$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa File: 50ef1f8a-b614-47b4-aac9-43160386dd5e.roa (raw, json) Hash identifier: KWTzfUzyLi/lg0BvkAJhKSGu4uWNCn/QsV38jLN09ss= Subject key identifier: 92:B8:31:AF:EF:BC:2D:39:01:83:5F:A0:8B:F6:63:1B:B3:3F:B6:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4170F7053992FF43850DB12C3881CB4841D742A1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa Signing time: Fri 08 May 2026 02:31:20 +0000 ROA not before: Fri 08 May 2026 02:31:20 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 34.253.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:70:f7:05:39:92:ff:43:85:0d:b1:2c:38:81:cb:48:41:d7:42:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:31:20 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=47dc403f803f71279128e56f79bbcf3ac90ecca1278a7237581ee20d9647a1e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:a8:71:8f:fc:71:e9:e3:4a:1b:1e:58:73: 23:41:24:e9:85:59:71:e9:f7:25:ce:98:19:48:c3: 88:fa:05:86:82:d3:0f:a7:05:e4:ed:3c:d5:3c:c1: d1:42:49:09:d2:54:9b:8c:e4:17:3e:da:e4:74:fe: f9:f3:7e:6f:d5:17:04:4d:18:7d:88:6e:42:fc:47: ef:51:92:66:30:0f:7d:a1:e4:b2:22:52:1e:9e:4f: 81:c5:50:b5:07:92:4e:4d:f1:a5:51:00:84:06:67: a0:c2:09:52:49:e9:60:eb:49:97:a4:eb:4a:08:bc: c5:96:84:18:bb:7f:8c:7f:64:20:1b:c1:9e:c3:9b: 51:44:2b:9d:2f:32:96:80:5f:df:5a:2c:a6:c2:15: e8:dd:59:9c:e2:ab:2d:83:f4:aa:c3:9b:de:58:9b: f9:88:23:53:c0:63:06:1f:75:ce:be:4c:61:2a:8b: c9:8d:29:d2:08:ea:4e:4a:a6:0f:dc:00:ce:8f:e7: 5d:00:cb:b5:79:33:50:ef:55:4d:72:4d:da:00:45: 63:81:81:91:78:4a:72:25:ec:9b:99:ac:b0:70:3a: 03:05:34:ae:e2:a4:8b:8b:11:18:d2:48:c1:f1:2a: 23:98:62:d1:05:3e:bc:c6:13:3b:05:46:9b:b6:6f: 41:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B8:31:AF:EF:BC:2D:39:01:83:5F:A0:8B:F6:63:1B:B3:3F:B6:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.253.0.0/18 Signature Algorithm: sha256WithRSAEncryption 89:80:8e:be:f1:33:f6:5c:43:e6:0e:ee:e9:7e:a9:2e:81:dd: 07:86:c1:1d:82:e7:8f:1a:e8:92:75:c6:f2:a3:cd:c9:d9:f8: 89:60:1b:47:7e:8a:e3:93:1c:25:fe:5c:5f:28:cb:c3:26:c3: dd:f5:da:22:dc:f4:e2:36:56:35:8c:6d:34:a0:22:ab:27:b5: ca:2b:5b:91:5a:86:fe:bc:47:f3:47:13:90:c5:1a:89:33:fa: 2e:0d:5f:45:9c:4c:ec:d2:a5:d9:ae:50:b7:27:ff:2a:83:fb: e0:c8:be:9b:82:e7:c5:a1:aa:7a:01:1e:86:7a:7a:b6:4b:47: ad:86:dc:51:8b:ff:ae:be:96:71:d8:8a:02:54:91:18:33:4a: 8e:bd:3e:42:00:50:b9:b2:69:f1:a1:5c:dc:ef:8b:2d:fa:b1: 20:7a:68:da:52:20:0e:c6:0e:71:ff:47:a2:4c:9a:9b:19:d2: 2a:47:11:69:1c:1b:8a:1e:49:a3:a7:8e:be:49:9d:c1:84:f0: 50:dc:e6:c5:f4:52:23:45:f3:2b:54:68:35:52:68:d0:6e:0a: aa:d9:ba:ff:9b:6c:75:e5:36:f5:c5:3d:b7:88:c9:64:02:a6: ac:b1:e5:65:79:47:69:c5:64:65:33:55:09:cc:e2:d1:91:92: f7:8f:06:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQXD3BTmS/0OFDbEsOIHLSEHXQqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIzMTIwWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2RjNDAzZjgwM2Y3MTI3OTEyOGU1NmY3OWJiY2YzYWM5 MGVjY2ExMjc4YTcyMzc1ODFlZTIwZDk2NDdhMWUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaQKhxj/xx6eNKGx5YcyNBJOmFWXHp9yXOmBlIw4j6BYaC 0w+nBeTtPNU8wdFCSQnSVJuM5Bc+2uR0/vnzfm/VFwRNGH2IbkL8R+9RkmYwD32h 5LIiUh6eT4HFULUHkk5N8aVRAIQGZ6DCCVJJ6WDrSZek60oIvMWWhBi7f4x/ZCAb wZ7Dm1FEK50vMpaAX99aLKbCFejdWZziqy2D9KrDm95Ym/mII1PAYwYfdc6+TGEq i8mNKdII6k5Kpg/cAM6P510Ay7V5M1DvVU1yTdoARWOBgZF4SnIl7JuZrLBwOgMF NK7ipIuLERjSSMHxKiOYYtEFPrzGEzsFRpu2b0H9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkrgxr++8LTkBg1+gi/ZjG7M/tmowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwZWYxZjhhLWI2MTQtNDdiNC1hYWM5LTQzMTYwMzg2ZGQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/QAwDQYJKoZIhvcNAQELBQADggEBAImAjr7xM/ZcQ+YO7ul+qS6B3QeG wR2C548a6JJ1xvKjzcnZ+IlgG0d+iuOTHCX+XF8oy8Mmw9312iLc9OI2VjWMbTSg IqsntcorW5Fahv68R/NHE5DFGokz+i4NX0WcTOzSpdmuULcn/yqD++DIvpuC58Wh qnoBHoZ6erZLR62G3FGL/66+lnHYigJUkRgzSo69PkIAULmyafGhXNzviy36sSB6 aNpSIA7GDnH/R6JMmpsZ0ipHEWkcG4oeSaOnjr5JncGE8FDc5sX0UiNF8ytUaDVS aNBuCqrZuv+bbHXlNvXFPbeIyWQCpqyx5WV5R2nFZGUzVQnM4tGRkvePBmE= -----END CERTIFICATE-----Generated at Tue May 12 22:37:36 2026 by rpki-client