$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b37976bb-ed3f-4f0b-bc1f-5b7fa08398f3.roa File: b37976bb-ed3f-4f0b-bc1f-5b7fa08398f3.roa (raw, json) Hash identifier: tGPFGVa2JFyQ/rxN8utvIfdcHrTv6+lE8AuHCYQ5Ijc= Subject key identifier: D0:E5:76:18:71:4C:63:2C:1B:BB:F7:E7:A8:A7:83:DB:D1:BD:11:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23C9D36F29323E75A4A2C0285E8F8D0F2B2DA529 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b37976bb-ed3f-4f0b-bc1f-5b7fa08398f3.roa Signing time: Fri 08 May 2026 02:21:08 +0000 ROA not before: Fri 08 May 2026 02:21:08 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.108.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c9:d3:6f:29:32:3e:75:a4:a2:c0:28:5e:8f:8d:0f:2b:2d:a5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:21:08 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=f7d3e4102811603caa9c5b9c77c64bd98e36497c7b34ed46307605e306b45379, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:39:4e:c6:88:12:3a:23:08:f4:c1:10:6b: 2d:8c:f4:a0:d9:8d:8f:fa:46:ea:b7:22:c2:85:df: 19:41:f7:1e:1d:a6:ac:a7:33:88:6c:1d:c8:8b:ea: b1:04:20:bf:10:63:a9:6d:cb:50:81:20:c5:94:3d: 94:e1:20:7c:c2:e9:fe:2f:58:76:e4:0b:3d:f3:f6: f8:8f:25:b5:d5:70:21:92:61:8a:e5:d6:b9:47:01: 12:ea:3e:cb:94:09:91:46:a8:81:52:e2:53:b9:7c: 5f:2a:a6:aa:99:fe:ff:d8:98:42:c0:1d:51:87:53: 47:55:46:d9:67:71:f6:a4:cd:8b:cd:82:8a:f4:21: a1:7c:87:12:07:ed:5b:63:fa:c5:08:13:71:b6:ae: 56:53:ac:61:4f:eb:75:58:55:02:46:a4:9a:02:93: c1:b3:7c:bc:d8:32:e1:e0:03:68:56:d3:e4:80:e4: ce:56:71:f3:8f:4e:ca:f6:a8:91:62:1c:95:15:6f: 19:bc:b5:f0:a6:e0:42:46:7c:e5:f6:74:65:9a:34: a0:f8:55:47:88:a7:2f:0e:1c:3a:3f:42:0f:8e:82: e9:52:92:f1:e5:15:e5:fd:b3:74:43:d1:6f:6a:f0: 23:fe:11:a4:c4:22:52:10:26:07:62:c5:0a:21:14: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:76:18:71:4C:63:2C:1B:BB:F7:E7:A8:A7:83:DB:D1:BD:11:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b37976bb-ed3f-4f0b-bc1f-5b7fa08398f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.108.0.0/14 Signature Algorithm: sha256WithRSAEncryption 27:25:8b:61:a6:10:0f:4d:50:c2:33:92:3e:ee:ca:f1:1c:49: a9:6d:dc:3c:19:f7:34:2e:94:e7:65:e9:d5:fe:f0:12:05:ef: 44:31:e8:cd:b0:aa:b1:cb:e3:36:05:4d:8b:2d:d8:49:28:3b: 5a:f2:6e:a6:cc:72:e0:56:c0:f5:a3:09:85:82:9b:fd:30:5f: b9:4e:9b:46:3f:84:a6:ce:eb:ae:0c:2c:fa:0c:0a:9a:74:86: f7:08:d7:47:2a:d4:bc:63:7a:59:59:22:d8:30:80:d7:79:35: fb:8f:8d:5a:46:ce:c5:e7:8c:83:3f:e0:ee:65:9d:74:51:1d: b9:b9:ea:1c:b2:e3:c9:e0:fe:6a:19:fb:7f:0b:72:df:0f:b6: 46:4a:37:69:4a:24:1d:c0:2c:cb:3b:04:ea:8c:92:c6:8a:93: 75:05:63:7b:6b:94:fe:7c:2e:32:a4:f9:78:07:99:db:23:ef: c1:b0:a2:c4:13:88:12:7a:ff:ae:e0:ea:36:90:62:c4:e3:c4: b3:0b:b5:70:20:fc:b2:45:a7:9c:93:de:63:ad:5f:f3:ef:d6: 5d:3e:5c:43:6d:04:de:36:17:1d:b9:2a:ab:fb:cd:05:89:7d: 2e:53:17:ec:56:d3:21:ec:2a:f7:c8:e8:d5:3f:d6:6c:2a:1d: 0c:b5:94:b4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI8nTbykyPnWkosAoXo+NDystpSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIyMTA4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2QzZTQxMDI4MTE2MDNjYWE5YzViOWM3N2M2NGJkOThl MzY0OTdjN2IzNGVkNDYzMDc2MDVlMzA2YjQ1Mzc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCioDlOxogSOiMI9MEQay2M9KDZjY/6Ruq3IsKF3xlB9x4d pqynM4hsHciL6rEEIL8QY6lty1CBIMWUPZThIHzC6f4vWHbkCz3z9viPJbXVcCGS YYrl1rlHARLqPsuUCZFGqIFS4lO5fF8qpqqZ/v/YmELAHVGHU0dVRtlncfakzYvN gor0IaF8hxIH7Vtj+sUIE3G2rlZTrGFP63VYVQJGpJoCk8GzfLzYMuHgA2hW0+SA 5M5WcfOPTsr2qJFiHJUVbxm8tfCm4EJGfOX2dGWaNKD4VUeIpy8OHDo/Qg+OgulS kvHlFeX9s3RD0W9q8CP+EaTEIlIQJgdixQohFO43AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0OV2GHFMYywbu/fnqKeD29G9EQEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IzNzk3NmJiLWVkM2YtNGYwYi1iYzFmLTViN2ZhMDgzOThmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDbDANBgkqhkiG9w0BAQsFAAOCAQEAJyWLYaYQD01QwjOSPu7K8RxJqW3c PBn3NC6U52Xp1f7wEgXvRDHozbCqscvjNgVNiy3YSSg7WvJupsxy4FbA9aMJhYKb /TBfuU6bRj+Eps7rrgws+gwKmnSG9wjXRyrUvGN6WVki2DCA13k1+4+NWkbOxeeM gz/g7mWddFEdubnqHLLjyeD+ahn7fwty3w+2Rko3aUokHcAsyzsE6oySxoqTdQVj e2uU/nwuMqT5eAeZ2yPvwbCixBOIEnr/ruDqNpBixOPEswu1cCD8skWnnJPeY61f 8+/WXT5cQ20E3jYXHbkqq/vNBYl9LlMX7FbTIewq98jo1T/WbCodDLWUtA== -----END CERTIFICATE-----Generated at Tue May 12 22:41:27 2026 by rpki-client