$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfda1d73-d672-4c18-81b1-8cf7cf163017.roa File: cfda1d73-d672-4c18-81b1-8cf7cf163017.roa (raw, json) Hash identifier: BfoJAJ7CkofRd65VlOjdb0j2aUWie3wiOQrInNZmHuw= Subject key identifier: 39:0E:C9:FC:6E:1B:1A:E1:76:A6:A9:21:9C:1C:13:09:D3:E3:57:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 069F8B213C749D34EB0E3D24111C0F418F37D510 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfda1d73-d672-4c18-81b1-8cf7cf163017.roa Signing time: Mon 27 Jul 2026 01:11:15 +0000 ROA not before: Mon 27 Jul 2026 01:11:15 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9f:8b:21:3c:74:9d:34:eb:0e:3d:24:11:1c:0f:41:8f:37:d5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:11:15 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=1bf98ff4d4c8e4d9c14cc499d2c623fcd4425dd7eaf4f8e5879bd1678dc82b82, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:c6:6e:e0:46:1b:22:34:35:68:60:d9:13: 38:49:08:81:f1:70:21:14:60:74:26:23:1b:15:53: 65:5b:93:20:a8:6f:e2:f2:40:f5:85:16:04:31:bb: 6a:fd:bb:8c:e6:7b:70:ef:b5:64:4b:e0:49:4b:b1: d7:40:2d:90:1a:84:00:df:19:78:b0:a4:9d:90:4d: 39:f1:6d:39:20:cd:8c:d1:41:6a:3b:b9:63:51:8b: f7:37:28:22:64:f9:c5:87:25:7a:e4:c0:43:d3:b2: ab:bb:88:37:0d:0d:a3:8d:29:a2:ca:61:41:68:4b: 0f:fb:80:db:0e:4e:ac:48:45:12:d2:a4:bf:6d:2c: eb:7b:40:a5:bf:34:a3:c0:4a:dc:3c:39:24:dd:70: c8:b7:a0:0b:13:b9:4c:51:2f:65:37:11:f0:09:74: 9b:e3:b6:93:45:5c:b4:f0:ad:db:e7:72:39:e3:09: 09:d8:fb:3d:7a:fb:36:0b:1c:72:1b:b9:e0:0c:a6: 04:60:c2:2f:42:bc:de:94:67:5c:35:ca:aa:46:0f: 69:63:ff:55:3a:5e:bb:a0:ec:63:66:52:b8:00:1e: dc:5c:85:2f:bf:b4:b4:07:27:79:9c:6e:c3:51:3f: 33:1e:0d:0f:45:0d:38:df:23:bd:27:62:30:17:c8: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0E:C9:FC:6E:1B:1A:E1:76:A6:A9:21:9C:1C:13:09:D3:E3:57:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cfda1d73-d672-4c18-81b1-8cf7cf163017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption a3:ff:35:26:a9:9d:b3:46:06:0d:a5:40:4b:d5:1c:c5:55:bc: f1:cf:0e:91:7a:d2:3b:e8:d2:0e:69:f1:42:2e:66:4a:57:62: 63:29:c6:bd:82:bb:4c:89:60:86:de:99:fa:04:86:59:4e:85: c4:da:c3:f5:c8:fb:7f:cf:14:f1:5c:0e:b5:80:23:52:78:3c: 8d:8c:00:94:34:06:9f:e7:23:3d:ab:8c:35:57:68:a8:9b:78: d6:14:39:68:74:0f:be:79:2f:2a:3b:c0:22:7f:7a:30:c9:76: 7d:3f:84:ae:93:cd:32:7d:29:7e:ae:2a:b1:49:79:5c:5e:66: 0d:57:c9:95:bd:b2:9a:59:11:b8:27:65:e4:66:74:ef:53:ea: bf:1e:3a:f3:91:24:a0:fd:9b:da:c7:37:53:38:4f:6a:aa:76: 15:13:4e:47:e4:a1:21:2f:64:41:8c:d1:40:b9:07:2a:5b:97: 18:9e:3f:39:90:42:b7:b3:02:78:92:37:60:06:88:b8:d0:31: a9:52:f7:65:20:a6:ed:2b:60:a0:98:2a:ac:b4:5b:28:1c:e0: ce:34:3a:9e:64:5f:f7:28:8a:62:56:1e:30:cd:7e:3a:b6:3d: d1:be:05:8f:be:7e:5c:56:9c:48:96:30:a9:e5:e1:a1:a4:af: 19:92:b3:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBp+LITx0nTTrDj0kERwPQY831RAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDExMTE1WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmY5OGZmNGQ0YzhlNGQ5YzE0Y2M0OTlkMmM2MjNmY2Q0 NDI1ZGQ3ZWFmNGY4ZTU4NzliZDE2NzhkYzgyYjgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC82sZu4EYbIjQ1aGDZEzhJCIHxcCEUYHQmIxsVU2VbkyCo b+LyQPWFFgQxu2r9u4zme3DvtWRL4ElLsddALZAahADfGXiwpJ2QTTnxbTkgzYzR QWo7uWNRi/c3KCJk+cWHJXrkwEPTsqu7iDcNDaONKaLKYUFoSw/7gNsOTqxIRRLS pL9tLOt7QKW/NKPAStw8OSTdcMi3oAsTuUxRL2U3EfAJdJvjtpNFXLTwrdvncjnj CQnY+z16+zYLHHIbueAMpgRgwi9CvN6UZ1w1yqpGD2lj/1U6Xrug7GNmUrgAHtxc hS+/tLQHJ3mcbsNRPzMeDQ9FDTjfI70nYjAXyKTbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOQ7J/G4bGuF2pqkhnBwTCdPjVyMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmZGExZDczLWQ2NzItNGMxOC04MWIxLThjZjdjZjE2MzAxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc22wAwDQYJKoZIhvcNAQELBQADggEBAKP/NSapnbNGBg2lQEvVHMVVvPHP DpF60jvo0g5p8UIuZkpXYmMpxr2Cu0yJYIbemfoEhllOhcTaw/XI+3/PFPFcDrWA I1J4PI2MAJQ0Bp/nIz2rjDVXaKibeNYUOWh0D755Lyo7wCJ/ejDJdn0/hK6TzTJ9 KX6uKrFJeVxeZg1XyZW9sppZEbgnZeRmdO9T6r8eOvORJKD9m9rHN1M4T2qqdhUT TkfkoSEvZEGM0UC5BypblxiePzmQQrezAniSN2AGiLjQMalS92Ugpu0rYKCYKqy0 Wygc4M40Op5kX/coimJWHjDNfjq2PdG+BY++flxWnEiWMKnl4aGkrxmSs8M= -----END CERTIFICATE-----Generated at Sat Sep 19 11:21:06 2026 by rpki-client