$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa File: 17beaf1d-23cc-42f2-907d-15cc6155337a.roa (raw, json) Hash identifier: suqXsxMTynN2ISWiMVOrUJ+VVyqc5NzQQHAItVw+nEE= Subject key identifier: E8:81:CD:67:A5:74:65:4C:69:9E:79:CD:F9:87:4D:1C:4A:43:3B:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C2DDA80A88D110703DB3F555F11A9CCC30E2F99 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa Signing time: Fri 24 Jul 2026 01:10:07 +0000 ROA not before: Fri 24 Jul 2026 01:10:07 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2d:da:80:a8:8d:11:07:03:db:3f:55:5f:11:a9:cc:c3:0e:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 24 01:10:07 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=f2a077c5c7b11e5392741ab7738f2a02a6d3393f4e7ca704065f62c74e0c0892, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:49:4a:89:f9:6f:c2:e1:14:82:67:50:65: a4:57:93:d0:23:1e:8f:31:4c:7a:e9:83:b1:03:9d: a8:40:97:f8:3a:77:6d:a9:74:40:22:b6:2a:b8:97: 7a:40:39:41:74:b1:f9:4e:6a:40:af:e7:d5:55:ed: e1:c9:38:d4:c5:8d:a5:33:1f:14:22:9a:9d:db:a8: bd:37:4d:29:e2:ce:06:2f:43:f2:10:3f:13:3d:ee: fa:ec:98:05:f5:04:5f:b9:78:45:e9:0b:4b:5e:87: 85:17:fc:09:96:7a:d9:89:e3:c4:40:66:f6:62:44: ad:2b:b6:d4:06:e7:3b:b7:17:be:11:b3:36:bc:64: c4:47:60:cd:f3:46:f3:ed:e7:05:f7:78:c3:b7:3a: ce:0e:d9:bb:d8:83:19:d1:d6:92:dd:5b:86:7c:37: f1:c4:1a:80:47:e4:93:ac:e5:a8:10:42:57:3e:48: 3f:da:0d:30:aa:d1:2d:15:cf:63:b7:0a:da:5b:c7: b4:60:fe:c2:8c:24:b0:81:d0:3e:71:2d:6f:43:04: 68:d8:6f:97:f6:4d:85:a9:e2:57:7e:10:03:4b:d3: d4:41:b2:de:29:f6:9a:87:e3:c1:a6:96:24:8e:2d: f7:5d:24:23:0d:41:86:48:d7:c3:7d:d7:a3:1a:3e: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:CD:67:A5:74:65:4C:69:9E:79:CD:F9:87:4D:1C:4A:43:3B:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.56.0.0/18 Signature Algorithm: sha256WithRSAEncryption 99:d9:b2:4b:ed:6e:b4:69:3a:48:76:bc:a2:b5:8e:cd:ea:b2: e0:71:9a:f2:99:a2:85:cc:03:a0:68:4f:bd:56:1b:2b:80:ef: 88:5a:e6:31:b0:c8:73:91:d2:2a:6a:cc:39:6e:1c:9d:bd:92: 87:26:58:d9:7c:00:36:03:70:83:d0:32:eb:22:d1:f7:fd:cf: 1a:4d:9c:80:1c:4c:bf:3e:a7:08:07:b8:e2:8f:1e:2d:61:b1: 5f:a3:a5:c1:72:d0:cf:1f:1c:b8:b4:e6:61:82:8d:5f:f7:2a: 17:93:4e:43:1c:a1:74:fa:b1:04:39:3a:f0:92:96:e2:a2:f7: d9:ed:e3:be:6c:57:76:96:5e:af:da:3e:ba:9c:4f:a5:de:1c: a0:0c:d0:45:ad:61:20:18:b8:88:20:9c:42:72:2e:b2:10:63: 19:d0:f1:b3:df:54:28:ac:fa:bd:65:3b:0f:74:58:84:b5:e3: 5a:b1:14:c6:4b:06:f8:23:39:bd:77:13:92:22:7c:cd:04:46: e0:19:a0:df:42:93:6b:ce:68:67:09:28:55:0b:3a:db:3e:ff: 09:d0:eb:ff:1e:bb:e7:51:ba:c7:49:e3:6b:9b:6a:68:19:ea: 32:46:8e:6a:a1:d9:0a:a9:78:c4:c9:39:10:6d:8d:41:4e:4c: 44:87:88:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPC3agKiNEQcD2z9VXxGpzMMOL5kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI0MDExMDA3WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmEwNzdjNWM3YjExZTUzOTI3NDFhYjc3MzhmMmEwMmE2 ZDMzOTNmNGU3Y2E3MDQwNjVmNjJjNzRlMGMwODkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy5klKiflvwuEUgmdQZaRXk9AjHo8xTHrpg7EDnahAl/g6 d22pdEAitiq4l3pAOUF0sflOakCv59VV7eHJONTFjaUzHxQimp3bqL03TSnizgYv Q/IQPxM97vrsmAX1BF+5eEXpC0teh4UX/AmWetmJ48RAZvZiRK0rttQG5zu3F74R sza8ZMRHYM3zRvPt5wX3eMO3Os4O2bvYgxnR1pLdW4Z8N/HEGoBH5JOs5agQQlc+ SD/aDTCq0S0Vz2O3Ctpbx7Rg/sKMJLCB0D5xLW9DBGjYb5f2TYWp4ld+EANL09RB st4p9pqH48GmliSOLfddJCMNQYZI18N916MaPkA3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6IHNZ6V0ZUxpnnnN+YdNHEpDOxUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3YmVhZjFkLTIzY2MtNDJmMi05MDdkLTE1Y2M2MTU1MzM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNOAAwDQYJKoZIhvcNAQELBQADggEBAJnZskvtbrRpOkh2vKK1js3qsuBx mvKZooXMA6BoT71WGyuA74ha5jGwyHOR0ipqzDluHJ29kocmWNl8ADYDcIPQMusi 0ff9zxpNnIAcTL8+pwgHuOKPHi1hsV+jpcFy0M8fHLi05mGCjV/3KheTTkMcoXT6 sQQ5OvCSluKi99nt475sV3aWXq/aPrqcT6XeHKAM0EWtYSAYuIggnEJyLrIQYxnQ 8bPfVCis+r1lOw90WIS141qxFMZLBvgjOb13E5IifM0ERuAZoN9Ck2vOaGcJKFUL Ots+/wnQ6/8eu+dRusdJ42ubamgZ6jJGjmqh2QqpeMTJORBtjUFOTESHiDk= -----END CERTIFICATE-----Generated at Tue Jul 28 17:00:51 2026 by rpki-client