$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16aa9567-f890-40c6-a7bd-22113a156278.roa File: 16aa9567-f890-40c6-a7bd-22113a156278.roa (raw, json) Hash identifier: d7D77yUDdNTIWWWJtwbB4koL/1bzu6t9h3D9WVRih2w= Subject key identifier: 0E:05:18:56:42:CC:35:3B:CA:73:1F:0C:99:CA:64:47:27:7C:41:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33D0A2E37B4BB977C78D10F14E258335ED255E34 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16aa9567-f890-40c6-a7bd-22113a156278.roa Signing time: Fri 08 May 2026 02:00:32 +0000 ROA not before: Fri 08 May 2026 02:00:32 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d0:a2:e3:7b:4b:b9:77:c7:8d:10:f1:4e:25:83:35:ed:25:5e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:00:32 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=dddabfafbe3c8ed20012d45759251a877f55401d965e48b680ec11687dc41f6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:96:4b:26:13:3e:29:4e:7b:c4:0d:7a:b3: 1b:02:85:a1:b6:5f:25:68:74:8d:e9:47:15:e2:a3: de:ec:29:1c:ef:b6:b4:7e:bf:de:fa:ef:db:b0:27: 45:48:a5:a0:53:f9:48:fa:5a:29:4b:c3:48:cc:f4: 3f:14:99:8c:ef:6c:ae:e9:3e:62:b4:76:8f:c3:43: 06:1d:16:f3:de:57:60:00:97:00:96:02:74:44:cb: dd:1a:59:3f:c7:e1:63:38:23:86:56:f0:a5:30:40: ef:58:b1:a5:d7:eb:2a:4d:dc:60:f8:56:23:46:6a: 22:21:c8:83:08:53:ba:93:0f:96:b9:82:95:ef:9b: 35:0a:7c:d2:07:a3:4e:78:e3:4f:64:c0:90:c8:23: 86:03:90:ce:32:97:48:86:1b:f7:b2:e3:1c:be:01: 1b:b0:0c:79:ea:ce:fe:c0:5c:2a:4c:51:cb:67:77: f1:b1:8e:f8:06:64:9b:c1:35:e9:42:92:73:5b:4e: 7a:5b:d0:9c:89:79:55:7b:76:c2:d4:8f:9f:e9:b7: a8:71:64:da:60:35:7c:15:e1:3b:ab:77:7c:48:de: 29:c7:c3:b8:0a:9c:23:66:c4:2e:33:fa:7a:98:b8: 7b:04:01:0d:1d:a5:8e:e0:2c:3c:7a:52:5b:66:86: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:18:56:42:CC:35:3B:CA:73:1F:0C:99:CA:64:47:27:7C:41:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16aa9567-f890-40c6-a7bd-22113a156278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.0.0/14 Signature Algorithm: sha256WithRSAEncryption 6f:75:36:6a:e9:a6:c3:e0:fc:0d:56:60:88:5e:29:09:1f:f2: 78:5c:eb:3f:df:69:92:e9:7c:f4:35:ff:28:2d:54:f6:d5:51: e2:32:fc:32:9f:ed:75:e0:52:42:d9:6e:24:73:ea:32:b4:28: d0:ac:55:26:08:6a:d2:bb:2a:d8:b6:9c:e2:a0:86:1d:9f:77: 4a:d0:b0:91:8f:1e:e3:5d:40:8f:cb:b1:be:aa:de:68:d3:3c: bc:26:41:9a:e8:d4:17:b0:43:de:5c:b2:59:d4:56:ed:80:6d: 6e:1a:55:8d:77:e3:d4:77:5a:9d:93:c5:23:08:47:8b:b5:5f: 7f:c1:10:61:39:65:d3:13:fa:87:48:a7:a7:9d:61:65:53:b3: 46:9e:19:fa:c5:7a:7a:a5:fb:f4:7a:33:7a:ba:96:43:83:d7: b5:60:33:1a:56:da:09:07:50:57:a0:0d:bb:79:a0:a5:22:72: b5:8f:b2:0b:8b:97:ce:08:53:8d:20:3e:8c:18:0b:bc:bd:b1: 87:f2:d0:fe:eb:01:ca:fe:f2:ca:ee:8f:55:65:1d:0c:b0:f1: 7f:f3:41:e9:a4:83:0d:7d:a0:2f:ca:b8:da:d5:98:2c:63:24: 79:e8:b9:a0:ff:a1:1e:00:09:a4:7e:cb:e4:9c:1e:77:b3:17: a8:40:ab:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM9Ci43tLuXfHjRDxTiWDNe0lXjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIwMDMyWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGRhYmZhZmJlM2M4ZWQyMDAxMmQ0NTc1OTI1MWE4Nzdm NTU0MDFkOTY1ZTQ4YjY4MGVjMTE2ODdkYzQxZjZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0PZZLJhM+KU57xA16sxsChaG2XyVodI3pRxXio97sKRzv trR+v97679uwJ0VIpaBT+Uj6WilLw0jM9D8UmYzvbK7pPmK0do/DQwYdFvPeV2AA lwCWAnREy90aWT/H4WM4I4ZW8KUwQO9YsaXX6ypN3GD4ViNGaiIhyIMIU7qTD5a5 gpXvmzUKfNIHo054409kwJDII4YDkM4yl0iGG/ey4xy+ARuwDHnqzv7AXCpMUctn d/GxjvgGZJvBNelCknNbTnpb0JyJeVV7dsLUj5/pt6hxZNpgNXwV4Turd3xI3inH w7gKnCNmxC4z+nqYuHsEAQ0dpY7gLDx6UltmhqvvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDgUYVkLMNTvKcx8MmcpkRyd8QeIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2YWE5NTY3LWY4OTAtNDBjNi1hN2JkLTIyMTEzYTE1NjI3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI0VDANBgkqhkiG9w0BAQsFAAOCAQEAb3U2aummw+D8DVZgiF4pCR/yeFzr P99pkul89DX/KC1U9tVR4jL8Mp/tdeBSQtluJHPqMrQo0KxVJghq0rsq2Lac4qCG HZ93StCwkY8e411Aj8uxvqreaNM8vCZBmujUF7BD3lyyWdRW7YBtbhpVjXfj1Hda nZPFIwhHi7Vff8EQYTll0xP6h0inp51hZVOzRp4Z+sV6eqX79HozerqWQ4PXtWAz GlbaCQdQV6ANu3mgpSJytY+yC4uXzghTjSA+jBgLvL2xh/LQ/usByv7yyu6PVWUd DLDxf/NB6aSDDX2gL8q42tWYLGMkeei5oP+hHgAJpH7L5Jwed7MXqECrJw== -----END CERTIFICATE-----Generated at Tue May 12 22:43:55 2026 by rpki-client