$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4d0c044-b04e-490c-b70c-370f1f1cf05a.roa File: d4d0c044-b04e-490c-b70c-370f1f1cf05a.roa (raw, json) Hash identifier: SzbVJdkVYG1wqnHva111C1mGbtm2oNL33pQ0hXgp88s= Subject key identifier: 61:19:8B:E4:6D:D7:D4:15:B1:BA:55:00:20:44:0E:9C:A9:35:F1:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29DE1D56606446D01BC3EED3458F4C5B8E09D6BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4d0c044-b04e-490c-b70c-370f1f1cf05a.roa Signing time: Mon 04 May 2026 14:40:06 +0000 ROA not before: Mon 04 May 2026 14:40:06 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.71.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:de:1d:56:60:64:46:d0:1b:c3:ee:d3:45:8f:4c:5b:8e:09:d6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:40:06 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=861ead4e6380a6c33b0be3e358f4b829cef8b20baddf2c3d4578582c98106bcb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:39:f4:c2:c6:b1:ff:31:ff:36:ef:1e:b0: dc:76:53:e2:59:93:da:7e:29:1a:17:22:76:99:98: c2:7f:3c:61:65:5b:dd:d5:00:4a:c7:3e:f6:4d:a7: f3:b3:e8:e2:f6:80:95:1e:71:15:e0:5c:ae:57:e6: 15:91:2f:18:d7:ff:4b:36:e5:65:6b:f7:ed:b8:29: 85:d1:67:61:76:bb:8b:0a:99:cd:fd:d8:9c:3f:d6: 21:6c:df:c6:e5:8b:e2:4b:4a:ae:ef:88:01:bc:65: b1:14:6e:1b:fe:0d:ab:af:9d:5c:14:17:b8:a1:f9: de:b9:66:f3:ec:79:3c:75:77:28:56:ed:c9:23:ad: f2:e9:6f:43:64:22:d4:d7:00:a3:6e:e4:d4:d7:7b: 20:0a:5b:62:d9:f2:c1:86:db:2e:46:5e:96:af:64: 9a:65:ba:0f:54:d8:6e:08:36:c7:91:e9:5b:c7:01: 94:0c:22:96:89:b4:77:f6:52:57:a5:fc:05:90:24: 57:df:c8:30:57:da:28:d9:cc:e3:94:f3:b3:ba:9e: 20:44:78:4c:3d:d3:fb:c9:32:f2:d0:79:9c:b0:c5: c2:04:91:43:de:9d:f1:6e:47:81:39:45:48:dc:6a: 5b:1f:5f:7c:eb:9a:5a:d2:23:04:a9:f5:cd:ca:fd: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:19:8B:E4:6D:D7:D4:15:B1:BA:55:00:20:44:0E:9C:A9:35:F1:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4d0c044-b04e-490c-b70c-370f1f1cf05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.71.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5b:73:57:9a:85:0e:05:07:3e:38:0a:4b:35:30:2d:c2:b9:a1: e7:12:bc:b3:a5:72:31:92:c5:04:fb:e9:bc:82:74:e9:88:ee: 77:94:5e:c8:b0:1f:46:d7:54:40:40:6b:44:3a:81:69:eb:35: d8:c4:6a:ff:59:c2:26:07:89:69:bb:b9:38:47:9d:ae:1b:0e: bc:01:44:e8:eb:b4:af:3f:64:37:96:7e:f9:0a:a3:d4:af:79: 4e:d7:40:00:a5:7a:71:1f:03:91:eb:a2:2c:b5:49:e2:d3:2f: 33:81:c8:f3:8b:5a:4e:2e:89:6f:5f:00:4c:63:cf:a0:41:9b: d3:88:92:58:fd:e5:9d:57:d5:93:52:3e:89:80:25:18:35:65: 3f:80:e0:a1:23:81:eb:49:b2:98:39:bc:08:df:18:1d:4d:80: 13:e4:43:ac:0d:e0:91:d0:97:c3:a7:76:1a:7f:9b:85:be:63: ad:d3:9f:15:b1:ae:1d:77:61:38:cf:bd:e9:2f:cb:11:73:6c: 32:89:92:14:74:56:4d:36:a8:3b:3b:9d:27:35:a4:15:2a:e0: 39:4b:4d:61:ef:d1:0e:21:ef:ad:5f:4e:24:0a:2e:2b:0f:32: 80:2b:15:de:6d:41:94:67:a3:4d:f0:ed:3e:0f:56:da:2b:ac: 5b:06:de:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKd4dVmBkRtAbw+7TRY9MW44J1rowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQ0MDA2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjFlYWQ0ZTYzODBhNmMzM2IwYmUzZTM1OGY0YjgyOWNl ZjhiMjBiYWRkZjJjM2Q0NTc4NTgyYzk4MTA2YmNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Szn0wsax/zH/Nu8esNx2U+JZk9p+KRoXInaZmMJ/PGFl W93VAErHPvZNp/Oz6OL2gJUecRXgXK5X5hWRLxjX/0s25WVr9+24KYXRZ2F2u4sK mc392Jw/1iFs38bli+JLSq7viAG8ZbEUbhv+DauvnVwUF7ih+d65ZvPseTx1dyhW 7ckjrfLpb0NkItTXAKNu5NTXeyAKW2LZ8sGG2y5GXpavZJplug9U2G4INseR6VvH AZQMIpaJtHf2Ulel/AWQJFffyDBX2ijZzOOU87O6niBEeEw90/vJMvLQeZywxcIE kUPenfFuR4E5RUjcalsfX3zrmlrSIwSp9c3K/R9/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYRmL5G3X1BWxulUAIEQOnKk18YUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0ZDBjMDQ0LWIwNGUtNDkwYy1iNzBjLTM3MGYxZjFjZjA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjR4AwDQYJKoZIhvcNAQELBQADggEBAFtzV5qFDgUHPjgKSzUwLcK5oecS vLOlcjGSxQT76byCdOmI7neUXsiwH0bXVEBAa0Q6gWnrNdjEav9ZwiYHiWm7uThH na4bDrwBROjrtK8/ZDeWfvkKo9SveU7XQAClenEfA5Hroiy1SeLTLzOByPOLWk4u iW9fAExjz6BBm9OIklj95Z1X1ZNSPomAJRg1ZT+A4KEjgetJspg5vAjfGB1NgBPk Q6wN4JHQl8Ondhp/m4W+Y63TnxWxrh13YTjPvekvyxFzbDKJkhR0Vk02qDs7nSc1 pBUq4DlLTWHv0Q4h761fTiQKLisPMoArFd5tQZRno03w7T4PVtorrFsG3lU= -----END CERTIFICATE-----Generated at Tue May 12 22:41:21 2026 by rpki-client