$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5aacdbc9-96ca-49e5-b5db-5efc7021c3a3.roa File: 5aacdbc9-96ca-49e5-b5db-5efc7021c3a3.roa (raw, json) Hash identifier: ErNIa0yIgZnYLQlpn2U41mBnk5KqS8uCdulY1R8/cmA= Subject key identifier: 39:DE:45:C3:98:53:32:62:81:DF:1A:28:13:2C:79:00:6C:3D:AF:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2396A0DDECEFB2EB941B71EF3D84A1315EA20EFD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5aacdbc9-96ca-49e5-b5db-5efc7021c3a3.roa Signing time: Mon 27 Jul 2026 01:30:50 +0000 ROA not before: Mon 27 Jul 2026 01:30:50 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.224.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:96:a0:dd:ec:ef:b2:eb:94:1b:71:ef:3d:84:a1:31:5e:a2:0e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:30:50 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=f832c0058f9421638a37a9bfb50f2e36f5e21d7ae17c2482f4d1b876f062549c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:9e:a2:da:6b:97:50:f7:59:a5:e2:19:49: 09:97:61:2e:1c:b6:55:50:73:33:fa:f7:4e:de:32: f3:11:7e:a9:ea:7b:85:8e:09:b6:24:2a:e8:13:b8: ba:69:6f:d9:c5:3a:49:23:80:2f:ca:ca:d3:22:5b: 1f:2f:0e:a3:31:58:79:3b:f4:47:f0:7f:36:71:b5: 3c:ae:bf:9e:fb:14:67:c2:6d:69:2c:b4:f9:d7:04: ba:26:ae:2e:77:59:30:ed:63:f2:f4:c3:4c:4a:5c: 82:67:4b:21:22:34:9a:a0:59:55:17:2d:25:be:28: 53:a8:6b:e4:dd:b9:37:e5:8c:75:d4:70:4c:a5:98: b0:b4:6d:8c:76:a5:0c:30:62:83:fb:a4:45:f0:23: 8e:76:fc:aa:8e:18:51:ac:2b:29:5c:3b:06:ad:88: 31:c1:73:bb:d0:2f:68:87:ac:6d:b9:35:a9:f3:fd: e7:ee:4c:97:cb:57:04:11:5e:d1:e3:40:c7:3d:5f: 83:67:51:77:3a:84:0c:10:59:7d:58:d5:49:bf:9a: bd:84:c4:50:c7:69:71:f6:ba:9f:a5:e1:4c:cf:20: 72:0d:48:a9:ef:33:1a:ac:c0:2d:2f:12:25:30:52: 83:88:ab:76:31:c3:40:83:23:f0:f4:84:81:85:5a: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:45:C3:98:53:32:62:81:DF:1A:28:13:2C:79:00:6C:3D:AF:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5aacdbc9-96ca-49e5-b5db-5efc7021c3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.224.0.0/12 Signature Algorithm: sha256WithRSAEncryption 58:03:b9:1b:d5:ed:90:44:f2:35:36:7c:f5:0b:69:ef:0f:c9: ca:65:fd:1c:3b:76:c4:5e:9d:50:58:9e:24:bf:1c:e4:c4:34: 62:3a:b4:c3:5d:1a:58:06:a3:e4:14:c8:99:d9:08:e9:f1:64: 0f:d0:be:68:17:07:b8:19:90:f8:64:44:d8:6e:82:09:f5:27: 4d:c0:82:cd:42:cf:38:ae:17:e6:bb:31:9e:f2:6c:0a:96:6d: 7d:19:80:5c:4c:72:e3:41:de:8e:a9:17:a6:b1:c8:4e:2b:e2: 74:d4:80:7a:d7:14:62:5b:3d:f7:d3:da:99:40:f9:13:cf:d2: 79:bb:a8:44:ef:50:a9:3c:78:e9:45:9d:7b:a4:7a:f8:4d:84: 99:3b:0c:af:e5:9a:4d:93:c3:37:f3:24:98:33:25:f0:93:7b: 67:07:12:d1:5b:2e:3c:e3:0c:33:f3:8e:85:49:00:09:50:5f: d4:4e:fa:6a:06:15:ea:49:25:24:64:99:14:4b:08:b2:01:15: d7:ed:d3:a8:41:6c:eb:b6:fa:33:0f:63:f4:14:f6:22:61:19: cb:2c:01:94:7e:b5:31:17:c3:67:70:74:49:7c:70:02:86:66: 29:8e:ef:bd:53:b6:83:2c:bb:66:74:db:1c:9d:d6:2f:61:52: 20:f6:fc:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI5ag3ezvsuuUG3HvPYShMV6iDv0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDEzMDUwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODMyYzAwNThmOTQyMTYzOGEzN2E5YmZiNTBmMmUzNmY1 ZTIxZDdhZTE3YzI0ODJmNGQxYjg3NmYwNjI1NDljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKj56i2muXUPdZpeIZSQmXYS4ctlVQczP6907eMvMRfqnq e4WOCbYkKugTuLppb9nFOkkjgC/KytMiWx8vDqMxWHk79EfwfzZxtTyuv577FGfC bWkstPnXBLomri53WTDtY/L0w0xKXIJnSyEiNJqgWVUXLSW+KFOoa+TduTfljHXU cEylmLC0bYx2pQwwYoP7pEXwI452/KqOGFGsKylcOwatiDHBc7vQL2iHrG25Nanz /efuTJfLVwQRXtHjQMc9X4NnUXc6hAwQWX1Y1Um/mr2ExFDHaXH2up+l4UzPIHIN SKnvMxqswC0vEiUwUoOIq3Yxw0CDI/D0hIGFWp9tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOd5Fw5hTMmKB3xooEyx5AGw9r1IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhYWNkYmM5LTk2Y2EtNDllNS1iNWRiLTVlZmM3MDIxYzNhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQD4DANBgkqhkiG9w0BAQsFAAOCAQEAWAO5G9XtkETyNTZ89Qtp7w/JymX9 HDt2xF6dUFieJL8c5MQ0Yjq0w10aWAaj5BTImdkI6fFkD9C+aBcHuBmQ+GRE2G6C CfUnTcCCzULPOK4X5rsxnvJsCpZtfRmAXExy40HejqkXprHITividNSAetcUYls9 99PamUD5E8/SebuoRO9QqTx46UWde6R6+E2EmTsMr+WaTZPDN/MkmDMl8JN7ZwcS 0VsuPOMMM/OOhUkACVBf1E76agYV6kklJGSZFEsIsgEV1+3TqEFs67b6Mw9j9BT2 ImEZyywBlH61MRfDZ3B0SXxwAoZmKY7vvVO2gyy7ZnTbHJ3WL2FSIPb8Jw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:28:00 2026 by rpki-client