$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb0aa010-c19c-4348-aba9-cafe09fa405c.roa File: cb0aa010-c19c-4348-aba9-cafe09fa405c.roa (raw, json) Hash identifier: BJsClREIY0Y4OE/wl8fK0FLOQLNOTdmRusUja+qVbzI= Subject key identifier: EF:CB:BA:3D:90:97:89:FD:E8:18:A2:F1:CD:BA:4C:9A:FB:6D:87:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31407DA0176145A2CF5344692E66791E35FF267B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb0aa010-c19c-4348-aba9-cafe09fa405c.roa Signing time: Fri 08 May 2026 02:00:59 +0000 ROA not before: Fri 08 May 2026 02:00:59 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.235.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:40:7d:a0:17:61:45:a2:cf:53:44:69:2e:66:79:1e:35:ff:26:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:00:59 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=87a0c43ff9d863a33ff91356aa737398683d256ba5e4861ef9fa769616c6c75e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:50:27:8f:d8:cb:46:22:2e:8c:8f:8e:b6: fc:98:8f:4c:26:b8:64:41:16:b7:92:19:6c:ce:97: d1:d7:1d:2c:f8:2e:d0:4f:de:c2:6c:49:b3:16:18: 5b:21:35:7d:b3:9e:3a:a5:e2:a7:ea:2c:4b:ae:b6: b3:a0:7e:aa:0a:90:d2:1b:a0:56:a5:8a:64:73:fd: 86:69:f2:34:08:84:72:e1:49:c8:72:19:b7:5b:85: af:33:2d:38:f6:86:51:ce:d2:35:9e:9c:72:ec:f5: 22:32:1f:a8:73:67:a0:27:c4:bd:fc:49:d4:fe:c5: f4:e0:da:f0:0c:eb:d5:76:25:32:a7:3d:f6:0c:e7: 9c:34:2b:6e:2c:d1:d6:a1:ee:4d:04:14:8e:b2:81: 11:a1:6b:ab:09:95:33:99:b4:a4:92:95:5a:e6:3b: 74:9e:76:3b:9b:94:d9:51:d6:73:9b:9f:5b:f5:eb: 14:3a:d8:41:dc:92:a9:1c:e3:b5:fd:dc:34:ca:48: f4:e9:21:07:89:cf:08:3f:aa:bc:46:96:9f:5d:d0: dc:bc:70:91:90:44:c7:e6:a7:76:96:9f:37:f1:fa: ab:9b:f6:ad:81:64:01:16:50:57:b3:72:6c:64:52: 32:0b:50:fb:17:6c:fc:4e:72:d3:f2:a4:8a:f4:b1: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CB:BA:3D:90:97:89:FD:E8:18:A2:F1:CD:BA:4C:9A:FB:6D:87:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb0aa010-c19c-4348-aba9-cafe09fa405c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.235.203.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a1:df:4c:b4:a7:21:a2:6a:d5:48:1a:ec:72:2a:28:cc:c4: 5b:1b:59:e2:c2:b5:1f:70:5b:ab:c9:8a:0f:01:a1:ba:97:ea: 4e:87:b1:40:bf:f7:cd:a6:82:51:8c:99:ca:a8:23:73:7b:b0: 83:3c:a4:7d:4f:c4:9b:18:95:33:21:4f:b7:01:49:17:ef:0d: 1a:b0:ee:e4:4f:45:8e:40:88:fa:c2:c6:6a:12:f7:b1:2e:a0: 52:43:ef:ef:24:89:12:34:50:b1:af:32:96:46:20:11:d0:63: 20:a1:8f:53:19:d4:c5:93:f4:d7:18:88:5b:34:7a:b8:65:1b: 2d:51:a0:74:5d:b5:85:54:c3:92:85:05:dc:11:2e:14:2f:61: 2c:49:0d:96:ce:71:a2:b4:09:0f:52:0a:94:30:45:da:db:d8: 94:42:3a:00:c8:b7:16:3f:3c:75:cc:53:30:6a:77:69:a1:55: 7e:60:69:66:43:32:74:9d:c6:a3:74:63:f9:eb:48:88:34:bf: e7:b8:1d:c0:58:65:f9:02:0d:45:24:11:cf:fd:fe:20:d0:e6: 32:cc:fc:60:25:c4:fa:7b:d2:94:cc:71:de:73:15:49:88:59: 58:ba:1d:c4:86:00:1e:93:7b:71:f5:fd:20:89:55:b9:1e:3b: e7:8d:d9:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMUB9oBdhRaLPU0RpLmZ5HjX/JnswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIwMDU5WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2EwYzQzZmY5ZDg2M2EzM2ZmOTEzNTZhYTczNzM5ODY4 M2QyNTZiYTVlNDg2MWVmOWZhNzY5NjE2YzZjNzVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFelAnj9jLRiIujI+OtvyYj0wmuGRBFreSGWzOl9HXHSz4 LtBP3sJsSbMWGFshNX2znjql4qfqLEuutrOgfqoKkNIboFalimRz/YZp8jQIhHLh SchyGbdbha8zLTj2hlHO0jWenHLs9SIyH6hzZ6AnxL38SdT+xfTg2vAM69V2JTKn PfYM55w0K24s0dah7k0EFI6ygRGha6sJlTOZtKSSlVrmO3SedjublNlR1nObn1v1 6xQ62EHckqkc47X93DTKSPTpIQeJzwg/qrxGlp9d0Ny8cJGQRMfmp3aWnzfx+qub 9q2BZAEWUFezcmxkUjILUPsXbPxOctPypIr0sWDnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU78u6PZCXif3oGKLxzbpMmvtth6MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiMGFhMDEwLWMxOWMtNDM0OC1hYmE5LWNhZmUwOWZhNDA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD68swDQYJKoZIhvcNAQELBQADggEBAHGh30y0pyGiatVIGuxyKijMxFsb WeLCtR9wW6vJig8BobqX6k6HsUC/982mglGMmcqoI3N7sIM8pH1PxJsYlTMhT7cB SRfvDRqw7uRPRY5AiPrCxmoS97EuoFJD7+8kiRI0ULGvMpZGIBHQYyChj1MZ1MWT 9NcYiFs0erhlGy1RoHRdtYVUw5KFBdwRLhQvYSxJDZbOcaK0CQ9SCpQwRdrb2JRC OgDItxY/PHXMUzBqd2mhVX5gaWZDMnSdxqN0Y/nrSIg0v+e4HcBYZfkCDUUkEc/9 /iDQ5jLM/GAlxPp70pTMcd5zFUmIWVi6HcSGAB6Te3H1/SCJVbkeO+eN2e4= -----END CERTIFICATE-----Generated at Tue May 12 22:21:50 2026 by rpki-client