$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61940442-21b4-4cde-8d39-e5c3216b1372.roa File: 61940442-21b4-4cde-8d39-e5c3216b1372.roa (raw, json) Hash identifier: B7+iNlEoRAIgjALq2NU0B8AjzMsaDOMr0kmxyX7nrBU= Subject key identifier: 70:05:86:51:4E:09:E1:63:BF:C1:4E:CD:B0:05:06:23:9E:F0:FF:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4711217ADBACEF1DD53DA359C95A53D44587A32D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61940442-21b4-4cde-8d39-e5c3216b1372.roa Signing time: Tue 05 May 2026 01:20:07 +0000 ROA not before: Tue 05 May 2026 01:20:07 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:11:21:7a:db:ac:ef:1d:d5:3d:a3:59:c9:5a:53:d4:45:87:a3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 5 01:20:07 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=2911da68ff3f0abe5bd12cc7cbd0d3bea9fa46888972f606c27b1ce13dbcbb0b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:75:d6:4c:fd:19:94:4d:a1:c1:f5:4d:4e: f0:ba:98:0c:a1:1a:e4:ba:a5:94:f0:47:9f:f8:d2: 8d:dd:9d:89:43:e6:66:bc:22:4b:58:be:d9:24:d4: 26:62:1c:bf:5b:36:db:16:01:3f:cd:7a:79:58:e7: 69:30:5d:f4:cd:1b:25:c3:ee:c2:ea:59:4c:21:65: be:4f:35:9e:de:c2:20:bb:26:44:91:23:6e:a6:b4: ec:e4:f4:a7:89:e3:e5:63:78:c1:66:25:65:29:56: 2d:00:f0:ec:b3:d0:72:6e:81:af:81:fe:b8:9d:13: 44:3b:ac:c2:3a:3b:eb:95:cf:a5:ab:bb:29:c5:20: 80:6b:01:44:d3:4a:46:c7:87:6e:97:ac:53:b4:16: bb:ec:71:4a:b8:02:f4:52:55:39:46:74:56:44:b2: e9:9b:7a:5e:94:97:56:d2:db:3c:20:51:5f:6e:58: 16:d9:10:18:09:f7:0c:84:f7:d0:d2:12:08:22:52: 50:b0:71:c3:d2:8c:5c:f0:e2:4f:f4:da:da:23:99: 78:a3:3d:7b:53:41:1a:51:ce:a7:89:7d:da:1c:c6: ee:20:24:81:5e:47:9f:23:87:7e:a0:8e:ec:d2:d2: 78:a1:55:7f:ff:a7:ab:ad:d0:f7:54:ed:d1:bf:c5: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:05:86:51:4E:09:E1:63:BF:C1:4E:CD:B0:05:06:23:9E:F0:FF:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61940442-21b4-4cde-8d39-e5c3216b1372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.40.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:35:5d:6c:09:90:23:ca:23:8f:5c:f4:5a:c9:b5:53:f6:ca: 25:b6:b3:ff:7a:e0:3b:95:b4:2f:d0:58:5b:d2:d1:99:ce:97: bc:89:84:51:6d:32:9f:02:fd:a1:5c:6e:94:5f:14:ba:19:bb: e4:6b:37:11:e6:3f:31:b4:fb:49:43:09:73:20:e2:ca:c1:2a: b9:a8:77:ca:05:a8:53:34:21:0b:a0:d0:db:ab:07:03:08:a5: 1a:81:c2:a8:c2:40:f0:f8:aa:ee:f3:05:d9:3f:d7:25:3e:72: 1c:07:df:68:bb:54:96:d1:99:54:8d:1d:fd:3f:c5:dd:cf:94: 12:25:3d:1f:7e:65:20:82:2d:b6:33:16:24:1c:90:58:8c:51: a7:ba:20:ce:74:1d:9c:6d:44:cc:7c:25:7c:0c:af:81:ed:2b: 98:e9:35:c2:d6:b6:ae:3c:3b:6c:cc:d6:c0:40:97:f6:ec:74: a6:46:44:3b:9b:1a:33:5d:f9:93:d3:52:e7:64:f2:c5:3f:9c: 1c:a4:8a:9c:bb:19:a6:b8:68:7f:14:1c:60:10:05:b6:4d:52: c1:f0:ac:a5:7e:3e:56:1e:eb:8c:6c:fe:99:57:0a:77:f3:ae: cf:4f:1b:bc:dd:fa:2b:a8:16:ad:72:80:b0:6c:1e:de:2c:61: 42:34:5f:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURxEhetus7x3VPaNZyVpT1EWHoy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA1MDEyMDA3WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTExZGE2OGZmM2YwYWJlNWJkMTJjYzdjYmQwZDNiZWE5 ZmE0Njg4ODk3MmY2MDZjMjdiMWNlMTNkYmNiYjBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgV3XWTP0ZlE2hwfVNTvC6mAyhGuS6pZTwR5/40o3dnYlD 5ma8IktYvtkk1CZiHL9bNtsWAT/NenlY52kwXfTNGyXD7sLqWUwhZb5PNZ7ewiC7 JkSRI26mtOzk9KeJ4+VjeMFmJWUpVi0A8Oyz0HJuga+B/ridE0Q7rMI6O+uVz6Wr uynFIIBrAUTTSkbHh26XrFO0FrvscUq4AvRSVTlGdFZEsumbel6Ul1bS2zwgUV9u WBbZEBgJ9wyE99DSEggiUlCwccPSjFzw4k/02tojmXijPXtTQRpRzqeJfdocxu4g JIFeR58jh36gjuzS0nihVX//p6ut0PdU7dG/xfBtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcAWGUU4J4WO/wU7NsAUGI57w/5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxOTQwNDQyLTIxYjQtNGNkZS04ZDM5LWU1YzMyMTZiMTM3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPsSgwDQYJKoZIhvcNAQELBQADggEBAJ01XWwJkCPKI49c9FrJtVP2yiW2 s/964DuVtC/QWFvS0ZnOl7yJhFFtMp8C/aFcbpRfFLoZu+RrNxHmPzG0+0lDCXMg 4srBKrmod8oFqFM0IQug0NurBwMIpRqBwqjCQPD4qu7zBdk/1yU+chwH32i7VJbR mVSNHf0/xd3PlBIlPR9+ZSCCLbYzFiQckFiMUae6IM50HZxtRMx8JXwMr4HtK5jp NcLWtq48O2zM1sBAl/bsdKZGRDubGjNd+ZPTUudk8sU/nBykipy7Gaa4aH8UHGAQ BbZNUsHwrKV+PlYe64xs/plXCnfzrs9PG7zd+iuoFq1ygLBsHt4sYUI0X4c= -----END CERTIFICATE-----Generated at Tue May 12 22:36:57 2026 by rpki-client