$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54e81d13-f5d6-4228-94b5-f422041a70ec.roa File: 54e81d13-f5d6-4228-94b5-f422041a70ec.roa (raw, json) Hash identifier: CD6YX9Dohx6wlrru8uozhvS+ceESfE/U7DdNSoUmF2s= Subject key identifier: CE:3E:C7:FD:CC:0D:AF:D2:62:55:B6:CB:35:6D:C7:97:D6:F4:87:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4149037969BF0EDE3B70E697B70B6BB86C2A2B31 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54e81d13-f5d6-4228-94b5-f422041a70ec.roa Signing time: Sun 26 Jul 2026 00:00:05 +0000 ROA not before: Sun 26 Jul 2026 00:00:05 +0000 ROA not after: Sat 24 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:49:03:79:69:bf:0e:de:3b:70:e6:97:b7:0b:6b:b8:6c:2a:2b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 26 00:00:05 2026 GMT Not After : Oct 24 23:59:59 2026 GMT Subject: serialNumber=c1c20f897cab3c1f47997fef1b244f5d45f2ee7c8ba2da1409da24325bb447c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:56:ef:ea:81:36:c1:cc:95:09:11:44:88: 77:43:07:23:71:36:82:dc:22:1c:e7:98:d3:4e:fb: fb:90:45:48:13:ff:d8:f4:d7:da:c5:23:6f:6a:f7: 21:d4:9e:e9:b6:33:fc:1c:a9:ed:ed:0f:e1:14:e0: cc:9a:92:ed:7e:6b:cf:c6:5e:79:f5:8f:35:97:3d: 44:ed:06:35:b6:7f:1c:e2:5a:7c:49:4f:a6:b2:04: 66:8b:e7:47:0f:c6:9a:4a:52:9f:e9:ed:d3:28:14: 94:2b:f8:ce:3a:bb:1b:40:7c:fc:99:1b:df:ce:ea: 83:a6:53:37:e3:15:68:a6:47:e7:d0:51:85:a3:aa: 32:28:85:9f:ab:23:77:86:d7:7a:73:c4:80:74:a9: 31:c3:73:11:3b:5a:b5:a6:e4:3c:07:46:43:c1:9c: 97:04:29:3d:e1:31:41:a7:9b:29:92:69:e2:56:f9: 56:d0:78:d5:c9:92:15:ad:3d:5a:66:fd:3c:f6:f3: 6e:c4:11:16:d6:4d:ab:a7:4b:b9:70:da:04:7b:10: 56:2e:f6:c1:69:8b:0c:37:db:c9:95:79:7e:1a:81: 08:18:f9:6c:98:ff:87:3b:67:fc:71:15:0c:86:4c: 9c:cc:d8:8a:d9:9a:58:b1:87:73:ec:e0:21:ca:26: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:C7:FD:CC:0D:AF:D2:62:55:B6:CB:35:6D:C7:97:D6:F4:87:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54e81d13-f5d6-4228-94b5-f422041a70ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.108.0/24 Signature Algorithm: sha256WithRSAEncryption ae:2c:6a:ec:fc:a9:63:1b:bb:ef:31:31:0a:42:9b:8b:bd:a7: 30:3f:50:b4:4b:e8:64:43:df:68:d5:bb:6c:7b:d4:bb:b7:9f: ab:90:c3:37:93:1d:9d:96:9c:09:46:08:8d:d6:cc:d0:ad:ea: 9d:55:fb:82:5a:fd:bd:9e:09:d9:00:c6:9b:09:63:88:a2:4b: ef:32:f1:96:2b:f1:51:79:3e:2f:d9:43:1b:19:ec:e3:63:65: 8a:59:27:00:08:d3:9b:b9:9c:c2:17:4e:d6:b6:6d:60:32:10: 9d:70:3e:40:07:dc:56:98:ae:61:fc:db:53:d3:51:c9:eb:af: a6:98:7a:27:c6:af:78:96:e1:7a:66:75:d4:a6:f8:77:71:49: 23:ac:3b:eb:00:e8:32:75:4c:fc:cf:91:00:13:9e:d2:ae:ad: 47:c2:d0:3b:ea:b3:6b:c4:a9:dc:e3:f8:a6:d8:66:49:99:37: 40:6a:f3:15:d6:37:e6:e6:81:d6:b8:28:9b:b1:12:f5:61:cf: 78:13:2a:dc:d7:4f:b8:98:1c:e7:33:65:a0:59:67:3d:08:df: 8c:17:53:6e:e8:60:ef:8d:88:77:da:1c:01:93:f0:11:19:81: 64:40:b3:66:cf:08:e2:bc:d6:58:13:69:08:4e:ff:51:33:e6: c1:ed:10:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQUkDeWm/Dt47cOaXtwtruGwqKzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI2MDAwMDA1WhcNMjYxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWMyMGY4OTdjYWIzYzFmNDc5OTdmZWYxYjI0NGY1ZDQ1 ZjJlZTdjOGJhMmRhMTQwOWRhMjQzMjViYjQ0N2M3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC12Vbv6oE2wcyVCRFEiHdDByNxNoLcIhznmNNO+/uQRUgT /9j019rFI29q9yHUnum2M/wcqe3tD+EU4Myaku1+a8/GXnn1jzWXPUTtBjW2fxzi WnxJT6ayBGaL50cPxppKUp/p7dMoFJQr+M46uxtAfPyZG9/O6oOmUzfjFWimR+fQ UYWjqjIohZ+rI3eG13pzxIB0qTHDcxE7WrWm5DwHRkPBnJcEKT3hMUGnmymSaeJW +VbQeNXJkhWtPVpm/Tz2827EERbWTaunS7lw2gR7EFYu9sFpiww328mVeX4agQgY +WyY/4c7Z/xxFQyGTJzM2IrZmlixh3Ps4CHKJjS3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzj7H/cwNr9JiVbbLNW3Hl9b0h6YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0ZTgxZDEzLWY1ZDYtNDIyOC05NGI1LWY0MjIwNDFhNzBlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsWwwDQYJKoZIhvcNAQELBQADggEBAK4sauz8qWMbu+8xMQpCm4u9pzA/ ULRL6GRD32jVu2x71Lu3n6uQwzeTHZ2WnAlGCI3WzNCt6p1V+4Ja/b2eCdkAxpsJ Y4iiS+8y8ZYr8VF5Pi/ZQxsZ7ONjZYpZJwAI05u5nMIXTta2bWAyEJ1wPkAH3FaY rmH821PTUcnrr6aYeifGr3iW4XpmddSm+HdxSSOsO+sA6DJ1TPzPkQATntKurUfC 0Dvqs2vEqdzj+KbYZkmZN0Bq8xXWN+bmgda4KJuxEvVhz3gTKtzXT7iYHOczZaBZ Zz0I34wXU27oYO+NiHfaHAGT8BEZgWRAs2bPCOK81lgTaQhO/1Ez5sHtELE= -----END CERTIFICATE-----Generated at Tue Jul 28 17:06:28 2026 by rpki-client