:d9: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:0B:DD:B9:63:05:96:84:AC:DA:F6:F1:87:15:FB:60:2B:A5:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca0b77d9-d118-43ac-a104-91410e5e22f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.206.224.0/20 Signature Algorithm: sha256WithRSAEncryption 90:d7:49:1b:8c:2b:45:96:4e:a4:e7:5f:ec:57:6a:9c:ea:c2: 56:72:77:9b:c1:ab:4d:a3:dc:36:29:04:16:7e:fb:17:c4:aa: b2:5e:05:68:b5:98:32:3a:46:27:31:e8:c2:1d:0d:34:1d:20: c7:13:e0:9e:31:6e:ae:1d:72:54:2b:81:21:9e:74:58:4c:0d: 77:b9:e6:98:33:b0:35:4b:f2:40:06:77:03:24:39:2b:bb:9f: 16:64:a7:b4:66:88:af:fd:fe:47:32:de:84:45:69:da:dd:c1: 76:b8:bf:1c:22:48:30:7c:c5:2f:53:32:20:c5:3a:ee:19:8c: 16:11:00:c9:3d:9f:64:10:50:39:8a:10:25:48:af:12:f3:23: 73:fa:44:5a:2b:3e:ac:78:9e:2c:da:61:b7:c0:41:fb:3a:bf: 00:2f:73:b4:3e:a9:77:61:f0:70:65:30:a9:10:c8:49:13:5e: bd:ec:15:31:b4:f7:7f:dd:40:33:1f:a8:83:b8:b5:a1:8c:85: 81:91:eb:cd:02:fd:1d:40:a8:34:ec:12:35:5c:1d:94:26:0d: ad:98:21:af:7b:2e:cb:85:0b:e0:b3:4f:07:14:5f:93:22:f8: 24:13:c5:01:89:e3:69:16:f4:d4:81:22:43:ba:32:89:a5:ba: 3c:c4:32:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKvNU3V7Hh9SiqbhPCSw0w8xsr8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMxMDExWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGE5ODAzNjM4ODIzNTY2Y2MxYTkyMDMyOTk4YTk2NWUz NmViOWJmMjI4M2M3YWE2YjI4OGNhYTk2NjIxNDNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDilZvwfROMBvx4its3NZX3ZIDYweifDkwbsEJy867Qb0N JpPwp06IxbfoijSQacSvtYGtukc3EJDChWcGXPAY3QLEnltSJoEFzxmTDDBJElIT pE4gEQSBzqAGmUwc7IPyIN7TqyMUZ3fDdlYsKxjQ+lOzlCGqa1ZQtPE16Sr7BrWB 59URMuVgHs6zhRfpFqaoG4BA3UHpCEp3g4P+GfKRztTS80LXtZ729pXP3UMbVi0h 1kw4WQraWmX2EpLrIF3aj/NPI7qgOctkUtKQlggFdnsT30bChz6jOr+RCxnkeWiy pynUXdqi3Du1mW08IuDkObNbaSFMfdMSkQiL2Qz3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUatgL3bljBZaErNr28YcV+2ArpdowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhMGI3N2Q5LWQxMTgtNDNhYy1hMTA0LTkxNDEwZTVlMjJmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2zuAwDQYJKoZIhvcNAQELBQADggEBAJDXSRuMK0WWTqTnX+xXapzqwlZy d5vBq02j3DYpBBZ++xfEqrJeBWi1mDI6Ricx6MIdDTQdIMcT4J4xbq4dclQrgSGe dFhMDXe55pgzsDVL8kAGdwMkOSu7nxZkp7RmiK/9/kcy3oRFadrdwXa4vxwiSDB8 xS9TMiDFOu4ZjBYRAMk9n2QQUDmKECVIrxLzI3P6RForPqx4nizaYbfAQfs6vwAv c7Q+qXdh8HBlMKkQyEkTXr3sFTG093/dQDMfqIO4taGMhYGR680C/R1AqDTsEjVc HZQmDa2YIa97LsuFC+CzTwcUX5Mi+CQTxQGJ42kW9NSBIkO6MomlujzEMtQ= -----END CERTIFICATE-----Generated at Sat Aug 8 07:02:53 2026 by rpki-client