$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1235d109-357c-4796-ad34-c64f83a88fb2.roa File: 1235d109-357c-4796-ad34-c64f83a88fb2.roa (raw, json) Hash identifier: /V7FODTfYs9p+lcILIXmYUz5vszQ7QsknMdPYLfBjr4= Subject key identifier: 82:33:0A:80:BD:71:64:A4:24:BD:54:96:3F:25:DC:B6:A2:D4:A2:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19D163B822451F75B2C85766702CE4F93C856214 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1235d109-357c-4796-ad34-c64f83a88fb2.roa Signing time: Fri 08 May 2026 00:51:10 +0000 ROA not before: Fri 08 May 2026 00:51:10 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d1:63:b8:22:45:1f:75:b2:c8:57:66:70:2c:e4:f9:3c:85:62:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 00:51:10 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=74ad2e90fa46528df49a81d316b5375668b6920277f560d2c30b63acbae5cc79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:4d:a1:7e:70:ab:14:71:ab:e9:cc:b0:4f: 1d:df:26:6b:6c:6a:93:61:e3:1b:d6:fd:64:4b:6b: 23:c7:79:d8:56:18:32:21:a9:2e:0c:ab:ba:53:17: c6:81:26:ef:95:f7:13:ef:6a:60:ad:10:1b:74:67: cb:0c:f8:e8:ee:95:81:1e:96:aa:b1:76:c2:4f:8c: 89:1c:1e:c0:27:1b:43:12:fc:b1:8f:ee:c2:31:a0: 3b:77:32:cb:e2:49:3a:4a:92:9b:21:75:b6:95:20: 9e:89:eb:fa:32:6e:f6:1c:ec:2b:de:19:60:a8:55: dc:bf:e5:8a:83:48:cc:a7:5a:5d:82:5e:62:3f:3f: f1:15:8e:be:9b:b6:d8:08:ec:28:ae:2b:fd:23:f5: bc:0b:a1:cc:df:a6:23:fb:09:2b:6d:db:d9:7b:a0: 6f:42:a1:00:ee:aa:2d:fa:08:e8:f7:13:e7:68:8f: a3:38:fa:5c:46:8b:9e:b4:26:7b:b1:7d:2a:d9:6b: 87:f3:af:2c:7d:8f:7f:c0:3b:0b:84:df:07:c2:11: 1d:10:a1:1f:9b:34:fa:e3:2c:19:5d:aa:08:b7:32: 0e:98:93:b3:de:98:13:c3:5a:a7:87:47:52:45:9f: ed:08:45:5f:48:97:ae:0e:33:e9:a3:bb:e2:42:1a: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:33:0A:80:BD:71:64:A4:24:BD:54:96:3F:25:DC:B6:A2:D4:A2:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1235d109-357c-4796-ad34-c64f83a88fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.110.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:9c:71:1e:64:7d:fa:9d:78:a9:8d:29:f0:a2:61:86:47:76: cb:c8:e7:f7:fb:55:dc:a0:b4:87:62:dc:c9:8c:b1:b3:ca:d8: 27:82:f2:74:9c:ce:a8:b7:b8:29:13:17:02:bb:60:dc:32:c0: cb:96:0f:f5:5f:37:21:55:7e:b7:63:2e:21:28:3d:1c:8f:12: f6:5a:73:6c:90:80:d7:00:cf:ec:f4:75:8c:3c:f1:65:35:3f: dc:a7:31:32:7f:87:31:ec:f3:5e:d1:2f:9b:06:c5:c4:f7:1e: e3:91:ca:5d:5f:d5:19:a8:e6:a5:0c:69:07:da:d3:df:af:ce: 65:ec:8d:fb:72:39:01:08:3f:f6:69:5b:c5:5e:b0:85:ae:bb: 58:5b:de:3b:08:7c:1e:49:9b:4c:c3:6d:15:40:9a:bd:89:91: 0a:14:37:a0:3b:4d:cd:f9:a3:97:96:a9:2d:80:60:79:44:86: 52:c7:c2:2a:1e:65:5b:b8:6f:1d:67:47:f3:93:b9:7e:04:1b: 33:a7:2f:ab:f6:b3:32:d8:c2:b2:2a:c8:68:6a:9c:74:02:aa: 85:34:41:22:df:4e:6a:53:b2:b9:11:21:ea:8c:03:41:00:a5: 7e:ed:f2:1d:1d:05:33:99:cb:c7:ff:26:a7:d2:02:c4:e6:b7: 77:d3:c2:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGdFjuCJFH3WyyFdmcCzk+TyFYhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDA1MTEwWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGFkMmU5MGZhNDY1MjhkZjQ5YTgxZDMxNmI1Mzc1NjY4 YjY5MjAyNzdmNTYwZDJjMzBiNjNhY2JhZTVjYzc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJH02hfnCrFHGr6cywTx3fJmtsapNh4xvW/WRLayPHedhW GDIhqS4Mq7pTF8aBJu+V9xPvamCtEBt0Z8sM+OjulYEelqqxdsJPjIkcHsAnG0MS /LGP7sIxoDt3MsviSTpKkpshdbaVIJ6J6/oybvYc7CveGWCoVdy/5YqDSMynWl2C XmI/P/EVjr6bttgI7CiuK/0j9bwLoczfpiP7CStt29l7oG9CoQDuqi36COj3E+do j6M4+lxGi560JnuxfSrZa4fzryx9j3/AOwuE3wfCER0QoR+bNPrjLBldqgi3Mg6Y k7PemBPDWqeHR1JFn+0IRV9Il64OM+mju+JCGiCJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgjMKgL1xZKQkvVSWPyXctqLUogswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyMzVkMTA5LTM1N2MtNDc5Ni1hZDM0LWM2NGY4M2E4OGZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3m4wDQYJKoZIhvcNAQELBQADggEBAHqccR5kffqdeKmNKfCiYYZHdsvI 5/f7VdygtIdi3MmMsbPK2CeC8nSczqi3uCkTFwK7YNwywMuWD/VfNyFVfrdjLiEo PRyPEvZac2yQgNcAz+z0dYw88WU1P9ynMTJ/hzHs817RL5sGxcT3HuORyl1f1Rmo 5qUMaQfa09+vzmXsjftyOQEIP/ZpW8VesIWuu1hb3jsIfB5Jm0zDbRVAmr2JkQoU N6A7Tc35o5eWqS2AYHlEhlLHwioeZVu4bx1nR/OTuX4EGzOnL6v2szLYwrIqyGhq nHQCqoU0QSLfTmpTsrkRIeqMA0EApX7t8h0dBTOZy8f/JqfSAsTmt3fTwvI= -----END CERTIFICATE-----Generated at Tue May 12 22:00:21 2026 by rpki-client