$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa File: de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa (raw, json) Hash identifier: bYcei7udJdphGbHTk020+BWGYsvd6HKAOJOshCPVxnM= Subject key identifier: B5:A6:17:02:E9:B4:4E:71:6F:C9:23:0E:E6:C8:D1:E1:E6:47:93:5F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A81823437D5446C98BCBF872D67EDDF8256CB94 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa Signing time: Fri 08 May 2026 01:30:57 +0000 ROA not before: Fri 08 May 2026 01:30:57 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:81:82:34:37:d5:44:6c:98:bc:bf:87:2d:67:ed:df:82:56:cb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 01:30:57 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=a535051b0a08467cf375d67ff219b917f6f9bb553b51bf12c188d7b10ecc3492, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:94:4c:81:a9:d3:89:36:98:65:dd:e4:c8: a9:c8:00:aa:cd:dd:e8:2e:c0:6b:fd:59:0e:68:7a: 4a:37:13:77:46:bd:bc:05:be:1b:0a:d8:97:24:b0: 12:6a:a6:3c:d6:6d:fc:de:0e:e5:ae:d1:10:dd:b5: 7c:d0:d9:c3:dd:f7:e5:bf:fc:02:5a:c7:1c:fc:7a: 63:ce:94:01:15:c2:c5:92:c2:53:52:bf:22:ac:48: 22:9c:5a:a5:6a:91:e7:a2:d0:47:ca:2c:71:38:de: 43:79:4b:3e:60:fc:13:bf:14:a5:36:b4:41:44:77: 6e:c7:84:c3:c5:37:fe:14:22:c1:24:9b:81:60:5c: 1a:74:37:dd:e4:f6:36:4f:33:d5:c6:f9:91:f2:6f: 40:d0:c5:fa:ec:39:ac:41:55:ee:9f:d1:ee:47:19: ec:8c:97:52:a3:f5:55:66:99:98:5e:b8:1a:d9:25: 55:8d:ba:90:1b:e5:e3:29:39:58:45:9f:3e:da:0b: 64:3b:11:ce:8d:21:fc:5b:fc:a2:f1:fc:97:88:32: dd:43:35:b9:63:f6:e0:c1:63:31:95:f7:70:24:c1: 0a:3e:b2:c2:7c:15:f1:59:83:3e:66:e1:2f:7b:da: 4a:08:93:b7:21:b9:fe:60:dd:a0:d3:26:27:c3:64: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A6:17:02:E9:B4:4E:71:6F:C9:23:0E:E6:C8:D1:E1:E6:47:93:5F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.16.0/21 Signature Algorithm: sha256WithRSAEncryption 87:05:ab:ee:d5:e9:6c:4a:b4:bf:7e:9c:68:2f:86:86:db:a4: 87:45:ec:5b:fc:b0:d5:b9:b0:39:93:12:82:9f:c1:06:1e:f4: 89:d2:0b:e7:b2:d4:e0:dd:67:06:dc:ec:98:f5:94:7c:86:6d: f7:bc:d9:16:c9:83:3a:02:34:1b:3b:6f:c2:e1:ce:d1:c1:68: bf:3f:3c:22:18:7e:c7:cb:4d:dd:07:38:f3:e6:5b:de:f5:84: 8e:a0:1b:b7:3b:a8:33:34:33:c2:4e:83:12:77:91:fb:91:1a: 3d:16:df:8d:66:96:33:49:76:bb:10:27:e4:cf:10:ba:6c:92: e6:51:71:41:e7:3e:d2:b4:c8:7f:d8:7f:fb:32:b8:a5:59:d9: a8:f5:e4:30:54:9f:00:3f:03:7b:34:ec:c9:e1:3d:3a:0f:3d: d5:99:e8:8e:a6:63:74:04:52:f0:ec:dd:45:3a:27:89:69:66: 10:a0:da:58:80:b6:48:ee:09:d7:80:69:3a:15:a9:4b:30:2e: 7b:6d:29:51:bb:90:2c:cc:81:8e:54:bc:90:c4:b5:92:a7:1f: df:b2:56:9d:db:fc:07:d2:b3:70:ce:7f:f0:0b:a5:01:a7:7e: cc:2f:39:5a:76:37:1f:63:2f:1d:8e:5f:e0:a0:5d:9b:3a:cd: 82:5d:6e:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaoGCNDfVRGyYvL+HLWft34JWy5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDEzMDU3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTM1MDUxYjBhMDg0NjdjZjM3NWQ2N2ZmMjE5YjkxN2Y2 ZjliYjU1M2I1MWJmMTJjMTg4ZDdiMTBlY2MzNDkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe/pRMganTiTaYZd3kyKnIAKrN3eguwGv9WQ5oeko3E3dG vbwFvhsK2JcksBJqpjzWbfzeDuWu0RDdtXzQ2cPd9+W//AJaxxz8emPOlAEVwsWS wlNSvyKsSCKcWqVqkeei0EfKLHE43kN5Sz5g/BO/FKU2tEFEd27HhMPFN/4UIsEk m4FgXBp0N93k9jZPM9XG+ZHyb0DQxfrsOaxBVe6f0e5HGeyMl1Kj9VVmmZheuBrZ JVWNupAb5eMpOVhFnz7aC2Q7Ec6NIfxb/KLx/JeIMt1DNblj9uDBYzGV93AkwQo+ ssJ8FfFZgz5m4S972koIk7chuf5g3aDTJifDZGs3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtaYXAum0TnFvySMO5sjR4eZHk18wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlMTNkZWQ3LWE1NmYtNGViZC1hYTNlLTBiOTkwOTQ0MWJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM21xAwDQYJKoZIhvcNAQELBQADggEBAIcFq+7V6WxKtL9+nGgvhobbpIdF 7Fv8sNW5sDmTEoKfwQYe9InSC+ey1ODdZwbc7Jj1lHyGbfe82RbJgzoCNBs7b8Lh ztHBaL8/PCIYfsfLTd0HOPPmW971hI6gG7c7qDM0M8JOgxJ3kfuRGj0W341mljNJ drsQJ+TPELpskuZRcUHnPtK0yH/Yf/syuKVZ2aj15DBUnwA/A3s07MnhPToPPdWZ 6I6mY3QEUvDs3UU6J4lpZhCg2liAtkjuCdeAaToVqUswLnttKVG7kCzMgY5UvJDE tZKnH9+yVp3b/AfSs3DOf/ALpQGnfswvOVp2Nx9jLx2OX+CgXZs6zYJdbgQ= -----END CERTIFICATE-----Generated at Tue May 12 22:41:20 2026 by rpki-client