$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/794debef-4ebf-4ab2-a76b-bed994258774.roa File: 794debef-4ebf-4ab2-a76b-bed994258774.roa (raw, json) Hash identifier: NHyuObZiOBqq3sxyUngWp480YYVdM5+oe4DaeFczWjs= Subject key identifier: 5E:65:A8:47:73:88:9C:D5:D3:FB:B3:61:C1:8E:09:94:04:61:AB:B6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 729BB2E2B3B58E9C2C8C898307F8957208BFA25C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/794debef-4ebf-4ab2-a76b-bed994258774.roa Signing time: Fri 15 May 2026 03:11:00 +0000 ROA not before: Fri 15 May 2026 03:11:00 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.237.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9b:b2:e2:b3:b5:8e:9c:2c:8c:89:83:07:f8:95:72:08:bf:a2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 15 03:11:00 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=ea76d975a5cae76e6373db8ba9170702e3fd5f431fc6553f25acd7e13e0c4b00, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:e3:f0:16:65:07:9e:8f:97:1a:85:b9:f7: a5:7e:82:fe:f4:d6:b1:27:aa:5c:97:33:4f:7a:3c: 2b:fd:10:5d:3b:e2:e7:bb:20:b1:ce:0a:39:ab:dd: 04:e2:11:42:e3:ae:f3:42:93:54:a2:ee:9d:c3:5b: 37:ab:df:c3:b9:b1:6e:ca:f9:15:dc:de:3d:34:3c: f5:7c:89:2f:40:78:9f:d4:2b:ec:df:a0:0e:e8:8b: 1c:41:77:91:47:88:dc:bf:2d:87:db:61:fc:5d:3b: 07:85:f1:9a:e6:93:99:1c:e9:f2:fa:54:b3:6e:93: 89:03:0d:fe:62:4a:10:52:28:08:96:ad:13:82:3d: 92:e4:0c:5a:a8:f2:25:82:9c:ba:e5:3a:b3:9b:de: 46:4f:26:0e:c1:1d:af:f7:c0:cc:7a:cd:16:01:e7: 99:49:45:65:e4:54:46:8e:d2:3c:ff:e7:a0:9b:e6: 23:f2:f2:c8:07:2d:7a:4e:dc:02:43:41:14:8d:fd: 95:10:ae:71:b0:87:f7:9f:c5:80:31:39:48:f8:ef: 09:a5:37:8c:4c:4e:bf:be:43:59:14:bb:48:93:48: 9c:45:51:98:2b:77:60:e9:eb:91:82:54:b1:bd:fc: 68:da:6b:db:88:f0:ae:97:e2:e6:9f:0b:6f:88:cf: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:65:A8:47:73:88:9C:D5:D3:FB:B3:61:C1:8E:09:94:04:61:AB:B6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/794debef-4ebf-4ab2-a76b-bed994258774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.237.253.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a0:ce:a8:7c:ba:a3:6d:77:e7:cb:c1:a0:72:b2:f2:99:76: 33:9a:e9:1e:90:1e:a3:f7:27:9b:7f:61:e5:d4:36:b8:08:a6: 8b:64:ab:2c:c9:32:7f:fe:54:c6:10:d1:62:23:f2:9d:f2:83: 15:55:42:4d:8e:b1:37:c4:17:71:9a:8c:5e:0b:99:8c:47:2e: 0b:b4:07:8a:42:7d:27:a2:bd:ea:45:fd:d2:78:dd:cd:5b:6b: a1:be:85:30:ee:4a:c2:04:c5:ac:cb:89:79:ba:e3:38:6a:94: 38:bc:ab:bb:57:c2:dc:6f:f5:32:66:33:36:6b:89:ec:41:53: 52:c4:f8:9e:06:a2:58:15:f3:75:6b:4f:98:58:d8:6f:ed:30: 5d:03:56:74:06:c4:1e:d9:ad:6e:2f:2c:88:da:47:f7:33:25: 4b:59:a1:90:ca:a9:3b:ae:1b:9b:5f:44:42:0f:ac:cc:7c:5e: 07:49:0d:ff:68:cf:05:d0:bc:b6:dc:7e:4b:19:01:bf:d2:80: a1:ac:4b:c0:b9:19:32:93:54:db:e7:39:ef:8e:f6:97:f3:0b: 36:23:f0:87:fe:5b:e9:27:a7:2d:70:4a:53:e5:b2:07:cd:c9: 0b:d1:fc:b8:dd:f5:aa:90:f4:70:22:61:aa:6b:c0:0f:fc:f6: 8b:50:6b:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcpuy4rO1jpwsjImDB/iVcgi/olwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE1MDMxMTAwWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTc2ZDk3NWE1Y2FlNzZlNjM3M2RiOGJhOTE3MDcwMmUz ZmQ1ZjQzMWZjNjU1M2YyNWFjZDdlMTNlMGM0YjAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgq+PwFmUHno+XGoW596V+gv701rEnqlyXM096PCv9EF07 4ue7ILHOCjmr3QTiEULjrvNCk1Si7p3DWzer38O5sW7K+RXc3j00PPV8iS9AeJ/U K+zfoA7oixxBd5FHiNy/LYfbYfxdOweF8Zrmk5kc6fL6VLNuk4kDDf5iShBSKAiW rROCPZLkDFqo8iWCnLrlOrOb3kZPJg7BHa/3wMx6zRYB55lJRWXkVEaO0jz/56Cb 5iPy8sgHLXpO3AJDQRSN/ZUQrnGwh/efxYAxOUj47wmlN4xMTr++Q1kUu0iTSJxF UZgrd2Dp65GCVLG9/Gjaa9uI8K6X4uafC2+IzxyvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXmWoR3OInNXT+7NhwY4JlARhq7YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc5NGRlYmVmLTRlYmYtNGFiMi1hNzZiLWJlZDk5NDI1ODc3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA27f0wDQYJKoZIhvcNAQELBQADggEBAJygzqh8uqNtd+fLwaBysvKZdjOa 6R6QHqP3J5t/YeXUNrgIpotkqyzJMn/+VMYQ0WIj8p3ygxVVQk2OsTfEF3GajF4L mYxHLgu0B4pCfSeivepF/dJ43c1ba6G+hTDuSsIExazLiXm64zhqlDi8q7tXwtxv 9TJmMzZriexBU1LE+J4GolgV83VrT5hY2G/tMF0DVnQGxB7ZrW4vLIjaR/czJUtZ oZDKqTuuG5tfREIPrMx8XgdJDf9ozwXQvLbcfksZAb/SgKGsS8C5GTKTVNvnOe+O 9pfzCzYj8If+W+knpy1wSlPlsgfNyQvR/Ljd9aqQ9HAiYaprwA/89otQa58= -----END CERTIFICATE-----Generated at Wed Jun 17 10:57:13 2026 by rpki-client