$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551033f3-d268-4474-aaf5-8cb10349f8fe.roa File: 551033f3-d268-4474-aaf5-8cb10349f8fe.roa (raw, json) Hash identifier: yLKopZ0PUYKCd9FyTIGnC181hqY3CRHFsDMPxO8BPMI= Subject key identifier: EA:50:87:83:CB:7A:67:E3:84:02:4E:39:85:F3:E6:3C:63:8B:64:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71EC1C891FB79618B18882012E350DFFFC82E23B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551033f3-d268-4474-aaf5-8cb10349f8fe.roa Signing time: Tue 05 May 2026 01:00:12 +0000 ROA not before: Tue 05 May 2026 01:00:12 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ec:1c:89:1f:b7:96:18:b1:88:82:01:2e:35:0d:ff:fc:82:e2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 5 01:00:12 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=f57eaafc0a3f73787ed3899c52eb677cbd14555e17f715a38f4572246a3cb12b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:83:36:3d:5f:d2:9d:d6:e3:ca:04:9b:b4: 3b:3f:a6:b3:b2:9b:4a:8f:74:a0:95:f6:85:93:d1: 15:73:24:13:e3:1c:48:90:9a:cb:d1:d2:6a:ff:ac: 53:f0:5f:b6:f4:59:70:af:a3:5c:7c:3a:12:7a:c4: c9:29:9a:ce:51:ed:cf:f3:b9:a7:7c:94:fc:fc:ff: b5:19:ba:e2:c7:24:99:35:0e:02:23:2d:3f:81:ef: d0:bd:1a:00:3a:5b:e8:b3:d3:60:69:3d:2a:f0:19: 67:90:fe:3a:7e:8a:7d:dc:a0:35:b0:9a:b5:0d:db: 3e:21:d4:ba:1a:d4:54:12:ad:87:d5:09:20:6c:fd: 45:ee:a6:3e:6d:b4:6d:26:7b:0e:de:97:b2:be:53: 2d:f3:dd:68:1d:6a:a7:1b:c1:47:b6:d1:de:0e:e0: 8f:fc:4c:0a:ef:9b:66:03:c6:39:db:ae:b2:98:70: 36:ac:1e:84:94:bc:70:9a:d7:01:20:a8:f8:0b:9d: b5:10:25:8d:e2:a0:5d:0d:c3:7f:0d:b2:8b:12:2b: fe:a7:dc:a8:01:80:f6:da:be:b5:a0:2c:9e:d0:b9: 98:3c:c2:d4:e7:98:54:31:7b:b9:38:af:7c:8c:a5: c1:bc:84:4d:be:a9:53:b3:37:b4:05:2b:2b:a0:8d: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:50:87:83:CB:7A:67:E3:84:02:4E:39:85:F3:E6:3C:63:8B:64:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551033f3-d268-4474-aaf5-8cb10349f8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.236.0/22 Signature Algorithm: sha256WithRSAEncryption 52:1c:32:df:57:b6:09:1a:aa:df:cb:ae:be:74:8b:f3:dc:44: bf:b0:17:6d:64:89:7e:03:31:d4:37:fb:aa:3b:fa:91:70:66: 5a:0f:c0:9b:5f:a6:98:d6:a3:00:0b:77:96:5a:25:74:96:08: 75:b5:a4:d5:4c:06:f7:44:4b:57:16:57:d7:f7:d9:f8:4a:8a: d7:60:21:7e:da:f5:f3:a2:3d:35:17:66:39:f0:0a:58:6e:d1: 6b:59:5e:08:c4:7b:e2:0b:90:56:a5:14:fc:52:8d:9c:d8:a4: ea:89:25:29:ee:64:c8:64:73:c7:47:88:e6:be:1c:37:82:89: 84:b2:93:91:cc:f0:a3:55:1c:97:24:62:14:92:5f:6a:41:de: fe:e9:fc:81:64:10:00:0e:f2:23:31:5d:6d:cf:bd:43:89:fc: ef:b6:c8:12:40:00:88:32:6e:fc:38:99:01:fc:a7:fe:d4:dc: d6:43:b0:a3:9d:93:13:d3:6b:91:3f:ee:f1:5c:33:9b:95:27: 67:03:9e:42:84:4a:02:71:5e:b6:27:24:3f:3b:c4:9e:34:1f: 6c:cc:bb:7a:b6:0c:2d:83:78:60:4a:a1:e9:36:74:db:9d:a7: 6b:bc:bd:0c:6d:f4:76:9b:be:46:bc:d3:ce:91:aa:0b:b9:5c: 5d:b0:27:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcewciR+3lhixiIIBLjUN//yC4jswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA1MDEwMDEyWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTdlYWFmYzBhM2Y3Mzc4N2VkMzg5OWM1MmViNjc3Y2Jk MTQ1NTVlMTdmNzE1YTM4ZjQ1NzIyNDZhM2NiMTJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCE9oM2PV/SndbjygSbtDs/prOym0qPdKCV9oWT0RVzJBPj HEiQmsvR0mr/rFPwX7b0WXCvo1x8OhJ6xMkpms5R7c/zuad8lPz8/7UZuuLHJJk1 DgIjLT+B79C9GgA6W+iz02BpPSrwGWeQ/jp+in3coDWwmrUN2z4h1Loa1FQSrYfV CSBs/UXupj5ttG0mew7el7K+Uy3z3WgdaqcbwUe20d4O4I/8TArvm2YDxjnbrrKY cDasHoSUvHCa1wEgqPgLnbUQJY3ioF0Nw38NsosSK/6n3KgBgPbavrWgLJ7QuZg8 wtTnmFQxe7k4r3yMpcG8hE2+qVOzN7QFKyugjSUjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6lCHg8t6Z+OEAk45hfPmPGOLZPwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1MTAzM2YzLWQyNjgtNDQ3NC1hYWY1LThjYjEwMzQ5ZjhmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3OwwDQYJKoZIhvcNAQELBQADggEBAFIcMt9Xtgkaqt/Lrr50i/PcRL+w F21kiX4DMdQ3+6o7+pFwZloPwJtfppjWowALd5ZaJXSWCHW1pNVMBvdES1cWV9f3 2fhKitdgIX7a9fOiPTUXZjnwClhu0WtZXgjEe+ILkFalFPxSjZzYpOqJJSnuZMhk c8dHiOa+HDeCiYSyk5HM8KNVHJckYhSSX2pB3v7p/IFkEAAO8iMxXW3PvUOJ/O+2 yBJAAIgybvw4mQH8p/7U3NZDsKOdkxPTa5E/7vFcM5uVJ2cDnkKESgJxXrYnJD87 xJ40H2zMu3q2DC2DeGBKoek2dNudp2u8vQxt9Habvka8086Rqgu5XF2wJ6g= -----END CERTIFICATE-----Generated at Tue May 12 22:37:45 2026 by rpki-client