$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3a8ca53-d510-45de-b8ec-250147e40dd6.roa File: c3a8ca53-d510-45de-b8ec-250147e40dd6.roa (raw, json) Hash identifier: kRAChYeRqOt7DNNBpuFiYvOAaEEay9BQu27pB84Q3Co= Subject key identifier: 3B:4C:B3:75:60:D6:AB:0E:4A:49:F4:F0:A2:BB:3A:C5:2D:0C:33:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B01C424D941A53CA08957FBF911CC8AF96F26C8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3a8ca53-d510-45de-b8ec-250147e40dd6.roa Signing time: Mon 04 May 2026 14:40:52 +0000 ROA not before: Mon 04 May 2026 14:40:52 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.248.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:c4:24:d9:41:a5:3c:a0:89:57:fb:f9:11:cc:8a:f9:6f:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:40:52 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=5d93718516ae32c2a3daad3bffe5596d3def7f91d044e8b5f3e54a8d1c272007, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:fb:b6:e8:d3:cd:f0:04:d5:4a:4d:8e:ee: 31:1c:e3:88:bb:24:4c:76:4f:94:c7:cb:fc:c7:c2: 66:20:4c:cc:4f:7b:ba:4b:3c:18:f1:bb:b9:25:00: 1b:cb:95:70:36:24:4d:bb:72:6d:d9:a6:5a:01:a2: f5:cd:74:70:fc:27:1a:8f:1c:c9:9f:f2:65:e0:0e: 73:cc:21:43:23:95:b8:db:9f:65:da:ff:9e:80:7f: 15:70:f5:25:31:5d:61:63:c5:b7:ea:77:58:20:40: b5:63:a8:15:c9:0b:4c:a9:1b:40:14:f2:7f:17:ba: ab:ce:f1:d8:44:33:e9:cd:cb:f3:ad:cc:c9:f5:c4: 40:c5:b7:f7:b4:20:9d:ed:3a:d7:63:94:d1:1e:6d: 33:fd:29:89:52:de:73:2f:5e:3f:e1:77:0f:a1:5d: 70:8c:1c:d2:45:11:26:c7:fd:0a:a5:db:5b:01:01: 6b:44:53:1b:2e:b1:b6:9f:d7:02:51:b1:42:a2:c1: 66:6d:80:dc:04:b2:48:a9:13:f1:59:b6:6c:f9:18: b1:a9:bd:89:c3:e5:c6:89:5a:98:d4:fa:30:f5:c1: 33:bf:8d:32:3d:7f:0a:06:19:11:fb:a6:40:b5:fa: 2e:a9:6b:2b:62:e4:24:b3:31:b8:96:48:d7:4a:16: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:B3:75:60:D6:AB:0E:4A:49:F4:F0:A2:BB:3A:C5:2D:0C:33:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3a8ca53-d510-45de-b8ec-250147e40dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.232.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:6c:0e:68:da:30:03:22:33:10:72:29:c5:7b:6d:f6:85:e8: 18:6b:52:93:66:a9:3d:a4:c9:ee:82:67:7a:b9:54:75:1c:e6: a1:7f:60:6d:a6:97:19:44:20:21:e5:68:e0:bb:d3:34:09:7a: 40:94:50:bd:07:57:82:d3:71:f1:fc:36:b5:8c:b5:39:4f:67: af:95:3d:9a:c8:15:a2:63:90:0b:09:31:d8:b9:ae:6f:31:4c: 94:bd:60:58:cd:d7:90:88:ef:7b:62:14:26:da:25:a1:50:be: 68:19:32:20:87:9c:96:71:41:0d:f6:08:e2:a6:23:9b:f0:74: f0:f8:1a:60:7a:75:01:90:ce:e6:b0:00:68:71:99:ad:c1:4e: 65:3d:7e:12:5b:0f:7c:bd:bb:06:c3:bd:e2:13:78:6f:f7:4c: 9c:00:fe:5d:de:dd:81:1d:49:44:06:92:3a:e2:3f:d1:8f:bb: c1:b5:fc:ea:33:a3:e8:c4:ce:fb:5c:3b:bf:ea:73:e9:3a:57: 94:b6:e5:ac:c7:49:07:86:14:5e:13:cb:d5:ab:68:12:8a:60: 06:4b:0c:74:6d:b2:80:92:4a:e5:c1:8f:00:54:5e:2e:75:03: 99:a9:0c:e2:1d:7e:88:71:d2:a1:e1:f3:b6:32:b3:87:b8:96: 56:86:a6:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUawHEJNlBpTygiVf7+RHMivlvJsgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQ0MDUyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDkzNzE4NTE2YWUzMmMyYTNkYWFkM2JmZmU1NTk2ZDNk ZWY3ZjkxZDA0NGU4YjVmM2U1NGE4ZDFjMjcyMDA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRqfu26NPN8ATVSk2O7jEc44i7JEx2T5THy/zHwmYgTMxP e7pLPBjxu7klABvLlXA2JE27cm3ZploBovXNdHD8JxqPHMmf8mXgDnPMIUMjlbjb n2Xa/56AfxVw9SUxXWFjxbfqd1ggQLVjqBXJC0ypG0AU8n8XuqvO8dhEM+nNy/Ot zMn1xEDFt/e0IJ3tOtdjlNEebTP9KYlS3nMvXj/hdw+hXXCMHNJFESbH/Qql21sB AWtEUxsusbaf1wJRsUKiwWZtgNwEskipE/FZtmz5GLGpvYnD5caJWpjU+jD1wTO/ jTI9fwoGGRH7pkC1+i6payti5CSzMbiWSNdKFuVpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO0yzdWDWqw5KSfTwors6xS0MM3YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzYThjYTUzLWQ1MTAtNDVkZS1iOGVjLTI1MDE0N2U0MGRkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+OgwDQYJKoZIhvcNAQELBQADggEBAAxsDmjaMAMiMxByKcV7bfaF6Bhr UpNmqT2kye6CZ3q5VHUc5qF/YG2mlxlEICHlaOC70zQJekCUUL0HV4LTcfH8NrWM tTlPZ6+VPZrIFaJjkAsJMdi5rm8xTJS9YFjN15CI73tiFCbaJaFQvmgZMiCHnJZx QQ32COKmI5vwdPD4GmB6dQGQzuawAGhxma3BTmU9fhJbD3y9uwbDveITeG/3TJwA /l3e3YEdSUQGkjriP9GPu8G1/Oozo+jEzvtcO7/qc+k6V5S25azHSQeGFF4Ty9Wr aBKKYAZLDHRtsoCSSuXBjwBUXi51A5mpDOIdfohx0qHh87Yys4e4llaGprA= -----END CERTIFICATE-----Generated at Tue May 12 22:25:47 2026 by rpki-client