$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cd490aa-c753-4b95-899f-b64a96061cda.roa File: 0cd490aa-c753-4b95-899f-b64a96061cda.roa (raw, json) Hash identifier: S0shvY+EDc+bpK44XLg9n0NuU9/iNvGf6npnK2noiJU= Subject key identifier: A4:2F:87:05:9B:87:BB:C0:BB:68:A9:C0:7B:7B:D1:58:FF:AC:90:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48C41CD5A38AEA7ADE1B2F9765C1DE773D5454F5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cd490aa-c753-4b95-899f-b64a96061cda.roa Signing time: Mon 27 Jul 2026 02:20:39 +0000 ROA not before: Mon 27 Jul 2026 02:20:39 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.189.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c4:1c:d5:a3:8a:ea:7a:de:1b:2f:97:65:c1:de:77:3d:54:54:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:20:39 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=6281b3a8a8e86abaedebec9e0e4bc1503d9ecef31c533689d57fda37e3e24faf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:a0:ef:6d:29:90:89:a4:ea:f9:cd:99:64: 5b:ec:9f:ce:ea:b0:73:21:d2:41:0d:47:e8:7d:0d: 0d:0c:00:0c:1e:0b:6a:ab:69:91:9a:80:cd:cb:e8: 91:79:19:de:0f:04:16:be:1f:36:82:f5:37:b4:bc: e8:9d:92:ec:dc:33:15:3a:ee:ee:2c:6e:3b:87:59: 77:2b:84:69:55:9d:63:05:fb:19:d3:ee:52:19:86: 6f:b8:02:bf:6d:db:eb:7e:ab:95:03:bb:4f:28:ba: 00:c3:bc:9f:1a:c4:b9:e6:09:80:24:3c:26:f8:c1: 62:1e:4b:c5:4c:9c:db:2a:cb:23:8f:0e:b5:bf:fe: 8d:de:48:04:1d:1b:eb:d3:29:a5:49:e9:d3:cf:6f: 65:e8:9c:09:ef:19:64:20:ea:8f:26:34:9e:f9:27: 36:45:8a:b4:17:b1:58:7a:9e:a6:38:76:51:cd:2d: 96:40:07:ad:45:6b:17:09:d3:58:c6:02:bf:52:a6: 62:01:bd:59:32:23:a4:cf:68:b5:84:69:29:e7:78: 47:0b:ee:f7:a0:b1:38:0d:88:df:af:c1:43:06:55: 51:40:fc:d1:9a:d7:ed:19:c9:2a:e8:ff:97:39:6c: 39:17:bc:2b:56:4b:44:65:73:14:13:93:7a:74:af: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2F:87:05:9B:87:BB:C0:BB:68:A9:C0:7B:7B:D1:58:FF:AC:90:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cd490aa-c753-4b95-899f-b64a96061cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.189.240.0/21 Signature Algorithm: sha256WithRSAEncryption ad:cd:3c:bf:5b:58:b5:27:99:a4:fe:93:2f:db:21:c9:26:0a: 81:b8:1a:d3:e2:07:dd:4b:1b:65:9a:85:20:50:f6:c0:a5:07: 39:30:dc:56:98:9d:f5:89:2d:43:00:f5:fa:af:13:16:7c:b6: 5f:be:e0:bc:39:ca:3b:e3:8b:1b:2f:27:b9:37:31:66:82:6b: 6a:fe:22:20:c4:82:c2:d3:f9:a3:f5:64:1f:61:ac:81:c9:5f: b3:f6:f1:6c:97:e8:41:a4:4b:81:e7:ad:55:51:7c:bd:8b:4e: df:fc:a6:59:7c:bb:38:14:e9:60:c3:e9:a0:96:42:30:df:ab: 8a:04:7f:0e:92:e1:68:84:bb:d9:ed:c9:0d:d4:f5:9f:0e:03: f0:5d:1c:c8:8b:32:c0:11:66:6c:bf:2a:7e:38:46:b4:cf:06: 27:2a:c4:4a:de:6c:1b:03:fa:c9:33:e2:d5:b6:af:91:b8:c8: f6:47:b1:22:15:64:96:90:d2:13:9e:0f:b1:64:6f:cd:50:14: 77:c2:fa:3a:13:40:64:ff:41:7c:e3:37:2c:50:2f:b5:01:d3: 30:0e:2e:32:e3:53:59:bf:0c:77:44:62:ad:a8:8e:cd:d9:93: 55:86:34:95:b6:cf:d1:69:91:65:27:11:d6:df:52:06:f4:7c: 97:4f:c5:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSMQc1aOK6nreGy+XZcHedz1UVPUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIyMDM5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjgxYjNhOGE4ZTg2YWJhZWRlYmVjOWUwZTRiYzE1MDNk OWVjZWYzMWM1MzM2ODlkNTdmZGEzN2UzZTI0ZmFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuj6DvbSmQiaTq+c2ZZFvsn87qsHMh0kENR+h9DQ0MAAwe C2qraZGagM3L6JF5Gd4PBBa+HzaC9Te0vOidkuzcMxU67u4sbjuHWXcrhGlVnWMF +xnT7lIZhm+4Ar9t2+t+q5UDu08ougDDvJ8axLnmCYAkPCb4wWIeS8VMnNsqyyOP DrW//o3eSAQdG+vTKaVJ6dPPb2XonAnvGWQg6o8mNJ75JzZFirQXsVh6nqY4dlHN LZZAB61FaxcJ01jGAr9SpmIBvVkyI6TPaLWEaSnneEcL7vegsTgNiN+vwUMGVVFA /NGa1+0ZySro/5c5bDkXvCtWS0RlcxQTk3p0r7QRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpC+HBZuHu8C7aKnAe3vRWP+skIcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBjZDQ5MGFhLWM3NTMtNGI5NS04OTlmLWI2NGE5NjA2MWNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2vfAwDQYJKoZIhvcNAQELBQADggEBAK3NPL9bWLUnmaT+ky/bIckmCoG4 GtPiB91LG2WahSBQ9sClBzkw3FaYnfWJLUMA9fqvExZ8tl++4Lw5yjvjixsvJ7k3 MWaCa2r+IiDEgsLT+aP1ZB9hrIHJX7P28WyX6EGkS4HnrVVRfL2LTt/8pll8uzgU 6WDD6aCWQjDfq4oEfw6S4WiEu9ntyQ3U9Z8OA/BdHMiLMsARZmy/Kn44RrTPBicq xErebBsD+skz4tW2r5G4yPZHsSIVZJaQ0hOeD7Fkb81QFHfC+joTQGT/QXzjNyxQ L7UB0zAOLjLjU1m/DHdEYq2ojs3Zk1WGNJW2z9FpkWUnEdbfUgb0fJdPxQY= -----END CERTIFICATE-----Generated at Tue Jul 28 20:26:48 2026 by rpki-client