$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc11c8df-840c-41ca-9674-76504db726fc.roa File: fc11c8df-840c-41ca-9674-76504db726fc.roa (raw, json) Hash identifier: z9ICzkkUu/ORjL/kkbANC8d0ihzVtoo3pwQ8WFcj+Tw= Subject key identifier: 5E:A2:A2:69:E6:2B:E2:B7:24:84:9A:19:88:89:E3:C2:2B:49:07:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79254A15E3725CCB1C3B6F75F16A3765939018BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc11c8df-840c-41ca-9674-76504db726fc.roa Signing time: Thu 30 Jul 2026 00:51:19 +0000 ROA not before: Thu 30 Jul 2026 00:51:19 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:25:4a:15:e3:72:5c:cb:1c:3b:6f:75:f1:6a:37:65:93:90:18:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 30 00:51:19 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=d0707e037a288d5d4b2300e3d80fea740bc2251abbdcdbee1f14fc209835f46d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:da:c3:72:e6:92:67:be:e9:5a:a7:6e:3c: 1d:74:a7:19:41:e3:26:72:3d:a6:7c:d6:af:43:dc: 87:61:1c:04:b5:c7:cf:f6:be:8c:22:fb:5e:36:5d: c6:6f:7b:7e:bb:24:2c:7f:b1:cd:53:07:f0:30:ab: f4:d0:50:98:ac:82:19:40:3a:6c:bb:2d:1c:68:6e: 95:ea:4d:cd:39:6c:b0:1e:ef:95:66:5f:54:9e:e5: 54:a7:a6:9f:38:ee:46:22:9d:1e:9b:b8:c3:ea:d0: c5:55:a4:d1:19:29:a4:5b:41:ca:60:50:87:9d:63: 52:2e:73:94:63:a8:72:df:db:05:2d:d5:8f:f2:bf: ca:2d:b5:d5:4a:af:4e:ae:e8:76:bf:20:46:78:9e: 72:92:b7:14:ef:c5:e0:4f:8f:ab:71:36:69:3f:b7: a7:41:6e:8b:b1:62:55:1b:b5:fa:2d:6a:24:78:36: 50:6e:a9:e7:a2:b4:7a:2b:ba:d6:12:c7:f1:5c:d1: 39:22:01:b0:f8:6f:b0:5f:72:d2:5a:0d:aa:d9:7e: ef:25:da:d1:bd:36:81:11:fb:a9:15:0f:ae:50:34: e8:a3:3b:73:79:44:39:04:d4:95:a2:b2:7b:43:d1: 97:43:85:a4:3a:07:33:ab:ae:b9:31:9a:a5:a8:7b: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:A2:69:E6:2B:E2:B7:24:84:9A:19:88:89:E3:C2:2B:49:07:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc11c8df-840c-41ca-9674-76504db726fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:d1:a9:ca:fb:30:bc:dd:cd:34:c3:10:70:43:e3:fb:31:2b: b8:46:c5:b0:b3:25:b1:80:cd:a7:f8:6f:97:0d:a0:60:cd:3a: 54:98:45:b0:a3:97:f2:2f:ec:af:ce:a7:fc:87:8f:47:af:6a: c2:20:07:30:2c:d9:34:32:6a:6a:0e:67:d7:77:22:66:87:ce: 15:db:6c:83:7c:25:7e:51:69:7f:9c:aa:73:ea:98:b4:f8:11: ad:74:23:f6:a1:20:fb:6c:03:10:66:7a:a4:52:99:45:d1:b1: 7f:2a:8b:93:8a:3a:73:fb:bd:ec:58:c0:02:14:46:bb:fe:6d: 02:bc:dd:af:bf:db:e2:38:f4:ca:31:71:f4:eb:76:d6:81:96: b7:d2:e9:01:08:cb:17:60:eb:81:ee:f2:8b:12:be:45:74:02: a7:6e:36:b4:47:2b:99:c6:f8:25:b1:ac:66:07:d8:75:52:cb: b4:2a:05:14:92:ac:f7:17:1a:46:fb:05:6a:13:a5:21:a8:3a: 35:6a:a4:20:9f:4d:15:83:45:0d:49:81:80:54:62:22:4c:7f: 37:b2:2c:87:30:61:cd:64:92:60:cd:df:93:6d:ca:e4:50:e8: 48:d8:1b:22:0b:9a:72:ac:f1:70:d2:89:66:fc:f3:05:cc:4c: a9:66:3c:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeSVKFeNyXMscO2918Wo3ZZOQGLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzMwMDA1MTE5WhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDcwN2UwMzdhMjg4ZDVkNGIyMzAwZTNkODBmZWE3NDBi YzIyNTFhYmJkY2RiZWUxZjE0ZmMyMDk4MzVmNDZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsuNrDcuaSZ77pWqduPB10pxlB4yZyPaZ81q9D3IdhHAS1 x8/2vowi+142XcZve367JCx/sc1TB/Awq/TQUJisghlAOmy7LRxobpXqTc05bLAe 75VmX1Se5VSnpp847kYinR6buMPq0MVVpNEZKaRbQcpgUIedY1Iuc5RjqHLf2wUt 1Y/yv8ottdVKr06u6Ha/IEZ4nnKStxTvxeBPj6txNmk/t6dBbouxYlUbtfotaiR4 NlBuqeeitHorutYSx/Fc0TkiAbD4b7BfctJaDarZfu8l2tG9NoER+6kVD65QNOij O3N5RDkE1JWisntD0ZdDhaQ6BzOrrrkxmqWoexGZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXqKiaeYr4rckhJoZiInjwitJB0kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjMTFjOGRmLTg0MGMtNDFjYS05Njc0LTc2NTA0ZGI3MjZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0X9gwDQYJKoZIhvcNAQELBQADggEBACzRqcr7MLzdzTTDEHBD4/sxK7hG xbCzJbGAzaf4b5cNoGDNOlSYRbCjl/Iv7K/Op/yHj0evasIgBzAs2TQyamoOZ9d3 ImaHzhXbbIN8JX5RaX+cqnPqmLT4Ea10I/ahIPtsAxBmeqRSmUXRsX8qi5OKOnP7 vexYwAIURrv+bQK83a+/2+I49MoxcfTrdtaBlrfS6QEIyxdg64Hu8osSvkV0Aqdu NrRHK5nG+CWxrGYH2HVSy7QqBRSSrPcXGkb7BWoTpSGoOjVqpCCfTRWDRQ1JgYBU YiJMfzeyLIcwYc1kkmDN35NtyuRQ6EjYGyILmnKs8XDSiWb88wXMTKlmPLY= -----END CERTIFICATE-----Generated at Sat Sep 19 11:19:22 2026 by rpki-client