$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca30e5c9-a844-42c4-a110-2d3e6a88ad7d.roa File: ca30e5c9-a844-42c4-a110-2d3e6a88ad7d.roa (raw, json) Hash identifier: 1pRCUojFopuuaHdD/PKHQYDD+rxZ+4vEgsJ19focPi0= Subject key identifier: 0C:30:A0:72:C4:37:27:FB:70:F5:98:97:09:D0:43:43:96:01:91:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10E9C18EBA012EA6DF87A65A88B8107989D5B578 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca30e5c9-a844-42c4-a110-2d3e6a88ad7d.roa Signing time: Sat 01 Aug 2026 01:01:38 +0000 ROA not before: Sat 01 Aug 2026 01:01:38 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e9:c1:8e:ba:01:2e:a6:df:87:a6:5a:88:b8:10:79:89:d5:b5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 1 01:01:38 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=bd116e7e85615b0014a03467d960c51f8b0080961ccf1bb6680545f0b30bb72e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:ba:38:d7:11:ca:dd:32:78:5f:61:de:47: 7a:5e:59:fe:a8:48:ea:5e:08:0a:a0:d0:89:91:41: 7b:c2:1a:14:b0:3f:48:ac:e5:1d:60:14:c4:ef:50: a8:76:77:7d:3b:c7:ee:07:69:ab:b9:1a:33:b9:6f: 0e:f4:54:58:d1:ac:43:2a:8b:df:3c:db:1b:3b:90: cc:96:de:b1:c3:33:8e:6b:77:66:e8:1b:0d:57:a7: 80:2d:fe:06:38:35:dc:39:df:52:61:a1:3d:16:aa: 26:de:02:2a:34:ba:7c:0e:f4:9d:b4:3f:41:97:ec: c6:f3:47:be:3d:35:18:61:92:74:79:ab:84:ed:e9: 92:54:c9:b9:c2:58:01:e1:3e:85:0c:9f:ea:73:e8: cf:5f:1e:75:26:81:02:cd:47:84:4c:ca:01:f5:cb: 94:89:d7:f2:35:ae:8c:77:d7:f1:5b:db:48:e9:62: ed:4f:5c:f4:de:70:d9:3a:f3:79:eb:40:98:52:6f: 07:30:e7:7a:12:b0:4b:2e:54:7c:29:af:79:b1:37: 89:16:f1:65:8f:05:b3:03:52:4b:07:23:02:c5:89: de:ad:9e:a8:85:9a:a2:61:1a:cc:24:af:fb:e2:ba: 63:ea:db:52:c1:90:64:6c:3a:b8:59:07:c6:ea:75: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:A0:72:C4:37:27:FB:70:F5:98:97:09:D0:43:43:96:01:91:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca30e5c9-a844-42c4-a110-2d3e6a88ad7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.31.0/24 Signature Algorithm: sha256WithRSAEncryption 69:75:c4:53:52:ca:bd:8d:d7:b5:42:62:7b:c2:9d:b0:e4:1c: c9:45:cd:9f:d8:72:b3:e7:2b:b6:83:09:b6:7a:d2:53:de:d9: 31:82:19:09:7e:ea:a0:eb:23:a7:4d:cc:ec:c3:5e:a2:6a:b0: a8:53:b7:55:68:47:7d:a2:fc:17:b1:8f:27:c0:2f:19:82:60: 77:b3:c3:da:cc:65:ec:14:f2:2c:44:81:f9:24:71:19:89:13: bd:e8:90:b6:5c:aa:1c:c2:b6:da:7f:89:bc:2f:71:a4:03:e0: 4b:7c:18:4d:f5:d9:24:52:32:c7:33:cd:f7:d7:bf:4c:0f:71: 9e:09:55:56:ec:aa:62:55:89:d7:bc:f3:93:8c:83:d2:e2:81: 14:61:01:a5:b3:76:9c:e6:31:92:ca:3d:8c:2e:e6:04:ca:d3: db:c2:40:07:e9:94:19:40:6c:db:fe:19:7c:54:33:ab:7a:a2: 56:5e:d3:2e:f1:ed:f0:6e:09:4a:25:a8:7b:42:7b:6d:28:09: fa:1c:3d:ed:02:6b:51:83:e9:df:32:8c:9e:d6:fe:28:af:19: f7:86:08:29:04:1d:3c:33:ce:6f:88:fc:34:3f:f7:d9:1f:6b: 00:a7:06:5d:b9:9c:61:25:5c:a5:bc:8d:9f:ad:c1:99:2c:0d: 41:f3:75:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEOnBjroBLqbfh6ZaiLgQeYnVtXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDEwMTM4WhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDExNmU3ZTg1NjE1YjAwMTRhMDM0NjdkOTYwYzUxZjhi MDA4MDk2MWNjZjFiYjY2ODA1NDVmMGIzMGJiNzJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrKro41xHK3TJ4X2HeR3peWf6oSOpeCAqg0ImRQXvCGhSw P0is5R1gFMTvUKh2d307x+4Haau5GjO5bw70VFjRrEMqi9882xs7kMyW3rHDM45r d2boGw1Xp4At/gY4Ndw531JhoT0WqibeAio0unwO9J20P0GX7MbzR749NRhhknR5 q4Tt6ZJUybnCWAHhPoUMn+pz6M9fHnUmgQLNR4RMygH1y5SJ1/I1rox31/Fb20jp Yu1PXPTecNk683nrQJhSbwcw53oSsEsuVHwpr3mxN4kW8WWPBbMDUksHIwLFid6t nqiFmqJhGswkr/viumPq21LBkGRsOrhZB8bqdYZTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDDCgcsQ3J/tw9ZiXCdBDQ5YBkSIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhMzBlNWM5LWE4NDQtNDJjNC1hMTEwLTJkM2U2YTg4YWQ3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3B8wDQYJKoZIhvcNAQELBQADggEBAGl1xFNSyr2N17VCYnvCnbDkHMlF zZ/YcrPnK7aDCbZ60lPe2TGCGQl+6qDrI6dNzOzDXqJqsKhTt1VoR32i/BexjyfA LxmCYHezw9rMZewU8ixEgfkkcRmJE73okLZcqhzCttp/ibwvcaQD4Et8GE312SRS MsczzffXv0wPcZ4JVVbsqmJVide885OMg9LigRRhAaWzdpzmMZLKPYwu5gTK09vC QAfplBlAbNv+GXxUM6t6olZe0y7x7fBuCUolqHtCe20oCfocPe0Ca1GD6d8yjJ7W /iivGfeGCCkEHTwzzm+I/DQ/99kfawCnBl25nGElXKW8jZ+twZksDUHzdYI= -----END CERTIFICATE-----Generated at Sat Sep 19 12:13:35 2026 by rpki-client