$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e2656a5-dcde-4fb0-9cda-58f6e21f358d.roa File: 8e2656a5-dcde-4fb0-9cda-58f6e21f358d.roa (raw, json) Hash identifier: 12oqOph4cgw1P8pGcGiJYrQXaqWiJrgVo7i6f5StTOc= Subject key identifier: 06:BF:EA:C1:C2:AB:55:77:95:33:1A:38:42:14:A7:9F:D7:C4:F4:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3ABF38CF5D572C54546F1CE369556582334F4FE8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e2656a5-dcde-4fb0-9cda-58f6e21f358d.roa Signing time: Thu 02 Apr 2026 00:01:00 +0000 ROA not before: Thu 02 Apr 2026 00:01:00 +0000 ROA not after: Wed 01 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.5.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:bf:38:cf:5d:57:2c:54:54:6f:1c:e3:69:55:65:82:33:4f:4f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 2 00:01:00 2026 GMT Not After : Jul 1 23:59:59 2026 GMT Subject: serialNumber=863dcc658ba6fd2d0949887055726b35df5e7e5f1f1ed2f73aaa95dcfbca3e59, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:cc:67:b4:bd:62:f4:34:24:b5:5a:d2:98: 9f:1b:5f:51:a8:c7:e2:9f:67:7f:31:87:1d:ec:98: cb:5d:0e:f1:44:8d:a0:d7:23:09:69:ce:5e:d1:34: 77:3a:60:2a:b1:1d:d0:ae:62:42:27:a4:6c:0a:47: c1:2f:54:94:19:89:19:95:9d:86:1c:15:da:53:fc: ea:53:1f:e4:13:91:12:31:a0:26:11:77:53:06:3b: f1:75:23:44:89:a8:e1:36:18:75:e0:ea:17:04:99: 44:88:bd:d8:06:e4:9a:a0:0d:f5:95:3c:d1:32:26: 68:78:e0:b1:de:54:13:0e:cc:ff:38:e6:f3:45:00: 6d:31:34:3d:ab:a4:c5:68:92:66:f8:c1:8a:38:ad: 0e:ce:16:6b:ab:77:50:bb:5d:c1:77:85:d6:9f:61: 26:18:13:c3:99:6b:7b:1a:d2:8b:7b:bb:41:1a:7d: 3e:bc:df:69:ef:39:f9:81:18:87:ce:e8:07:b5:e5: d6:22:ea:db:24:10:fa:35:85:be:ff:96:56:7a:af: 05:f0:de:10:b5:df:10:56:83:d5:a1:8c:5c:88:30: ac:48:ce:fb:aa:14:47:bc:07:8b:2a:85:93:1e:7b: 03:b4:a8:37:27:4f:d8:14:b4:3d:5e:d3:37:2c:34: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:EA:C1:C2:AB:55:77:95:33:1A:38:42:14:A7:9F:D7:C4:F4:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e2656a5-dcde-4fb0-9cda-58f6e21f358d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.5.90.0/24 Signature Algorithm: sha256WithRSAEncryption 24:dd:91:c6:98:61:5e:1b:7f:84:68:17:96:9b:c8:6b:70:a8: 4a:02:e7:bd:dd:af:0d:10:a9:a2:37:1d:80:2c:f2:5a:71:f6: 3d:b1:1d:ca:69:f7:23:1f:28:9a:d2:da:ba:4b:23:a4:99:74: 19:79:93:ab:c4:6d:c7:d8:46:29:ea:85:5b:b7:3a:e8:6a:0c: f0:90:d7:97:95:6c:02:eb:b7:af:cf:b1:69:78:b8:f3:6c:ca: 29:1b:59:4a:03:d5:0d:34:3d:9d:cb:a4:ea:9b:f3:f3:35:bc: 67:f6:93:d7:f8:73:06:06:98:78:fe:c4:ad:bb:a4:cc:d1:09: 34:2d:5a:9e:be:90:82:8b:3c:31:0b:17:7d:69:96:1a:00:a9: cf:9e:c5:98:50:9e:74:fc:bc:61:29:1d:7d:79:e0:b5:2f:25: 85:ed:8e:a5:e1:1c:a5:99:5e:05:65:f8:e9:f8:d2:31:7d:3e: a8:33:7b:90:dd:9f:37:3b:63:ee:96:9a:7c:c6:6e:c8:c2:e4: 3a:3e:e6:e9:51:f4:28:2f:c1:7d:41:c1:2e:20:fc:d6:05:5b: 7a:6f:5e:67:80:db:89:10:30:71:b5:5b:89:5e:a7:e8:6c:71: 71:ab:eb:bc:7c:36:47:cf:16:50:5b:c3:54:de:cc:0a:b1:76: e0:8b:85:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOr84z11XLFRUbxzjaVVlgjNPT+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNDAyMDAwMTAwWhcNMjYwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjNkY2M2NThiYTZmZDJkMDk0OTg4NzA1NTcyNmIzNWRm NWU3ZTVmMWYxZWQyZjczYWFhOTVkY2ZiY2EzZTU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjS8xntL1i9DQktVrSmJ8bX1Gox+KfZ38xhx3smMtdDvFE jaDXIwlpzl7RNHc6YCqxHdCuYkInpGwKR8EvVJQZiRmVnYYcFdpT/OpTH+QTkRIx oCYRd1MGO/F1I0SJqOE2GHXg6hcEmUSIvdgG5JqgDfWVPNEyJmh44LHeVBMOzP84 5vNFAG0xND2rpMVokmb4wYo4rQ7OFmurd1C7XcF3hdafYSYYE8OZa3sa0ot7u0Ea fT6832nvOfmBGIfO6Ae15dYi6tskEPo1hb7/llZ6rwXw3hC13xBWg9WhjFyIMKxI zvuqFEe8B4sqhZMeewO0qDcnT9gUtD1e0zcsNMZBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBr/qwcKrVXeVMxo4QhSnn9fE9LkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhlMjY1NmE1LWRjZGUtNGZiMC05Y2RhLTU4ZjZlMjFmMzU4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADBVowDQYJKoZIhvcNAQELBQADggEBACTdkcaYYV4bf4RoF5abyGtwqEoC 573drw0QqaI3HYAs8lpx9j2xHcpp9yMfKJrS2rpLI6SZdBl5k6vEbcfYRinqhVu3 OuhqDPCQ15eVbALrt6/PsWl4uPNsyikbWUoD1Q00PZ3LpOqb8/M1vGf2k9f4cwYG mHj+xK27pMzRCTQtWp6+kIKLPDELF31plhoAqc+exZhQnnT8vGEpHX154LUvJYXt jqXhHKWZXgVl+On40jF9Pqgze5Ddnzc7Y+6WmnzGbsjC5Do+5ulR9CgvwX1BwS4g /NYFW3pvXmeA24kQMHG1W4lep+hscXGr67x8NkfPFlBbw1TezAqxduCLhZg= -----END CERTIFICATE-----Generated at Fri Apr 17 05:40:44 2026 by rpki-client