$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9da2aad4-52e7-4632-b20f-2957907aa859.roa File: 9da2aad4-52e7-4632-b20f-2957907aa859.roa (raw, json) Hash identifier: g6Ray0pxuglGJ/mL0atZf48qIgYTVK/IWiWt5y3ENao= Subject key identifier: 17:1A:36:C6:E4:7D:94:FC:0C:C8:F9:C8:86:0C:46:6B:FA:EC:3E:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6766C9F6B8642B7B7BED5901CF229F73FF1F1C63 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9da2aad4-52e7-4632-b20f-2957907aa859.roa Signing time: Fri 08 May 2026 00:50:11 +0000 ROA not before: Fri 08 May 2026 00:50:11 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:66:c9:f6:b8:64:2b:7b:7b:ed:59:01:cf:22:9f:73:ff:1f:1c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 00:50:11 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=a55ac7bbd46cbd78d55769b1e26f6aef12d2e744d4e52445ccc6d3b121f45caa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:e7:23:43:35:de:f5:a4:b1:24:ad:13:78: 6d:37:b6:04:61:85:bd:51:65:ce:97:c3:46:27:99: 7e:b2:ad:c5:42:f2:cf:f2:52:52:fa:4c:31:67:77: 64:42:c7:6f:d2:84:a7:f7:29:e1:b2:0e:c3:e5:86: ce:38:99:4c:18:c7:c0:a4:bb:07:93:35:7f:d8:0d: 0e:f7:36:74:72:2f:c8:89:58:54:e5:1c:e5:3c:24: 77:9c:a0:59:e3:74:1f:34:04:fd:f2:3f:31:c7:2d: 01:dd:cf:6e:22:54:30:3d:f9:c0:f4:43:d5:75:00: a7:22:ed:44:65:c6:3b:b2:b4:7a:25:fc:a7:be:b2: a5:08:b3:e7:20:54:6e:f0:a4:e0:5f:25:62:55:0f: 6e:3b:a5:c0:c8:4a:29:ef:9c:9a:00:ed:cb:22:26: 6d:5c:24:5e:26:2c:a4:ea:58:e7:fb:35:26:a5:fd: 64:f3:90:b0:ce:46:2d:5c:f1:20:06:42:08:2c:c7: 61:af:64:fc:0f:77:19:5e:f9:29:5e:43:8f:b5:6c: 8e:78:4a:c6:3e:e8:33:2d:bd:66:bb:2d:d2:7b:9d: 3c:01:35:19:9c:e2:33:ea:14:d6:9b:c7:d8:c2:45: 64:54:41:98:16:19:37:9d:d0:d5:b4:cc:b9:10:38: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1A:36:C6:E4:7D:94:FC:0C:C8:F9:C8:86:0C:46:6B:FA:EC:3E:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9da2aad4-52e7-4632-b20f-2957907aa859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:0c:ce:7a:d2:6e:1d:18:33:30:a0:11:73:a3:5b:35:f8:ab: 8b:c4:f1:91:a2:46:ba:0f:da:80:6e:3e:7f:52:63:b6:02:7f: f2:54:72:13:0a:7b:70:42:af:48:e8:73:91:6a:16:c0:54:f1: 79:bc:c5:e2:c1:2c:4d:c5:54:8b:9e:c1:63:ca:79:2c:30:4c: 1f:dd:40:02:65:bd:1b:2a:4c:87:e4:05:82:42:34:5f:d4:0c: 7e:ec:9d:39:20:f3:2a:0f:f0:8b:67:ef:3b:17:4c:0b:f7:f8: 42:df:a5:97:d0:f2:5b:b4:be:63:22:06:99:5e:f0:67:c6:cc: 58:84:5d:39:76:4e:68:6b:32:77:ac:f3:64:61:5b:e3:48:d5: c3:e5:5e:a4:82:3e:35:e4:f8:00:e8:74:28:85:aa:24:43:bf: f5:4b:58:86:e1:80:54:f2:c9:46:ce:52:01:4f:d9:f8:8c:7a: d6:09:39:4f:6b:eb:06:e6:cb:4d:44:b9:ba:6d:8a:9d:f5:72: b9:7f:53:81:13:eb:04:10:f8:f4:07:59:d0:94:4c:bb:8a:2f: ff:5d:8a:13:9e:e7:ae:f7:e2:03:74:d0:1a:e5:16:e5:ad:3a: ad:e6:8c:93:cb:e4:8c:c1:46:2b:6a:16:67:de:e3:b7:a4:52: b4:df:60:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ2bJ9rhkK3t77VkBzyKfc/8fHGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDA1MDExWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTVhYzdiYmQ0NmNiZDc4ZDU1NzY5YjFlMjZmNmFlZjEy ZDJlNzQ0ZDRlNTI0NDVjY2M2ZDNiMTIxZjQ1Y2FhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUP+cjQzXe9aSxJK0TeG03tgRhhb1RZc6Xw0YnmX6yrcVC 8s/yUlL6TDFnd2RCx2/ShKf3KeGyDsPlhs44mUwYx8CkuweTNX/YDQ73NnRyL8iJ WFTlHOU8JHecoFnjdB80BP3yPzHHLQHdz24iVDA9+cD0Q9V1AKci7URlxjuytHol /Ke+sqUIs+cgVG7wpOBfJWJVD247pcDISinvnJoA7csiJm1cJF4mLKTqWOf7NSal /WTzkLDORi1c8SAGQggsx2GvZPwPdxle+SleQ4+1bI54SsY+6DMtvWa7LdJ7nTwB NRmc4jPqFNabx9jCRWRUQZgWGTed0NW0zLkQOMSLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFxo2xuR9lPwMyPnIhgxGa/rsPqcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkYTJhYWQ0LTUyZTctNDYzMi1iMjBmLTI5NTc5MDdhYTg1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI21jQwDQYJKoZIhvcNAQELBQADggEBAB0MznrSbh0YMzCgEXOjWzX4q4vE 8ZGiRroP2oBuPn9SY7YCf/JUchMKe3BCr0joc5FqFsBU8Xm8xeLBLE3FVIuewWPK eSwwTB/dQAJlvRsqTIfkBYJCNF/UDH7snTkg8yoP8Itn7zsXTAv3+ELfpZfQ8lu0 vmMiBple8GfGzFiEXTl2TmhrMnes82RhW+NI1cPlXqSCPjXk+ADodCiFqiRDv/VL WIbhgFTyyUbOUgFP2fiMetYJOU9r6wbmy01Eubptip31crl/U4ET6wQQ+PQHWdCU TLuKL/9dihOe56734gN00BrlFuWtOq3mjJPL5IzBRitqFmfe47ekUrTfYE0= -----END CERTIFICATE-----Generated at Tue May 12 22:24:45 2026 by rpki-client