$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e522e371-a880-48b4-988a-e40bfdb0bb02.roa File: e522e371-a880-48b4-988a-e40bfdb0bb02.roa (raw, json) Hash identifier: 2JGnzmUjeinXCyomF+5KQLiuyUf0hZEH1NYniYom2uA= Subject key identifier: 95:00:75:89:C3:B3:03:2B:AB:A0:97:E3:02:C5:72:92:A7:6A:21:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2536A92E06ECF03D1800B275E35CC657B7335C1A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e522e371-a880-48b4-988a-e40bfdb0bb02.roa Signing time: Thu 06 Aug 2026 00:00:08 +0000 ROA not before: Thu 06 Aug 2026 00:00:08 +0000 ROA not after: Wed 04 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:36:a9:2e:06:ec:f0:3d:18:00:b2:75:e3:5c:c6:57:b7:33:5c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 6 00:00:08 2026 GMT Not After : Nov 4 23:59:59 2026 GMT Subject: serialNumber=761beeecd5aa757e7f03423961f2d4b7bdc4f44c8a5a2c568e6a2096f36d2751, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:30:dc:5e:35:d7:dc:ef:c1:62:d7:33:4f: dc:39:17:bb:b7:cb:d2:d3:b6:11:87:9f:75:08:02: bf:95:2d:70:42:86:25:38:d3:ca:a5:ed:e3:a3:bf: 45:0d:9f:98:10:10:4f:92:47:e4:a1:fa:7b:13:2f: c7:91:1c:5e:b9:7c:49:3e:40:2b:4e:8d:85:ef:03: c9:15:ba:a7:e5:37:53:7f:0f:c3:05:9b:e0:3f:c1: 17:08:24:19:5b:ef:dc:35:18:e3:f6:77:cb:92:d2: 97:3d:d4:38:01:9b:5f:f2:32:f9:20:14:83:6e:f7: 86:a5:e5:29:10:95:62:b1:69:c6:a1:5b:0c:b7:d2: d0:01:bd:ad:56:3e:0c:23:26:fb:69:56:b2:12:f8: a2:6e:fc:3f:e7:6d:c6:35:a8:21:54:9b:3f:d2:aa: b9:a3:e0:5a:f1:f7:30:4d:93:fe:25:d3:67:d4:b5: d7:93:56:bb:ca:4d:f5:66:6c:d1:05:24:b7:e2:55: 79:f5:06:42:e0:72:f5:a8:07:bd:08:c3:5b:2b:da: f5:33:e2:ee:ae:d3:27:1d:02:a8:5f:be:39:1f:3e: ee:ef:16:03:92:45:5a:e6:af:7e:1c:12:71:8e:70: 25:50:05:6b:a4:97:dd:b4:7e:8b:4b:4a:bc:c7:4f: b5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:00:75:89:C3:B3:03:2B:AB:A0:97:E3:02:C5:72:92:A7:6A:21:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e522e371-a880-48b4-988a-e40bfdb0bb02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.142.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:58:d4:eb:eb:ee:58:d2:27:bd:51:e2:d2:39:f3:c9:8b:39: cb:65:b0:bd:4d:3f:64:09:07:a4:77:a1:de:b0:f9:f4:8f:72: 26:8a:90:8a:49:97:b4:88:ae:0d:da:10:97:ad:4e:a0:18:aa: 60:4d:2a:aa:12:f6:98:37:51:57:8c:2e:8f:aa:bd:dc:43:bb: 75:8f:59:16:67:d0:8e:42:5f:3f:4a:da:f0:8c:5a:b5:de:97: a2:8c:8e:1f:23:8c:8a:8b:77:c8:b4:ed:b0:e5:93:91:11:f4: 87:69:27:7a:ef:f2:a7:61:18:7b:97:02:ce:85:0e:53:e4:2f: 60:71:6a:0d:ec:dd:0d:bc:7c:ca:aa:a8:b6:83:e7:94:75:81: cc:d4:ff:96:5d:d9:21:17:44:82:a0:6b:ef:88:cb:86:ad:20: 20:54:6b:73:1b:5f:ae:71:4d:b9:82:12:d8:7a:80:eb:b6:fe: d5:33:28:99:38:95:e5:59:86:03:4e:a5:ac:e7:e9:e1:9b:84: d7:38:8d:3f:a1:bb:60:8d:5d:52:7b:41:97:0a:cd:30:fc:b0: e7:4c:11:67:e8:55:25:4d:cc:24:8b:73:d5:03:37:85:78:17: 04:d2:fd:cc:51:57:81:30:fd:2d:de:ff:4f:12:40:1d:0b:7d: b9:e7:d3:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJTapLgbs8D0YALJ141zGV7czXBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA2MDAwMDA4WhcNMjYxMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjFiZWVlY2Q1YWE3NTdlN2YwMzQyMzk2MWYyZDRiN2Jk YzRmNDRjOGE1YTJjNTY4ZTZhMjA5NmYzNmQyNzUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiYjDcXjXX3O/BYtczT9w5F7u3y9LTthGHn3UIAr+VLXBC hiU408ql7eOjv0UNn5gQEE+SR+Sh+nsTL8eRHF65fEk+QCtOjYXvA8kVuqflN1N/ D8MFm+A/wRcIJBlb79w1GOP2d8uS0pc91DgBm1/yMvkgFINu94al5SkQlWKxacah Wwy30tABva1WPgwjJvtpVrIS+KJu/D/nbcY1qCFUmz/Sqrmj4Frx9zBNk/4l02fU tdeTVrvKTfVmbNEFJLfiVXn1BkLgcvWoB70Iw1sr2vUz4u6u0ycdAqhfvjkfPu7v FgOSRVrmr34cEnGOcCVQBWukl920fotLSrzHT7WxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlQB1icOzAyuroJfjAsVykqdqIe8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U1MjJlMzcxLWE4ODAtNDhiNC05ODhhLWU0MGJmZGIwYmIwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrY4wDQYJKoZIhvcNAQELBQADggEBAH5Y1Ovr7ljSJ71R4tI588mLOctl sL1NP2QJB6R3od6w+fSPciaKkIpJl7SIrg3aEJetTqAYqmBNKqoS9pg3UVeMLo+q vdxDu3WPWRZn0I5CXz9K2vCMWrXel6KMjh8jjIqLd8i07bDlk5ER9IdpJ3rv8qdh GHuXAs6FDlPkL2Bxag3s3Q28fMqqqLaD55R1gczU/5Zd2SEXRIKga++Iy4atICBU a3MbX65xTbmCEth6gOu2/tUzKJk4leVZhgNOpazn6eGbhNc4jT+hu2CNXVJ7QZcK zTD8sOdMEWfoVSVNzCSLc9UDN4V4FwTS/cxRV4Ew/S3e/08SQB0Lfbnn0/E= -----END CERTIFICATE-----Generated at Sat Sep 19 12:08:15 2026 by rpki-client