$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f243d4ea-8f28-4d36-80ac-6a56052d7ab8.roa File: f243d4ea-8f28-4d36-80ac-6a56052d7ab8.roa (raw, json) Hash identifier: g3raT2wUxVPt+gLLWn0pSqI9himWZ8ywV2YpTit5HLI= Subject key identifier: 38:A8:37:1E:4C:56:15:90:F2:28:7C:61:2F:F9:C5:1E:9F:E1:4F:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70EBCF6CA57D27A77D21BDD738DB5E1E11819CC8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f243d4ea-8f28-4d36-80ac-6a56052d7ab8.roa Signing time: Fri 29 May 2026 19:47:07 +0000 ROA not before: Fri 29 May 2026 19:47:07 +0000 ROA not after: Thu 27 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.248.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:eb:cf:6c:a5:7d:27:a7:7d:21:bd:d7:38:db:5e:1e:11:81:9c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 29 19:47:07 2026 GMT Not After : Aug 27 23:59:59 2026 GMT Subject: serialNumber=99b80e569c6b56ce15a029d2b4b19687f5ab2c28e0bae82eba57467ffd2f7ce4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:dd:8a:29:eb:3a:4b:99:4a:51:ec:57:9a: f1:85:96:9e:73:7d:b6:1c:e0:63:df:4a:da:b9:0c: 01:33:b2:9e:45:d6:23:f5:28:4a:73:c7:1f:1e:48: c2:64:f4:c3:b0:f4:52:d9:57:a2:a5:fe:64:67:45: 92:7b:4e:33:0c:92:1b:c2:4b:71:ca:8c:62:48:31: ae:7c:90:a6:14:bb:64:9b:d3:30:f9:09:68:31:ed: ec:51:56:d7:00:10:ce:fd:24:75:00:cd:74:e7:cb: 91:74:99:2a:94:ed:c4:fa:10:3c:d0:4f:c4:b0:7a: 59:6f:4e:3f:17:5b:80:1b:d6:9c:8c:e5:40:46:4b: b6:d0:31:3f:3f:ed:88:31:34:6d:37:02:5f:8f:35: 41:59:6b:1d:de:3b:f0:5d:3f:ed:95:97:d3:8b:55: 38:e4:fa:6e:3e:50:e2:cc:53:b5:1a:a2:d1:48:5b: 8d:7b:9b:1d:6d:04:55:ea:7c:37:e9:d4:25:ee:ec: 7a:32:67:0b:83:0d:7d:7b:1b:74:be:0a:33:6e:9b: d8:ea:4e:a4:9c:65:fd:e8:d1:13:f4:fb:58:13:2f: 28:3d:0e:36:04:ce:37:6e:d4:f5:52:cb:1a:95:44: a6:68:d7:d5:4a:3a:0e:81:c5:9b:09:34:33:1d:e2: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A8:37:1E:4C:56:15:90:F2:28:7C:61:2F:F9:C5:1E:9F:E1:4F:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f243d4ea-8f28-4d36-80ac-6a56052d7ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.139.0/24 Signature Algorithm: sha256WithRSAEncryption 93:43:e2:3d:3e:ce:c7:ab:7b:eb:35:90:2d:50:ee:22:0b:88: e3:0f:a4:84:fb:76:f4:df:5e:c7:b0:e4:17:5f:96:18:fc:24: 33:ae:ba:a6:ac:89:15:d0:e0:00:ab:13:63:d3:85:e8:b0:ae: 30:55:3a:c1:51:5c:69:a3:9f:e3:78:8e:d6:a0:21:9f:73:5f: bd:18:af:b4:21:d0:88:c2:f0:09:79:2c:9c:97:fc:62:1f:7c: 3d:23:84:cf:62:ab:2f:8c:02:c4:4e:b1:2e:99:d6:ae:e2:36: 39:e3:b8:ff:ce:9c:2e:f0:18:aa:62:7e:26:88:6f:33:a6:ba: bb:23:27:28:4f:d9:45:a0:93:04:c5:f0:84:16:26:ce:2b:17: 47:3e:b1:6b:7a:51:85:54:04:81:19:6c:fa:61:1d:55:09:5b: e4:17:d8:23:a6:f7:fd:ad:05:52:9b:75:77:b4:48:c2:ec:57: 25:b3:ab:af:b4:f0:c7:6c:33:a4:9b:4b:f4:db:25:7d:e4:4f: 29:06:4c:4c:ac:27:f7:e8:91:a1:be:7d:df:18:76:9b:a2:d3: 3a:c8:03:76:25:0c:df:53:1a:7e:74:73:4f:14:3d:f4:af:31: 75:40:60:27:99:ed:ab:a0:a7:2e:3a:ec:4e:c2:ae:36:e8:db: 3e:b4:43:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcOvPbKV9J6d9Ib3XONteHhGBnMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTI5MTk0NzA3WhcNMjYwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWI4MGU1NjljNmI1NmNlMTVhMDI5ZDJiNGIxOTY4N2Y1 YWIyYzI4ZTBiYWU4MmViYTU3NDY3ZmZkMmY3Y2U0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Hd2KKes6S5lKUexXmvGFlp5zfbYc4GPfStq5DAEzsp5F 1iP1KEpzxx8eSMJk9MOw9FLZV6Kl/mRnRZJ7TjMMkhvCS3HKjGJIMa58kKYUu2Sb 0zD5CWgx7exRVtcAEM79JHUAzXTny5F0mSqU7cT6EDzQT8SwellvTj8XW4Ab1pyM 5UBGS7bQMT8/7YgxNG03Al+PNUFZax3eO/BdP+2Vl9OLVTjk+m4+UOLMU7UaotFI W417mx1tBFXqfDfp1CXu7HoyZwuDDX17G3S+CjNum9jqTqScZf3o0RP0+1gTLyg9 DjYEzjdu1PVSyxqVRKZo19VKOg6BxZsJNDMd4hcDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOKg3HkxWFZDyKHxhL/nFHp/hTywwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyNDNkNGVhLThmMjgtNGQzNi04MGFjLTZhNTYwNTJkN2FiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP+IswDQYJKoZIhvcNAQELBQADggEBAJND4j0+zsere+s1kC1Q7iILiOMP pIT7dvTfXsew5Bdflhj8JDOuuqasiRXQ4ACrE2PTheiwrjBVOsFRXGmjn+N4jtag IZ9zX70Yr7Qh0IjC8Al5LJyX/GIffD0jhM9iqy+MAsROsS6Z1q7iNjnjuP/OnC7w GKpifiaIbzOmursjJyhP2UWgkwTF8IQWJs4rF0c+sWt6UYVUBIEZbPphHVUJW+QX 2COm9/2tBVKbdXe0SMLsVyWzq6+08MdsM6SbS/TbJX3kTykGTEysJ/fokaG+fd8Y dpui0zrIA3YlDN9TGn50c08UPfSvMXVAYCeZ7augpy467E7Crjbo2z60Q+A= -----END CERTIFICATE-----Generated at Sat May 30 01:57:20 2026 by rpki-client