$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea89dcc8-f686-4c9e-85f1-88ac648fbbb4.roa File: ea89dcc8-f686-4c9e-85f1-88ac648fbbb4.roa (raw, json) Hash identifier: LPLBTsUyPGbyJoSLJ9zX7GBKjDdm/iUmY+UPfbPOrS4= Subject key identifier: 85:01:36:3B:8F:A0:5E:C1:18:86:73:8B:57:D4:77:38:E7:2A:18:F3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 295C59A434E78C00DFC0D44EDD45BB6514908463 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea89dcc8-f686-4c9e-85f1-88ac648fbbb4.roa Signing time: Mon 04 May 2026 14:31:27 +0000 ROA not before: Mon 04 May 2026 14:31:27 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5c:59:a4:34:e7:8c:00:df:c0:d4:4e:dd:45:bb:65:14:90:84:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 4 14:31:27 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=47509622ec21547f810c9b10a098de54ba4f5dcbee96378302af2df0bcb6b6dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:e9:d2:b9:b7:d7:ec:f5:61:bd:55:50:d9: f5:ca:da:e3:42:a4:93:7b:fe:27:31:a9:00:a0:4a: 32:03:56:90:93:98:a6:a5:87:78:9b:b8:7f:11:9b: 5f:c2:9d:c9:d4:49:63:89:dc:31:81:14:a0:1c:ae: 5f:8f:83:8c:4a:69:6f:fd:5e:b1:cc:49:a2:d4:6c: 37:8b:5c:77:bd:ce:2b:70:c0:6d:c3:ba:39:a9:27: a7:da:9f:a0:93:b2:4d:5d:8c:ac:9a:c9:e4:77:e6: bf:65:42:09:65:d3:a6:88:a6:1b:b3:b0:0c:b7:e2: 70:ed:d9:ce:36:28:1c:cf:9d:c7:d2:fd:aa:d9:5e: c3:62:1d:35:8a:20:55:4e:7b:a7:17:0b:5d:b3:60: ec:2f:57:76:d3:6a:66:17:9f:84:11:ea:e4:47:7c: aa:67:a4:15:c5:1f:5c:38:29:c7:17:64:de:db:2d: 8f:23:27:cb:c8:3d:15:38:81:b6:33:59:35:3c:2c: e1:49:0b:a7:95:c8:c5:70:59:0c:53:1e:cf:7c:e6: ce:ab:d1:5e:b6:60:9e:3e:60:1e:e6:2f:22:5d:45: 26:e4:31:d7:b6:27:4d:f0:12:6b:aa:85:fc:ca:ea: b3:fd:83:ac:7d:17:96:d6:26:fd:de:35:be:e0:7f: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:36:3B:8F:A0:5E:C1:18:86:73:8B:57:D4:77:38:E7:2A:18:F3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea89dcc8-f686-4c9e-85f1-88ac648fbbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.194.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:89:b3:70:c8:4a:66:0f:79:50:f5:d7:df:7b:51:04:fc:c7: c7:a6:d7:e1:ab:f8:ed:97:64:4d:d4:67:db:36:54:c1:1f:ae: a2:ac:8f:f8:70:ee:9d:e6:72:e6:45:dc:c3:b6:26:19:37:aa: 7f:8c:f9:b2:2d:e3:78:2a:89:c7:db:39:1b:12:9f:67:be:16: 0c:66:f3:ad:c3:45:35:03:29:b1:f1:81:d8:fa:cf:b4:92:e4: 77:1b:fd:77:d5:73:2e:6f:19:15:75:24:b6:7a:0d:c2:1e:96: bb:67:8f:63:a6:3e:81:3b:f4:a7:16:7a:fd:49:6b:46:70:dd: 73:89:54:6d:f3:b9:49:ea:34:39:31:a7:13:92:5d:10:1a:e9: e5:cf:c7:2b:0e:6d:63:5a:78:3f:7a:e0:20:6a:98:73:98:ff: 89:02:75:2a:9d:3d:f3:01:2d:d2:76:08:92:a7:8c:6f:62:6a: ae:c6:e2:96:f9:5f:cd:52:16:21:2b:bc:1b:b0:cb:61:e9:3a: ce:76:6f:a8:2d:fd:ef:a9:3b:80:60:19:1f:e4:88:c8:20:a6: a0:9c:9d:20:ba:a8:a1:33:4c:89:0d:8b:c9:d8:37:3e:00:25: 27:60:24:11:12:37:97:57:51:e6:f8:96:60:bb:d7:06:1e:46: f8:f7:20:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVxZpDTnjADfwNRO3UW7ZRSQhGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA0MTQzMTI3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzUwOTYyMmVjMjE1NDdmODEwYzliMTBhMDk4ZGU1NGJh NGY1ZGNiZWU5NjM3ODMwMmFmMmRmMGJjYjZiNmRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj0OnSubfX7PVhvVVQ2fXK2uNCpJN7/icxqQCgSjIDVpCT mKalh3ibuH8Rm1/CncnUSWOJ3DGBFKAcrl+Pg4xKaW/9XrHMSaLUbDeLXHe9zitw wG3DujmpJ6fan6CTsk1djKyayeR35r9lQgll06aIphuzsAy34nDt2c42KBzPncfS /arZXsNiHTWKIFVOe6cXC12zYOwvV3bTamYXn4QR6uRHfKpnpBXFH1w4KccXZN7b LY8jJ8vIPRU4gbYzWTU8LOFJC6eVyMVwWQxTHs985s6r0V62YJ4+YB7mLyJdRSbk Mde2J03wEmuqhfzK6rP9g6x9F5bWJv3eNb7gf3YDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhQE2O4+gXsEYhnOLV9R3OOcqGPMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VhODlkY2M4LWY2ODYtNGM5ZS04NWYxLTg4YWM2NDhmYmJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25sIwDQYJKoZIhvcNAQELBQADggEBACuJs3DISmYPeVD11997UQT8x8em 1+Gr+O2XZE3UZ9s2VMEfrqKsj/hw7p3mcuZF3MO2Jhk3qn+M+bIt43gqicfbORsS n2e+Fgxm863DRTUDKbHxgdj6z7SS5Hcb/XfVcy5vGRV1JLZ6DcIelrtnj2OmPoE7 9KcWev1Ja0Zw3XOJVG3zuUnqNDkxpxOSXRAa6eXPxysObWNaeD964CBqmHOY/4kC dSqdPfMBLdJ2CJKnjG9iaq7G4pb5X81SFiErvBuwy2HpOs52b6gt/e+pO4BgGR/k iMggpqCcnSC6qKEzTIkNi8nYNz4AJSdgJBESN5dXUeb4lmC71wYeRvj3IOQ= -----END CERTIFICATE-----Generated at Tue May 12 22:36:35 2026 by rpki-client