$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e021a07-33ad-437a-aed9-b77be87e990c.roa File: 2e021a07-33ad-437a-aed9-b77be87e990c.roa (raw, json) Hash identifier: 2HnVYGUGHVPe40FhBRhc99AE1qsZhS0kZvNZFwIHkcs= Subject key identifier: 17:88:68:E8:05:CA:3E:A7:49:6F:8F:6A:FB:5A:A9:87:A7:17:90:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71CFC45168B301FAC586D1E2D230C33B5F39D599 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e021a07-33ad-437a-aed9-b77be87e990c.roa Signing time: Mon 04 May 2026 14:40:06 +0000 ROA not before: Mon 04 May 2026 14:40:06 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cf:c4:51:68:b3:01:fa:c5:86:d1:e2:d2:30:c3:3b:5f:39:d5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:40:06 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=2be610a1e0079c3d2285564835df0877b05539673c0ba13a1ca81d67369143d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:21:f7:a6:c4:53:71:44:43:3c:6b:2d:b6: aa:64:13:20:9d:71:c4:9d:1d:ad:74:aa:0e:a4:c7: 56:8b:d9:4e:cf:61:c1:a9:ce:d8:f6:7c:14:27:6c: ad:bb:95:8c:75:b0:61:43:88:48:8d:6d:e4:5d:55: 61:c4:f8:55:a9:19:6c:1b:e4:3c:92:d0:aa:7e:70: a1:51:f7:f0:04:9c:7d:0a:35:a5:c2:13:13:06:d1: ef:52:2c:d2:b4:a6:fd:c6:98:25:3f:fa:e4:56:83: d9:88:3a:28:42:03:a4:cf:c1:93:a9:80:8e:55:ad: 2b:90:07:af:d2:5a:47:14:dc:76:da:22:b5:38:6b: 72:e3:8e:40:0e:44:75:0a:67:90:f0:ac:e1:91:66: 10:c8:44:5f:5b:a0:95:35:10:ac:d2:f1:fc:59:45: 96:52:d3:09:2d:a0:98:c8:62:08:9b:1f:69:37:da: 2b:cf:97:ae:c6:49:cb:50:ad:52:3a:d7:db:76:a6: 01:ff:39:1f:92:36:41:80:d7:90:da:8a:41:1b:3b: 45:44:78:50:7b:57:df:19:de:6c:b2:87:8f:9b:90: 60:81:6c:2a:31:ee:4d:66:f1:84:39:59:70:59:23: c0:74:4b:53:fd:6f:fb:35:83:72:b2:da:e6:bb:ec: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:68:E8:05:CA:3E:A7:49:6F:8F:6A:FB:5A:A9:87:A7:17:90:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e021a07-33ad-437a-aed9-b77be87e990c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.64.0/19 Signature Algorithm: sha256WithRSAEncryption 74:3f:ff:b3:59:d1:8c:50:c8:4e:f6:33:61:d1:07:93:d0:9d: 74:db:12:29:33:d8:21:d8:93:bf:69:1e:e5:ae:52:30:68:6f: 8a:d1:bb:b3:6c:99:2c:e6:1b:a1:28:75:84:98:9b:2c:91:58: 78:ec:4d:a9:00:7d:eb:c8:47:6e:29:08:15:53:71:f5:0a:d7: 64:b6:f8:1c:d6:ae:ec:41:e8:29:df:52:e5:66:52:00:10:50: 96:32:85:f4:23:7a:ff:89:2c:d2:f5:c7:6e:8c:35:13:bd:f8: 22:2d:7c:ba:a7:be:47:89:a2:be:ba:27:84:c4:68:66:1c:bf: 77:43:11:de:ac:d2:12:66:79:2a:b6:5f:61:c9:62:bb:05:e4: 1a:66:4a:80:eb:0b:93:77:ca:d0:65:e3:4e:e6:c1:4e:f6:4e: d0:ae:60:de:36:4e:4b:84:44:7e:b5:d0:4d:f0:70:67:09:47: 02:16:18:d4:80:26:6e:ee:da:cf:78:bf:12:3e:5a:ca:7e:6a: 84:17:93:cb:8b:76:07:9f:67:ce:7b:16:90:36:01:df:dd:8c: c8:f6:ea:74:37:2b:40:80:c2:0f:04:87:da:aa:f8:a4:b0:fd: 2d:4f:4c:7c:ff:56:72:e6:e2:ee:9f:b7:26:fd:0e:8c:41:4b: bc:b9:08:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcc/EUWizAfrFhtHi0jDDO1851ZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQ0MDA2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmU2MTBhMWUwMDc5YzNkMjI4NTU2NDgzNWRmMDg3N2Iw NTUzOTY3M2MwYmExM2ExY2E4MWQ2NzM2OTE0M2QzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgpiH3psRTcURDPGsttqpkEyCdccSdHa10qg6kx1aL2U7P YcGpztj2fBQnbK27lYx1sGFDiEiNbeRdVWHE+FWpGWwb5DyS0Kp+cKFR9/AEnH0K NaXCExMG0e9SLNK0pv3GmCU/+uRWg9mIOihCA6TPwZOpgI5VrSuQB6/SWkcU3Hba IrU4a3LjjkAORHUKZ5DwrOGRZhDIRF9boJU1EKzS8fxZRZZS0wktoJjIYgibH2k3 2ivPl67GSctQrVI619t2pgH/OR+SNkGA15DaikEbO0VEeFB7V98Z3myyh4+bkGCB bCox7k1m8YQ5WXBZI8B0S1P9b/s1g3Ky2ua77NrfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUF4ho6AXKPqdJb49q+1qph6cXkHkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlMDIxYTA3LTMzYWQtNDM3YS1hZWQ5LWI3N2JlODdlOTkwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUPxUAwDQYJKoZIhvcNAQELBQADggEBAHQ//7NZ0YxQyE72M2HRB5PQnXTb Eikz2CHYk79pHuWuUjBob4rRu7NsmSzmG6EodYSYmyyRWHjsTakAfevIR24pCBVT cfUK12S2+BzWruxB6CnfUuVmUgAQUJYyhfQjev+JLNL1x26MNRO9+CItfLqnvkeJ or66J4TEaGYcv3dDEd6s0hJmeSq2X2HJYrsF5BpmSoDrC5N3ytBl407mwU72TtCu YN42TkuERH610E3wcGcJRwIWGNSAJm7u2s94vxI+Wsp+aoQXk8uLdgefZ857FpA2 Ad/djMj26nQ3K0CAwg8Eh9qq+KSw/S1PTHz/VnLm4u6ftyb9DoxBS7y5COk= -----END CERTIFICATE-----Generated at Tue May 12 22:19:14 2026 by rpki-client