$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9af23c53-f65f-4606-ac0c-e8f3181df09b.roa File: 9af23c53-f65f-4606-ac0c-e8f3181df09b.roa (raw, json) Hash identifier: Pju7QD3Y86VggJltkgldazo9W6m3Mi8wXzu0AfLTuok= Subject key identifier: 11:B9:9F:FF:13:4E:49:56:8C:30:47:48:2E:83:2C:66:F4:98:AD:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02C300F09FAD1B147C3E1C497C443553935B0A7F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9af23c53-f65f-4606-ac0c-e8f3181df09b.roa Signing time: Fri 24 Apr 2026 17:17:24 +0000 ROA not before: Fri 24 Apr 2026 17:17:24 +0000 ROA not after: Thu 23 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c3:00:f0:9f:ad:1b:14:7c:3e:1c:49:7c:44:35:53:93:5b:0a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 24 17:17:24 2026 GMT Not After : Jul 23 23:59:59 2026 GMT Subject: serialNumber=0427393bdb0832394d1f206292ee516a5c15dd4a7a1de1b2d343ca69899f2a48, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:30:e0:25:bd:cb:d3:14:17:af:5f:3e:a2: 19:47:8e:67:ec:ca:7d:be:b5:ad:6d:8d:14:06:fc: a8:9e:3b:5f:ea:b9:9f:40:c5:58:0d:02:22:87:e2: ff:d7:03:9a:ff:44:0c:58:19:c4:d1:18:30:1e:0d: fa:5c:3d:c8:eb:15:41:52:76:65:f8:ec:03:2f:0a: 9f:2d:56:a0:f4:cc:6f:37:0d:37:9c:1a:38:77:10: b2:b0:e9:e9:53:82:ad:18:9c:6b:f6:98:f4:9b:b3: 6d:1c:ac:ac:24:43:f7:5c:66:60:cf:27:40:78:0c: ee:c0:10:1f:2c:f5:bd:f2:d0:5a:75:ba:6b:01:b7: 6c:ca:91:92:b6:42:7b:4d:d7:4d:e2:e2:25:04:93: ee:37:fb:b5:b6:06:00:af:fc:b6:c9:a0:0f:08:20: 28:29:03:a8:79:50:7f:77:22:59:a9:88:2c:00:3f: 4a:57:01:12:80:0e:c7:f5:ca:ef:69:0c:4a:53:60: f7:39:ee:59:ca:62:72:41:f9:e4:57:d2:8f:b3:4f: ec:44:e2:93:6d:50:34:dd:96:9a:55:8e:2f:5c:d5: fe:19:22:f4:70:2e:65:25:3c:7f:da:80:98:fa:ef: 3b:d6:88:69:0f:ef:f3:98:42:40:c1:bd:10:e8:4d: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:9F:FF:13:4E:49:56:8C:30:47:48:2E:83:2C:66:F4:98:AD:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9af23c53-f65f-4606-ac0c-e8f3181df09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.0.0/14 Signature Algorithm: sha256WithRSAEncryption 19:b5:c8:83:92:28:89:cf:71:7a:3d:38:cc:7a:83:cc:7c:c3: e7:99:9d:48:a7:e1:34:7f:37:12:2a:54:0d:25:f9:a3:af:12: 1c:e1:65:10:57:f0:bb:85:0e:db:f9:e4:d9:86:9c:a1:39:23: 8f:1c:9a:18:c3:fb:36:5e:57:81:29:2e:cf:a9:bd:92:bc:90: 81:28:38:af:07:bf:37:7c:70:ab:73:4e:ca:50:8c:fb:20:ed: 7a:b2:8d:94:e8:12:43:56:00:03:2b:18:2c:4a:b9:52:34:fc: 41:72:76:0a:93:d7:dd:26:80:e3:bb:a6:0f:d0:45:67:35:28: 9d:ad:06:4b:48:3f:2a:d9:db:85:5d:9d:48:7d:c7:73:89:1f: 78:a1:4b:95:9c:92:0d:39:8f:32:4b:37:c7:06:5e:5d:92:6f: ed:8c:a8:dd:7d:d9:99:ba:01:3c:ed:f9:85:af:37:5a:59:fd: ef:7d:bd:7e:9a:1a:27:f5:95:21:0a:40:68:19:81:39:af:be: 42:8f:21:8d:27:1d:db:fe:55:ea:97:aa:44:36:93:17:7a:e3: ae:ed:82:1e:ce:0f:df:cc:05:51:42:8a:1a:58:19:41:db:36: 48:91:80:1d:1a:31:f5:38:9e:ed:dc:16:b9:18:33:41:32:ee: ae:dc:68:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAsMA8J+tGxR8PhxJfEQ1U5NbCn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNDI0MTcxNzI0WhcNMjYwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDI3MzkzYmRiMDgzMjM5NGQxZjIwNjI5MmVlNTE2YTVj MTVkZDRhN2ExZGUxYjJkMzQzY2E2OTg5OWYyYTQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSxjDgJb3L0xQXr18+ohlHjmfsyn2+ta1tjRQG/KieO1/q uZ9AxVgNAiKH4v/XA5r/RAxYGcTRGDAeDfpcPcjrFUFSdmX47AMvCp8tVqD0zG83 DTecGjh3ELKw6elTgq0YnGv2mPSbs20crKwkQ/dcZmDPJ0B4DO7AEB8s9b3y0Fp1 umsBt2zKkZK2QntN103i4iUEk+43+7W2BgCv/LbJoA8IICgpA6h5UH93IlmpiCwA P0pXARKADsf1yu9pDEpTYPc57lnKYnJB+eRX0o+zT+xE4pNtUDTdlppVji9c1f4Z IvRwLmUlPH/agJj67zvWiGkP7/OYQkDBvRDoTbFnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEbmf/xNOSVaMMEdILoMsZvSYrR8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZjIzYzUzLWY2NWYtNDYwNi1hYzBjLWU4ZjMxODFkZjA5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDqDANBgkqhkiG9w0BAQsFAAOCAQEAGbXIg5Ioic9xej04zHqDzHzD55md SKfhNH83EipUDSX5o68SHOFlEFfwu4UO2/nk2YacoTkjjxyaGMP7Nl5XgSkuz6m9 kryQgSg4rwe/N3xwq3NOylCM+yDterKNlOgSQ1YAAysYLEq5UjT8QXJ2CpPX3SaA 47umD9BFZzUona0GS0g/KtnbhV2dSH3Hc4kfeKFLlZySDTmPMks3xwZeXZJv7Yyo 3X3ZmboBPO35ha83Wln97329fpoaJ/WVIQpAaBmBOa++Qo8hjScd2/5V6peqRDaT F3rjru2CHs4P38wFUUKKGlgZQds2SJGAHRox9Tie7dwWuRgzQTLurtxoCg== -----END CERTIFICATE-----Generated at Thu Apr 30 01:04:25 2026 by rpki-client