$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f390534b-b1f1-4656-bdda-514a60516161.roa File: f390534b-b1f1-4656-bdda-514a60516161.roa (raw, json) Hash identifier: U2qoeF1u17KXudka4U/znEeeKjaVfOt7xpzDEsCo4HA= Subject key identifier: E5:E5:60:90:7B:93:6E:53:3F:CB:2D:27:54:8E:BB:28:68:5C:13:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D95C83FBC9CDAA7B67B3D4EBDA0887412BF3D11 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f390534b-b1f1-4656-bdda-514a60516161.roa Signing time: Fri 07 Aug 2026 02:00:37 +0000 ROA not before: Fri 07 Aug 2026 02:00:37 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:95:c8:3f:bc:9c:da:a7:b6:7b:3d:4e:bd:a0:88:74:12:bf:3d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 02:00:37 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=b745fe1787546bc855c699454ba329fdcc027b5c1e76d7ef22f6d24428ca861d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:81:4a:c2:9f:47:32:cd:55:2c:ef:ac:45: 8f:d4:84:92:a6:03:2a:86:c4:ae:23:09:6f:20:c2: 2f:28:b5:34:73:4a:44:c5:c8:89:b7:cd:6f:c4:f1: 1d:fe:07:29:6f:e9:4c:5b:83:01:37:c7:cb:ae:bd: 37:66:88:00:5e:17:b0:3b:78:3f:1f:37:b8:b2:25: 4e:ce:6d:02:fc:69:78:08:c8:5c:26:05:ea:0d:90: 3f:e1:aa:d6:fd:af:c0:a0:4d:67:22:7e:f2:54:9f: af:b3:36:d4:02:c2:fb:18:4c:05:e1:38:de:17:01: f5:39:4c:f1:b2:69:93:e5:c5:eb:b8:dc:dc:99:57: e5:de:75:e7:77:d9:29:e4:3b:5c:f8:7f:0f:45:e3: e5:1d:ab:81:12:f4:d7:6e:09:3f:81:30:f3:df:34: e9:e4:21:e0:34:14:c9:ee:90:1c:ab:47:b5:27:a2: e9:a2:6f:64:2e:38:ee:d9:d0:13:ce:c5:9a:04:69: 09:72:ee:9d:ec:15:2a:07:26:22:0c:bf:d7:9c:80: 14:dd:25:5a:85:e0:83:10:71:4b:a3:a1:95:f4:d4: 1f:98:89:bf:29:1c:1c:7f:da:27:ac:a4:4e:57:cf: ac:0c:65:3d:54:0b:57:36:ec:c9:54:21:3a:0c:96: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E5:60:90:7B:93:6E:53:3F:CB:2D:27:54:8E:BB:28:68:5C:13:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f390534b-b1f1-4656-bdda-514a60516161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.100.0/22 Signature Algorithm: sha256WithRSAEncryption 87:9b:6c:6b:e9:4c:08:48:bd:03:df:d0:43:3d:4a:19:64:91: 01:8c:8a:8f:03:1e:2e:31:6d:7c:84:e7:61:6d:af:0f:84:25: 95:27:0c:54:eb:fe:23:e7:1c:ac:79:84:f1:11:34:a9:43:20: 08:d3:d7:38:9b:a3:c2:6b:ed:8c:70:da:b8:0a:93:ae:15:c9: 4d:a4:6b:08:a2:08:ff:6e:33:60:53:93:2e:8a:50:1d:2f:11: ea:8a:a3:65:a8:73:d9:3b:00:38:ac:31:ee:5c:63:30:66:17: a4:a9:58:01:90:17:06:1c:3f:1e:81:d6:59:bd:79:33:14:ac: 51:7f:32:aa:5e:bc:e9:b5:8b:d1:02:e7:f5:3a:c8:2d:00:81: e1:05:a0:f5:7c:08:44:c3:bd:af:2e:ea:20:38:c8:99:34:7b: 6d:47:bf:51:aa:2c:e9:be:d7:94:fd:a3:0e:2f:ad:34:63:80: 0e:b2:11:cb:87:c5:73:a2:aa:0b:87:73:25:b6:a0:0a:61:45: 70:57:bd:5f:fd:82:0c:ae:85:6f:b3:82:15:79:b4:8d:6b:a9: 3c:fb:2c:5c:4b:8e:f5:e9:ad:e6:d5:5c:3a:bf:71:7c:54:d3: 5b:c1:15:1e:fa:1b:1a:2a:e7:0f:1f:95:a5:78:6d:0e:7d:57: 3a:44:4b:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDZXIP7yc2qe2ez1OvaCIdBK/PREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDIwMDM3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzQ1ZmUxNzg3NTQ2YmM4NTVjNjk5NDU0YmEzMjlmZGNj MDI3YjVjMWU3NmQ3ZWYyMmY2ZDI0NDI4Y2E4NjFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdM4FKwp9HMs1VLO+sRY/UhJKmAyqGxK4jCW8gwi8otTRz SkTFyIm3zW/E8R3+Bylv6UxbgwE3x8uuvTdmiABeF7A7eD8fN7iyJU7ObQL8aXgI yFwmBeoNkD/hqtb9r8CgTWcifvJUn6+zNtQCwvsYTAXhON4XAfU5TPGyaZPlxeu4 3NyZV+Xeded32SnkO1z4fw9F4+Udq4ES9NduCT+BMPPfNOnkIeA0FMnukByrR7Un oumib2QuOO7Z0BPOxZoEaQly7p3sFSoHJiIMv9ecgBTdJVqF4IMQcUujoZX01B+Y ib8pHBx/2iespE5Xz6wMZT1UC1c27MlUIToMlkmhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5eVgkHuTblM/yy0nVI67KGhcE5owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzOTA1MzRiLWIxZjEtNDY1Ni1iZGRhLTUxNGE2MDUxNjE2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0X2QwDQYJKoZIhvcNAQELBQADggEBAIebbGvpTAhIvQPf0EM9ShlkkQGM io8DHi4xbXyE52Ftrw+EJZUnDFTr/iPnHKx5hPERNKlDIAjT1zibo8Jr7Yxw2rgK k64VyU2kawiiCP9uM2BTky6KUB0vEeqKo2Woc9k7ADisMe5cYzBmF6SpWAGQFwYc Px6B1lm9eTMUrFF/MqpevOm1i9EC5/U6yC0AgeEFoPV8CETDva8u6iA4yJk0e21H v1GqLOm+15T9ow4vrTRjgA6yEcuHxXOiqguHcyW2oAphRXBXvV/9ggyuhW+zghV5 tI1rqTz7LFxLjvXprebVXDq/cXxU01vBFR76Gxoq5w8flaV4bQ59VzpES64= -----END CERTIFICATE-----Generated at Sat Sep 19 11:22:04 2026 by rpki-client