$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa File: 1fda11a5-3827-4922-97d4-a02926961ddf.roa (raw, json) Hash identifier: 9Zyc0ML1mJdSSXTpOXt8tJIRjhBfVX800AFz62r1vyE= Subject key identifier: C5:08:5D:30:C7:DA:F1:AE:6F:F5:21:31:E7:E3:61:D5:8B:36:CB:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65614D9B45944E1B8F1C99F790973406156A75F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa Signing time: Fri 08 May 2026 02:40:09 +0000 ROA not before: Fri 08 May 2026 02:40:09 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.214.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:61:4d:9b:45:94:4e:1b:8f:1c:99:f7:90:97:34:06:15:6a:75:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:40:09 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=929f013586a2d257f534336b457c54b89911ab93e0d5bdd2222efd3703be96b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:24:df:a2:45:3c:2a:9c:8d:00:cb:fc:3d: e9:39:9a:9d:5a:1b:a3:1f:a6:93:8c:1f:a9:b6:fa: 1e:c4:f9:ad:10:ce:fc:5d:a2:02:c9:c7:d9:9f:2e: d5:dc:8a:71:9f:ed:1b:ad:03:ae:d3:d3:be:b8:bd: ae:c6:41:06:d0:19:7a:63:ce:1f:1d:22:e1:59:75: c5:d0:31:10:29:82:8d:bd:2c:fe:91:e8:74:a8:e3: 74:38:88:61:91:a2:a1:cf:9d:d1:a9:7c:d7:6f:90: 14:3f:cf:b8:bb:a5:12:77:ce:ba:98:ba:d0:a4:60: 30:6f:5f:5b:3c:25:62:37:18:29:01:80:0f:33:27: d3:5b:0c:b4:98:7d:a7:4e:e0:a3:68:a6:7a:ad:94: ff:75:4b:db:7f:d9:65:77:c4:4a:45:cb:f9:d1:1e: 64:5e:92:a2:e2:15:9b:9b:84:7a:b7:a6:26:5c:8c: a6:a5:10:5c:ae:79:f5:e9:02:cd:ca:c1:fc:cc:a6: dc:d1:94:aa:b7:d3:f8:10:1b:80:87:ee:5a:76:0a: c5:1b:d4:77:6b:d9:93:b9:28:30:e1:e8:49:00:77: 00:b3:48:c8:66:36:bd:e6:1e:1b:76:c0:89:bc:53: 57:b8:c6:4f:82:c2:ba:84:8a:f9:af:68:d3:ba:c6: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:08:5D:30:C7:DA:F1:AE:6F:F5:21:31:E7:E3:61:D5:8B:36:CB:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.214.118.0/23 Signature Algorithm: sha256WithRSAEncryption 36:03:ce:38:62:cb:4d:c2:a9:96:71:6b:f4:93:f6:42:df:c5: 26:84:07:11:91:4e:e2:71:32:3e:e6:bd:38:f2:ed:12:7e:85: ee:e7:cd:8e:ea:b2:e3:ac:f8:97:67:83:cb:d5:01:5d:24:c7: 91:c2:d6:ad:e0:72:3b:5e:5c:f8:68:ae:c5:c7:17:73:f0:05: f2:5f:4e:82:90:6b:11:72:35:84:21:55:1b:8d:7a:0c:df:e5: 70:ba:0b:f3:24:c6:1d:a6:a0:aa:ee:62:b0:11:a5:af:98:14: 49:92:3c:ff:4a:b9:ea:a6:81:d5:5b:2c:2f:4d:4a:bc:29:9d: 56:2c:99:c5:8a:d8:b6:45:c4:13:e1:48:fd:eb:4f:07:bb:38: 25:4e:ca:c3:4d:05:94:b6:41:a5:6d:f9:62:18:50:d5:70:2e: cf:4e:23:3f:62:16:20:de:ec:2a:75:57:f9:e7:11:97:bf:18: d8:34:53:64:6a:03:84:27:2a:0c:5b:50:cf:6c:0b:0b:1a:9e: e8:d9:a0:ad:32:1b:48:78:76:99:04:83:87:1e:44:15:72:61: 80:48:e7:97:b0:cc:c6:28:f1:ff:ff:0a:cf:d3:0c:c1:86:dc: d8:89:08:1e:ca:9a:70:6f:6f:b0:b7:ce:28:90:20:50:d4:5e: 0c:35:1c:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZWFNm0WUThuPHJn3kJc0BhVqdfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDI0MDA5WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjlmMDEzNTg2YTJkMjU3ZjUzNDMzNmI0NTdjNTRiODk5 MTFhYjkzZTBkNWJkZDIyMjJlZmQzNzAzYmU5NmI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx/STfokU8KpyNAMv8Pek5mp1aG6MfppOMH6m2+h7E+a0Q zvxdogLJx9mfLtXcinGf7RutA67T0764va7GQQbQGXpjzh8dIuFZdcXQMRApgo29 LP6R6HSo43Q4iGGRoqHPndGpfNdvkBQ/z7i7pRJ3zrqYutCkYDBvX1s8JWI3GCkB gA8zJ9NbDLSYfadO4KNopnqtlP91S9t/2WV3xEpFy/nRHmRekqLiFZubhHq3piZc jKalEFyuefXpAs3KwfzMptzRlKq30/gQG4CH7lp2CsUb1Hdr2ZO5KDDh6EkAdwCz SMhmNr3mHht2wIm8U1e4xk+CwrqEivmvaNO6xgOhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxQhdMMfa8a5v9SEx5+Nh1Ys2y7owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmZGExMWE1LTM4MjctNDkyMi05N2Q0LWEwMjkyNjk2MWRkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN1nYwDQYJKoZIhvcNAQELBQADggEBADYDzjhiy03CqZZxa/ST9kLfxSaE BxGRTuJxMj7mvTjy7RJ+he7nzY7qsuOs+Jdng8vVAV0kx5HC1q3gcjteXPhorsXH F3PwBfJfToKQaxFyNYQhVRuNegzf5XC6C/Mkxh2moKruYrARpa+YFEmSPP9Kueqm gdVbLC9NSrwpnVYsmcWK2LZFxBPhSP3rTwe7OCVOysNNBZS2QaVt+WIYUNVwLs9O Iz9iFiDe7Cp1V/nnEZe/GNg0U2RqA4QnKgxbUM9sCwsanujZoK0yG0h4dpkEg4ce RBVyYYBI55ewzMYo8f//Cs/TDMGG3NiJCB7KmnBvb7C3ziiQIFDUXgw1HKc= -----END CERTIFICATE-----Generated at Tue May 12 22:05:43 2026 by rpki-client