$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8a520c-a652-4886-b082-d152f075c1a5.roa File: 7c8a520c-a652-4886-b082-d152f075c1a5.roa (raw, json) Hash identifier: GgyrTnoYXjD5YxibUA/3gFFHgNu0vtlXUM9wD7a6Q4o= Subject key identifier: C3:FA:FD:10:96:07:2A:3F:15:7B:38:88:B8:29:F0:5F:D7:70:9D:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03F5F2A55642CF7708214F948715D9902B30C3C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8a520c-a652-4886-b082-d152f075c1a5.roa Signing time: Wed 20 May 2026 00:40:09 +0000 ROA not before: Wed 20 May 2026 00:40:09 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f5:f2:a5:56:42:cf:77:08:21:4f:94:87:15:d9:90:2b:30:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 00:40:09 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=346ab57f03d4ce2ec5e0e1e8d1516217742b7a9534c9e2ca3d398c244f198b4a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:3b:87:a4:e5:c2:32:52:b4:36:f3:af:7a: 55:4c:eb:c3:38:42:05:db:d4:d5:10:25:d7:4b:e0: e7:a9:c1:47:99:11:27:30:db:de:e7:6f:f2:b6:80: 97:01:a0:87:82:81:ab:48:c1:4e:cd:98:5e:46:ec: 4a:e5:3a:5b:ba:ba:86:05:31:2e:2b:01:c7:a2:3e: e7:5d:1e:c9:64:c8:ea:99:96:ba:d9:2d:3a:da:28: 5a:03:ea:54:cc:6e:b6:48:69:7b:c1:cf:a0:72:6c: 70:56:ed:68:78:e8:25:e9:6b:9b:e8:02:fc:95:36: 56:4a:16:77:83:1b:5a:79:ec:73:6e:16:1d:99:5f: d1:82:fc:e5:6f:59:43:7c:cc:88:1c:b1:2d:70:db: a4:f5:a9:da:c3:7f:8b:79:a3:59:f1:b7:7a:05:20: bf:76:6c:9e:9a:b9:bc:15:dc:8e:e4:09:e8:81:48: 46:79:ac:7b:ca:70:0e:52:53:60:47:e3:1c:b1:41: 99:73:48:f3:95:2b:df:f8:10:c4:1e:10:d6:df:43: 1d:75:9b:2b:b4:76:37:db:d2:ec:34:bf:d3:10:f1: ca:d7:d8:8a:27:6b:ea:a5:02:5d:e0:eb:9c:06:e9: 6b:59:27:84:cf:4f:0f:4f:87:62:97:19:2a:ba:93: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:FD:10:96:07:2A:3F:15:7B:38:88:B8:29:F0:5F:D7:70:9D:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8a520c-a652-4886-b082-d152f075c1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.100.0/24 Signature Algorithm: sha256WithRSAEncryption 23:2f:c1:4d:c6:0d:44:71:af:46:95:27:0a:9b:dc:d3:9d:35: 00:3b:37:32:c3:57:07:58:9b:0b:d7:2d:47:9c:46:2a:14:72: 8a:cb:7c:b4:77:75:6f:82:4f:b2:88:37:f6:57:ab:3a:e5:cc: 2e:4e:e2:d9:61:d7:d8:6e:bc:12:b2:e5:d4:b0:5e:08:d5:84: a6:db:4d:99:29:ec:f4:b0:9a:7a:f6:de:9f:05:c7:8f:2f:cf: e9:03:4e:27:c4:50:c6:e9:35:d9:72:f8:f2:4c:25:fa:5a:79: bd:59:ad:d7:ab:cf:10:43:ee:43:c0:b3:e9:96:6c:31:b0:40: 96:42:ab:4a:e6:89:51:35:90:c7:46:38:b9:86:c2:f5:e2:f1: 40:fa:5e:05:c6:e7:76:4a:26:60:11:2f:d6:5c:59:fe:25:56: 58:c0:1e:ab:e3:6f:af:ec:6d:7a:59:e5:28:10:5b:b4:8a:cc: 90:a4:5b:48:50:23:ad:0c:75:58:0d:8c:bf:bf:5e:58:63:8a: 87:56:1a:16:23:1c:16:ea:a7:6d:81:04:cd:b9:db:1e:38:ce: d9:be:9c:23:10:48:93:7c:ca:b1:8c:cd:2e:35:19:91:c6:70: ff:c9:3f:82:34:59:04:ff:44:71:77:93:76:6c:e2:f3:96:4b: 9c:8c:1d:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA/XypVZCz3cIIU+UhxXZkCsww8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTIwMDA0MDA5WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDZhYjU3ZjAzZDRjZTJlYzVlMGUxZThkMTUxNjIxNzc0 MmI3YTk1MzRjOWUyY2EzZDM5OGMyNDRmMTk4YjRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRajuHpOXCMlK0NvOvelVM68M4QgXb1NUQJddL4OepwUeZ EScw297nb/K2gJcBoIeCgatIwU7NmF5G7ErlOlu6uoYFMS4rAceiPuddHslkyOqZ lrrZLTraKFoD6lTMbrZIaXvBz6BybHBW7Wh46CXpa5voAvyVNlZKFneDG1p57HNu Fh2ZX9GC/OVvWUN8zIgcsS1w26T1qdrDf4t5o1nxt3oFIL92bJ6aubwV3I7kCeiB SEZ5rHvKcA5SU2BH4xyxQZlzSPOVK9/4EMQeENbfQx11myu0djfb0uw0v9MQ8crX 2Iona+qlAl3g65wG6WtZJ4TPTw9Ph2KXGSq6k9m1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw/r9EJYHKj8VeziIuCnwX9dwnfowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjOGE1MjBjLWE2NTItNDg4Ni1iMDgyLWQxNTJmMDc1YzFhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAmQwDQYJKoZIhvcNAQELBQADggEBACMvwU3GDURxr0aVJwqb3NOdNQA7 NzLDVwdYmwvXLUecRioUcorLfLR3dW+CT7KIN/ZXqzrlzC5O4tlh19huvBKy5dSw XgjVhKbbTZkp7PSwmnr23p8Fx48vz+kDTifEUMbpNdly+PJMJfpaeb1ZrderzxBD 7kPAs+mWbDGwQJZCq0rmiVE1kMdGOLmGwvXi8UD6XgXG53ZKJmARL9ZcWf4lVljA Hqvjb6/sbXpZ5SgQW7SKzJCkW0hQI60MdVgNjL+/XlhjiodWGhYjHBbqp22BBM25 2x44ztm+nCMQSJN8yrGMzS41GZHGcP/JP4I0WQT/RHF3k3Zs4vOWS5yMHYA= -----END CERTIFICATE-----Generated at Sat May 30 01:58:33 2026 by rpki-client