$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66eaf27-6000-4c1d-95a8-839eb1c55554.roa File: d66eaf27-6000-4c1d-95a8-839eb1c55554.roa (raw, json) Hash identifier: g9tT+370XiYgKkM8ldYT5WGUXzCtEI4b54EnDCBAKKY= Subject key identifier: 41:1F:11:DA:35:D4:07:79:D4:81:66:96:DC:EA:1F:C2:EB:92:3E:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 669E46C608CA93125915F2C805A7C92D442339AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66eaf27-6000-4c1d-95a8-839eb1c55554.roa Signing time: Fri 07 Aug 2026 02:40:57 +0000 ROA not before: Fri 07 Aug 2026 02:40:57 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.168.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9e:46:c6:08:ca:93:12:59:15:f2:c8:05:a7:c9:2d:44:23:39:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 02:40:57 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=27570e3795ba2a66c43757b63621918ec56aa1242936fa04251a1c034318a911, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:d9:b5:df:aa:a9:da:41:a3:1d:14:d9:27: 3e:d3:1f:95:66:c1:21:ef:63:73:2b:88:53:f2:bc: 12:ec:5f:5d:7e:b6:e3:16:09:c8:52:30:af:83:5e: da:36:a5:3e:ac:53:e0:f0:bf:3d:88:6f:c6:c3:4f: 36:35:7d:d0:c2:90:08:73:dd:05:a2:01:7b:0f:7b: 50:17:e6:24:6a:02:4d:38:f5:f0:05:5f:00:15:77: fe:38:3c:b2:11:41:1c:9f:b7:7e:d5:a5:9c:be:96: fc:40:96:ec:29:e9:c5:34:99:fa:3e:51:83:30:19: d9:f2:07:3b:77:0a:59:22:52:69:bf:ae:07:15:95: 37:6f:56:ba:6e:99:2b:0f:fd:5f:55:87:35:2e:d6: cd:cb:23:a4:6a:ce:00:86:98:cb:ca:99:67:ee:36: 9c:19:0f:40:1f:b8:5b:06:57:09:5b:80:99:d2:da: b7:d8:5b:7b:fd:c2:19:87:be:b9:66:24:0a:0d:b7: 00:13:b2:9f:b7:12:b3:d0:54:b1:c8:b6:5b:1f:9c: 98:f1:bc:58:76:e3:72:ff:8b:a5:84:1d:1a:ec:de: 8d:5e:e2:c3:bc:72:47:88:1b:d8:63:25:13:02:06: a8:c7:d8:c1:f4:09:ad:ad:cb:b7:d9:6a:94:d0:2a: 98:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1F:11:DA:35:D4:07:79:D4:81:66:96:DC:EA:1F:C2:EB:92:3E:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66eaf27-6000-4c1d-95a8-839eb1c55554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.168.162.0/23 Signature Algorithm: sha256WithRSAEncryption 21:24:87:0a:bd:b9:3f:9e:eb:a0:5b:81:d9:63:76:06:61:cd: ac:22:87:5b:07:79:35:9d:63:9f:07:07:c8:0c:b3:fb:3c:5d: de:3e:d2:c9:da:ae:8f:6a:93:c1:26:2b:22:c3:0c:0d:7d:10: 16:87:96:ee:b4:cb:9e:2f:04:47:ec:22:a0:7a:90:46:b9:26: bf:29:71:0f:ca:b8:32:04:0a:c4:68:20:be:79:6e:91:0e:6e: 2f:b5:18:34:f8:65:bc:aa:e8:af:f5:fb:1e:d4:df:96:24:cd: b1:22:2d:2e:3c:04:45:ac:b2:a8:d1:fc:25:ce:81:54:d8:48: 37:e7:7c:6c:13:02:de:14:0d:a9:f0:53:ea:94:c0:ce:dc:6a: 34:66:63:a8:ce:77:df:bf:aa:11:9d:1c:fd:b5:2f:20:34:62: 2e:dc:0c:2f:07:d1:eb:9a:2d:ac:a5:3e:ec:57:de:4c:89:37: 11:98:e3:dd:cd:b8:b3:34:19:70:54:d0:3f:09:6f:d8:b3:fc: 8d:48:fa:e1:fd:3c:a5:5c:74:75:e4:bd:e7:4a:2a:35:b3:3b: bf:00:1c:65:2c:d2:bc:cd:0e:d7:09:40:07:81:a2:9b:28:91: 7d:b5:f0:d3:38:ef:e2:8b:73:30:c5:db:b9:ff:bd:5d:fe:f6: 3d:62:0f:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZp5GxgjKkxJZFfLIBafJLUQjOaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDI0MDU3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzU3MGUzNzk1YmEyYTY2YzQzNzU3YjYzNjIxOTE4ZWM1 NmFhMTI0MjkzNmZhMDQyNTFhMWMwMzQzMThhOTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjWNm136qp2kGjHRTZJz7TH5VmwSHvY3MriFPyvBLsX11+ tuMWCchSMK+DXto2pT6sU+Dwvz2Ib8bDTzY1fdDCkAhz3QWiAXsPe1AX5iRqAk04 9fAFXwAVd/44PLIRQRyft37VpZy+lvxAluwp6cU0mfo+UYMwGdnyBzt3ClkiUmm/ rgcVlTdvVrpumSsP/V9VhzUu1s3LI6RqzgCGmMvKmWfuNpwZD0AfuFsGVwlbgJnS 2rfYW3v9whmHvrlmJAoNtwATsp+3ErPQVLHItlsfnJjxvFh243L/i6WEHRrs3o1e 4sO8ckeIG9hjJRMCBqjH2MH0Ca2ty7fZapTQKphjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQR8R2jXUB3nUgWaW3OofwuuSPsMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2NmVhZjI3LTYwMDAtNGMxZC05NWE4LTgzOWViMWM1NTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPqKIwDQYJKoZIhvcNAQELBQADggEBACEkhwq9uT+e66BbgdljdgZhzawi h1sHeTWdY58HB8gMs/s8Xd4+0snaro9qk8EmKyLDDA19EBaHlu60y54vBEfsIqB6 kEa5Jr8pcQ/KuDIECsRoIL55bpEObi+1GDT4Zbyq6K/1+x7U35YkzbEiLS48BEWs sqjR/CXOgVTYSDfnfGwTAt4UDanwU+qUwM7cajRmY6jOd9+/qhGdHP21LyA0Yi7c DC8H0euaLaylPuxX3kyJNxGY493NuLM0GXBU0D8Jb9iz/I1I+uH9PKVcdHXkvedK KjWzO78AHGUs0rzNDtcJQAeBopsokX218NM47+KLczDF27n/vV3+9j1iD/U= -----END CERTIFICATE-----Generated at Sat Sep 19 13:07:18 2026 by rpki-client