$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa File: f9586523-cfb8-4449-afa5-509594fbadc0.roa (raw, json) Hash identifier: M+vjtaFrcw7l78jGWBWel4L6Df9Upe7y+w5i+Jfentk= Subject key identifier: D4:56:6B:F2:5A:31:FC:06:A6:7B:FD:F5:CF:DE:E4:C5:F9:ED:2B:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 620F922CF5CB7ACFD425E91C378631B9F578F37F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa Signing time: Fri 07 Aug 2026 01:00:28 +0000 ROA not before: Fri 07 Aug 2026 01:00:28 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0f:92:2c:f5:cb:7a:cf:d4:25:e9:1c:37:86:31:b9:f5:78:f3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 7 01:00:28 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=b153b3b0792dc233e3cfe6b6bb6b2fcee790349dd8b5741726d633bff699d217, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:6b:80:70:90:8d:67:7b:68:47:7a:58:0b: eb:34:20:4b:7c:8f:cd:b4:b9:8e:b9:ce:06:9b:0e: 75:cf:e0:75:0a:23:c9:07:73:8c:39:77:59:01:77: f2:cf:14:26:e3:02:7f:e6:d1:e2:fb:dd:17:7c:99: b5:37:83:77:32:60:c8:7a:e9:f6:5a:fd:06:2c:0c: f1:ca:79:48:40:e5:a1:19:64:d4:23:8a:a4:88:9d: ad:26:7b:0a:01:f7:a8:67:66:ad:70:25:8c:e3:28: e2:82:36:62:62:4f:db:29:5d:74:7e:97:a3:14:84: d4:6a:be:c0:35:29:06:ba:71:a8:89:ba:f9:34:29: be:f4:c0:7e:54:5d:70:91:ef:a3:9e:42:f5:86:83: 44:1f:4f:0f:35:a6:d3:5b:80:fe:0a:50:c7:17:80: 63:d7:65:63:21:89:6c:18:ca:cc:5d:5f:97:72:48: 26:ca:b4:d8:08:92:0a:ce:3f:45:ce:61:c0:4c:5b: 5a:8a:04:ab:e1:6c:6e:ea:07:29:5c:da:01:6e:d6: df:04:37:04:e1:36:03:a2:bb:ca:9f:7e:5c:f9:d7: 48:c1:ad:8a:b7:5d:16:01:57:9e:c2:41:2f:d2:58: e5:e4:fa:d9:7b:76:e3:a0:1f:d0:a8:92:b0:c8:3a: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:6B:F2:5A:31:FC:06:A6:7B:FD:F5:CF:DE:E4:C5:F9:ED:2B:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.64.0/19 Signature Algorithm: sha256WithRSAEncryption 65:da:f1:77:df:7e:cc:e4:c2:95:a1:f5:85:ce:2b:d8:fe:bc: c7:26:35:99:d1:8d:9c:40:b0:33:a7:20:cf:de:1c:da:19:5d: 4a:a5:d6:d3:f7:09:2d:de:a3:4a:07:36:80:2e:45:79:e5:03: 01:dc:56:43:da:8c:69:b8:4b:46:4b:3a:31:b1:c2:f2:67:2c: 12:61:71:4c:a4:46:24:fa:d3:97:9f:71:94:8f:ab:d6:a4:d8: f9:2a:af:44:dc:7f:0b:36:ce:29:1b:94:91:d8:20:5c:a4:fb: c8:70:73:cc:fe:54:5b:93:1a:6f:27:36:3c:27:26:6a:41:a3: 17:8a:b7:d3:cf:7b:3e:c6:b0:65:d2:dd:f3:fb:45:a8:7b:95: 28:14:33:8b:d9:fc:80:51:ca:34:ca:c2:05:6e:35:fb:4a:ff: b3:e7:e1:b1:45:2a:8f:e0:39:f5:c5:7c:70:13:fb:df:2d:32: 79:68:2c:44:1a:5a:4d:a8:e1:be:77:5e:f3:17:c4:21:1f:f6: 93:59:85:37:66:05:d2:cc:d2:06:e5:fb:77:39:2f:a6:73:87: b9:2e:66:4c:f8:ab:a2:3d:da:7f:14:20:3d:75:0f:68:58:c4: c4:1d:9d:f1:10:7b:8e:e9:27:07:80:77:57:3d:e4:11:40:66: 3e:58:33:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYg+SLPXLes/UJekcN4YxufV4838wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDEwMDI4WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTUzYjNiMDc5MmRjMjMzZTNjZmU2YjZiYjZiMmZjZWU3 OTAzNDlkZDhiNTc0MTcyNmQ2MzNiZmY2OTlkMjE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl32uAcJCNZ3toR3pYC+s0IEt8j820uY65zgabDnXP4HUK I8kHc4w5d1kBd/LPFCbjAn/m0eL73Rd8mbU3g3cyYMh66fZa/QYsDPHKeUhA5aEZ ZNQjiqSIna0mewoB96hnZq1wJYzjKOKCNmJiT9spXXR+l6MUhNRqvsA1KQa6caiJ uvk0Kb70wH5UXXCR76OeQvWGg0QfTw81ptNbgP4KUMcXgGPXZWMhiWwYysxdX5dy SCbKtNgIkgrOP0XOYcBMW1qKBKvhbG7qBylc2gFu1t8ENwThNgOiu8qfflz510jB rYq3XRYBV57CQS/SWOXk+tl7duOgH9CokrDIOoyHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1FZr8lox/Aame/31z97kxfntK/AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y5NTg2NTIzLWNmYjgtNDQ0OS1hZmE1LTUwOTU5NGZiYWRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU28EAwDQYJKoZIhvcNAQELBQADggEBAGXa8XfffszkwpWh9YXOK9j+vMcm NZnRjZxAsDOnIM/eHNoZXUql1tP3CS3eo0oHNoAuRXnlAwHcVkPajGm4S0ZLOjGx wvJnLBJhcUykRiT605efcZSPq9ak2Pkqr0Tcfws2zikblJHYIFyk+8hwc8z+VFuT Gm8nNjwnJmpBoxeKt9PPez7GsGXS3fP7Rah7lSgUM4vZ/IBRyjTKwgVuNftK/7Pn 4bFFKo/gOfXFfHAT+98tMnloLEQaWk2o4b53XvMXxCEf9pNZhTdmBdLM0gbl+3c5 L6Zzh7kuZkz4q6I92n8UID11D2hYxMQdnfEQe47pJweAd1c95BFAZj5YM3s= -----END CERTIFICATE-----Generated at Sat Sep 19 12:20:55 2026 by rpki-client