$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe9499c3-3ed9-403a-ab4d-a1d1317086eb.roa File: fe9499c3-3ed9-403a-ab4d-a1d1317086eb.roa (raw, json) Hash identifier: TBCuAmGpG2z/OXR2IGpPONlAvg8tgg7Jusrx5xR9RLM= Subject key identifier: AE:B9:63:B6:E1:C7:3A:B9:04:0E:CD:B7:7E:69:BD:38:3D:E8:E1:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6559D01F45C075B4BADD92B88498A88B7A90562F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe9499c3-3ed9-403a-ab4d-a1d1317086eb.roa Signing time: Sat 01 Aug 2026 00:50:12 +0000 ROA not before: Sat 01 Aug 2026 00:50:12 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:59:d0:1f:45:c0:75:b4:ba:dd:92:b8:84:98:a8:8b:7a:90:56:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 1 00:50:12 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=50871ae755177f79649180b3140c65c96d0440f10cd5fca4b5a0c2f6bab85048, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:01:84:b5:a0:68:a1:2f:86:23:7c:4a:4c: ed:fb:47:35:f2:5a:37:3a:ae:8d:48:19:54:c1:94: 92:f9:39:34:7d:ac:d0:d0:89:3d:79:bf:00:84:3e: 56:4f:e8:92:70:84:37:3e:cc:a7:8e:c2:7a:bf:fa: c4:c2:b2:72:82:58:58:f9:b2:d9:20:25:4c:9c:22: 73:47:e4:6c:44:21:47:b3:b0:cc:e4:38:f8:49:6b: 34:3b:16:b9:0c:ba:b0:b9:c5:c8:9c:7d:24:8f:1a: bd:0d:1e:6d:52:de:3f:0e:45:8e:25:92:ac:ed:2a: dc:3b:9e:d1:61:dd:87:da:24:e7:5f:41:7b:0b:b7: a9:59:8c:85:6a:41:22:1d:09:d3:31:80:5d:61:80: b1:89:4d:1b:2e:05:8a:62:f4:24:5a:99:88:e5:fe: 0f:32:c7:b2:ef:dd:57:5b:4e:5f:ff:a0:fe:11:08: 78:12:84:63:37:43:af:bd:cc:2d:80:91:41:c6:28: 8a:67:26:b8:9f:9d:49:2e:63:3d:1e:81:f6:7c:c3: b1:81:6a:ab:64:57:b3:1e:07:d8:54:8e:45:80:5c: d5:17:47:0d:62:a3:18:d1:50:6a:a0:be:07:2c:2e: 5b:ae:f7:91:a1:f2:b7:68:60:bf:40:4e:47:24:45: 30:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:63:B6:E1:C7:3A:B9:04:0E:CD:B7:7E:69:BD:38:3D:E8:E1:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe9499c3-3ed9-403a-ab4d-a1d1317086eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.73.0/24 Signature Algorithm: sha256WithRSAEncryption 51:3a:bd:15:0d:6e:92:b0:2a:d2:3f:e2:8a:5a:7e:7d:f8:cd: 3c:d3:af:ee:5a:97:e2:ce:c7:a4:9b:ee:da:11:a7:57:f3:b4: 8b:ed:46:14:fe:9a:0f:b2:b1:67:73:1b:79:64:bf:9f:bd:71: 10:97:89:43:22:0f:96:3f:d6:ec:e6:6e:46:df:c5:ec:e9:26: bd:4c:65:c7:b7:dd:36:e2:a4:f4:10:cc:c8:14:6e:96:b4:b8: 3f:b9:51:e8:13:8b:cd:94:ee:76:fe:26:80:04:1f:97:35:a0: 30:88:82:86:93:72:0c:f5:0a:76:89:f7:3a:4e:a1:a9:09:b3: 55:eb:4e:9a:91:b1:6b:ae:81:9a:43:81:e9:67:c0:db:19:e9: 51:8f:d5:d6:5c:25:b6:20:b7:f2:ff:3c:dd:b8:f8:a6:5a:bc: da:65:97:4b:64:df:b1:7d:a0:b0:06:b8:19:f2:df:86:cf:21: 07:5b:01:4c:4f:96:e5:48:6c:cb:ba:80:96:8f:79:6b:f5:b2: 03:0c:15:e5:02:e8:b3:d6:08:52:32:15:2b:d1:ad:a8:97:c3: 81:75:47:ed:c8:e2:21:aa:39:19:9f:f6:83:1e:a0:91:3c:36: 5d:1d:a7:63:9e:f1:ac:fc:9b:62:84:de:c8:f3:a3:8d:39:5b: 2a:b3:5a:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZVnQH0XAdbS63ZK4hJioi3qQVi8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDA1MDEyWhcNMjYxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDg3MWFlNzU1MTc3Zjc5NjQ5MTgwYjMxNDBjNjVjOTZk MDQ0MGYxMGNkNWZjYTRiNWEwYzJmNmJhYjg1MDQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2lwGEtaBooS+GI3xKTO37RzXyWjc6ro1IGVTBlJL5OTR9 rNDQiT15vwCEPlZP6JJwhDc+zKeOwnq/+sTCsnKCWFj5stkgJUycInNH5GxEIUez sMzkOPhJazQ7FrkMurC5xcicfSSPGr0NHm1S3j8ORY4lkqztKtw7ntFh3YfaJOdf QXsLt6lZjIVqQSIdCdMxgF1hgLGJTRsuBYpi9CRamYjl/g8yx7Lv3VdbTl//oP4R CHgShGM3Q6+9zC2AkUHGKIpnJrifnUkuYz0egfZ8w7GBaqtkV7MeB9hUjkWAXNUX Rw1ioxjRUGqgvgcsLluu95Gh8rdoYL9ATkckRTApAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrrljtuHHOrkEDs23fmm9OD3o4UkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZlOTQ5OWMzLTNlZDktNDAzYS1hYjRkLWExZDEzMTcwODZlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3EkwDQYJKoZIhvcNAQELBQADggEBAFE6vRUNbpKwKtI/4opafn34zTzT r+5al+LOx6Sb7toRp1fztIvtRhT+mg+ysWdzG3lkv5+9cRCXiUMiD5Y/1uzmbkbf xezpJr1MZce33TbipPQQzMgUbpa0uD+5UegTi82U7nb+JoAEH5c1oDCIgoaTcgz1 CnaJ9zpOoakJs1XrTpqRsWuugZpDgelnwNsZ6VGP1dZcJbYgt/L/PN24+KZavNpl l0tk37F9oLAGuBny34bPIQdbAUxPluVIbMu6gJaPeWv1sgMMFeUC6LPWCFIyFSvR raiXw4F1R+3I4iGqORmf9oMeoJE8Nl0dp2Oe8az8m2KE3sjzo405WyqzWuM= -----END CERTIFICATE-----Generated at Sat Sep 19 13:01:04 2026 by rpki-client