$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c41a2e6-c057-4394-9ba5-1fce83874b1f.roa File: 1c41a2e6-c057-4394-9ba5-1fce83874b1f.roa (raw, json) Hash identifier: 91mRYC+c4EQUeJA0N8Ef6qZ91KuFUbNsAtarsNBetFw= Subject key identifier: 9C:00:7F:22:1B:4F:9D:7B:14:24:0A:74:86:5F:FB:40:FE:E8:6D:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D05FDE85EEFFD133483250E833E3EDDC9EF72C7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c41a2e6-c057-4394-9ba5-1fce83874b1f.roa Signing time: Mon 27 Jul 2026 02:20:41 +0000 ROA not before: Mon 27 Jul 2026 02:20:41 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.166.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:05:fd:e8:5e:ef:fd:13:34:83:25:0e:83:3e:3e:dd:c9:ef:72:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:20:41 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=6c3e2786402e7845b0b82938ae8307a4aff85f0251a0985fa490ebedc8e4905e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:b1:e0:f1:9f:ed:a0:3b:c6:af:b3:ed:65: 40:34:e4:e4:30:38:85:7a:34:0e:64:ec:5b:04:b5: 1d:1f:98:c1:3e:b2:80:01:cf:b9:1a:d1:c1:e0:cc: 64:00:22:6d:34:79:59:cc:14:d8:19:fd:a3:79:73: 98:94:95:d1:31:91:21:99:cb:10:b7:31:8b:9f:24: 78:78:ca:36:ce:61:d0:63:10:ea:3c:b0:da:29:b0: e4:69:d4:b5:21:f4:f5:cb:76:89:49:65:c0:7d:f4: e4:92:10:6a:a2:1c:54:16:d1:be:3a:58:ea:43:41: 8e:fe:36:8c:7b:f9:48:38:bf:65:bc:25:46:d5:4f: 39:3b:13:e5:ae:67:2e:96:49:29:6c:ac:fd:49:c9: b9:2e:ce:ff:af:ce:72:cf:96:1e:0e:f9:93:ba:24: c3:0e:8b:bc:56:89:50:5e:1a:67:fb:b7:c0:62:96: 65:ae:13:43:0f:e8:7b:b3:2f:1e:45:6d:e0:18:ca: 41:c3:70:77:89:ae:18:13:0f:dd:a9:82:d3:14:54: 3e:ef:e0:7f:3c:94:15:f8:58:4d:1e:a9:7a:c5:be: 50:65:76:28:c7:a2:d9:4d:a2:6d:30:72:a4:63:48: d0:fe:fa:d9:94:66:29:14:35:b2:6e:ea:02:e8:ca: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:00:7F:22:1B:4F:9D:7B:14:24:0A:74:86:5F:FB:40:FE:E8:6D:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c41a2e6-c057-4394-9ba5-1fce83874b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.166.128.0/17 Signature Algorithm: sha256WithRSAEncryption 49:57:a4:ad:cf:1d:1a:b8:cf:ba:c6:2e:72:ba:ef:76:ce:c8: 3e:fe:b2:d7:f7:24:ff:c1:9a:b4:cd:bb:66:74:83:ce:f1:84: 5c:bb:68:64:e4:cf:7d:98:d6:61:98:4a:93:f3:59:5a:e0:25: c0:3b:f4:cc:32:c8:5b:1e:d0:ad:5e:93:4d:b8:2a:28:d5:c7: a4:5c:f6:df:bd:69:62:f7:11:68:ef:3b:c5:13:e0:86:a5:ba: 67:2f:12:40:8e:2c:5c:10:5c:7c:0f:22:2e:78:ae:e1:6f:9b: da:1c:85:10:74:ec:90:b3:7c:22:79:db:25:f2:03:50:62:d3: d5:85:d0:7f:f3:ff:68:0a:03:b7:99:6d:51:ff:f1:3b:3c:56: bc:a3:f0:f0:91:32:d5:98:e3:bc:3f:02:f9:b5:57:2f:6e:09: 82:60:24:c9:19:57:f1:b2:d1:8d:6f:43:b3:96:cf:f6:6f:ec: b7:3a:7f:8e:98:d6:7e:a1:c6:83:1a:4d:80:9a:12:a8:77:1b: e9:82:11:f3:0e:f0:f5:7c:b5:2b:4f:44:25:e3:07:5d:6e:9a: fd:f8:af:4c:ce:35:d6:20:94:4e:7c:9d:ba:3a:0f:72:bd:48: e6:75:dc:63:18:d1:8d:e4:45:07:6d:21:4e:8d:60:db:12:c0: be:4a:56:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbQX96F7v/RM0gyUOgz4+3cnvcscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIyMDQxWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzNlMjc4NjQwMmU3ODQ1YjBiODI5MzhhZTgzMDdhNGFm Zjg1ZjAyNTFhMDk4NWZhNDkwZWJlZGM4ZTQ5MDVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuM7Hg8Z/toDvGr7PtZUA05OQwOIV6NA5k7FsEtR0fmME+ soABz7ka0cHgzGQAIm00eVnMFNgZ/aN5c5iUldExkSGZyxC3MYufJHh4yjbOYdBj EOo8sNopsORp1LUh9PXLdolJZcB99OSSEGqiHFQW0b46WOpDQY7+Nox7+Ug4v2W8 JUbVTzk7E+WuZy6WSSlsrP1Jybkuzv+vznLPlh4O+ZO6JMMOi7xWiVBeGmf7t8Bi lmWuE0MP6HuzLx5FbeAYykHDcHeJrhgTD92pgtMUVD7v4H88lBX4WE0eqXrFvlBl dijHotlNom0wcqRjSND++tmUZikUNbJu6gLoylIfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnAB/IhtPnXsUJAp0hl/7QP7oba0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjNDFhMmU2LWMwNTctNDM5NC05YmE1LTFmY2U4Mzg3NGIxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2poAwDQYJKoZIhvcNAQELBQADggEBAElXpK3PHRq4z7rGLnK673bOyD7+ stf3JP/BmrTNu2Z0g87xhFy7aGTkz32Y1mGYSpPzWVrgJcA79MwyyFse0K1ek024 KijVx6Rc9t+9aWL3EWjvO8UT4IalumcvEkCOLFwQXHwPIi54ruFvm9ochRB07JCz fCJ52yXyA1Bi09WF0H/z/2gKA7eZbVH/8Ts8Vryj8PCRMtWY47w/Avm1Vy9uCYJg JMkZV/Gy0Y1vQ7OWz/Zv7Lc6f46Y1n6hxoMaTYCaEqh3G+mCEfMO8PV8tStPRCXj B11umv34r0zONdYglE58nbo6D3K9SOZ13GMY0Y3kRQdtIU6NYNsSwL5KVuc= -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:46 2026 by rpki-client