$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa File: 605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa (raw, json) Hash identifier: C1xXAPTZHzg2rvX789FZhSKYBE831VXxmD2kPqizAKg= Subject key identifier: EB:92:B6:CC:FC:F9:29:F3:A3:32:26:4C:C7:30:72:2F:D5:8B:BE:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C9D3450A8912ABBFFF6737C2545D4120816EA1F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa Signing time: Fri 08 May 2026 02:30:48 +0000 ROA not before: Fri 08 May 2026 02:30:48 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9d:34:50:a8:91:2a:bb:ff:f6:73:7c:25:45:d4:12:08:16:ea:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:30:48 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=fbacd9859eead0c2bbb391332e05f944623802b335f82846b39e157a1f2eda69, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:28:d1:bf:a0:2e:ba:17:49:d7:1f:9b:ee: 85:20:2e:ba:1e:7b:8d:8a:4e:3f:94:44:bb:2f:bf: f9:e8:68:9d:75:20:5f:73:19:65:95:f5:40:bc:a6: 8e:aa:b7:a5:3d:e8:d8:c8:83:67:44:b4:3a:23:bc: 48:12:2d:83:8f:f2:53:8d:7e:24:26:ee:f4:11:87: 27:13:fc:0e:e6:3b:93:ee:ea:65:73:e7:da:2a:ed: 6e:d0:b9:71:67:07:d0:dd:1a:ad:fe:be:e2:45:a6: 7c:47:b1:4c:bf:bd:08:d4:b4:fa:23:63:43:58:ac: 77:c3:f9:8f:b4:a3:50:c0:04:35:f7:8a:4d:b5:bf: 90:34:5f:b7:3b:16:f2:81:0e:11:20:65:a6:37:4d: 00:13:53:82:f3:30:2a:d1:13:99:8a:ae:5f:45:1a: 15:c0:70:f7:dd:2f:6e:5c:e4:9c:4a:35:f6:48:0a: 97:06:b1:15:29:01:41:8f:9f:1d:d9:69:84:0c:09: 21:bd:97:a2:82:57:07:db:8f:73:1f:c1:ae:b1:d9: de:64:45:27:41:35:cc:8d:5e:30:25:fd:b0:0e:72: 3c:89:48:a1:4a:cc:87:11:a6:4d:7a:24:37:d3:b7: d6:10:f5:65:46:ba:a7:9b:02:fa:be:3b:ea:ca:f5: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:92:B6:CC:FC:F9:29:F3:A3:32:26:4C:C7:30:72:2F:D5:8B:BE:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.248.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:54:62:3b:74:a2:27:20:01:53:86:35:0a:65:0c:5f:67:02: 35:35:cd:91:71:a6:48:21:ec:4f:96:c1:43:86:fd:85:97:33: 88:2c:22:a2:84:fd:2b:b0:b9:d0:79:c5:c6:3c:8b:e8:63:4f: 5e:ac:61:73:bb:91:8c:02:d4:ca:a2:cf:19:8b:b6:8b:e8:d7: 6f:70:61:99:6f:5c:c8:76:d8:ee:23:29:8c:b3:89:b6:fd:2e: ec:a8:d4:29:55:0f:2b:b6:e6:dc:cd:5d:20:e5:ea:cc:ed:9f: b4:64:43:4d:b8:90:e2:5e:18:11:21:d5:13:9e:70:21:fd:42: 85:1b:7d:67:54:88:f3:5a:49:71:aa:16:23:24:7f:c7:d7:9a: da:a6:a7:19:1d:22:a9:55:d1:11:dc:0b:c0:b0:f8:bd:13:a3: 21:f8:8b:bf:77:e1:96:d2:97:50:14:6d:52:bc:b3:5f:84:e0: 52:be:99:11:92:c3:7b:a1:eb:19:75:35:90:31:90:22:5f:29: 13:1e:29:e1:4e:da:ec:ef:f6:72:2a:84:7f:9b:30:4a:69:09: 6b:7c:70:43:aa:e8:67:d5:13:96:b9:9a:bb:ee:33:a3:b5:03: fa:43:5a:37:aa:62:5b:8d:81:b9:80:1e:7e:49:a6:d2:10:69: 13:41:8a:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPJ00UKiRKrv/9nN8JUXUEggW6h8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIzMDQ4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmFjZDk4NTllZWFkMGMyYmJiMzkxMzMyZTA1Zjk0NDYy MzgwMmIzMzVmODI4NDZiMzllMTU3YTFmMmVkYTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+UijRv6AuuhdJ1x+b7oUgLroee42KTj+URLsvv/noaJ11 IF9zGWWV9UC8po6qt6U96NjIg2dEtDojvEgSLYOP8lONfiQm7vQRhycT/A7mO5Pu 6mVz59oq7W7QuXFnB9DdGq3+vuJFpnxHsUy/vQjUtPojY0NYrHfD+Y+0o1DABDX3 ik21v5A0X7c7FvKBDhEgZaY3TQATU4LzMCrRE5mKrl9FGhXAcPfdL25c5JxKNfZI CpcGsRUpAUGPnx3ZaYQMCSG9l6KCVwfbj3Mfwa6x2d5kRSdBNcyNXjAl/bAOcjyJ SKFKzIcRpk16JDfTt9YQ9WVGuqebAvq+O+rK9ZkzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU65K2zPz5KfOjMiZMxzByL9WLvqYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwNTg4OWVhLWFjNmEtNGVhYy05M2JmLWJkYWQ2ZGZhZWQ4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3PgwDQYJKoZIhvcNAQELBQADggEBACpUYjt0oicgAVOGNQplDF9nAjU1 zZFxpkgh7E+WwUOG/YWXM4gsIqKE/SuwudB5xcY8i+hjT16sYXO7kYwC1MqizxmL tovo129wYZlvXMh22O4jKYyzibb9Luyo1ClVDyu25tzNXSDl6sztn7RkQ024kOJe GBEh1ROecCH9QoUbfWdUiPNaSXGqFiMkf8fXmtqmpxkdIqlV0RHcC8Cw+L0ToyH4 i7934ZbSl1AUbVK8s1+E4FK+mRGSw3uh6xl1NZAxkCJfKRMeKeFO2uzv9nIqhH+b MEppCWt8cEOq6GfVE5a5mrvuM6O1A/pDWjeqYluNgbmAHn5JptIQaRNBijc= -----END CERTIFICATE-----Generated at Tue May 12 22:21:22 2026 by rpki-client