$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3822a7b-29c1-4923-b379-2403b2a43c5a.roa File: e3822a7b-29c1-4923-b379-2403b2a43c5a.roa (raw, json) Hash identifier: BobkhlyQWwFpXO4DDqueqL0NE13nL1DL7X7e4HdPkJc= Subject key identifier: 4C:8F:58:12:D9:63:47:82:84:62:50:8C:2A:E5:1F:72:CF:85:5A:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F66973430DCD773AA854EBC5274866C530851BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3822a7b-29c1-4923-b379-2403b2a43c5a.roa Signing time: Mon 03 Aug 2026 03:41:03 +0000 ROA not before: Mon 03 Aug 2026 03:41:03 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.252.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:66:97:34:30:dc:d7:73:aa:85:4e:bc:52:74:86:6c:53:08:51:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:41:03 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=a4b3a12276facc1ea932e49013a0859c557d385b8bc4938ba0b30e5c5d9c6ddf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:7c:76:2b:73:5b:f8:59:12:51:a3:26:05: 4d:93:49:fd:7f:46:b2:3b:9f:49:33:ff:eb:bd:32: 6c:e0:f2:46:5a:8e:ed:db:c5:b0:40:33:67:c7:46: 13:5c:35:16:5a:83:d6:27:fd:e1:a4:52:74:40:ac: 3d:10:da:f8:f7:7f:34:54:e3:00:ef:83:1e:84:5a: e5:be:26:f2:4d:4f:ed:4a:8c:6a:00:2b:c5:19:be: 03:19:15:5a:c9:53:2b:3b:18:9d:f6:40:1a:e2:2f: ab:0a:c9:8a:21:19:97:da:9c:13:23:5a:94:58:85: 98:8c:58:ca:fa:40:c6:77:dc:70:b3:c9:4e:5a:20: fc:8b:79:ae:d5:e0:0e:6e:78:5a:0e:b8:75:15:de: 12:2c:5f:4b:67:22:ee:7e:53:f9:cb:ac:43:a1:21: bd:4d:04:60:35:31:99:1e:f6:6f:7f:f4:67:83:dc: be:60:83:81:7f:bc:d7:7a:ae:df:6f:30:65:1c:db: 9f:29:03:b9:29:b5:e6:9e:db:4f:04:c0:b5:f5:6f: ee:b5:1b:86:66:0f:87:22:c3:21:8e:34:cc:69:db: 27:01:23:27:e3:cc:f4:da:8b:b0:ab:35:9a:94:08: 8e:28:e4:fa:ef:5a:10:48:80:22:ae:f9:13:b4:53: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8F:58:12:D9:63:47:82:84:62:50:8C:2A:E5:1F:72:CF:85:5A:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3822a7b-29c1-4923-b379-2403b2a43c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.252.84.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:5f:46:6e:61:c2:95:0e:89:ed:91:aa:2b:e5:eb:6f:46:97: 0d:4e:0c:a0:82:6b:0a:9e:98:6b:fb:2c:00:78:c0:a4:4a:ff: 0d:ed:71:64:62:16:54:68:27:94:aa:fb:d3:6f:4f:69:5c:d4: 4d:5f:0a:76:5a:ff:80:48:8d:de:65:57:ec:d3:e9:7f:2a:33: 68:f6:6c:d8:09:5d:88:f5:b4:3c:11:34:7f:be:97:48:74:71: d4:56:0b:3c:d7:79:bc:99:0c:10:3f:a6:14:cb:35:ab:17:79: 38:01:bd:fb:92:6a:4e:62:95:15:8c:03:fa:9e:10:7c:ac:27: 4e:b0:2b:9b:65:d4:b2:1c:99:68:28:1e:85:28:8f:43:64:9b: 78:02:80:3f:fc:5f:e6:ac:21:a3:a7:fa:7a:c6:0d:7d:d0:3a: 14:49:cf:c8:ea:52:59:37:e6:cf:56:0e:2c:79:12:31:55:47: f5:2e:e2:90:54:1b:c3:31:0b:66:c8:5a:0a:bb:2e:c0:cb:c4: 68:04:d9:94:2e:1b:dc:c8:e5:2a:fe:55:d4:ca:2f:be:5a:fb: 10:a6:d2:cd:85:bd:34:4f:d4:ff:39:40:c2:52:d0:1e:f5:31: 94:14:dc:34:50:8c:f3:4c:23:b9:c3:14:70:3b:58:fc:b8:7f: 93:3b:37:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb2aXNDDc13OqhU68UnSGbFMIUbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDM0MTAzWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGIzYTEyMjc2ZmFjYzFlYTkzMmU0OTAxM2EwODU5YzU1 N2QzODViOGJjNDkzOGJhMGIzMGU1YzVkOWM2ZGRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/kHx2K3Nb+FkSUaMmBU2TSf1/RrI7n0kz/+u9Mmzg8kZa ju3bxbBAM2fHRhNcNRZag9Yn/eGkUnRArD0Q2vj3fzRU4wDvgx6EWuW+JvJNT+1K jGoAK8UZvgMZFVrJUys7GJ32QBriL6sKyYohGZfanBMjWpRYhZiMWMr6QMZ33HCz yU5aIPyLea7V4A5ueFoOuHUV3hIsX0tnIu5+U/nLrEOhIb1NBGA1MZke9m9/9GeD 3L5gg4F/vNd6rt9vMGUc258pA7kpteae208EwLX1b+61G4ZmD4ciwyGONMxp2ycB IyfjzPTai7CrNZqUCI4o5PrvWhBIgCKu+RO0U9r9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTI9YEtljR4KEYlCMKuUfcs+FWqMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzODIyYTdiLTI5YzEtNDkyMy1iMzc5LTI0MDNiMmE0M2M1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2/FQwDQYJKoZIhvcNAQELBQADggEBAJpfRm5hwpUOie2Rqivl629Glw1O DKCCawqemGv7LAB4wKRK/w3tcWRiFlRoJ5Sq+9NvT2lc1E1fCnZa/4BIjd5lV+zT 6X8qM2j2bNgJXYj1tDwRNH++l0h0cdRWCzzXebyZDBA/phTLNasXeTgBvfuSak5i lRWMA/qeEHysJ06wK5tl1LIcmWgoHoUoj0Nkm3gCgD/8X+asIaOn+nrGDX3QOhRJ z8jqUlk35s9WDix5EjFVR/Uu4pBUG8MxC2bIWgq7LsDLxGgE2ZQuG9zI5Sr+VdTK L75a+xCm0s2FvTRP1P85QMJS0B71MZQU3DRQjPNMI7nDFHA7WPy4f5M7N5E= -----END CERTIFICATE-----Generated at Sat Sep 19 13:09:28 2026 by rpki-client