$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd64d62b-59e2-4450-8c59-bc2917e6add0.roa File: cd64d62b-59e2-4450-8c59-bc2917e6add0.roa (raw, json) Hash identifier: f1jEyNpda8Qgb5BGRmok2c8b/FvQd1D1r9qGIB+1wn0= Subject key identifier: F0:AF:34:2B:B0:C4:39:68:AA:F5:70:1C:5F:34:70:82:1A:BC:85:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71C514A52F7E647F8FD5D2C71938DF3E4743B8BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd64d62b-59e2-4450-8c59-bc2917e6add0.roa Signing time: Wed 09 Sep 2026 00:00:40 +0000 ROA not before: Wed 09 Sep 2026 00:00:40 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.5.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c5:14:a5:2f:7e:64:7f:8f:d5:d2:c7:19:38:df:3e:47:43:b8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 9 00:00:40 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=a87d9431f77d6fca5607f50703894b42fea0dae5119f59b632f6b0b34a5c79c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:69:96:28:84:20:8c:34:a5:4b:94:40:20: f5:86:d2:6f:30:4c:d7:40:e6:52:38:b2:3c:4f:16: 24:21:51:aa:71:c0:9a:5b:e2:94:b5:5b:43:f6:45: e1:d3:ad:13:75:c1:de:fd:52:e8:8d:fd:89:25:27: 86:9d:1b:10:41:f2:c2:3d:c5:e5:81:dd:ee:f4:00: c0:04:d9:f6:87:46:12:a5:e8:6b:f0:69:a4:2a:55: e2:74:ee:4a:e1:ed:b7:1f:7f:53:bb:14:1c:87:8f: a2:68:b5:31:49:3c:c6:7b:00:3e:db:d3:b6:a7:84: 42:32:61:e9:96:a7:85:ad:97:57:21:ba:10:7e:d7: ab:f3:15:a1:87:e6:7c:42:41:52:ec:13:65:0c:dd: 67:70:02:74:56:ed:20:87:07:bf:fb:27:14:7e:02: 0c:a1:e8:ee:3f:16:e7:b8:3c:9c:5c:24:4e:b5:9c: 36:f6:72:42:92:e5:2d:e6:04:03:50:76:bb:9e:db: 92:01:e7:68:97:f0:89:d6:7c:a8:88:0e:98:9c:4e: fe:0f:19:b9:7e:da:ea:df:24:9e:89:ad:34:b5:92: 9c:56:3e:a8:e0:91:54:4a:a3:ab:c2:09:78:bf:db: 2c:7e:51:00:8f:37:48:df:2e:d0:dc:f5:a6:7b:9e: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AF:34:2B:B0:C4:39:68:AA:F5:70:1C:5F:34:70:82:1A:BC:85:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd64d62b-59e2-4450-8c59-bc2917e6add0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.5.74.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c9:2c:aa:65:60:1d:d0:56:42:5b:2f:18:bf:55:53:57:7d: 26:8b:a4:37:00:59:63:1f:6c:73:b6:4a:5f:14:3b:c8:64:4e: 8d:a7:75:92:72:d9:ec:06:16:c6:f0:6c:28:be:fe:f2:a0:25: 88:ad:fa:14:fe:34:37:cb:23:4b:1b:c2:07:c1:ff:fa:d1:8f: 35:ab:29:2a:6e:c6:9c:6e:2c:17:87:5e:f9:6f:10:3a:ca:ad: a0:2a:63:94:4d:50:a5:08:70:4c:a2:38:d4:95:6e:67:32:27: e1:6c:0f:37:aa:d5:98:e7:5d:bd:03:92:56:74:df:4e:9d:1a: b8:b8:e0:31:df:5b:71:58:52:10:e7:56:c2:ed:17:db:60:59: 4c:35:a4:df:b5:28:6a:be:87:07:28:f4:9b:3c:f9:2c:36:62: b4:d4:9f:6c:31:12:fe:c0:7b:26:53:02:f2:8c:f5:6e:8a:02: bc:f6:34:58:c1:00:ff:14:5c:e0:85:20:2a:88:0e:52:92:6e: 92:63:15:5c:43:7a:bf:65:62:b3:ee:f3:e9:a6:77:68:7e:c9: 68:35:07:63:58:15:ee:c9:05:49:d3:d3:e7:ad:ca:aa:81:05: 0d:d5:41:e5:85:7f:be:c7:a5:66:bf:60:fa:2a:bb:d6:c8:fc: 78:b9:c5:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUccUUpS9+ZH+P1dLHGTjfPkdDuL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwOTA5MDAwMDQwWhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODdkOTQzMWY3N2Q2ZmNhNTYwN2Y1MDcwMzg5NGI0MmZl YTBkYWU1MTE5ZjU5YjYzMmY2YjBiMzRhNWM3OWM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQw2mWKIQgjDSlS5RAIPWG0m8wTNdA5lI4sjxPFiQhUapx wJpb4pS1W0P2ReHTrRN1wd79UuiN/YklJ4adGxBB8sI9xeWB3e70AMAE2faHRhKl 6GvwaaQqVeJ07krh7bcff1O7FByHj6JotTFJPMZ7AD7b07anhEIyYemWp4Wtl1ch uhB+16vzFaGH5nxCQVLsE2UM3WdwAnRW7SCHB7/7JxR+Agyh6O4/Fue4PJxcJE61 nDb2ckKS5S3mBANQdrue25IB52iX8InWfKiIDpicTv4PGbl+2urfJJ6JrTS1kpxW PqjgkVRKo6vCCXi/2yx+UQCPN0jfLtDc9aZ7nq0NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8K80K7DEOWiq9XAcXzRwghq8hR8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkNjRkNjJiLTU5ZTItNDQ1MC04YzU5LWJjMjkxN2U2YWRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADBUowDQYJKoZIhvcNAQELBQADggEBAEfJLKplYB3QVkJbLxi/VVNXfSaL pDcAWWMfbHO2Sl8UO8hkTo2ndZJy2ewGFsbwbCi+/vKgJYit+hT+NDfLI0sbwgfB //rRjzWrKSpuxpxuLBeHXvlvEDrKraAqY5RNUKUIcEyiONSVbmcyJ+FsDzeq1Zjn Xb0DklZ0306dGri44DHfW3FYUhDnVsLtF9tgWUw1pN+1KGq+hwco9Js8+Sw2YrTU n2wxEv7AeyZTAvKM9W6KArz2NFjBAP8UXOCFICqIDlKSbpJjFVxDer9lYrPu8+mm d2h+yWg1B2NYFe7JBUnT0+etyqqBBQ3VQeWFf77HpWa/YPoqu9bI/Hi5xQU= -----END CERTIFICATE-----Generated at Tue Sep 22 03:51:57 2026 by rpki-client