$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2354c02a-f191-44e4-a9fb-2a073de0cf9a.roa File: 2354c02a-f191-44e4-a9fb-2a073de0cf9a.roa (raw, json) Hash identifier: DP0ASGM+43743gdL2BcIlFJwuKXpqy4PfsCSICL6i0I= Subject key identifier: 39:DE:CF:C6:7E:92:4A:ED:CB:02:07:9F:2B:08:71:C9:44:7C:86:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D0CF6A4CA6B515BE51C6C4DFE6FD67BB06A4EC7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2354c02a-f191-44e4-a9fb-2a073de0cf9a.roa Signing time: Sun 12 Apr 2026 00:00:08 +0000 ROA not before: Sun 12 Apr 2026 00:00:08 +0000 ROA not after: Sat 11 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.71.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0c:f6:a4:ca:6b:51:5b:e5:1c:6c:4d:fe:6f:d6:7b:b0:6a:4e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 12 00:00:08 2026 GMT Not After : Jul 11 23:59:59 2026 GMT Subject: serialNumber=9d7cd72cb716ff9785f7fa6299f41aea7f329a81cae11d6e347087595c1daae7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:e4:b1:9b:78:ad:8f:11:cd:f6:a1:fa:25: 6b:0c:5b:69:c8:bb:b0:05:58:a5:3d:0a:fd:d3:5c: 0f:36:9a:6f:82:ed:a1:f9:c9:fc:38:f0:62:54:00: e0:45:a1:3d:95:f5:81:99:ca:fd:09:1b:a3:fd:0b: 35:34:6f:5a:15:dd:54:b1:b3:8b:c0:4d:84:24:e1: 7a:c6:6f:7d:44:80:86:f3:16:9e:01:64:14:6c:7b: 05:2d:aa:cd:7b:32:d5:8a:96:85:96:b7:83:40:7e: 44:a9:c8:88:7a:45:85:66:c8:31:fa:d3:a9:57:32: 00:1c:9d:3d:8e:48:2b:d9:55:1b:b7:be:1c:37:6a: e1:c1:4c:7d:7a:51:15:3c:7f:6e:b2:90:e8:3b:49: 57:85:22:fc:8b:8f:60:63:f0:4e:ef:de:cd:6b:86: ff:2d:50:50:a6:53:f1:35:23:db:8e:c0:4a:6e:a8: 5d:9c:9b:41:8d:ab:20:69:98:ee:4e:55:d3:ee:72: bf:63:ac:9b:20:68:70:9c:4b:ec:5a:e3:56:19:5c: 86:0a:41:32:a2:07:9b:48:1f:61:ed:91:a0:8c:cd: eb:91:af:00:07:d2:fc:07:90:88:f8:d6:52:38:7c: 37:f0:bb:e3:f7:26:27:12:52:20:97:47:19:24:bb: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:CF:C6:7E:92:4A:ED:CB:02:07:9F:2B:08:71:C9:44:7C:86:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2354c02a-f191-44e4-a9fb-2a073de0cf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.71.201.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:7f:19:d2:bf:ed:fe:e7:89:1b:bd:1f:14:9d:97:75:92:d3: a3:a1:b0:eb:bf:03:79:3e:4e:a0:4e:da:91:0e:c9:ec:d8:0e: 4d:7d:74:97:69:48:ad:e0:69:25:b2:b8:17:72:d8:60:78:d3: 79:95:4f:ef:a0:d0:37:3a:b6:b3:fc:a7:4c:28:18:7d:3d:b4: 2b:2c:77:bf:aa:53:1e:67:2a:84:f0:5d:d1:b0:3c:14:22:83: 94:b6:e8:09:d6:ce:89:c9:64:d0:d6:50:09:79:a4:61:9a:4b: 6c:18:21:33:df:2f:db:3b:9b:ca:56:a4:f7:ad:b8:a6:76:6e: 24:15:c7:34:4c:2c:1c:17:67:a7:63:e7:61:1e:09:ec:81:9c: b1:75:03:18:b6:73:80:4c:18:8d:7c:6f:6c:c4:de:2d:64:af: 3f:e6:8f:3f:1d:f7:89:84:5a:1f:f5:58:84:a8:15:86:22:94: 9b:25:23:51:aa:2a:60:c5:a0:0b:a1:94:89:a0:68:f5:57:f3: b5:e9:44:7c:e7:5c:31:44:7a:c3:91:4e:dd:11:da:ad:89:7a: 92:45:01:1d:ec:d3:a7:d0:0a:66:a9:2a:39:43:7f:3d:52:f8: cb:6a:5a:63:2a:b0:6e:42:8c:d1:27:9b:7c:20:48:ed:96:f1: 8f:8b:d0:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXQz2pMprUVvlHGxN/m/We7BqTscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNDEyMDAwMDA4WhcNMjYwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDdjZDcyY2I3MTZmZjk3ODVmN2ZhNjI5OWY0MWFlYTdm MzI5YTgxY2FlMTFkNmUzNDcwODc1OTVjMWRhYWU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR6OSxm3itjxHN9qH6JWsMW2nIu7AFWKU9Cv3TXA82mm+C 7aH5yfw48GJUAOBFoT2V9YGZyv0JG6P9CzU0b1oV3VSxs4vATYQk4XrGb31EgIbz Fp4BZBRsewUtqs17MtWKloWWt4NAfkSpyIh6RYVmyDH606lXMgAcnT2OSCvZVRu3 vhw3auHBTH16URU8f26ykOg7SVeFIvyLj2Bj8E7v3s1rhv8tUFCmU/E1I9uOwEpu qF2cm0GNqyBpmO5OVdPucr9jrJsgaHCcS+xa41YZXIYKQTKiB5tIH2HtkaCMzeuR rwAH0vwHkIj41lI4fDfwu+P3JicSUiCXRxkkuwhVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOd7Pxn6SSu3LAgefKwhxyUR8hsEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzNTRjMDJhLWYxOTEtNDRlNC1hOWZiLTJhMDczZGUwY2Y5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjR8kwDQYJKoZIhvcNAQELBQADggEBAC9/GdK/7f7niRu9HxSdl3WS06Oh sOu/A3k+TqBO2pEOyezYDk19dJdpSK3gaSWyuBdy2GB403mVT++g0Dc6trP8p0wo GH09tCssd7+qUx5nKoTwXdGwPBQig5S26AnWzonJZNDWUAl5pGGaS2wYITPfL9s7 m8pWpPetuKZ2biQVxzRMLBwXZ6dj52EeCeyBnLF1Axi2c4BMGI18b2zE3i1krz/m jz8d94mEWh/1WISoFYYilJslI1GqKmDFoAuhlImgaPVX87XpRHznXDFEesORTt0R 2q2JepJFAR3s06fQCmapKjlDfz1S+MtqWmMqsG5CjNEnm3wgSO2W8Y+L0Dc= -----END CERTIFICATE-----Generated at Fri Apr 17 05:48:00 2026 by rpki-client