$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1731cc97-f048-4483-b67f-2788d1095f8b.roa File: 1731cc97-f048-4483-b67f-2788d1095f8b.roa (raw, json) Hash identifier: c7AYCrSh1mFejwAfX2qW3/e0QiD8dk0Bxxf1x3bal6U= Subject key identifier: D1:70:93:ED:91:74:BD:FF:BB:80:69:4E:91:F9:9B:3F:E8:DA:30:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46EAD8373C54661899A8072381E367CC17CDD507 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1731cc97-f048-4483-b67f-2788d1095f8b.roa Signing time: Mon 04 May 2026 14:10:05 +0000 ROA not before: Mon 04 May 2026 14:10:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ea:d8:37:3c:54:66:18:99:a8:07:23:81:e3:67:cc:17:cd:d5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:10:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=139c06c2b17d64da9050d0dcea436b3add233850cdfca0ed8a03b99c40c104b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:04:0b:8e:c2:96:1e:fc:a9:6e:c0:4b:cb: 09:dc:38:37:0f:5d:36:77:93:dc:24:34:40:0d:af: f2:ae:e3:a8:f4:c0:95:04:b3:28:a2:7e:ec:a0:9e: ef:a5:ff:c1:5e:cf:7b:94:24:4d:58:95:aa:21:5e: ec:92:b2:48:00:a5:be:59:19:05:7d:d2:ea:98:b6: 2f:c4:ca:62:34:96:a3:fa:a4:5a:7a:7f:71:35:4e: d5:06:58:a7:df:58:73:bd:34:3b:64:cd:d9:cb:c1: b0:97:7d:8f:cd:31:f0:ab:ae:0a:bc:5b:12:3b:5c: a7:06:f5:2f:39:66:15:4c:5e:b2:0d:f6:d5:17:9c: f6:16:05:f6:d6:8c:30:22:c1:54:fd:22:c4:61:28: d4:98:85:28:2e:39:25:ed:87:18:86:64:05:42:c1: 3b:9d:5c:28:b6:14:c6:0f:8b:a5:e3:25:de:e6:34: 0c:d7:77:16:21:56:d3:fa:51:8f:cb:18:43:b6:94: f4:5e:4a:da:cb:d6:1d:97:b8:98:77:3d:87:fc:14: 26:35:56:8b:33:a8:1b:79:a8:85:4e:c6:6f:ec:14: 23:c9:93:d4:76:be:7f:13:70:81:06:a1:e0:17:bd: 3e:3b:9f:0e:d9:a0:ea:42:4f:f0:62:85:49:c1:7d: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:93:ED:91:74:BD:FF:BB:80:69:4E:91:F9:9B:3F:E8:DA:30:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1731cc97-f048-4483-b67f-2788d1095f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.78.0/24 Signature Algorithm: sha256WithRSAEncryption 31:bd:82:bd:4b:9c:eb:25:0c:01:8b:aa:57:c4:2d:49:bf:c2: 61:78:18:55:9a:e5:0b:32:c9:ab:f4:80:4c:80:29:48:56:a4: 32:f8:6f:34:e1:92:3c:ec:db:37:f8:d6:fd:d3:99:12:bc:bd: 32:b4:2f:62:91:82:e8:02:a7:bd:a2:f1:4f:18:79:f1:02:66: 72:bc:89:e9:3b:54:de:62:09:ed:a3:46:59:ac:c1:07:ac:82: 3f:59:03:0a:0b:3c:2c:01:a2:6e:f4:a8:cd:fb:12:9e:c8:76: cb:f2:34:1a:93:e7:55:a4:95:ba:ec:60:56:5e:0f:2d:c1:1c: 82:7b:94:ba:d2:67:b4:a6:76:ec:14:e5:7f:d9:a6:a8:38:db: db:1f:ec:1c:af:f8:06:46:18:ca:48:a1:c7:d2:71:24:ed:92: de:2d:09:0f:61:fd:ef:4c:04:5b:8c:58:ca:6a:8c:7a:41:92: 1d:38:42:b2:e3:f1:a4:bd:91:b6:5f:15:c3:b7:6a:80:3f:74: 2f:c8:05:53:4d:88:f5:b6:c6:41:aa:92:36:69:be:b3:ba:6e: a0:d4:3e:8c:03:3d:9f:2d:ea:d8:28:9f:a0:d1:df:5a:28:5a: 68:75:a9:5b:72:20:95:5f:c1:62:f3:62:c5:63:fe:c9:cc:69: 72:b7:44:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURurYNzxUZhiZqAcjgeNnzBfN1QcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQxMDA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzljMDZjMmIxN2Q2NGRhOTA1MGQwZGNlYTQzNmIzYWRk MjMzODUwY2RmY2EwZWQ4YTAzYjk5YzQwYzEwNGI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC88gQLjsKWHvypbsBLywncODcPXTZ3k9wkNEANr/Ku46j0 wJUEsyiifuygnu+l/8Fez3uUJE1YlaohXuySskgApb5ZGQV90uqYti/EymI0lqP6 pFp6f3E1TtUGWKffWHO9NDtkzdnLwbCXfY/NMfCrrgq8WxI7XKcG9S85ZhVMXrIN 9tUXnPYWBfbWjDAiwVT9IsRhKNSYhSguOSXthxiGZAVCwTudXCi2FMYPi6XjJd7m NAzXdxYhVtP6UY/LGEO2lPReStrL1h2XuJh3PYf8FCY1VoszqBt5qIVOxm/sFCPJ k9R2vn8TcIEGoeAXvT47nw7ZoOpCT/BihUnBfd/RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0XCT7ZF0vf+7gGlOkfmbP+jaMOAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3MzFjYzk3LWYwNDgtNDQ4My1iNjdmLTI3ODhkMTA5NWY4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAk4wDQYJKoZIhvcNAQELBQADggEBADG9gr1LnOslDAGLqlfELUm/wmF4 GFWa5Qsyyav0gEyAKUhWpDL4bzThkjzs2zf41v3TmRK8vTK0L2KRgugCp72i8U8Y efECZnK8iek7VN5iCe2jRlmswQesgj9ZAwoLPCwBom70qM37Ep7IdsvyNBqT51Wk lbrsYFZeDy3BHIJ7lLrSZ7SmduwU5X/Zpqg429sf7Byv+AZGGMpIocfScSTtkt4t CQ9h/e9MBFuMWMpqjHpBkh04QrLj8aS9kbZfFcO3aoA/dC/IBVNNiPW2xkGqkjZp vrO6bqDUPowDPZ8t6tgon6DR31ooWmh1qVtyIJVfwWLzYsVj/snMaXK3RBA= -----END CERTIFICATE-----Generated at Tue May 12 23:09:11 2026 by rpki-client