$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3825055-f142-4caa-80b2-441248a60d9d.roa File: e3825055-f142-4caa-80b2-441248a60d9d.roa (raw, json) Hash identifier: HpZfqWORtNFjfdQKB05wVhi7+mjw7rTesYmBg6dG6eU= Subject key identifier: 02:13:60:E1:59:94:A1:B1:A7:F3:4B:8A:84:AA:20:6B:85:AC:C6:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 440BA8BDF87DB69F015539A584377A8BE541FAAC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3825055-f142-4caa-80b2-441248a60d9d.roa Signing time: Fri 08 May 2026 02:40:53 +0000 ROA not before: Fri 08 May 2026 02:40:53 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.216.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0b:a8:bd:f8:7d:b6:9f:01:55:39:a5:84:37:7a:8b:e5:41:fa:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:40:53 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=757db9c5860da98d0b81d25733e3917288606e819ff2d4c511b458177f28cfb4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:0f:a7:dd:29:b0:5a:56:55:9d:57:23:86: 38:72:15:6f:b9:64:cd:65:be:20:41:45:d9:82:de: 58:3c:08:26:b0:83:09:ee:da:07:71:47:ea:36:84: 65:6a:6b:c1:44:fc:31:17:92:a3:97:c7:d6:9d:0e: 95:92:5e:2d:55:2c:37:d3:6d:2a:7b:c9:ab:d6:8f: 8b:12:a5:f1:fd:a7:14:f2:07:22:c3:87:f5:cc:69: 75:e0:09:a4:7d:e6:3d:b8:b1:1e:23:c8:26:29:3a: 4d:be:bd:78:85:96:ad:80:4c:d9:48:d6:f6:eb:49: 43:32:05:08:79:07:cf:99:d5:e3:a8:5e:75:42:96: 80:e7:ed:9f:3b:eb:e9:7f:0a:32:c4:ee:72:27:02: 34:02:f7:0f:f1:42:d9:1f:9d:71:e2:5d:7e:bc:71: be:1b:05:b0:22:0f:6a:66:83:1c:28:c2:87:82:fd: 03:d8:25:f9:10:ce:a9:8c:1d:54:0d:df:f1:17:0c: b4:13:25:0a:fa:f5:49:01:03:39:5a:8e:39:cc:64: a8:a7:12:79:c5:fd:62:a5:f5:5f:45:30:3c:8e:6e: b1:63:96:f2:06:66:40:ac:30:84:4a:56:e9:0f:c9: ec:f4:b8:32:2b:19:0b:0c:76:bf:1b:c5:eb:96:21: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:13:60:E1:59:94:A1:B1:A7:F3:4B:8A:84:AA:20:6B:85:AC:C6:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3825055-f142-4caa-80b2-441248a60d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.216.0.0/14 Signature Algorithm: sha256WithRSAEncryption a9:3e:a5:17:88:bd:2c:5a:40:38:65:ee:05:47:8a:64:b2:25: 3b:5a:35:0e:34:71:9c:d7:ad:12:a3:22:d2:af:17:b2:28:8b: 4a:d2:2a:3d:64:31:d8:4d:75:2e:45:28:16:54:39:3a:20:4f: 51:82:ab:55:fc:42:ac:1c:7b:27:53:e1:a2:66:ea:a6:5d:9c: 0b:a9:4e:b1:99:1f:3f:af:a1:87:9a:5a:e3:00:61:fd:b2:a9: 03:c5:a6:e4:2f:3b:e5:71:12:9e:5d:86:77:05:6f:22:e4:20: 5c:d3:d7:de:0b:a2:72:a2:a7:b8:2a:f4:fa:d3:eb:7a:4d:c3: 2a:df:b8:fb:39:d6:f1:7d:c6:08:1f:f4:69:29:c8:a4:b4:83: 69:fc:8e:53:4c:43:4c:14:6c:29:31:9c:5f:a5:cf:cc:9f:96: 2e:6f:92:09:0f:d5:4a:e3:8f:5d:b7:5e:29:8f:80:46:ca:af: 4e:16:13:16:a3:8e:c4:e7:a6:d7:a9:18:fc:f5:fa:01:79:97: e4:e4:44:f0:c1:b8:8a:0b:99:40:68:3c:98:40:5a:97:dd:11: 2d:37:a3:43:d4:b8:70:2f:90:40:70:8f:e5:89:89:5f:80:36: a1:72:3b:b7:74:b5:b7:d1:9f:e3:17:85:69:a1:74:72:89:01: 8a:d9:5d:a9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURAuovfh9tp8BVTmlhDd6i+VB+qwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDI0MDUzWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTdkYjljNTg2MGRhOThkMGI4MWQyNTczM2UzOTE3Mjg4 NjA2ZTgxOWZmMmQ0YzUxMWI0NTgxNzdmMjhjZmI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3gw+n3SmwWlZVnVcjhjhyFW+5ZM1lviBBRdmC3lg8CCaw gwnu2gdxR+o2hGVqa8FE/DEXkqOXx9adDpWSXi1VLDfTbSp7yavWj4sSpfH9pxTy ByLDh/XMaXXgCaR95j24sR4jyCYpOk2+vXiFlq2ATNlI1vbrSUMyBQh5B8+Z1eOo XnVCloDn7Z876+l/CjLE7nInAjQC9w/xQtkfnXHiXX68cb4bBbAiD2pmgxwowoeC /QPYJfkQzqmMHVQN3/EXDLQTJQr69UkBAzlajjnMZKinEnnF/WKl9V9FMDyObrFj lvIGZkCsMIRKVukPyez0uDIrGQsMdr8bxeuWIVv9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAhNg4VmUobGn80uKhKoga4WsxtIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzODI1MDU1LWYxNDItNGNhYS04MGIyLTQ0MTI0OGE2MGQ5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI22DANBgkqhkiG9w0BAQsFAAOCAQEAqT6lF4i9LFpAOGXuBUeKZLIlO1o1 DjRxnNetEqMi0q8XsiiLStIqPWQx2E11LkUoFlQ5OiBPUYKrVfxCrBx7J1Phombq pl2cC6lOsZkfP6+hh5pa4wBh/bKpA8Wm5C875XESnl2GdwVvIuQgXNPX3guicqKn uCr0+tPrek3DKt+4+znW8X3GCB/0aSnIpLSDafyOU0xDTBRsKTGcX6XPzJ+WLm+S CQ/VSuOPXbdeKY+ARsqvThYTFqOOxOem16kY/PX6AXmX5ORE8MG4iguZQGg8mEBa l90RLTejQ9S4cC+QQHCP5YmJX4A2oXI7t3S1t9Gf4xeFaaF0cokBitldqQ== -----END CERTIFICATE-----Generated at Tue May 12 22:22:28 2026 by rpki-client