$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa File: a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa (raw, json) Hash identifier: S3DVvaC37lG7h5F6dQtSLCjGqMBh+DNCI9a1ebGuIHI= Subject key identifier: 24:1B:39:02:03:D3:C4:08:A9:30:74:39:22:90:95:37:A8:40:1C:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70F8777A79C1CD0FED629A6A56F0223BD07756DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa Signing time: Mon 11 May 2026 01:10:38 +0000 ROA not before: Mon 11 May 2026 01:10:38 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.156.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f8:77:7a:79:c1:cd:0f:ed:62:9a:6a:56:f0:22:3b:d0:77:56:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 11 01:10:38 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=a31671cbe228544b8d109d5ab9c94991d031923d0881a854ab61b85078f0989d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:87:cc:b5:69:42:83:2b:f0:a2:16:c5:99: 7f:cd:c1:2e:87:85:b0:88:f8:9f:d3:8b:d1:46:ff: 9d:b8:12:3f:fe:04:e4:26:7d:fa:74:fb:82:1d:4d: 7e:71:b4:72:ff:f4:5d:2c:ed:5d:86:24:11:1c:77: 1d:e5:a7:d7:c4:f6:e2:4d:5c:1f:0e:1d:c0:c6:4c: e4:29:27:bb:c3:f5:9e:dd:cd:1d:a8:44:87:5b:eb: c2:06:03:57:c0:b0:25:3e:81:7f:82:a3:b9:4a:de: 09:c1:ca:ec:10:ed:64:b4:2a:d1:3d:e2:99:b4:f1: a4:9f:96:e1:52:ad:53:a1:92:08:21:cd:39:72:e9: 5c:7f:54:49:ca:60:3b:65:b9:01:1e:23:89:c0:72: aa:1e:31:df:09:81:67:e9:93:58:e3:de:20:cd:8e: 89:19:da:47:b9:23:47:63:6f:d7:4f:e9:0e:f5:32: 60:0d:0e:50:2e:b0:cf:e3:28:50:f0:77:df:13:ab: d8:89:62:cd:59:56:1a:97:61:2e:44:d9:81:8a:a9: 7c:10:f8:b7:4e:0f:14:f4:bc:1b:65:3d:ba:60:de: dd:3d:ed:10:de:82:f7:03:89:f5:82:f7:37:69:1c: ea:bf:81:c9:bc:ee:6f:9e:f1:a9:f5:51:7c:ce:b6: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1B:39:02:03:D3:C4:08:A9:30:74:39:22:90:95:37:A8:40:1C:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.2.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:2f:0c:ce:36:09:f5:60:c7:be:84:d5:95:39:ce:b9:85:1f: 21:d4:d4:08:8d:18:d3:11:8c:cd:b9:51:c2:d8:32:32:a9:94: 1a:62:98:cf:0c:91:18:e1:29:a9:2d:3a:65:6d:46:a2:40:fb: 17:b1:9f:b6:cd:6a:44:4a:d0:9b:83:18:54:a6:98:dd:6a:92: 63:9b:84:b3:76:90:85:a7:b0:f3:5e:06:f6:c5:a9:09:b8:b9: 31:79:28:6b:c0:bc:15:b8:f1:3f:ca:b6:4f:66:e0:42:c0:d9: b0:36:13:bc:28:c8:e6:3d:f2:de:b8:03:42:a8:c8:86:06:13: fa:a6:f4:a0:2c:23:4f:09:49:09:23:3b:da:10:a9:f2:90:43: 99:f6:15:d3:46:2a:12:07:4a:df:7b:5c:29:06:1e:40:65:d4: ea:64:3a:20:45:55:be:30:e9:75:fc:19:dc:78:9e:05:3a:3d: 00:26:92:21:34:17:ef:5b:cf:c3:5f:0f:ca:f3:03:2a:f7:0d: e2:b6:81:34:31:50:8f:b5:b6:81:6a:f0:0f:70:9a:95:40:c3: 84:2c:cd:8f:2b:3c:33:8b:28:35:e8:81:a6:5d:96:7e:c8:fe: 35:4d:21:2d:5c:83:7f:27:f6:37:e8:fe:83:b7:3c:c4:c0:45: 2b:7f:51:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcPh3ennBzQ/tYppqVvAiO9B3Vt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDExMDM4WhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzE2NzFjYmUyMjg1NDRiOGQxMDlkNWFiOWM5NDk5MWQw MzE5MjNkMDg4MWE4NTRhYjYxYjg1MDc4ZjA5ODlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjF4fMtWlCgyvwohbFmX/NwS6HhbCI+J/Ti9FG/524Ej/+ BOQmffp0+4IdTX5xtHL/9F0s7V2GJBEcdx3lp9fE9uJNXB8OHcDGTOQpJ7vD9Z7d zR2oRIdb68IGA1fAsCU+gX+Co7lK3gnByuwQ7WS0KtE94pm08aSfluFSrVOhkggh zTly6Vx/VEnKYDtluQEeI4nAcqoeMd8JgWfpk1jj3iDNjokZ2ke5I0djb9dP6Q71 MmANDlAusM/jKFDwd98Tq9iJYs1ZVhqXYS5E2YGKqXwQ+LdODxT0vBtlPbpg3t09 7RDegvcDifWC9zdpHOq/gcm87m+e8an1UXzOtg+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJBs5AgPTxAipMHQ5IpCVN6hAHGMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4YmY3ODMwLTM4ZTUtNDhiZC1iM2IzLTI5NTdkZDMxZmUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2nAIwDQYJKoZIhvcNAQELBQADggEBAC4vDM42CfVgx76E1ZU5zrmFHyHU 1AiNGNMRjM25UcLYMjKplBpimM8MkRjhKaktOmVtRqJA+xexn7bNakRK0JuDGFSm mN1qkmObhLN2kIWnsPNeBvbFqQm4uTF5KGvAvBW48T/Ktk9m4ELA2bA2E7woyOY9 8t64A0KoyIYGE/qm9KAsI08JSQkjO9oQqfKQQ5n2FdNGKhIHSt97XCkGHkBl1Opk OiBFVb4w6XX8Gdx4ngU6PQAmkiE0F+9bz8NfD8rzAyr3DeK2gTQxUI+1toFq8A9w mpVAw4QszY8rPDOLKDXogaZdln7I/jVNIS1cg38n9jfo/oO3PMTARSt/UTA= -----END CERTIFICATE-----Generated at Tue May 12 22:35:09 2026 by rpki-client