$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bf34255-ef04-4bef-bae8-9ba2597948a2.roa File: 3bf34255-ef04-4bef-bae8-9ba2597948a2.roa (raw, json) Hash identifier: Kn31xpnr0fMWRQxvoa9QW6WtMB5pvAyOT/7t2xu3OGc= Subject key identifier: 73:D4:24:16:B9:F5:73:4A:36:29:13:3D:0C:9C:AF:8B:E4:23:DA:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7083013B6B22D4B822D9AD4257BAC43A6E8FC27D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bf34255-ef04-4bef-bae8-9ba2597948a2.roa Signing time: Tue 19 May 2026 02:00:52 +0000 ROA not before: Tue 19 May 2026 02:00:52 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.115.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:83:01:3b:6b:22:d4:b8:22:d9:ad:42:57:ba:c4:3a:6e:8f:c2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 02:00:52 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=70f6ae7d5b26f0e72e150b47ba31783b51d40eb227326207b548d54fdcb872d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:94:f4:32:79:0f:15:5a:21:3f:0e:ed:a5: c0:92:59:58:9b:2c:71:18:c9:f8:00:86:ca:bb:77: 6f:d5:ea:99:8a:b1:04:5e:e9:be:7e:83:59:0b:72: 4b:e3:d3:eb:e6:27:73:7e:e5:f2:13:7e:4e:d6:ea: 06:bd:12:2e:0b:55:bd:27:6d:ed:23:45:8a:22:99: 94:e2:52:e3:77:da:b1:05:ea:57:91:cf:81:ae:cb: 79:7e:3a:23:1d:83:fc:57:40:e6:24:c3:92:e0:4b: ea:33:71:28:6b:85:37:3e:d0:83:a6:e3:3c:fa:bb: b2:df:a7:02:0d:5b:87:52:5b:6a:bf:6e:f0:b8:fd: a1:86:44:e5:14:99:4f:f8:b4:ef:85:6a:25:d2:96: d7:a9:6f:ec:05:3e:e2:00:94:6d:02:7a:5e:76:4d: c4:07:cd:e4:08:34:63:cd:eb:81:27:62:c5:2c:6c: 53:94:5b:65:12:fd:02:b6:8d:e6:34:e9:a1:09:7d: 2d:1a:3f:0b:fa:1b:40:bf:db:af:2d:a5:19:9f:8a: 38:62:7a:66:df:86:95:f7:6e:54:c0:79:56:22:e6: ef:ae:c9:c5:f1:c3:36:0c:ca:7e:07:04:f2:78:88: 6a:bf:1e:13:0f:b1:dc:a7:17:23:e4:1b:eb:e6:f5: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D4:24:16:B9:F5:73:4A:36:29:13:3D:0C:9C:AF:8B:E4:23:DA:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bf34255-ef04-4bef-bae8-9ba2597948a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.115.128.0/18 Signature Algorithm: sha256WithRSAEncryption b1:45:30:2d:1c:cb:53:fc:34:2e:50:99:98:4a:2a:c7:c5:a3: 87:86:a7:2e:17:6f:23:00:42:b5:95:5c:2a:9a:a1:bd:d4:6c: b0:12:6e:c6:33:58:6c:2e:31:93:dc:0f:91:9e:e8:78:43:d9: 5d:74:47:f4:96:65:10:ab:fd:05:b5:6f:06:64:25:4b:68:85: 77:36:44:1a:a4:0f:36:61:a9:e1:ad:3a:77:e3:e5:cf:dd:b9: 4e:1b:1a:11:a2:b9:46:a7:25:7e:76:36:7f:0f:3a:f1:02:52: 1c:cc:55:c6:1c:bf:78:fb:d5:d3:1c:37:e1:3c:b6:4b:25:fc: df:53:4c:ee:a6:1f:79:8e:ae:b7:fc:33:f1:1b:df:0f:9d:ae: a2:dd:dc:00:23:19:3b:53:2f:6f:5d:a3:49:01:af:75:04:9e: d4:20:0e:37:c8:26:aa:60:66:b0:28:bd:03:a2:52:4b:57:12: 44:32:0f:e6:51:70:ec:7c:6f:8e:20:9e:8a:6c:e0:b7:db:db: bd:19:54:06:ad:07:71:4f:34:a9:cc:23:1e:4e:20:45:fc:40: 04:e0:26:75:5c:81:5a:62:ca:df:c1:4c:e1:b0:f2:7e:4a:a7: 14:66:47:01:62:d3:7b:07:bf:99:6f:0b:20:6c:08:2d:71:21: de:21:0d:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcIMBO2si1Lgi2a1CV7rEOm6Pwn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDIwMDUyWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGY2YWU3ZDViMjZmMGU3MmUxNTBiNDdiYTMxNzgzYjUx ZDQwZWIyMjczMjYyMDdiNTQ4ZDU0ZmRjYjg3MmQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtwpT0MnkPFVohPw7tpcCSWVibLHEYyfgAhsq7d2/V6pmK sQRe6b5+g1kLckvj0+vmJ3N+5fITfk7W6ga9Ei4LVb0nbe0jRYoimZTiUuN32rEF 6leRz4Guy3l+OiMdg/xXQOYkw5LgS+ozcShrhTc+0IOm4zz6u7LfpwINW4dSW2q/ bvC4/aGGROUUmU/4tO+FaiXSltepb+wFPuIAlG0Cel52TcQHzeQINGPN64EnYsUs bFOUW2US/QK2jeY06aEJfS0aPwv6G0C/268tpRmfijhiembfhpX3blTAeVYi5u+u ycXxwzYMyn4HBPJ4iGq/HhMPsdynFyPkG+vm9XS5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc9QkFrn1c0o2KRM9DJyvi+Qj2pYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiZjM0MjU1LWVmMDQtNGJlZi1iYWU4LTliYTI1OTc5NDhhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNc4AwDQYJKoZIhvcNAQELBQADggEBALFFMC0cy1P8NC5QmZhKKsfFo4eG py4XbyMAQrWVXCqaob3UbLASbsYzWGwuMZPcD5Ge6HhD2V10R/SWZRCr/QW1bwZk JUtohXc2RBqkDzZhqeGtOnfj5c/duU4bGhGiuUanJX52Nn8POvECUhzMVcYcv3j7 1dMcN+E8tksl/N9TTO6mH3mOrrf8M/Eb3w+drqLd3AAjGTtTL29do0kBr3UEntQg DjfIJqpgZrAovQOiUktXEkQyD+ZRcOx8b44gnops4Lfb270ZVAatB3FPNKnMIx5O IEX8QATgJnVcgVpiyt/BTOGw8n5KpxRmRwFi03sHv5lvCyBsCC1xId4hDR0= -----END CERTIFICATE-----Generated at Wed Jun 17 08:31:06 2026 by rpki-client