$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6693766-6434-4ae5-bacd-874a250d2e45.roa File: e6693766-6434-4ae5-bacd-874a250d2e45.roa (raw, json) Hash identifier: N6mrA20dfCdVfEjTW7cfJbnhBbdjCANZXhRXyeFdBu0= Subject key identifier: 95:58:B7:32:E4:36:22:7C:6B:36:C1:88:90:D0:80:C3:42:95:6E:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B31357F919152AA16E2F99EAA4E928E73A2176B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6693766-6434-4ae5-bacd-874a250d2e45.roa Signing time: Mon 04 May 2026 14:31:29 +0000 ROA not before: Mon 04 May 2026 14:31:29 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:31:35:7f:91:91:52:aa:16:e2:f9:9e:aa:4e:92:8e:73:a2:17:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:31:29 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=53b23e5aa36fd4e70f0062573a1dcc3ab5db05d4c26185cec85fe21d2544965f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:66:7c:b0:c0:bd:32:2f:e1:de:77:e5:ad: 76:37:20:ff:0a:49:c4:f1:6b:90:0a:55:c3:fd:ea: f9:1b:26:9e:a1:a7:d4:83:48:31:d5:71:25:7e:f2: 12:38:b1:eb:fe:9e:54:c1:09:56:ee:7d:7d:cd:99: ff:c4:2c:d3:39:08:0b:9c:4b:02:a9:7d:b1:14:e4: 19:aa:aa:82:ca:4b:fe:25:6e:2c:be:71:0e:b3:37: ca:0c:89:64:62:93:2e:ec:9f:a8:ba:31:49:95:07: 3e:44:2a:53:e8:30:12:f7:5e:47:80:18:88:eb:6f: 4e:de:7f:28:98:12:ec:4a:26:40:49:7f:f2:74:1f: f0:75:fe:4e:6c:ed:49:ce:79:78:bf:27:f3:03:a5: 3e:c4:d1:4b:2d:53:78:b2:3f:b3:70:ef:97:97:04: 0f:21:6b:02:d7:83:38:a1:f0:96:35:ad:b7:aa:cb: 17:4a:2a:e8:7b:ab:8b:45:49:40:dc:5b:f4:2c:7f: fb:94:97:63:d3:89:e2:fc:33:98:2f:16:4b:c0:c8: 33:13:6a:17:73:eb:0a:f6:97:bc:2f:4d:f7:8f:c1: e1:c4:96:96:19:c8:38:9f:16:db:1b:48:37:a0:e8: 5c:2a:ca:f7:57:12:20:52:f1:40:6d:06:97:bc:ff: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:58:B7:32:E4:36:22:7C:6B:36:C1:88:90:D0:80:C3:42:95:6E:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6693766-6434-4ae5-bacd-874a250d2e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.128.0/20 Signature Algorithm: sha256WithRSAEncryption 79:99:83:1d:0f:01:bb:60:f6:e6:e6:93:48:c0:5c:13:13:5b: f2:ee:42:88:cd:4c:f6:37:24:5f:2e:69:be:9d:cc:4c:d5:6d: f7:b0:29:84:4d:1c:83:36:fc:e1:46:54:e6:b9:9e:cc:c1:6a: 2c:67:2b:9a:93:62:af:5c:48:9c:56:20:c9:c2:f3:0f:94:75: 7b:06:7e:0c:0f:fb:7c:bb:7f:97:f6:2d:0b:0a:2e:55:89:a6: 48:41:15:c4:32:5e:4c:44:1f:58:f5:2a:da:62:06:d4:0e:b8: 75:7e:1e:f4:57:0f:57:41:0b:0b:a0:76:19:19:61:5b:d0:2f: b2:0f:13:e8:e2:26:0b:08:81:ad:09:74:17:41:2b:a3:a4:57: 1e:82:ab:a5:da:2b:17:6d:be:9d:25:0f:a5:49:97:5c:5d:f5: 69:89:37:be:38:de:a4:54:a8:dd:b5:f8:02:ea:1d:ab:bd:85: a6:9c:27:2a:a9:ef:77:08:77:0c:ec:eb:07:27:d6:33:27:da: aa:e5:ea:bf:43:07:fc:3d:60:fa:16:3e:f2:90:91:c7:35:a3: 28:6f:70:66:a5:25:6b:ea:ce:59:73:b8:f2:cd:17:96:69:01: 49:c8:cf:61:6f:5b:c1:3c:13:6f:c7:4b:72:8b:d7:35:e4:57: 3a:d5:d2:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKzE1f5GRUqoW4vmeqk6SjnOiF2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQzMTI5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2IyM2U1YWEzNmZkNGU3MGYwMDYyNTczYTFkY2MzYWI1 ZGIwNWQ0YzI2MTg1Y2VjODVmZTIxZDI1NDQ5NjVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCL02Z8sMC9Mi/h3nflrXY3IP8KScTxa5AKVcP96vkbJp6h p9SDSDHVcSV+8hI4sev+nlTBCVbufX3Nmf/ELNM5CAucSwKpfbEU5BmqqoLKS/4l biy+cQ6zN8oMiWRiky7sn6i6MUmVBz5EKlPoMBL3XkeAGIjrb07efyiYEuxKJkBJ f/J0H/B1/k5s7UnOeXi/J/MDpT7E0UstU3iyP7Nw75eXBA8hawLXgzih8JY1rbeq yxdKKuh7q4tFSUDcW/Qsf/uUl2PTieL8M5gvFkvAyDMTahdz6wr2l7wvTfePweHE lpYZyDifFtsbSDeg6FwqyvdXEiBS8UBtBpe8/8PrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlVi3MuQ2InxrNsGIkNCAw0KVbtAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2NjkzNzY2LTY0MzQtNGFlNS1iYWNkLTg3NGEyNTBkMmU0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDIYAwDQYJKoZIhvcNAQELBQADggEBAHmZgx0PAbtg9ubmk0jAXBMTW/Lu QojNTPY3JF8uab6dzEzVbfewKYRNHIM2/OFGVOa5nszBaixnK5qTYq9cSJxWIMnC 8w+UdXsGfgwP+3y7f5f2LQsKLlWJpkhBFcQyXkxEH1j1KtpiBtQOuHV+HvRXD1dB CwugdhkZYVvQL7IPE+jiJgsIga0JdBdBK6OkVx6Cq6XaKxdtvp0lD6VJl1xd9WmJ N7443qRUqN21+ALqHau9haacJyqp73cIdwzs6wcn1jMn2qrl6r9DB/w9YPoWPvKQ kcc1oyhvcGalJWvqzllzuPLNF5ZpAUnIz2FvW8E8E2/HS3KL1zXkVzrV0kk= -----END CERTIFICATE-----Generated at Tue May 12 22:25:28 2026 by rpki-client