$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa File: df8dba07-310a-4b8a-8825-01ce44c750ab.roa (raw, json) Hash identifier: I5VeSao26vYDjhkHnUUj96ViLeZCd5FE/T7cs7UaM7Y= Subject key identifier: 64:7B:E2:90:29:97:39:FA:CE:F7:79:5C:DB:9F:7A:50:88:13:5C:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A31F707F0502F2861F46B0F93B71C0B224877DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa Signing time: Mon 27 Jul 2026 02:10:07 +0000 ROA not before: Mon 27 Jul 2026 02:10:07 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 34.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:31:f7:07:f0:50:2f:28:61:f4:6b:0f:93:b7:1c:0b:22:48:77:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:10:07 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=402407cf5a09ec092bc65f5718542c452e84dc93869dd5c23a4620a2e77556de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:72:ba:e7:38:0e:86:1c:ae:40:14:37:0e: 95:84:2a:a8:e6:78:78:f8:8f:00:a4:fa:f1:a2:ba: 36:df:62:92:3d:15:9d:f4:cb:0d:d3:03:dc:b4:a8: 70:70:a1:db:62:18:61:90:2c:74:cf:1f:a1:75:91: 4a:66:fe:0e:fe:4d:e6:d9:3d:6e:6a:5b:ef:b6:f0: a1:cf:b9:cb:34:5e:77:9c:ef:36:f4:81:42:e9:39: 3a:13:1a:d4:de:f6:72:e8:50:d2:87:8d:73:1b:af: a6:d4:14:57:22:c3:cb:6a:ea:84:75:f4:08:41:c1: 38:ce:32:e9:7f:71:a9:26:12:6f:54:ed:52:d1:ec: 3d:c1:a6:ea:6b:5c:4a:39:51:4f:a4:07:79:6d:b7: e9:8a:e7:91:90:85:70:3b:8e:c1:c6:ad:fd:e9:30: e0:61:c9:e1:eb:0e:cf:42:63:33:26:54:40:f5:47: 44:fa:73:70:96:9d:87:60:43:f3:01:95:e5:96:b6: 5b:eb:59:e1:22:8c:73:e3:c2:b3:70:ff:a5:fc:8b: 21:3f:fc:f0:38:28:d5:dd:2c:c9:d6:46:d8:fe:f5: 4b:ba:0d:0e:bc:69:26:c0:0f:d2:84:3f:d3:2b:67: b0:0b:6e:cb:b5:9b:60:8a:24:a8:6b:c0:f6:d0:9e: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:E2:90:29:97:39:FA:CE:F7:79:5C:DB:9F:7A:50:88:13:5C:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.252.64.0/18 Signature Algorithm: sha256WithRSAEncryption 16:b3:a2:87:3f:16:9f:a1:2a:06:73:5b:2c:66:0d:78:65:f6: d7:86:a8:04:be:2e:c7:8d:60:01:26:0c:64:d0:87:2c:6e:4f: 8f:f7:92:a6:fd:27:2f:a8:59:0b:b8:38:40:9d:9e:18:9c:f2: 81:00:42:e4:41:37:a2:43:47:3c:26:90:17:c8:b1:c2:51:cf: c9:24:34:18:14:f1:38:56:9c:03:15:c3:b2:e8:cb:c3:a6:00: db:7d:db:9f:4f:f7:58:87:8a:75:15:34:ed:a0:1e:14:3e:af: d7:a0:30:7c:82:1a:fa:ab:4f:c7:e8:93:2f:2d:23:4f:f2:06: 8d:51:92:dc:73:62:15:ed:4d:2b:6d:1f:f6:3e:93:52:32:1b: b1:8b:e0:a8:bf:ab:f3:33:23:63:7d:95:43:69:c9:b6:7e:70: 70:91:d0:0c:b2:97:16:bf:73:51:4e:a2:2d:9b:d1:2a:cd:55: bf:71:76:da:33:ba:48:31:f2:45:cc:f5:a3:03:46:7d:ae:60: af:33:46:60:0d:48:54:45:90:6f:d6:f7:69:92:77:91:82:06: 9c:8c:cf:b0:6a:de:5c:76:3c:43:20:9e:cd:cf:b8:fe:17:bf: cc:ba:fc:13:89:46:90:6b:b6:e6:ab:69:ad:9a:4f:b9:38:c4: fa:cc:86:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWjH3B/BQLyhh9GsPk7ccCyJId90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIxMDA3WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDI0MDdjZjVhMDllYzA5MmJjNjVmNTcxODU0MmM0NTJl ODRkYzkzODY5ZGQ1YzIzYTQ2MjBhMmU3NzU1NmRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCJnK65zgOhhyuQBQ3DpWEKqjmeHj4jwCk+vGiujbfYpI9 FZ30yw3TA9y0qHBwodtiGGGQLHTPH6F1kUpm/g7+TebZPW5qW++28KHPucs0Xnec 7zb0gULpOToTGtTe9nLoUNKHjXMbr6bUFFciw8tq6oR19AhBwTjOMul/cakmEm9U 7VLR7D3BpuprXEo5UU+kB3ltt+mK55GQhXA7jsHGrf3pMOBhyeHrDs9CYzMmVED1 R0T6c3CWnYdgQ/MBleWWtlvrWeEijHPjwrNw/6X8iyE//PA4KNXdLMnWRtj+9Uu6 DQ68aSbAD9KEP9MrZ7ALbsu1m2CKJKhrwPbQnvNrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZHvikCmXOfrO93lc2596UIgTXGIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmOGRiYTA3LTMxMGEtNGI4YS04ODI1LTAxY2U0NGM3NTBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/EAwDQYJKoZIhvcNAQELBQADggEBABazooc/Fp+hKgZzWyxmDXhl9teG qAS+LseNYAEmDGTQhyxuT4/3kqb9Jy+oWQu4OECdnhic8oEAQuRBN6JDRzwmkBfI scJRz8kkNBgU8ThWnAMVw7Loy8OmANt9259P91iHinUVNO2gHhQ+r9egMHyCGvqr T8foky8tI0/yBo1RktxzYhXtTSttH/Y+k1IyG7GL4Ki/q/MzI2N9lUNpybZ+cHCR 0Ayylxa/c1FOoi2b0SrNVb9xdtozukgx8kXM9aMDRn2uYK8zRmANSFRFkG/W92mS d5GCBpyMz7Bq3lx2PEMgns3PuP4Xv8y6/BOJRpBrtuaraa2aT7k4xPrMhqg= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:55 2026 by rpki-client