$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef90c3c1-7f91-4e41-b934-481f1eb6ccc3.roa File: ef90c3c1-7f91-4e41-b934-481f1eb6ccc3.roa (raw, json) Hash identifier: +G0vNkWSqSb0cqicBK838Q2jzhqaZIqbilD+BF2YDPo= Subject key identifier: AA:07:31:CD:21:B5:EE:FF:A3:7C:69:9E:DD:BD:83:27:6F:65:4F:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66D877B5C6CBD2ECEA6D012E310323FDD159E8A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef90c3c1-7f91-4e41-b934-481f1eb6ccc3.roa Signing time: Mon 27 Jul 2026 02:32:00 +0000 ROA not before: Mon 27 Jul 2026 02:32:00 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d8:77:b5:c6:cb:d2:ec:ea:6d:01:2e:31:03:23:fd:d1:59:e8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:32:00 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=13d8fd5696a5a927c8c50454da02dcda5d53c61a7e36827238e05fa01ce01707, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:33:3e:e4:9d:8a:f1:b5:90:2a:cd:a8:07: 0c:c0:1d:23:97:bb:0a:c3:ef:ca:9a:58:d8:05:b6: 9e:2f:dc:6d:9b:51:a5:f8:58:03:47:ad:60:3b:f9: 5e:38:9b:ef:14:d2:d1:bd:4d:3b:e0:bd:ae:fd:b3: 01:5c:95:bf:90:db:e1:d2:bd:39:41:13:55:76:29: 2d:67:be:54:f1:a4:45:f9:36:21:05:ea:30:10:c0: 2b:c5:61:d7:87:6d:12:98:89:e3:57:e3:3c:8c:2b: 70:be:17:75:a1:3f:40:0b:cf:83:6a:04:de:58:95: db:36:1d:a9:b1:56:31:7d:d8:94:50:15:b2:02:43: ca:a6:cb:71:d2:fa:c7:51:1b:41:be:02:1f:16:a2: 08:6a:ab:3d:ee:d7:8d:3a:11:e0:f1:4b:a6:c6:5c: 01:51:74:e7:dd:03:33:28:4d:2a:9b:fe:93:1d:78: 7e:e2:a5:4a:c8:43:e1:82:83:2c:d5:a7:ae:37:c4: 67:6f:61:16:83:7a:5d:db:75:0d:a4:61:d8:9c:67: be:18:87:e9:0d:76:13:ca:bc:9c:42:50:cf:8f:88: 74:cf:9e:27:ce:15:65:e5:96:55:bb:23:f6:9c:4e: 26:40:a9:2d:3f:cc:be:59:49:01:20:b9:ea:fa:df: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:07:31:CD:21:B5:EE:FF:A3:7C:69:9E:DD:BD:83:27:6F:65:4F:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef90c3c1-7f91-4e41-b934-481f1eb6ccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.234.0/23 Signature Algorithm: sha256WithRSAEncryption 66:ef:65:8f:c5:86:35:b6:e3:01:f2:de:e4:9d:e9:da:c8:4c: 6c:d8:e4:38:ed:cc:a7:e9:e8:c8:22:ea:41:ef:85:46:11:87: 9e:16:87:08:21:60:e5:ff:8f:f0:e5:ef:bf:e3:d8:f7:96:c7: 04:87:a2:dc:f3:f2:23:8c:ab:35:c3:d8:c5:d2:d6:ec:13:13: 7e:4c:c2:c8:b2:f0:6e:2b:93:d0:7f:a6:90:18:97:47:38:65: a5:d3:5d:f4:6d:72:b2:fc:63:41:23:9c:26:19:da:0c:42:90: 2c:1f:74:b0:59:d8:2f:01:ba:e1:b6:36:b8:c2:17:db:61:b0: b2:9b:4c:78:16:33:28:8a:7b:38:0f:3b:e3:5e:a6:ba:9d:df: 3f:0b:0b:70:59:d0:e9:61:81:ad:44:3f:73:a3:b5:33:fe:81: b0:21:c0:43:1d:32:76:de:d0:59:01:4e:ed:01:d3:cf:fb:b2: d5:62:88:da:15:a2:d6:30:96:bf:89:bc:57:3c:ce:b5:5d:30: 27:1f:98:fc:64:2e:21:ed:f3:1e:52:38:23:97:ca:af:d2:a9: 41:76:27:4e:dc:25:88:79:bd:9d:a8:94:fb:df:5b:5c:a4:dd: d6:59:d1:c2:a4:ee:cd:01:2e:57:de:7c:a1:1f:1b:fd:20:7c: e0:8a:ef:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZth3tcbL0uzqbQEuMQMj/dFZ6KIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIzMjAwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2Q4ZmQ1Njk2YTVhOTI3YzhjNTA0NTRkYTAyZGNkYTVk NTNjNjFhN2UzNjgyNzIzOGUwNWZhMDFjZTAxNzA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC49TM+5J2K8bWQKs2oBwzAHSOXuwrD78qaWNgFtp4v3G2b UaX4WANHrWA7+V44m+8U0tG9TTvgva79swFclb+Q2+HSvTlBE1V2KS1nvlTxpEX5 NiEF6jAQwCvFYdeHbRKYieNX4zyMK3C+F3WhP0ALz4NqBN5Ylds2HamxVjF92JRQ FbICQ8qmy3HS+sdRG0G+Ah8Woghqqz3u1406EeDxS6bGXAFRdOfdAzMoTSqb/pMd eH7ipUrIQ+GCgyzVp643xGdvYRaDel3bdQ2kYdicZ74Yh+kNdhPKvJxCUM+PiHTP nifOFWXlllW7I/acTiZAqS0/zL5ZSQEguer630WhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqgcxzSG17v+jfGme3b2DJ29lT0gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmOTBjM2MxLTdmOTEtNGU0MS1iOTM0LTQ4MWYxZWI2Y2NjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3OowDQYJKoZIhvcNAQELBQADggEBAGbvZY/FhjW24wHy3uSd6drITGzY 5DjtzKfp6Mgi6kHvhUYRh54WhwghYOX/j/Dl77/j2PeWxwSHotzz8iOMqzXD2MXS 1uwTE35Mwsiy8G4rk9B/ppAYl0c4ZaXTXfRtcrL8Y0EjnCYZ2gxCkCwfdLBZ2C8B uuG2NrjCF9thsLKbTHgWMyiKezgPO+Neprqd3z8LC3BZ0Olhga1EP3OjtTP+gbAh wEMdMnbe0FkBTu0B08/7stViiNoVotYwlr+JvFc8zrVdMCcfmPxkLiHt8x5SOCOX yq/SqUF2J07cJYh5vZ2olPvfW1yk3dZZ0cKk7s0BLlfefKEfG/0gfOCK7x8= -----END CERTIFICATE-----Generated at Tue Jul 28 19:19:38 2026 by rpki-client