$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d26ee8-1818-4b37-b468-2ecf464723d9.roa File: 87d26ee8-1818-4b37-b468-2ecf464723d9.roa (raw, json) Hash identifier: JeMzbTzxywgRIVKlfp/QoxdKnbPDzZflN6pkoXLI8xI= Subject key identifier: AD:88:05:10:62:94:E9:27:85:22:23:5E:68:C5:39:CF:87:DC:EB:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B6CDAE1AA806B1A7A17CC323B7788FAB09CF024 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d26ee8-1818-4b37-b468-2ecf464723d9.roa Signing time: Wed 06 May 2026 00:40:05 +0000 ROA not before: Wed 06 May 2026 00:40:05 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6c:da:e1:aa:80:6b:1a:7a:17:cc:32:3b:77:88:fa:b0:9c:f0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 6 00:40:05 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=4b1c2bd177bd3a059b674140d0f8346a044273cc5148d96f258e74f1dae4b509, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:9c:08:c2:e4:84:7a:85:49:3b:ae:a9:a7: 8a:4f:75:f7:66:39:dd:b5:04:a4:86:db:99:d5:b2: 5c:be:d0:9a:99:72:0d:f9:d8:33:98:40:ca:4d:85: 10:97:98:35:58:8f:fd:28:a6:85:f8:1d:27:46:3a: b9:0a:6a:d5:ea:2a:89:ed:bd:73:43:37:58:cf:80: 3c:7f:e8:d9:bf:30:1d:fd:95:23:be:39:c8:96:3c: 2b:e1:db:a8:51:6b:80:e4:c8:06:19:f0:ab:75:26: 73:fa:cb:ec:50:a0:c7:bc:fd:e9:71:26:a9:fe:33: e4:aa:af:0f:db:39:a3:d3:33:1b:43:11:2d:be:05: 5d:de:f8:73:15:bb:fd:5c:dd:22:34:59:d3:e3:b8: a6:f5:99:fa:8c:72:4c:8f:47:93:3f:92:c7:73:0a: 08:3c:9d:78:f9:24:d3:2f:4e:e8:30:3e:c6:32:f5: 85:ae:9e:85:6b:fe:ce:cf:07:87:d7:18:81:cf:af: cf:a4:32:64:d6:44:c2:6d:4b:8b:cf:c8:ad:72:a3: 13:97:85:50:95:e6:f4:13:28:d8:fb:90:a2:b0:18: b5:7e:92:ae:72:09:d1:c0:67:57:07:dc:32:44:ea: f3:86:e4:f3:a3:02:19:73:a3:96:9a:3c:f3:bc:97: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:88:05:10:62:94:E9:27:85:22:23:5E:68:C5:39:CF:87:DC:EB:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d26ee8-1818-4b37-b468-2ecf464723d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.136.0/23 Signature Algorithm: sha256WithRSAEncryption 77:a5:62:39:ed:bc:bb:74:3f:c0:d7:51:c7:8f:e4:82:10:1c: 64:97:7e:37:68:f8:30:0e:e0:e2:da:b9:c5:c9:43:1f:a4:3d: 0d:3f:d2:d0:27:5a:ca:49:f1:d7:82:11:06:96:ae:e9:3d:33: 9e:7b:32:56:30:f6:f5:12:4d:54:05:74:0a:51:ec:c2:b5:aa: 76:b8:5d:c4:0e:7a:ba:a6:a0:9f:8a:65:28:cd:2e:5a:52:c0: 24:55:cf:a1:5e:79:8a:e1:8b:25:f7:e3:01:93:22:f1:e9:e0: 98:9c:b8:54:d6:3b:06:de:79:86:e4:4e:ae:e1:e3:33:60:f5: 3d:b6:c9:e3:7a:49:2b:a9:b4:a1:74:ae:7a:2f:b1:a2:f8:fb: 1b:3d:b8:11:01:20:40:60:b0:2e:89:09:c2:08:6a:6e:df:61: 8a:79:6f:ad:45:53:d8:48:f0:bb:a3:30:27:7c:32:a2:82:56: 4d:a5:8a:f3:06:75:bd:f6:57:7b:a0:f9:e2:11:c0:57:3a:b0: 24:af:92:a8:f4:29:3e:20:60:36:bf:16:32:9e:66:e7:49:d9: fa:c8:ac:a0:ae:f4:0c:95:89:80:4b:b0:c1:a2:87:10:59:4c: da:7e:f4:07:d2:84:68:60:de:b9:4b:32:68:19:45:f9:60:81: 76:b9:fd:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO2za4aqAaxp6F8wyO3eI+rCc8CQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA2MDA0MDA1WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjFjMmJkMTc3YmQzYTA1OWI2NzQxNDBkMGY4MzQ2YTA0 NDI3M2NjNTE0OGQ5NmYyNThlNzRmMWRhZTRiNTA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN/JwIwuSEeoVJO66pp4pPdfdmOd21BKSG25nVsly+0JqZ cg352DOYQMpNhRCXmDVYj/0opoX4HSdGOrkKatXqKontvXNDN1jPgDx/6Nm/MB39 lSO+OciWPCvh26hRa4DkyAYZ8Kt1JnP6y+xQoMe8/elxJqn+M+Sqrw/bOaPTMxtD ES2+BV3e+HMVu/1c3SI0WdPjuKb1mfqMckyPR5M/ksdzCgg8nXj5JNMvTugwPsYy 9YWunoVr/s7PB4fXGIHPr8+kMmTWRMJtS4vPyK1yoxOXhVCV5vQTKNj7kKKwGLV+ kq5yCdHAZ1cH3DJE6vOG5POjAhlzo5aaPPO8l8rtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrYgFEGKU6SeFIiNeaMU5z4fc6xMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3ZDI2ZWU4LTE4MTgtNGIzNy1iNDY4LTJlY2Y0NjQ3MjNkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIgwDQYJKoZIhvcNAQELBQADggEBAHelYjntvLt0P8DXUceP5IIQHGSX fjdo+DAO4OLaucXJQx+kPQ0/0tAnWspJ8deCEQaWruk9M557MlYw9vUSTVQFdApR 7MK1qna4XcQOerqmoJ+KZSjNLlpSwCRVz6FeeYrhiyX34wGTIvHp4JicuFTWOwbe eYbkTq7h4zNg9T22yeN6SSuptKF0rnovsaL4+xs9uBEBIEBgsC6JCcIIam7fYYp5 b61FU9hI8LujMCd8MqKCVk2livMGdb32V3ug+eIRwFc6sCSvkqj0KT4gYDa/FjKe ZudJ2frIrKCu9AyViYBLsMGihxBZTNp+9AfShGhg3rlLMmgZRflggXa5/dY= -----END CERTIFICATE-----Generated at Tue May 12 22:24:11 2026 by rpki-client