$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3faf20cd-763a-4a12-af13-8c1308d9f843.roa File: 3faf20cd-763a-4a12-af13-8c1308d9f843.roa (raw, json) Hash identifier: sCiCLYbCjVyTwjoHYaBRhIk/ZL90YwMBnHLSXJ1QdV0= Subject key identifier: 08:B1:71:C8:E8:DC:D6:30:3E:75:CF:F1:6C:71:F4:E0:5D:54:D4:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 708E17C1396D55AC1BB4E98D6CB8913CF2826DB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3faf20cd-763a-4a12-af13-8c1308d9f843.roa Signing time: Thu 14 May 2026 01:20:11 +0000 ROA not before: Thu 14 May 2026 01:20:11 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8e:17:c1:39:6d:55:ac:1b:b4:e9:8d:6c:b8:91:3c:f2:82:6d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 14 01:20:11 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=30d9a7e90c38bdd529fd99cd1f27af6caf1786ac44368cd6c89fe537d3b450d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:fe:1d:50:16:28:6d:8c:a5:01:00:5c:f6: 66:a9:0d:dc:cf:c0:cd:46:2a:87:95:10:88:6e:4d: 5b:b8:61:fd:03:ac:93:50:ea:fc:ca:e1:1a:2a:7b: 0c:55:79:9c:0a:7a:1a:6d:4e:2a:d8:12:31:a4:b8: 3a:e8:15:08:b2:63:15:c9:61:10:80:d9:7f:08:5f: ca:52:ef:6b:15:bd:7f:94:6b:29:b3:d0:36:8f:f6: a5:ce:eb:42:ac:7c:2b:91:74:9e:ca:62:d4:6e:73: 3b:49:bd:ac:9f:1d:a8:2e:27:b9:33:bf:6c:69:53: e8:13:3b:c4:08:86:11:be:61:fb:ec:58:3d:68:c6: 3d:b0:98:d7:2c:54:c6:73:8d:a7:56:73:7d:14:e3: 02:6b:a2:82:a6:ba:27:78:ac:4d:18:8f:70:74:e5: 63:a3:b3:63:f9:fc:a5:b4:83:d8:5f:f6:27:93:db: 97:40:99:cf:cd:c7:e5:bb:a4:f1:74:57:bc:34:5a: df:1b:92:9e:1c:41:2a:08:7c:ac:7d:65:25:e6:61: 1f:f7:90:c3:9c:5e:6f:e5:81:3b:fb:f9:d1:4c:96: 76:cb:93:69:5b:f2:80:61:86:d7:ba:61:d5:f8:1b: 34:c7:f4:4a:2e:2a:56:62:58:6c:78:95:32:0f:72: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B1:71:C8:E8:DC:D6:30:3E:75:CF:F1:6C:71:F4:E0:5D:54:D4:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3faf20cd-763a-4a12-af13-8c1308d9f843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.141.0/24 Signature Algorithm: sha256WithRSAEncryption 32:f6:b9:3c:da:27:56:d2:d3:57:db:1b:ef:21:43:49:c7:9f: 90:5c:d9:60:16:57:cd:85:40:71:02:50:cb:27:4c:29:94:50: 45:cd:2e:b9:44:09:80:ab:96:fe:fa:0a:82:40:37:15:85:4f: 0c:eb:7c:b1:99:c1:9b:b2:f9:42:16:be:32:15:99:19:8c:f1: b5:8a:aa:f1:a1:e2:e1:13:b9:ed:a7:4a:6e:82:1d:35:94:93: f1:66:72:67:0a:ac:0c:ab:10:8b:28:70:bb:b7:e6:ab:15:9b: 10:d1:7a:d7:2a:45:e9:00:76:0b:7d:6e:11:fd:e9:39:4b:ce: 69:25:75:81:a8:95:10:1e:34:07:c4:07:54:24:b0:da:16:bb: f1:8e:2d:7b:b3:93:da:8e:21:8a:3a:41:50:07:56:7b:05:09: aa:69:b0:b0:d2:e2:e3:4b:12:03:54:6f:05:58:d2:8b:52:ab: a9:b2:cd:4f:b0:4e:05:10:8b:10:3a:6b:3e:33:69:8a:e9:89: 87:44:c8:07:95:90:6d:6a:d3:9c:15:c0:42:cb:e8:1a:6e:c0: 38:46:18:62:86:c4:ed:c3:62:d2:39:8c:40:c6:60:07:79:ec: a9:36:79:e6:ec:41:28:4d:52:f3:e9:7e:18:05:7c:cd:6c:15: a0:c0:11:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcI4XwTltVawbtOmNbLiRPPKCbbQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDEyMDExWhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGQ5YTdlOTBjMzhiZGQ1MjlmZDk5Y2QxZjI3YWY2Y2Fm MTc4NmFjNDQzNjhjZDZjODlmZTUzN2QzYjQ1MGQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiCP4dUBYobYylAQBc9mapDdzPwM1GKoeVEIhuTVu4Yf0D rJNQ6vzK4RoqewxVeZwKehptTirYEjGkuDroFQiyYxXJYRCA2X8IX8pS72sVvX+U aymz0DaP9qXO60KsfCuRdJ7KYtRucztJvayfHaguJ7kzv2xpU+gTO8QIhhG+Yfvs WD1oxj2wmNcsVMZzjadWc30U4wJrooKmuid4rE0Yj3B05WOjs2P5/KW0g9hf9ieT 25dAmc/Nx+W7pPF0V7w0Wt8bkp4cQSoIfKx9ZSXmYR/3kMOcXm/lgTv7+dFMlnbL k2lb8oBhhte6YdX4GzTH9EouKlZiWGx4lTIPcinfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCLFxyOjc1jA+dc/xbHH04F1U1CowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmYWYyMGNkLTc2M2EtNGExMi1hZjEzLThjMTMwOGQ5Zjg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fI0wDQYJKoZIhvcNAQELBQADggEBADL2uTzaJ1bS01fbG+8hQ0nHn5Bc 2WAWV82FQHECUMsnTCmUUEXNLrlECYCrlv76CoJANxWFTwzrfLGZwZuy+UIWvjIV mRmM8bWKqvGh4uETue2nSm6CHTWUk/FmcmcKrAyrEIsocLu35qsVmxDRetcqRekA dgt9bhH96TlLzmkldYGolRAeNAfEB1QksNoWu/GOLXuzk9qOIYo6QVAHVnsFCapp sLDS4uNLEgNUbwVY0otSq6myzU+wTgUQixA6az4zaYrpiYdEyAeVkG1q05wVwELL 6BpuwDhGGGKGxO3DYtI5jEDGYAd57Kk2eebsQShNUvPpfhgFfM1sFaDAEUA= -----END CERTIFICATE-----Generated at Sat Jun 13 04:51:04 2026 by rpki-client