$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e87c1fd3-30ea-4f47-9462-03608765b150.roa File: e87c1fd3-30ea-4f47-9462-03608765b150.roa (raw, json) Hash identifier: /vBP54ySitH3BsRwSPOzD+MvNnYWkIk2Xa+L+Pmdi1Y= Subject key identifier: 70:3C:4F:A3:5B:FF:94:66:6B:28:97:89:F5:43:F6:63:38:82:E4:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CFAAA204399395BDF58E4D437C3167E7D3B06D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e87c1fd3-30ea-4f47-9462-03608765b150.roa Signing time: Sat 01 Aug 2026 00:51:23 +0000 ROA not before: Sat 01 Aug 2026 00:51:23 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fa:aa:20:43:99:39:5b:df:58:e4:d4:37:c3:16:7e:7d:3b:06:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 1 00:51:23 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=175ea4c8b63a8e55d44024d1d2f0a8f00bd2c421c6800acfc26d64365e1b62bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:fd:bf:0f:af:b1:ab:30:95:6d:63:31:b1: 58:20:81:11:6e:75:84:13:40:fa:41:4e:03:41:81: 8e:21:cd:e8:13:0f:b9:85:0d:ba:e2:a3:57:5d:56: 1b:37:a2:9c:7f:8d:d2:12:99:6e:c2:4a:75:6c:6a: f3:8b:43:69:3f:8b:0b:d4:1d:a8:7e:ac:cd:5c:91: bf:cd:97:32:d0:73:1c:45:67:76:04:3c:7c:e2:26: ec:39:be:10:70:1d:c3:8f:cc:57:8d:5a:98:b4:cd: 2d:3e:69:d8:06:9b:d0:98:42:85:ee:96:7e:52:0e: 11:e5:25:f1:4f:05:47:8d:2c:7f:6d:9a:f0:22:d7: 2d:62:42:3f:04:20:33:ee:4f:04:5c:19:2b:e4:3f: a0:2a:fe:ab:d7:37:67:ae:5d:23:a3:ec:41:27:06: 8d:0c:5b:75:dd:cd:74:ab:a4:9a:12:a6:11:be:b3: 9f:af:dc:3e:41:88:12:51:87:4f:6e:cd:cc:8b:d8: ff:e8:a0:79:21:ec:b3:20:e1:c4:06:ac:5d:77:ae: 30:7b:74:c5:46:8c:2f:f7:0c:ec:2f:14:ee:e8:dd: e5:16:80:c4:0a:34:2e:56:70:c9:a0:da:16:23:d2: 07:28:c9:c3:23:f2:8e:43:e5:a3:b3:22:23:cf:70: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3C:4F:A3:5B:FF:94:66:6B:28:97:89:F5:43:F6:63:38:82:E4:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e87c1fd3-30ea-4f47-9462-03608765b150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.19.0/24 Signature Algorithm: sha256WithRSAEncryption 98:70:ca:86:cc:d3:3a:01:99:87:63:e7:a2:d5:d1:51:fc:35: 8a:8b:20:9e:d9:72:4b:a4:e7:24:fd:dc:54:a3:5b:21:0b:19: 53:3b:b8:26:14:56:5e:7b:45:47:10:df:14:e1:29:c2:0f:64: 20:7d:e5:99:f1:c8:79:0f:61:52:22:c6:9a:4f:2e:84:81:6c: 52:0c:a2:15:a6:29:43:3e:24:00:7e:8e:68:9d:86:c6:29:ee: a8:8b:ab:aa:39:7b:d5:37:33:3e:1b:6a:a3:1b:57:b3:d4:cc: 5f:8b:a7:51:85:c7:c0:4c:dc:1d:9a:f3:d1:04:85:2e:1a:87: 6e:02:e9:f3:d3:ad:75:53:e9:dc:19:24:9f:90:06:35:3d:36: 27:bb:38:46:c8:35:0e:af:9c:ef:7d:f8:dd:d3:3c:2e:b9:51: cf:3e:02:44:da:5d:8b:87:e0:33:4f:8e:ef:6e:1d:1a:57:f8: bf:86:bb:71:96:4c:49:f3:d9:fd:4b:28:c2:d5:1a:58:b9:76: bd:74:ad:77:5b:37:2e:2a:e7:78:a3:67:69:9d:13:4b:5c:20: 39:90:16:fc:74:25:3c:58:c2:bd:c1:1a:29:7a:85:95:db:db: d4:82:a6:2c:12:84:27:e5:b3:e2:70:6c:41:63:7b:41:d1:b2: 67:9e:23:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPPqqIEOZOVvfWOTUN8MWfn07BtUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDA1MTIzWhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzVlYTRjOGI2M2E4ZTU1ZDQ0MDI0ZDFkMmYwYThmMDBi ZDJjNDIxYzY4MDBhY2ZjMjZkNjQzNjVlMWI2MmJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYqP2/D6+xqzCVbWMxsVgggRFudYQTQPpBTgNBgY4hzegT D7mFDbrio1ddVhs3opx/jdISmW7CSnVsavOLQ2k/iwvUHah+rM1ckb/NlzLQcxxF Z3YEPHziJuw5vhBwHcOPzFeNWpi0zS0+adgGm9CYQoXuln5SDhHlJfFPBUeNLH9t mvAi1y1iQj8EIDPuTwRcGSvkP6Aq/qvXN2euXSOj7EEnBo0MW3XdzXSrpJoSphG+ s5+v3D5BiBJRh09uzcyL2P/ooHkh7LMg4cQGrF13rjB7dMVGjC/3DOwvFO7o3eUW gMQKNC5WcMmg2hYj0gcoycMj8o5D5aOzIiPPcAf5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcDxPo1v/lGZrKJeJ9UP2YziC5MQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4N2MxZmQzLTMwZWEtNGY0Ny05NDYyLTAzNjA4NzY1YjE1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3BMwDQYJKoZIhvcNAQELBQADggEBAJhwyobM0zoBmYdj56LV0VH8NYqL IJ7Zckuk5yT93FSjWyELGVM7uCYUVl57RUcQ3xThKcIPZCB95ZnxyHkPYVIixppP LoSBbFIMohWmKUM+JAB+jmidhsYp7qiLq6o5e9U3Mz4baqMbV7PUzF+Lp1GFx8BM 3B2a89EEhS4ah24C6fPTrXVT6dwZJJ+QBjU9Nie7OEbINQ6vnO99+N3TPC65Uc8+ AkTaXYuH4DNPju9uHRpX+L+Gu3GWTEnz2f1LKMLVGli5dr10rXdbNy4q53ijZ2md E0tcIDmQFvx0JTxYwr3BGil6hZXb29SCpiwShCfls+JwbEFje0HRsmeeI5w= -----END CERTIFICATE-----Generated at Sat Sep 19 13:42:30 2026 by rpki-client