$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa File: 52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa (raw, json) Hash identifier: NVCH5/n61kNAmqRg4wPrVGoSOP+eW5LpbfwEK0uJQKs= Subject key identifier: 4D:CE:4F:8B:6F:92:CC:EC:27:9F:CB:E6:B2:CD:86:EC:85:7B:E1:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 051ED339C0E5CE340755501C21E1B21D17B8A645 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa Signing time: Fri 06 Feb 2026 00:20:26 +0000 ROA not before: Fri 06 Feb 2026 00:20:26 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.220.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1e:d3:39:c0:e5:ce:34:07:55:50:1c:21:e1:b2:1d:17:b8:a6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 6 00:20:26 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=791c657808d27e1ca48766e38e9a9a0369195efadcfd8d05601dfd294278b967, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:7a:ef:64:6d:21:4e:20:13:a6:8c:38:74: a7:07:1b:c4:45:32:52:5a:9b:dc:97:2b:e3:69:71: d0:04:91:f3:e5:8e:d9:f0:d8:7e:db:92:8f:52:4e: 9f:a5:21:80:3e:17:1f:64:07:27:e0:99:78:29:20: 0e:71:14:90:ff:3b:f9:e5:1d:01:e6:c6:dd:25:e3: 6f:d3:11:e1:2c:34:f8:5b:dd:83:af:32:11:f6:5a: be:0b:ae:37:7c:86:75:25:8c:fe:14:b9:8e:0b:53: d3:d6:8a:5b:cd:5f:0b:b6:63:25:e6:ea:bb:ff:ff: 4d:c1:44:c4:d2:e5:e6:7a:b5:54:7d:b2:96:82:ae: 97:f1:be:d4:53:72:a9:e1:18:09:ec:85:33:95:3b: f9:19:c1:10:f6:02:8e:4c:da:6e:11:96:2d:05:95: 78:58:d4:fa:95:c5:d1:31:d0:bf:93:53:1a:a4:0a: 98:fb:9c:c4:29:32:75:0f:01:20:b6:d4:50:32:7c: 61:cd:bf:17:71:97:a3:0f:fc:c3:24:4c:1e:e5:40: 60:00:8a:ad:62:d2:e1:e5:9d:cb:7d:0d:cb:89:82: df:73:1f:07:f3:ca:ec:51:96:9d:82:21:0f:84:74: ad:43:6d:2e:b0:f9:3a:49:c9:19:d4:7b:19:49:13: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:4F:8B:6F:92:CC:EC:27:9F:CB:E6:B2:CD:86:EC:85:7B:E1:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.220.36.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:8b:63:a2:7a:b2:5e:23:ec:33:b4:54:f5:3f:55:cb:1d:b7: b9:cb:fd:a1:19:49:d3:09:67:51:c3:cd:3a:40:4e:47:18:fe: 79:5f:26:fc:54:89:f3:db:03:0f:5e:e4:95:0a:46:30:5c:a3: c9:76:d8:fb:a9:53:df:8b:6b:81:25:d9:61:18:ca:87:20:a6: 9d:e9:a2:45:3a:9e:3d:99:44:57:95:c5:85:ee:2e:08:89:58: 7c:92:b0:dc:d0:58:e8:be:c0:21:9b:b5:c0:e2:38:1d:52:eb: 8e:c8:b5:8d:83:26:24:44:a3:91:33:3b:fa:ef:7b:76:82:d4: 5e:f3:f0:79:5c:6b:63:69:3b:4c:6f:9f:bb:06:c4:e5:12:f5: f2:55:44:fc:d9:0e:48:a2:75:c5:65:e8:e4:c1:3f:40:3b:53: 62:72:1e:70:23:50:c6:f1:5b:60:b6:15:1e:07:26:68:a1:98: b7:f5:1a:ce:20:07:3b:0f:9f:b8:e4:db:55:bd:f9:37:9f:35: a8:a0:4f:ca:46:0a:c8:9d:4f:60:2c:82:1d:eb:4f:32:60:9f: 0f:91:18:35:e4:8a:db:72:df:2f:e5:38:1e:41:4e:fc:11:c0: a6:c5:e4:e0:f5:08:33:67:b7:43:50:67:ca:ca:53:64:41:45: 1e:b1:9a:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBR7TOcDlzjQHVVAcIeGyHRe4pkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjA2MDAyMDI2WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTFjNjU3ODA4ZDI3ZTFjYTQ4NzY2ZTM4ZTlhOWEwMzY5 MTk1ZWZhZGNmZDhkMDU2MDFkZmQyOTQyNzhiOTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7y3rvZG0hTiATpow4dKcHG8RFMlJam9yXK+NpcdAEkfPl jtnw2H7bko9STp+lIYA+Fx9kByfgmXgpIA5xFJD/O/nlHQHmxt0l42/TEeEsNPhb 3YOvMhH2Wr4Lrjd8hnUljP4UuY4LU9PWilvNXwu2YyXm6rv//03BRMTS5eZ6tVR9 spaCrpfxvtRTcqnhGAnshTOVO/kZwRD2Ao5M2m4Rli0FlXhY1PqVxdEx0L+TUxqk Cpj7nMQpMnUPASC21FAyfGHNvxdxl6MP/MMkTB7lQGAAiq1i0uHlnct9DcuJgt9z HwfzyuxRlp2CIQ+EdK1DbS6w+TpJyRnUexlJE5flAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTc5Pi2+SzOwnn8vmss2G7IV74VYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyZDg1NGIwLTliYzYtNGU3Zi1hYzY0LWI1N2MyODNlYWU3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN3CQwDQYJKoZIhvcNAQELBQADggEBAIqLY6J6sl4j7DO0VPU/Vcsdt7nL /aEZSdMJZ1HDzTpATkcY/nlfJvxUifPbAw9e5JUKRjBco8l22PupU9+La4El2WEY yocgpp3pokU6nj2ZRFeVxYXuLgiJWHySsNzQWOi+wCGbtcDiOB1S647ItY2DJiRE o5EzO/rve3aC1F7z8Hlca2NpO0xvn7sGxOUS9fJVRPzZDkiidcVl6OTBP0A7U2Jy HnAjUMbxW2C2FR4HJmihmLf1Gs4gBzsPn7jk21W9+TefNaigT8pGCsidT2Asgh3r TzJgnw+RGDXkitty3y/lOB5BTvwRwKbF5OD1CDNnt0NQZ8rKU2RBRR6xmtk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:05 2026 by rpki-client