$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb0aa010-c19c-4348-aba9-cafe09fa405c.roa File: cb0aa010-c19c-4348-aba9-cafe09fa405c.roa (raw, json) Hash identifier: 9X/0e9FjIVCfVCa+MgA2rM0M+mws/kqnLOOby+PAG0w= Subject key identifier: F8:7B:DE:A4:D6:B1:02:31:30:C7:62:46:CF:B6:96:A3:F3:67:82:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A8647A2D3EDD9E7E674CBA2B211E157DD7A316C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb0aa010-c19c-4348-aba9-cafe09fa405c.roa Signing time: Mon 27 Jul 2026 02:00:10 +0000 ROA not before: Mon 27 Jul 2026 02:00:10 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.235.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:86:47:a2:d3:ed:d9:e7:e6:74:cb:a2:b2:11:e1:57:dd:7a:31:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:00:10 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=5c33c8f18eaab3ccf17818d450b18b8e416595d7ed178d9351475637297b1a0f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:98:52:e1:0b:96:37:5f:7f:e5:f1:c5:99: f9:aa:36:63:26:f0:12:09:b1:95:d0:23:75:5a:dc: 9d:4c:cc:c1:fe:8f:a0:a8:f5:7f:aa:ae:fa:68:ce: 57:34:3f:c0:0b:c3:19:ee:bf:62:77:66:0c:ae:3b: ec:02:28:42:50:71:f3:41:8b:1a:fe:79:d3:fa:80: c1:4a:7a:c7:43:0a:32:a0:bc:2f:37:1d:c7:83:78: a5:9d:e7:99:fc:79:06:48:54:56:f8:4b:6d:27:97: 35:71:ca:bc:77:e2:08:c0:40:3f:33:77:c5:57:0b: 01:6f:18:c0:f1:f9:42:da:fa:9e:2f:f9:7b:5e:e5: f1:07:5b:5d:f6:df:35:40:5d:d7:a3:88:bd:71:cc: b2:39:fe:18:0c:79:7f:44:d7:65:a4:d3:23:4d:2a: 13:9c:cd:cc:3c:f1:61:7f:c0:c6:f8:66:47:af:14: ae:fc:9c:d3:6e:a4:1b:b8:c1:5e:c2:3d:80:df:28: 8e:d1:b9:52:89:2b:45:d6:e2:d8:92:96:7b:8c:68: 94:e6:a9:c2:1d:df:4a:1e:5d:4c:3d:a1:4d:fe:d1: f4:80:a4:79:8d:3b:79:e5:9f:6a:fc:98:53:43:5f: 86:cd:0c:77:34:87:b6:13:68:e6:59:52:a3:b3:af: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7B:DE:A4:D6:B1:02:31:30:C7:62:46:CF:B6:96:A3:F3:67:82:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb0aa010-c19c-4348-aba9-cafe09fa405c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.235.203.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:8a:bd:aa:96:11:da:f0:8e:5a:b8:45:79:15:e7:20:dd:57: 08:79:ba:89:8b:86:13:a1:06:65:e7:38:05:43:dd:61:b4:43: 21:3c:74:f0:23:aa:53:ee:6c:7b:3a:ac:a2:79:ac:27:c8:6f: 55:63:d4:3a:b6:32:db:2e:67:d9:ef:6f:f3:a0:2d:43:7e:36: 72:c3:a8:55:9a:28:94:ab:8a:87:43:4c:3b:5b:9a:51:f3:7a: 08:3b:47:59:10:ef:75:a0:8d:8c:9d:a6:7c:d1:23:ab:a6:f7: 03:22:28:ee:cd:02:4e:68:af:29:02:29:cd:f5:68:8d:86:cd: 34:9b:da:6f:66:84:ee:70:32:b1:d0:8d:78:db:35:a1:ed:00: e6:59:78:58:ff:51:fe:4a:3b:7b:15:ba:77:b4:49:17:f0:4b: a8:55:8a:f1:09:d7:12:21:3c:7f:f1:66:e9:78:3d:dc:c0:59: 64:62:f7:3e:fe:a8:78:08:db:d8:5a:70:32:d5:84:85:4d:3d: 19:7a:cb:7e:31:95:61:69:b9:e3:ed:21:e6:c5:1d:f6:4c:21: 19:31:e1:04:a4:4d:ec:53:ec:57:42:fa:6a:2e:eb:78:72:4f: 9b:8f:3c:83:1d:24:85:c0:e4:3a:c5:9c:90:05:c6:4c:74:97: 43:17:c9:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOoZHotPt2efmdMuishHhV916MWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIwMDEwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzMzYzhmMThlYWFiM2NjZjE3ODE4ZDQ1MGIxOGI4ZTQx NjU5NWQ3ZWQxNzhkOTM1MTQ3NTYzNzI5N2IxYTBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdLJhS4QuWN19/5fHFmfmqNmMm8BIJsZXQI3Va3J1MzMH+ j6Co9X+qrvpozlc0P8ALwxnuv2J3ZgyuO+wCKEJQcfNBixr+edP6gMFKesdDCjKg vC83HceDeKWd55n8eQZIVFb4S20nlzVxyrx34gjAQD8zd8VXCwFvGMDx+ULa+p4v +Xte5fEHW1323zVAXdejiL1xzLI5/hgMeX9E12Wk0yNNKhOczcw88WF/wMb4Zkev FK78nNNupBu4wV7CPYDfKI7RuVKJK0XW4tiSlnuMaJTmqcId30oeXUw9oU3+0fSA pHmNO3nln2r8mFNDX4bNDHc0h7YTaOZZUqOzryhNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+HvepNaxAjEwx2JGz7aWo/Nngh0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiMGFhMDEwLWMxOWMtNDM0OC1hYmE5LWNhZmUwOWZhNDA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD68swDQYJKoZIhvcNAQELBQADggEBACqKvaqWEdrwjlq4RXkV5yDdVwh5 uomLhhOhBmXnOAVD3WG0QyE8dPAjqlPubHs6rKJ5rCfIb1Vj1Dq2MtsuZ9nvb/Og LUN+NnLDqFWaKJSriodDTDtbmlHzegg7R1kQ73WgjYydpnzRI6um9wMiKO7NAk5o rykCKc31aI2GzTSb2m9mhO5wMrHQjXjbNaHtAOZZeFj/Uf5KO3sVune0SRfwS6hV ivEJ1xIhPH/xZul4PdzAWWRi9z7+qHgI29hacDLVhIVNPRl6y34xlWFpuePtIebF HfZMIRkx4QSkTexT7FdC+mou63hyT5uPPIMdJIXA5DrFnJAFxkx0l0MXyZE= -----END CERTIFICATE-----Generated at Tue Jul 28 21:12:31 2026 by rpki-client