$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f0ac017-dd94-44b5-9356-12d04b08e7b0.roa File: 0f0ac017-dd94-44b5-9356-12d04b08e7b0.roa (raw, json) Hash identifier: IfULvbK03YpjrZLo4S9/+BijDIzu8XfQO0xvBG2uGT0= Subject key identifier: FF:73:16:93:63:46:FF:7A:77:22:67:9E:CE:67:33:3F:B7:D8:C9:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73F6C7D3DA65943BB0E305732EB538E086A8C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f0ac017-dd94-44b5-9356-12d04b08e7b0.roa Signing time: Sun 17 May 2026 01:30:52 +0000 ROA not before: Sun 17 May 2026 01:30:52 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f6:c7:d3:da:65:94:3b:b0:e3:05:73:2e:b5:38:e0:86:a8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 17 01:30:52 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=921019316fe8c92f23c12a8ddacb627bdf8be8f8444844b349cf0ce5e894b6f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:e7:05:ce:b0:4a:39:9d:41:8f:fe:11:0e: d5:26:d5:ec:53:13:07:fc:11:b7:1f:25:51:4f:03: f5:43:e1:02:59:51:97:70:2a:d0:d7:8e:8e:23:a4: b0:cb:24:12:f0:e5:27:3f:68:16:02:ec:1b:b6:06: 07:e5:01:84:ba:c8:34:af:45:b4:ed:61:70:d3:69: 59:8a:ff:4a:bf:d5:31:4f:26:2a:0e:d8:1e:4d:bc: 35:f6:23:c7:29:5f:fe:03:5e:49:39:b8:1e:76:88: a7:76:35:a5:62:9e:c6:46:0c:29:14:21:fb:00:3d: 89:4d:09:37:c9:cc:44:77:06:da:31:cb:f8:c3:c7: 6a:cc:ec:23:ac:a7:5f:91:53:a4:3f:d9:b6:b7:86: 11:7a:27:8c:29:b7:35:98:61:1b:b9:45:af:d1:b8: 0d:c4:b2:6e:bc:74:21:29:4d:55:89:cf:ac:69:e5: 1b:22:8a:06:82:5f:94:69:56:67:b5:5c:c7:62:68: 3d:37:90:42:76:5e:82:0a:c7:5a:2b:8e:22:49:dd: a2:ca:d2:0a:10:6e:52:8b:d3:e4:28:23:20:0b:b7: fd:aa:02:dd:e1:11:09:a7:f9:fd:7e:7e:81:c1:9c: ea:84:c0:23:ea:17:ed:dd:1d:fe:4b:78:68:ec:ea: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:16:93:63:46:FF:7A:77:22:67:9E:CE:67:33:3F:B7:D8:C9:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f0ac017-dd94-44b5-9356-12d04b08e7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.58.0/23 Signature Algorithm: sha256WithRSAEncryption 11:cf:bd:5c:e9:6e:f5:7b:20:89:3a:43:ee:dd:54:3a:fd:b4: 01:b6:54:2a:33:e0:60:56:bf:2a:09:bc:f0:18:a6:b8:29:ee: aa:aa:36:6d:70:74:75:f7:ae:b4:5d:ef:48:92:fa:9a:b3:e3: 08:24:10:df:d7:6e:a7:ce:85:49:33:aa:86:92:6d:63:97:84: 84:01:34:4b:68:6c:50:d4:92:a8:1a:16:c5:15:3b:9d:5b:48: b0:50:a2:da:80:0c:00:5f:fe:09:6d:d1:b8:ee:43:f9:e8:fc: c1:fa:b3:d4:05:3d:09:42:fe:32:3d:26:95:0b:5d:df:4d:b9: ca:4d:0c:79:d8:b8:72:f5:45:fc:45:2e:5e:64:dc:d4:aa:4e: 35:a8:46:5c:f2:52:20:12:66:3e:bd:13:70:0c:d0:3c:ff:21: bb:91:33:d3:d4:8e:bb:2a:25:2a:12:c5:91:01:0f:b2:28:8e: b6:42:e1:ba:5d:a4:8f:56:9a:86:35:5f:e5:d9:99:da:29:ad: e2:81:e8:bd:9b:32:c4:ea:f3:fd:26:0a:d5:fb:ff:96:06:55: 38:6c:45:fc:ea:43:a3:c0:6a:04:59:55:f4:de:21:3a:a9:06: b1:d4:1e:53:b5:ba:a8:14:b1:fb:a3:00:ce:27:9b:7b:91:8f: 3f:04:14:07 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITc/bH09pllDuw4wVzLrU44IaoxDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNjA1MTcwMTMwNTJaFw0yNjA4MTUyMzU5NTla MHoxSTBHBgNVBAUTQDkyMTAxOTMxNmZlOGM5MmYyM2MxMmE4ZGRhY2I2MjdiZGY4 YmU4Zjg0NDQ4NDRiMzQ5Y2YwY2U1ZTg5NGI2ZjcxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKw45wXOsEo5nUGP/hEO1SbV7FMTB/wRtx8lUU8D9UPhAllR l3Aq0NeOjiOksMskEvDlJz9oFgLsG7YGB+UBhLrINK9FtO1hcNNpWYr/Sr/VMU8m Kg7YHk28NfYjxylf/gNeSTm4HnaIp3Y1pWKexkYMKRQh+wA9iU0JN8nMRHcG2jHL +MPHaszsI6ynX5FTpD/ZtreGEXonjCm3NZhhG7lFr9G4DcSybrx0ISlNVYnPrGnl GyKKBoJflGlWZ7Vcx2JoPTeQQnZeggrHWiuOIkndosrSChBuUovT5CgjIAu3/aoC 3eERCaf5/X5+gcGc6oTAI+oX7d0d/kt4aOzqz8ECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBT/cxaTY0b/enciZ57OZzM/t9jJ4jAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMGYwYWMwMTctZGQ5NC00NGI1LTkzNTYtMTJkMDRiMDhlN2IwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEATRUOjANBgkqhkiG9w0BAQsFAAOCAQEAEc+9XOlu9XsgiTpD7t1UOv20AbZU KjPgYFa/Kgm88BimuCnuqqo2bXB0dfeutF3vSJL6mrPjCCQQ39dup86FSTOqhpJt Y5eEhAE0S2hsUNSSqBoWxRU7nVtIsFCi2oAMAF/+CW3RuO5D+ej8wfqz1AU9CUL+ Mj0mlQtd3025yk0Medi4cvVF/EUuXmTc1KpONahGXPJSIBJmPr0TcAzQPP8hu5Ez 09SOuyolKhLFkQEPsiiOtkLhul2kj1aahjVf5dmZ2imt4oHovZsyxOrz/SYK1fv/ lgZVOGxF/OpDo8BqBFlV9N4hOqkGsdQeU7W6qBSx+6MAziebe5GPPwQUBw== -----END CERTIFICATE-----Generated at Sat Jun 13 05:40:57 2026 by rpki-client