$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce730157-dfc2-4863-abf7-98180fa9b36b.roa File: ce730157-dfc2-4863-abf7-98180fa9b36b.roa (raw, json) Hash identifier: BJgQBiu0rjIKI0+1u+x9Zz834tbOuBR6QeZtDZ02A7E= Subject key identifier: 28:F2:5E:C4:5D:66:B4:F9:A8:4F:22:AE:13:DE:8E:A3:37:0D:F6:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5288A43593E37C4119FAF6F3B71482D362175A1F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce730157-dfc2-4863-abf7-98180fa9b36b.roa Signing time: Sat 08 Aug 2026 00:40:38 +0000 ROA not before: Sat 08 Aug 2026 00:40:38 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:a4:35:93:e3:7c:41:19:fa:f6:f3:b7:14:82:d3:62:17:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 8 00:40:38 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=23b3498bc80f3d5f4ede66af8b442fb7ce3525c513f3fdadc1e6e978556dbcb0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:38:5b:dc:be:30:e9:a1:bb:60:d1:36:ae: 89:5e:c6:e5:be:32:85:ad:9c:8f:9b:3f:17:94:2c: 11:aa:43:2b:1c:d6:dc:99:f0:7a:ba:bd:6b:c3:6e: d4:1e:fa:e5:d7:a2:10:ac:0f:60:52:96:b1:39:be: 05:4e:50:34:55:b0:2a:38:00:14:f4:a9:31:55:73: a3:f6:ca:29:9d:4d:40:6a:3e:58:ba:98:39:3b:bf: 8e:97:52:89:d8:8b:00:8c:ef:74:54:e1:1e:d8:74: 01:68:1c:6a:72:9c:77:cc:6e:c2:55:af:ce:f0:aa: 73:1e:92:6f:45:a1:87:ff:b4:f2:a4:52:ad:7d:8e: 2b:2a:ac:2d:f2:02:91:b7:e3:9e:84:80:4c:94:87: e7:c3:54:74:66:2a:58:38:4c:25:cb:c3:b1:d7:d8: 55:dc:49:76:39:6c:e8:a0:24:2e:de:26:a2:bd:b9: 1a:6a:be:42:b7:c9:d4:58:42:24:79:38:33:73:d5: eb:c5:13:fb:99:e5:19:74:7c:f2:33:13:7e:cf:5d: b9:44:1b:58:9e:17:1a:b6:7b:b6:7d:42:a3:2c:1f: 42:73:e3:e0:b1:3b:dc:ea:6c:60:82:a3:f6:b6:6a: fc:f8:61:c2:ea:7f:b6:8a:38:05:ec:c5:19:0c:35: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F2:5E:C4:5D:66:B4:F9:A8:4F:22:AE:13:DE:8E:A3:37:0D:F6:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce730157-dfc2-4863-abf7-98180fa9b36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.128.0/18 Signature Algorithm: sha256WithRSAEncryption 13:74:a9:db:de:91:40:c6:f1:13:76:21:ce:fe:46:ae:11:93: 4e:bc:a0:a5:4f:f4:db:d1:80:d9:15:e9:4b:a0:a3:24:1e:5e: 95:ed:6d:c7:73:53:93:95:23:4a:88:e1:74:30:58:a4:52:fe: 0e:de:ca:aa:73:22:b5:93:37:6e:3c:a7:48:3d:e3:f8:4a:d8: 61:51:c1:69:fe:b6:f4:48:d9:71:ed:ea:63:f4:3c:6a:84:32: ce:23:1a:ce:fc:06:8f:04:bd:00:4a:11:ca:8d:4a:23:d4:d0: 5a:67:a2:dc:28:b6:50:b2:58:54:97:cf:11:41:ad:9f:88:65: 3d:87:89:3a:a8:8e:a4:d1:0a:27:8b:3a:1a:97:61:c2:48:97: ba:9e:52:8b:fe:40:82:09:48:df:f9:89:1d:c3:5c:d6:b2:6f: bf:a5:db:fd:be:fb:67:2c:e8:4e:27:87:98:be:4f:bd:71:e5: b7:c8:13:80:3c:8c:1d:7f:97:84:84:11:4b:02:d6:09:b9:b2: 6a:3a:6c:31:31:19:6a:65:e0:a1:2a:d5:e4:22:87:eb:75:80: d7:6b:f2:a7:27:dd:d2:af:00:ea:bb:b3:07:fd:f1:08:c9:00: 5f:da:4b:a4:3e:80:e4:c3:f5:57:ed:40:a0:1a:0d:f4:c4:c2: 17:06:13:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUoikNZPjfEEZ+vbztxSC02IXWh8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA4MDA0MDM4WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2IzNDk4YmM4MGYzZDVmNGVkZTY2YWY4YjQ0MmZiN2Nl MzUyNWM1MTNmM2ZkYWRjMWU2ZTk3ODU1NmRiY2IwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYVThb3L4w6aG7YNE2rolexuW+MoWtnI+bPxeULBGqQysc 1tyZ8Hq6vWvDbtQe+uXXohCsD2BSlrE5vgVOUDRVsCo4ABT0qTFVc6P2yimdTUBq Pli6mDk7v46XUonYiwCM73RU4R7YdAFoHGpynHfMbsJVr87wqnMekm9FoYf/tPKk Uq19jisqrC3yApG3456EgEyUh+fDVHRmKlg4TCXLw7HX2FXcSXY5bOigJC7eJqK9 uRpqvkK3ydRYQiR5ODNz1evFE/uZ5Rl0fPIzE37PXblEG1ieFxq2e7Z9QqMsH0Jz 4+CxO9zqbGCCo/a2avz4YcLqf7aKOAXsxRkMNe5BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKPJexF1mtPmoTyKuE96OozcN9qIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlNzMwMTU3LWRmYzItNDg2My1hYmY3LTk4MTgwZmE5YjM2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2wIAwDQYJKoZIhvcNAQELBQADggEBABN0qdvekUDG8RN2Ic7+Rq4Rk068 oKVP9NvRgNkV6UugoyQeXpXtbcdzU5OVI0qI4XQwWKRS/g7eyqpzIrWTN248p0g9 4/hK2GFRwWn+tvRI2XHt6mP0PGqEMs4jGs78Bo8EvQBKEcqNSiPU0FpnotwotlCy WFSXzxFBrZ+IZT2HiTqojqTRCieLOhqXYcJIl7qeUov+QIIJSN/5iR3DXNayb7+l 2/2++2cs6E4nh5i+T71x5bfIE4A8jB1/l4SEEUsC1gm5smo6bDExGWpl4KEq1eQi h+t1gNdr8qcn3dKvAOq7swf98QjJAF/aS6Q+gOTD9VftQKAaDfTEwhcGE3o= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:22 2026 by rpki-client