$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6198d390-2c51-451f-92e6-d6fecbbdde04.roa File: 6198d390-2c51-451f-92e6-d6fecbbdde04.roa (raw, json) Hash identifier: SBh/4LchPJbBZjSpjk1ZZiGvX1D/RnrXPL3I2Bi4UEs= Subject key identifier: 9A:48:DC:8C:5A:A2:14:B5:EA:A3:30:9C:5B:92:F8:4D:5D:0B:6C:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EC4D02D4748766582F637695A0A337CD72AF3AE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6198d390-2c51-451f-92e6-d6fecbbdde04.roa Signing time: Fri 08 May 2026 02:01:17 +0000 ROA not before: Fri 08 May 2026 02:01:17 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.238.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c4:d0:2d:47:48:76:65:82:f6:37:69:5a:0a:33:7c:d7:2a:f3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:01:17 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=0d6c1d08b408b15e53b2bc2d31d9d7fa74ee9ea2b66e29cfa6933443478fe24a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:60:7a:91:fb:e3:a0:41:a2:73:7d:24:09: 88:08:1c:bf:f4:d1:b0:be:d4:61:f3:3d:4f:78:10: eb:f5:6a:88:df:ea:9b:65:41:88:66:bf:97:db:e3: 9b:4a:02:4f:03:8b:4a:32:46:c6:53:7c:55:1b:b2: 2a:f4:ca:22:63:e9:0d:3d:f3:56:5c:0d:01:da:ac: 5e:02:b3:4d:4b:a3:5c:93:45:91:4d:f6:8e:f6:45: 8d:82:8b:b5:4b:34:a4:c8:54:01:24:3d:34:46:35: 4f:29:10:28:b3:18:ec:e7:8f:f1:a1:38:d4:8e:35: 1d:46:46:1c:8c:47:52:5b:97:8c:37:e0:1e:a0:39: d7:dc:59:65:87:90:c3:11:97:9c:c8:d1:5c:d2:42: 5d:74:f3:94:77:d3:70:34:39:8d:76:48:54:7f:e7: ad:69:a2:7f:a7:cd:9e:45:7c:3e:04:67:ae:3d:1b: f2:2e:43:17:04:8e:f9:29:2e:c1:fc:58:86:d7:ed: 3b:3a:0c:70:bb:53:f5:32:40:a7:0d:e6:f4:b4:ab: 6a:e0:37:f7:ad:56:0a:c6:66:04:3b:f8:49:c2:29: e4:74:5c:ff:64:de:53:ac:df:19:df:18:81:2c:53: e9:fe:80:f2:bc:3f:0d:70:6f:5f:47:12:8e:51:7c: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:48:DC:8C:5A:A2:14:B5:EA:A3:30:9C:5B:92:F8:4D:5D:0B:6C:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6198d390-2c51-451f-92e6-d6fecbbdde04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.238.167.0/24 Signature Algorithm: sha256WithRSAEncryption a1:88:4c:1b:4c:e2:c3:a6:a7:00:05:df:ec:9d:df:fa:96:cf: f5:97:12:a9:42:d7:38:33:6f:66:e9:6c:07:1f:5f:c8:67:87: 22:f0:9e:47:a7:39:5a:66:aa:a7:23:9d:32:cf:c2:38:64:eb: e0:f4:68:13:c8:1d:1f:fa:cd:47:7e:18:0c:b1:4a:b9:f4:cc: c2:74:98:f8:98:87:49:26:56:71:22:5e:bc:e8:92:b4:31:db: 13:10:04:4d:dc:f4:2a:b0:c5:76:b2:d2:db:50:2b:56:9f:4f: 6a:e2:a3:41:da:a0:0a:45:1a:b7:86:04:95:fb:4a:ae:c8:fb: 40:52:a5:06:65:35:d4:39:c8:03:a3:7a:2d:30:b9:18:af:d7: af:8d:b7:8a:9c:92:83:9f:46:93:7f:1c:6d:5d:c6:e3:62:a9: c1:76:13:46:b3:da:45:6e:9e:5c:98:8a:24:78:2a:00:4b:ce: 0e:a2:35:dd:2c:58:e4:a5:aa:5b:71:24:ac:9a:92:9b:71:d2: e6:92:ab:da:90:26:a1:8f:a8:58:46:ca:71:d5:53:eb:67:f0: 59:e6:0b:21:b1:14:42:f1:47:4c:09:56:a2:39:0f:4f:aa:27: 39:28:c7:16:cc:0d:52:17:e8:d6:30:f1:11:57:12:47:d0:4f: a6:11:f5:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTsTQLUdIdmWC9jdpWgozfNcq864wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIwMTE3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDZjMWQwOGI0MDhiMTVlNTNiMmJjMmQzMWQ5ZDdmYTc0 ZWU5ZWEyYjY2ZTI5Y2ZhNjkzMzQ0MzQ3OGZlMjRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKsWB6kfvjoEGic30kCYgIHL/00bC+1GHzPU94EOv1aojf 6ptlQYhmv5fb45tKAk8Di0oyRsZTfFUbsir0yiJj6Q0981ZcDQHarF4Cs01Lo1yT RZFN9o72RY2Ci7VLNKTIVAEkPTRGNU8pECizGOznj/GhONSONR1GRhyMR1Jbl4w3 4B6gOdfcWWWHkMMRl5zI0VzSQl1085R303A0OY12SFR/561pon+nzZ5FfD4EZ649 G/IuQxcEjvkpLsH8WIbX7Ts6DHC7U/UyQKcN5vS0q2rgN/etVgrGZgQ7+EnCKeR0 XP9k3lOs3xnfGIEsU+n+gPK8Pw1wb19HEo5RfJeFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmkjcjFqiFLXqozCcW5L4TV0LbAEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxOThkMzkwLTJjNTEtNDUxZi05MmU2LWQ2ZmVjYmJkZGUwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD7qcwDQYJKoZIhvcNAQELBQADggEBAKGITBtM4sOmpwAF3+yd3/qWz/WX EqlC1zgzb2bpbAcfX8hnhyLwnkenOVpmqqcjnTLPwjhk6+D0aBPIHR/6zUd+GAyx Srn0zMJ0mPiYh0kmVnEiXrzokrQx2xMQBE3c9CqwxXay0ttQK1afT2rio0HaoApF GreGBJX7Sq7I+0BSpQZlNdQ5yAOjei0wuRiv16+Nt4qckoOfRpN/HG1dxuNiqcF2 E0az2kVunlyYiiR4KgBLzg6iNd0sWOSlqltxJKyakptx0uaSq9qQJqGPqFhGynHV U+tn8FnmCyGxFELxR0wJVqI5D0+qJzkoxxbMDVIX6NYw8RFXEkfQT6YR9U8= -----END CERTIFICATE-----Generated at Tue May 12 22:34:38 2026 by rpki-client