$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a225bd1b-bfea-4267-8b7d-4cde14104386.roa File: a225bd1b-bfea-4267-8b7d-4cde14104386.roa (raw, json) Hash identifier: O+xgefMbQdj3bpkV4u8MJlNUJfiooekC1DK9VMpWLSI= Subject key identifier: DD:C7:6C:EF:48:DB:09:3F:FB:9E:51:34:EE:DF:03:30:FD:B9:29:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B9BA62C2FE0C46D4DA6EE1A9C202D2AD71C8AFF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a225bd1b-bfea-4267-8b7d-4cde14104386.roa Signing time: Fri 08 May 2026 00:50:13 +0000 ROA not before: Fri 08 May 2026 00:50:13 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.178.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9b:a6:2c:2f:e0:c4:6d:4d:a6:ee:1a:9c:20:2d:2a:d7:1c:8a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 00:50:13 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=4be59005af4b2577f23130246c20863025d7d337fc9f360109d5055f659e84f2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b0:0e:16:98:fa:f1:e3:6a:9e:94:f8:50:21: d2:5e:c0:d2:c9:4d:0b:c8:b0:f3:95:2f:66:af:86: 9f:4b:13:ff:28:f0:5f:e7:e7:ed:7e:e7:16:d2:56: 34:81:fc:d6:eb:46:20:a8:04:2b:60:2a:e7:16:ac: 70:b4:86:fd:1d:18:14:d6:34:2c:83:6d:09:a4:27: b3:d7:96:48:49:79:f1:f2:d5:c0:46:4b:20:78:0d: 11:1e:20:03:46:67:53:f1:59:cd:63:3e:bc:b5:7e: 03:64:7c:89:50:70:ad:bd:45:d4:36:fe:1d:e1:7e: 2d:8a:1d:82:59:90:4e:1c:76:72:60:69:34:e4:9f: 4b:8d:c1:ee:cf:61:5e:71:f3:77:84:80:81:cb:43: 31:f5:29:41:5a:25:63:18:70:90:81:94:dd:00:02: 5a:72:c0:0f:6c:94:63:0f:ea:9f:5f:8c:54:44:28: 5f:d3:12:bd:23:a0:96:ff:cd:60:88:b5:da:80:72: 8e:c8:13:ab:04:80:6b:c5:4a:96:ce:70:e8:6f:04: 9b:f3:46:08:81:a6:96:6f:72:a0:97:b8:4c:ed:85: 6b:ab:7d:a4:df:5b:b4:65:dc:a4:4a:21:31:fe:e0: 63:23:54:9a:b2:64:98:ee:a2:5a:d1:a2:2f:af:77: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C7:6C:EF:48:DB:09:3F:FB:9E:51:34:EE:DF:03:30:FD:B9:29:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a225bd1b-bfea-4267-8b7d-4cde14104386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.178.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1c:a8:00:76:87:3d:8c:0e:98:2c:68:19:f1:f7:6c:64:83:bc: a5:94:f3:04:13:e0:e1:ab:2f:50:9b:79:32:f2:28:8d:40:d2: 63:8b:7f:6f:a3:74:2f:41:bb:ec:66:6f:29:b7:86:10:09:e3: b5:99:30:4c:31:2a:9d:84:7d:6e:eb:58:d5:6b:99:30:c9:ac: 3d:34:51:53:fb:f6:18:ce:ef:cc:03:90:82:e6:69:53:5a:5c: 94:68:93:87:52:e4:18:ac:93:8e:b9:8e:75:d0:ab:a1:19:64: 3b:d1:aa:a4:b5:4a:32:06:f7:da:ae:fd:bd:be:35:f8:6a:2d: 94:56:bc:d1:1f:72:1f:97:05:4e:6b:61:3d:c8:cd:ee:19:ff: 94:6e:f1:aa:98:02:11:c3:1a:ed:33:79:20:22:36:ae:bc:dd: f9:74:e9:0d:1d:39:75:a4:da:2c:6a:f0:1c:ae:02:92:07:af: a1:02:e1:93:51:79:d7:0b:04:6f:26:2f:ba:d4:bd:8b:62:d1: 14:e1:e1:67:d0:ae:a6:02:84:8b:39:ce:5e:21:27:96:7a:d7: 79:43:76:c8:19:53:7a:f5:bd:b4:19:51:ea:bc:f0:1f:0f:6f: e5:eb:60:05:40:b2:d8:78:78:3e:b4:02:ff:c8:b8:48:0a:b5: 1b:29:62:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO5umLC/gxG1Npu4anCAtKtcciv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDA1MDEzWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmU1OTAwNWFmNGIyNTc3ZjIzMTMwMjQ2YzIwODYzMDI1 ZDdkMzM3ZmM5ZjM2MDEwOWQ1MDU1ZjY1OWU4NGYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxsA4WmPrx42qelPhQIdJewNLJTQvIsPOVL2avhp9LE/8o 8F/n5+1+5xbSVjSB/NbrRiCoBCtgKucWrHC0hv0dGBTWNCyDbQmkJ7PXlkhJefHy 1cBGSyB4DREeIANGZ1PxWc1jPry1fgNkfIlQcK29RdQ2/h3hfi2KHYJZkE4cdnJg aTTkn0uNwe7PYV5x83eEgIHLQzH1KUFaJWMYcJCBlN0AAlpywA9slGMP6p9fjFRE KF/TEr0joJb/zWCItdqAco7IE6sEgGvFSpbOcOhvBJvzRgiBppZvcqCXuEzthWur faTfW7Rl3KRKITH+4GMjVJqyZJjuolrRoi+vd5zfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3cds70jbCT/7nlE07t8DMP25KXIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyMjViZDFiLWJmZWEtNDI2Ny04YjdkLTRjZGUxNDEwNDM4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2sgAwDQYJKoZIhvcNAQELBQADggEBAByoAHaHPYwOmCxoGfH3bGSDvKWU 8wQT4OGrL1CbeTLyKI1A0mOLf2+jdC9Bu+xmbym3hhAJ47WZMEwxKp2EfW7rWNVr mTDJrD00UVP79hjO78wDkILmaVNaXJRok4dS5Bisk465jnXQq6EZZDvRqqS1SjIG 99qu/b2+NfhqLZRWvNEfch+XBU5rYT3Ize4Z/5Ru8aqYAhHDGu0zeSAiNq683fl0 6Q0dOXWk2ixq8ByuApIHr6EC4ZNRedcLBG8mL7rUvYti0RTh4WfQrqYChIs5zl4h J5Z613lDdsgZU3r1vbQZUeq88B8Pb+XrYAVAsth4eD60Av/IuEgKtRspYkE= -----END CERTIFICATE-----Generated at Tue May 12 22:37:47 2026 by rpki-client