$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9bf59310-023c-4ced-a65d-e33c857df96c.roa File: 9bf59310-023c-4ced-a65d-e33c857df96c.roa (raw, json) Hash identifier: 8QOI3s5IOP5Ni8BT54CFGyziZoMp88UXe24qrUppz/Y= Subject key identifier: 87:AA:1E:80:64:39:86:FA:E9:7C:BC:B7:82:3A:A5:74:C0:13:EE:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 07D9C2A56D952E8104C05F374190F5CD9EC3949E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9bf59310-023c-4ced-a65d-e33c857df96c.roa Signing time: Sat 16 May 2026 02:31:20 +0000 ROA not before: Sat 16 May 2026 02:31:20 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.206.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d9:c2:a5:6d:95:2e:81:04:c0:5f:37:41:90:f5:cd:9e:c3:94:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 16 02:31:20 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=df8b086b7615f456fe4f035f2785d30fd10ea6b9243aa1a8b07d62ecb60eabdf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:46:96:2b:81:3b:4e:1b:43:c7:a1:25:e3: b8:51:41:a7:dd:8c:ed:4c:22:53:11:4a:2a:5c:ff: 79:e5:e7:0f:f3:33:23:54:9d:4d:23:68:81:04:f8: ac:de:88:ae:07:4c:6c:4b:33:4d:ba:d5:de:de:76: 79:8a:5e:a0:5c:84:8f:9f:c5:12:b3:44:3a:cc:b6: 50:ff:0b:52:b3:a3:20:4c:2c:a9:66:5a:01:ac:07: 49:a5:92:98:9e:55:6c:df:62:e0:98:c7:ab:e1:6d: fe:b4:8d:fb:fd:d4:31:5e:38:14:8d:95:21:19:f9: df:7c:84:8e:63:07:94:6c:8b:2d:a7:ec:5e:81:ab: 1c:e2:1a:21:57:22:3e:82:cc:d5:ed:b6:63:6c:c0: 33:6b:85:be:c5:d3:f2:85:c4:41:b8:d0:11:3d:96: 6d:7c:93:8d:e0:c1:89:48:71:6c:bc:28:e3:80:06: 23:c7:18:5f:f0:91:68:22:a4:32:0b:05:af:49:53: 64:7c:b6:68:c2:45:20:60:a6:a5:fa:68:24:fd:d1: 7d:67:a6:af:3e:12:74:eb:dd:fe:ed:5b:f5:47:04: 7c:a7:87:c7:05:50:01:35:74:33:82:19:35:21:c9: 14:f4:7f:c7:cd:e1:10:99:9a:07:91:16:10:8d:25: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:1E:80:64:39:86:FA:E9:7C:BC:B7:82:3A:A5:74:C0:13:EE:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9bf59310-023c-4ced-a65d-e33c857df96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.206.254.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:f6:2c:3e:ad:7d:5f:1c:4e:7c:64:fa:b7:5d:14:d9:31:0a: f2:d6:c3:e4:6c:d8:fe:4f:d4:98:dc:66:0d:0d:96:4e:28:ab: 7f:9e:9a:bc:36:57:95:e8:74:0d:3d:ba:e4:a3:f2:f0:27:29: 3f:22:dd:ed:dd:37:83:64:2d:fa:86:b9:88:50:18:0f:50:a6: 72:47:00:f2:41:4b:ee:60:d2:74:27:96:6a:94:69:ef:76:67: 69:6d:25:65:0e:b8:b5:68:4c:88:d2:d6:ce:60:9a:44:2f:d7: 03:61:c2:b6:ba:05:1d:a2:fe:4d:ba:a5:0b:04:9b:18:57:13: 98:1d:d2:93:93:32:14:9d:9b:6d:3a:0f:4d:2b:bb:49:c1:4a: 5c:3a:66:e9:c8:66:fe:1a:58:8f:05:7f:9a:d7:c3:7d:6c:6b: 3b:9c:de:9b:c9:6e:87:c5:81:11:d9:e9:ec:2f:81:02:eb:36: 31:6a:6c:05:17:d8:79:b3:0e:e3:ae:4a:30:d0:8c:c2:25:1f: e2:17:8a:ab:2d:c8:c1:8c:4a:ce:f5:3e:91:b1:eb:f1:82:df: 4b:72:67:61:62:4e:eb:36:7f:72:7b:ec:2f:7f:dd:48:31:3b: 57:81:19:4d:9b:c2:d1:03:af:51:af:46:5c:10:90:1f:d4:32: f4:76:a2:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB9nCpW2VLoEEwF83QZD1zZ7DlJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE2MDIzMTIwWhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjhiMDg2Yjc2MTVmNDU2ZmU0ZjAzNWYyNzg1ZDMwZmQx MGVhNmI5MjQzYWExYThiMDdkNjJlY2I2MGVhYmRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIyEaWK4E7ThtDx6El47hRQafdjO1MIlMRSipc/3nl5w/z MyNUnU0jaIEE+KzeiK4HTGxLM0261d7ednmKXqBchI+fxRKzRDrMtlD/C1KzoyBM LKlmWgGsB0mlkpieVWzfYuCYx6vhbf60jfv91DFeOBSNlSEZ+d98hI5jB5Rsiy2n 7F6BqxziGiFXIj6CzNXttmNswDNrhb7F0/KFxEG40BE9lm18k43gwYlIcWy8KOOA BiPHGF/wkWgipDILBa9JU2R8tmjCRSBgpqX6aCT90X1npq8+EnTr3f7tW/VHBHyn h8cFUAE1dDOCGTUhyRT0f8fN4RCZmgeRFhCNJUM9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh6oegGQ5hvrpfLy3gjqldMAT7lAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzliZjU5MzEwLTAyM2MtNGNlZC1hNjVkLWUzM2M4NTdkZjk2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2zv4wDQYJKoZIhvcNAQELBQADggEBADr2LD6tfV8cTnxk+rddFNkxCvLW w+Rs2P5P1JjcZg0Nlk4oq3+emrw2V5XodA09uuSj8vAnKT8i3e3dN4NkLfqGuYhQ GA9QpnJHAPJBS+5g0nQnlmqUae92Z2ltJWUOuLVoTIjS1s5gmkQv1wNhwra6BR2i /k26pQsEmxhXE5gd0pOTMhSdm206D00ru0nBSlw6ZunIZv4aWI8Ff5rXw31sazuc 3pvJbofFgRHZ6ewvgQLrNjFqbAUX2HmzDuOuSjDQjMIlH+IXiqstyMGMSs71PpGx 6/GC30tyZ2FiTus2f3J77C9/3UgxO1eBGU2bwtEDr1GvRlwQkB/UMvR2orI= -----END CERTIFICATE-----Generated at Wed Jun 17 08:29:30 2026 by rpki-client