$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036db049-dc30-462c-80e5-fbf708bc01f8.roa File: 036db049-dc30-462c-80e5-fbf708bc01f8.roa (raw, json) Hash identifier: y7El5mbbALhvcUUv4+xGvLWFwNqXVuhIjwFmsNhMTtI= Subject key identifier: 2F:08:FC:8C:B7:21:F9:CC:76:DC:11:20:20:0B:5C:0F:9D:B3:3F:30 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F8B0328A0D9B8C7C806A9E7C3F7ACECD1234152 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036db049-dc30-462c-80e5-fbf708bc01f8.roa Signing time: Mon 04 May 2026 14:10:06 +0000 ROA not before: Mon 04 May 2026 14:10:06 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8b:03:28:a0:d9:b8:c7:c8:06:a9:e7:c3:f7:ac:ec:d1:23:41:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:10:06 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a9d72bf29fbb392b2975bee8677e4a1af9fab1bf3eb36bcbfaf216f74f124a7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:7a:fe:51:eb:c4:4e:fa:5e:b9:21:49:ec: 03:c8:29:33:a6:ca:10:6c:c6:2d:6e:9f:ef:ba:71: 3d:13:9c:3c:f1:f1:c6:01:67:90:d3:49:68:e7:a6: d9:5b:3b:a3:27:db:f0:4e:2a:6f:26:c7:8c:99:c4: fd:83:16:75:18:da:ba:f2:d1:33:41:a1:48:0c:e6: 5b:61:46:96:61:5a:1d:f5:bb:2a:18:f3:4f:15:e7: 62:6d:f5:a1:a5:cd:e7:08:9d:8e:ee:de:ca:b2:d3: 87:27:f8:9e:6d:72:ec:75:91:8f:ac:90:8d:55:f4: 16:26:6a:d0:24:e1:81:71:ad:ae:27:05:8b:15:7d: 6f:7f:7c:8a:0d:32:d8:08:77:13:7e:f6:27:7b:aa: 77:b4:94:27:e5:9d:3c:13:db:b8:97:01:20:91:c8: 44:2a:9f:ba:8d:36:7a:9a:42:43:b8:64:2d:f2:7f: 31:38:ba:65:27:f9:26:91:57:ea:a7:3c:50:9b:cc: 00:bd:3e:c0:f5:fd:f2:aa:16:3e:84:22:ac:3d:92: 54:86:fc:39:e7:3f:d5:6c:39:41:88:db:4d:7d:9e: ce:bf:51:f6:da:34:cc:c0:c1:e6:1c:43:20:85:80: e4:92:f6:1e:b0:20:cf:62:53:ea:de:16:97:59:37: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:08:FC:8C:B7:21:F9:CC:76:DC:11:20:20:0B:5C:0F:9D:B3:3F:30 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036db049-dc30-462c-80e5-fbf708bc01f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.197.0/24 Signature Algorithm: sha256WithRSAEncryption 48:c6:67:af:25:74:40:2a:80:da:0d:3a:fa:6d:09:6b:f4:e6: b8:6c:1f:48:8d:69:11:b4:0c:9d:d0:ef:b2:78:22:b0:16:67: bd:36:fe:86:43:b1:a9:4b:35:e7:28:f0:71:09:89:7e:71:54: 22:1e:b4:fa:63:dd:60:25:df:da:cb:d8:e2:a3:34:40:ba:27: 07:ad:d2:65:5b:7d:60:1c:2d:33:13:2c:83:07:60:63:12:e0: eb:38:25:bc:58:d8:0f:d0:fe:98:65:91:9c:5b:71:ba:ca:1e: 4a:4c:b8:5b:9d:f7:02:b0:57:71:cd:8a:3f:4f:40:58:9e:c5: 28:b9:31:7a:ac:04:b6:d3:de:b9:23:e8:34:fe:93:5e:1a:da: ea:03:6f:0f:ca:aa:69:ef:74:ba:0b:cc:1c:f2:71:01:20:15: 8c:80:b9:95:b8:5b:c2:c0:b3:97:c9:ed:60:2b:2c:9b:58:06: 32:ce:c4:9c:b2:f3:f0:00:66:27:a7:9e:70:48:89:e9:b4:e8: 3a:64:27:26:c0:e7:54:9b:ac:29:22:e1:9e:fd:0e:59:8f:b0: 28:ff:9c:15:68:04:92:05:a0:24:bf:95:ba:bd:4f:38:c1:d3: 78:d6:38:5d:cc:bb:99:67:30:16:d2:8a:c2:4f:49:a7:4e:3a: ec:fe:c9:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP4sDKKDZuMfIBqnnw/es7NEjQVIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQxMDA2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWQ3MmJmMjlmYmIzOTJiMjk3NWJlZTg2NzdlNGExYWY5 ZmFiMWJmM2ViMzZiY2JmYWYyMTZmNzRmMTI0YTdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ7nr+UevETvpeuSFJ7APIKTOmyhBsxi1un++6cT0TnDzx 8cYBZ5DTSWjnptlbO6Mn2/BOKm8mx4yZxP2DFnUY2rry0TNBoUgM5lthRpZhWh31 uyoY808V52Jt9aGlzecInY7u3sqy04cn+J5tcux1kY+skI1V9BYmatAk4YFxra4n BYsVfW9/fIoNMtgIdxN+9id7qne0lCflnTwT27iXASCRyEQqn7qNNnqaQkO4ZC3y fzE4umUn+SaRV+qnPFCbzAC9PsD1/fKqFj6EIqw9klSG/DnnP9VsOUGI2019ns6/ UfbaNMzAweYcQyCFgOSS9h6wIM9iU+reFpdZN9f/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULwj8jLch+cx23BEgIAtcD52zPzAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzNmRiMDQ5LWRjMzAtNDYyYy04MGU1LWZiZjcwOGJjMDFmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25sUwDQYJKoZIhvcNAQELBQADggEBAEjGZ68ldEAqgNoNOvptCWv05rhs H0iNaRG0DJ3Q77J4IrAWZ702/oZDsalLNeco8HEJiX5xVCIetPpj3WAl39rL2OKj NEC6Jwet0mVbfWAcLTMTLIMHYGMS4Os4JbxY2A/Q/phlkZxbcbrKHkpMuFud9wKw V3HNij9PQFiexSi5MXqsBLbT3rkj6DT+k14a2uoDbw/KqmnvdLoLzBzycQEgFYyA uZW4W8LAs5fJ7WArLJtYBjLOxJyy8/AAZiennnBIiem06DpkJybA51SbrCki4Z79 DlmPsCj/nBVoBJIFoCS/lbq9TzjB03jWOF3Mu5lnMBbSisJPSadOOuz+yfM= -----END CERTIFICATE-----Generated at Tue May 12 22:00:38 2026 by rpki-client