$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d2fe6d4-deff-432d-b694-86f6717d31dd.roa File: 0d2fe6d4-deff-432d-b694-86f6717d31dd.roa (raw, json) Hash identifier: aooJJ4IQ1hlXrphJ9yCOgyyWxDo9v3GVhuwl1YfB80s= Subject key identifier: 75:3F:DD:EA:37:64:54:45:3C:2E:AB:5D:A0:71:41:84:9E:E5:AA:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72171BBE29634A8D980037835A1B230F1F352FC2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d2fe6d4-deff-432d-b694-86f6717d31dd.roa Signing time: Wed 13 May 2026 00:51:26 +0000 ROA not before: Wed 13 May 2026 00:51:26 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:17:1b:be:29:63:4a:8d:98:00:37:83:5a:1b:23:0f:1f:35:2f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 13 00:51:26 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=0833be2315b24a92a8fb524996a46be7e3c91a1eebee8c36df859a8ed7196ae6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:64:e8:ae:74:36:b6:53:ec:6f:9d:5a:51: 78:12:ee:2b:0e:f3:ca:fa:f7:9d:5a:cf:1e:07:a1: a3:bb:38:c8:66:22:dd:98:59:96:2c:28:04:d3:65: e3:d5:8b:ff:d9:be:d5:82:9e:3e:9d:11:64:fc:05: 64:7c:42:c6:96:1a:3a:b3:b2:63:72:9f:3a:30:e8: 0f:ca:e8:64:1d:b9:fa:fa:67:58:0e:f5:65:2b:78: 13:67:5b:6a:37:05:3c:9f:fd:c4:19:8a:21:7e:67: dd:cd:1d:d7:0d:06:5e:c6:7e:26:86:ba:91:aa:12: a0:95:8f:f9:b1:11:77:73:4e:4a:48:1f:03:15:b4: 97:73:c4:87:b8:9a:e1:51:42:96:73:62:5c:ca:8a: d1:63:fb:f5:e7:32:6e:58:92:a3:cd:30:8d:0f:17: 81:9a:c2:bc:b4:cc:62:b0:f0:5d:b8:31:18:fe:66: ea:d6:6e:dc:a7:15:ee:eb:23:44:8b:51:87:93:c2: 56:68:a0:36:b0:a3:bf:f4:13:d4:14:b8:7e:1d:1a: da:93:90:48:ee:e0:92:69:07:08:c1:7d:d5:db:84: 47:36:ef:62:7f:96:2f:0b:96:03:d8:2f:f2:81:a9: 82:8d:62:2e:f4:92:8e:91:7b:90:8a:cd:50:64:08: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3F:DD:EA:37:64:54:45:3C:2E:AB:5D:A0:71:41:84:9E:E5:AA:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d2fe6d4-deff-432d-b694-86f6717d31dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.68.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:89:e2:ab:26:97:aa:a7:70:07:90:fd:3a:e2:27:d9:69:93: 72:a3:dc:9e:63:28:84:de:13:ed:cf:a8:c0:42:db:1b:32:db: 6f:7e:d9:26:8f:7d:0e:9c:1e:d1:f6:66:b8:9b:54:f3:cb:25: 1f:d8:b8:1c:e5:b6:3a:28:cd:b1:97:28:93:18:f4:a4:a5:dc: ba:a1:d8:1b:ec:88:7f:30:d3:5f:9a:bb:4c:7e:e4:78:a0:48: a4:e3:e9:e9:7d:70:ef:20:ae:76:1c:55:1f:b2:10:f3:1a:cc: f7:b9:8c:5a:bc:3d:53:b3:69:4f:16:f0:3f:2d:9f:38:0e:df: d2:5d:a0:5d:4a:a0:fa:64:b4:af:63:62:99:30:05:90:4b:d9: eb:d7:cb:38:af:ba:3c:3d:44:a2:79:12:d6:2e:c4:ad:07:cd: 1c:1a:2b:cd:c1:a6:56:cf:a5:0c:cd:23:2c:6d:e0:08:0d:97: cd:eb:ac:b2:ac:38:8f:00:7f:d6:c6:d0:d8:08:01:f7:4f:28: 75:ce:15:7e:e5:2f:33:80:ad:a4:15:8c:7e:45:b6:33:dc:96: ba:64:b5:d3:82:78:9d:fd:ef:92:03:3f:ab:01:00:54:fa:65: 3e:fb:01:5c:09:f3:e7:ea:1d:f0:60:d9:58:af:fa:92:c4:d7: 8c:6d:f1:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUchcbviljSo2YADeDWhsjDx81L8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTEzMDA1MTI2WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODMzYmUyMzE1YjI0YTkyYThmYjUyNDk5NmE0NmJlN2Uz YzkxYTFlZWJlZThjMzZkZjg1OWE4ZWQ3MTk2YWU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9QGTornQ2tlPsb51aUXgS7isO88r6951azx4HoaO7OMhm It2YWZYsKATTZePVi//ZvtWCnj6dEWT8BWR8QsaWGjqzsmNynzow6A/K6GQdufr6 Z1gO9WUreBNnW2o3BTyf/cQZiiF+Z93NHdcNBl7GfiaGupGqEqCVj/mxEXdzTkpI HwMVtJdzxIe4muFRQpZzYlzKitFj+/XnMm5YkqPNMI0PF4Gawry0zGKw8F24MRj+ ZurWbtynFe7rI0SLUYeTwlZooDawo7/0E9QUuH4dGtqTkEju4JJpBwjBfdXbhEc2 72J/li8LlgPYL/KBqYKNYi70ko6Re5CKzVBkCBqdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdT/d6jdkVEU8LqtdoHFBhJ7lqhYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkMmZlNmQ0LWRlZmYtNDMyZC1iNjk0LTg2ZjY3MTdkMzFkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3EQwDQYJKoZIhvcNAQELBQADggEBAG2J4qsml6qncAeQ/TriJ9lpk3Kj 3J5jKITeE+3PqMBC2xsy229+2SaPfQ6cHtH2ZribVPPLJR/YuBzltjoozbGXKJMY 9KSl3Lqh2BvsiH8w01+au0x+5HigSKTj6el9cO8grnYcVR+yEPMazPe5jFq8PVOz aU8W8D8tnzgO39JdoF1KoPpktK9jYpkwBZBL2evXyzivujw9RKJ5EtYuxK0HzRwa K83BplbPpQzNIyxt4AgNl83rrLKsOI8Af9bG0NgIAfdPKHXOFX7lLzOAraQVjH5F tjPclrpktdOCeJ3975IDP6sBAFT6ZT77AVwJ8+fqHfBg2Viv+pLE14xt8U8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:36 2026 by rpki-client