$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ead66e31-b6ea-4c85-97d2-d6288242615b.roa File: ead66e31-b6ea-4c85-97d2-d6288242615b.roa (raw, json) Hash identifier: 4Dk+SbKcedT3K6ldtAK9Nx/Yf24R/x9n+1emP9h/eeM= Subject key identifier: 63:17:A6:D2:2A:72:B9:E1:C2:0A:01:2E:58:EC:2F:97:98:4F:2A:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F654546DF90102767D42A01318A3897FACFF186 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ead66e31-b6ea-4c85-97d2-d6288242615b.roa Signing time: Mon 03 Aug 2026 03:10:07 +0000 ROA not before: Mon 03 Aug 2026 03:10:07 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.243.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:65:45:46:df:90:10:27:67:d4:2a:01:31:8a:38:97:fa:cf:f1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 3 03:10:07 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=53445837cd3098f106411c8975ec03813362b1b54c54e91fd02a058b40e0b9b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:df:8e:dd:5b:97:ef:c0:63:82:a7:22:26: bd:df:df:62:8f:ab:b5:6c:73:98:ef:61:99:2c:2c: e4:83:57:c4:90:5e:b2:e3:de:36:18:b5:4c:0c:c0: 99:ec:db:9b:3f:6c:85:c4:6a:27:b5:47:58:15:b9: 92:c9:bc:6d:5a:e6:93:90:73:99:fe:cb:ad:d3:6d: a9:af:90:01:8f:5e:92:28:5d:e4:7a:e9:d8:5a:02: 28:8a:10:55:2b:1b:fc:f1:59:b7:6d:2f:de:ce:8f: be:1a:07:05:89:05:c1:80:6c:ae:55:95:3b:33:04: 6b:ab:08:7c:26:50:2b:4f:31:50:55:d8:fc:69:69: 37:e9:ca:24:e7:a8:c0:e8:19:f6:1f:56:4f:14:e2: a8:d7:f1:92:f8:d3:98:58:98:15:28:a5:4a:f5:e7: 29:d1:d4:01:db:ed:bc:fb:b2:44:3f:44:7c:76:30: 50:8f:37:57:cd:3a:20:dd:98:0d:25:13:c1:76:60: 78:66:95:b1:fa:da:64:b6:c0:c5:d7:dd:1b:92:99: 12:00:bc:d1:a1:6a:66:b2:71:a1:fe:00:7f:4a:61: f7:ce:dd:91:de:e5:25:75:ed:7b:45:31:1c:93:b7: fe:9c:6f:7d:57:17:9f:6f:14:5f:89:68:4f:55:b2: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:A6:D2:2A:72:B9:E1:C2:0A:01:2E:58:EC:2F:97:98:4F:2A:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ead66e31-b6ea-4c85-97d2-d6288242615b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.243.0.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:cd:b4:aa:e8:88:48:2a:e8:63:8b:6a:e1:a6:e3:55:9b:41: f4:de:1d:f5:37:82:c8:f3:b0:30:6a:3a:eb:e4:c1:c3:cd:12: 6c:60:08:ef:34:26:3e:1c:69:4c:99:d0:b5:c1:23:a8:60:21: ef:ce:9a:46:0f:94:34:4e:ec:46:5c:4f:3a:9a:e9:1b:7e:26: 9b:5b:e2:56:9a:60:17:28:f6:16:1e:73:0d:6f:54:be:93:88: 55:dc:d4:ae:63:8d:c3:bb:21:a5:a7:7b:2f:96:11:97:0e:7f: 0a:9a:6f:62:91:3f:98:cc:d1:22:90:b8:54:12:2b:fb:d5:96: 0f:c3:54:00:31:d4:2b:79:6f:05:42:82:44:cb:83:64:b8:f6: 3c:54:28:94:35:31:17:de:ac:2f:85:bc:62:1c:a7:ac:ac:8c: 40:3d:d9:ac:82:c8:6c:d3:1a:48:ad:d7:82:0b:07:2f:47:4c: 85:12:68:47:b5:92:ec:2f:cc:08:b6:b7:46:1a:3f:ea:6f:fc: 0b:1d:ba:58:d1:d6:00:98:13:4c:71:24:b7:0e:cf:aa:e7:01: 94:6e:3b:f3:9a:2a:87:bd:fc:01:b3:7d:de:c3:13:0e:6f:13: a4:12:48:c5:07:f8:bc:5d:56:f9:f9:ac:8e:b6:87:37:71:6a: f9:81:d7:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX2VFRt+QECdn1CoBMYo4l/rP8YYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMxMDA3WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzQ0NTgzN2NkMzA5OGYxMDY0MTFjODk3NWVjMDM4MTMz NjJiMWI1NGM1NGU5MWZkMDJhMDU4YjQwZTBiOWI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw19+O3VuX78BjgqciJr3f32KPq7Vsc5jvYZksLOSDV8SQ XrLj3jYYtUwMwJns25s/bIXEaie1R1gVuZLJvG1a5pOQc5n+y63TbamvkAGPXpIo XeR66dhaAiiKEFUrG/zxWbdtL97Oj74aBwWJBcGAbK5VlTszBGurCHwmUCtPMVBV 2PxpaTfpyiTnqMDoGfYfVk8U4qjX8ZL405hYmBUopUr15ynR1AHb7bz7skQ/RHx2 MFCPN1fNOiDdmA0lE8F2YHhmlbH62mS2wMXX3RuSmRIAvNGhamaycaH+AH9KYffO 3ZHe5SV17XtFMRyTt/6cb31XF59vFF+JaE9VstwxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYxem0ipyueHCCgEuWOwvl5hPKhMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VhZDY2ZTMxLWI2ZWEtNGM4NS05N2QyLWQ2Mjg4MjQyNjE1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ28wAwDQYJKoZIhvcNAQELBQADggEBAJ7NtKroiEgq6GOLauGm41WbQfTe HfU3gsjzsDBqOuvkwcPNEmxgCO80Jj4caUyZ0LXBI6hgIe/OmkYPlDRO7EZcTzqa 6Rt+Jptb4laaYBco9hYecw1vVL6TiFXc1K5jjcO7IaWney+WEZcOfwqab2KRP5jM 0SKQuFQSK/vVlg/DVAAx1Ct5bwVCgkTLg2S49jxUKJQ1MRferC+FvGIcp6ysjEA9 2ayCyGzTGkit14ILBy9HTIUSaEe1kuwvzAi2t0YaP+pv/AsduljR1gCYE0xxJLcO z6rnAZRuO/OaKoe9/AGzfd7DEw5vE6QSSMUH+LxdVvn5rI62hzdxavmB11w= -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:21 2026 by rpki-client