$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da2f477f-89ed-4340-acad-e965e9211d56.roa File: da2f477f-89ed-4340-acad-e965e9211d56.roa (raw, json) Hash identifier: lyqypkDxH8FYEq+J+e0eKta4uSvjK6br5pbsxn4a9IA= Subject key identifier: 49:F5:99:12:2D:29:E3:F8:5E:CA:21:E6:20:E3:CB:33:92:7D:CA:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53A5FEC7FC058C5855606E6BD1415257B66B3ECE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da2f477f-89ed-4340-acad-e965e9211d56.roa Signing time: Mon 27 Jul 2026 02:40:46 +0000 ROA not before: Mon 27 Jul 2026 02:40:46 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.98.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a5:fe:c7:fc:05:8c:58:55:60:6e:6b:d1:41:52:57:b6:6b:3e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:40:46 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=46ca0b0f1f623f8f0bffae9a1949c4c4f961a10e70e2d358e8b23578f7c7f77b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:e6:11:e3:11:f2:87:83:e4:82:d1:91:8b: a8:4a:3a:f5:b0:4d:61:71:3c:16:a6:d2:5b:c8:aa: 35:50:fa:58:41:24:b4:81:7e:c2:4a:30:9e:31:70: 5e:6b:76:35:24:22:cb:94:d4:af:f9:64:24:0e:28: 37:db:41:18:67:ab:b1:51:62:02:05:5b:01:44:29: ac:cc:d0:eb:17:78:99:c4:f2:e1:60:82:eb:7e:df: d8:bf:96:c5:65:67:97:fd:6b:3e:14:cd:b1:0e:27: fc:00:88:79:87:9e:6a:70:e9:cc:e5:01:c3:92:df: 69:6c:74:e6:db:b1:b1:90:1e:ff:0c:85:44:65:9c: a7:2f:df:b8:4b:e7:1b:21:42:f8:cb:6a:2e:35:22: 52:6f:f1:1d:e9:12:a9:a5:ab:c9:a5:c6:13:e8:c5: b7:51:b6:8e:56:23:9f:71:1f:68:9b:66:0a:d3:7a: fb:95:54:83:5e:36:81:d6:e4:5a:68:bd:ac:04:dd: 56:61:f2:10:97:1a:c7:c8:27:7a:d3:97:0c:f8:8f: c0:f2:b7:b1:51:02:8e:bd:82:56:35:69:9d:78:9f: e6:ed:e7:d7:86:a0:53:63:59:de:93:93:3f:e6:46: 15:34:c5:53:e7:c3:5b:4b:dc:a0:da:bf:5a:f1:2b: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F5:99:12:2D:29:E3:F8:5E:CA:21:E6:20:E3:CB:33:92:7D:CA:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da2f477f-89ed-4340-acad-e965e9211d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.98.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6a:0a:94:25:8b:c1:fd:01:b1:b6:2e:80:5c:0b:e0:6d:3d:39: 4e:01:d8:04:9e:a5:fc:ce:42:e1:77:45:16:e3:3b:48:15:ab: c2:4a:ba:35:2a:26:ac:76:ee:ee:9b:fe:98:e7:75:e6:ef:99: f1:53:27:2c:fb:67:07:5e:46:2b:b1:20:0c:d5:3e:53:16:7c: 34:78:0b:55:3c:53:c0:60:d4:53:be:c6:30:58:57:db:55:02: 8d:1d:72:a7:45:27:a9:f8:1b:95:d2:41:d9:e7:26:24:5e:57: c0:37:e5:68:46:d1:42:62:25:ab:24:d4:2e:76:c5:28:98:92: 2b:bc:d8:9d:a0:51:5a:93:0f:bd:85:e4:a7:8b:37:90:ca:30: f4:4a:d7:96:05:ff:55:fe:e6:24:26:c3:3f:ed:75:9c:99:a8: 39:c1:e9:24:6e:57:d2:40:30:4f:ae:c7:fe:c6:f8:c3:64:a5: f0:1c:9f:8c:84:23:03:be:16:78:dc:ce:8d:13:34:29:57:26: c4:12:cc:8c:80:53:83:b3:04:bf:d2:3d:d7:e0:b5:c2:f7:1a: 99:3e:bf:7a:73:df:7a:fa:98:a7:69:04:b6:fc:ff:a5:27:e3: 13:5b:63:1b:76:a8:52:a7:a7:18:0c:5c:12:ed:29:44:42:4f: 2e:4c:0c:8f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU6X+x/wFjFhVYG5r0UFSV7ZrPs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDI0MDQ2WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmNhMGIwZjFmNjIzZjhmMGJmZmFlOWExOTQ5YzRjNGY5 NjFhMTBlNzBlMmQzNThlOGIyMzU3OGY3YzdmNzdiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoZ+YR4xHyh4PkgtGRi6hKOvWwTWFxPBam0lvIqjVQ+lhB JLSBfsJKMJ4xcF5rdjUkIsuU1K/5ZCQOKDfbQRhnq7FRYgIFWwFEKazM0OsXeJnE 8uFggut+39i/lsVlZ5f9az4UzbEOJ/wAiHmHnmpw6czlAcOS32lsdObbsbGQHv8M hURlnKcv37hL5xshQvjLai41IlJv8R3pEqmlq8mlxhPoxbdRto5WI59xH2ibZgrT evuVVINeNoHW5FpovawE3VZh8hCXGsfIJ3rTlwz4j8Dyt7FRAo69glY1aZ14n+bt 59eGoFNjWd6Tkz/mRhU0xVPnw1tL3KDav1rxK2P5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSfWZEi0p4/heyiHmIOPLM5J9yuowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhMmY0NzdmLTg5ZWQtNDM0MC1hY2FkLWU5NjVlOTIxMWQ1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEDYjANBgkqhkiG9w0BAQsFAAOCAQEAagqUJYvB/QGxti6AXAvgbT05TgHY BJ6l/M5C4XdFFuM7SBWrwkq6NSomrHbu7pv+mOd15u+Z8VMnLPtnB15GK7EgDNU+ UxZ8NHgLVTxTwGDUU77GMFhX21UCjR1yp0UnqfgbldJB2ecmJF5XwDflaEbRQmIl qyTULnbFKJiSK7zYnaBRWpMPvYXkp4s3kMow9ErXlgX/Vf7mJCbDP+11nJmoOcHp JG5X0kAwT67H/sb4w2Sl8ByfjIQjA74WeNzOjRM0KVcmxBLMjIBTg7MEv9I91+C1 wvcamT6/enPfevqYp2kEtvz/pSfjE1tjG3aoUqenGAxcEu0pREJPLkwMjw== -----END CERTIFICATE-----Generated at Sat Sep 19 12:09:37 2026 by rpki-client