$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3455edb0-5870-49ae-aead-be18a7eaffdc.roa File: 3455edb0-5870-49ae-aead-be18a7eaffdc.roa (raw, json) Hash identifier: IhRfiVRO4OpTh48NobC3SS0Ty822TCr+E3zr29Awb+I= Subject key identifier: 9A:E7:58:8C:59:F1:7B:B4:2C:89:5D:CA:71:48:A0:33:73:7E:F9:42 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1FF14BFAD946D748BACD6CEBE69978CC19D94C55 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3455edb0-5870-49ae-aead-be18a7eaffdc.roa Signing time: Wed 20 May 2026 00:30:41 +0000 ROA not before: Wed 20 May 2026 00:30:41 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f1:4b:fa:d9:46:d7:48:ba:cd:6c:eb:e6:99:78:cc:19:d9:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 20 00:30:41 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=d17e6ef16992a45f6dffd71d9aa82402cbe513c75ef0fab9d8dc0b6fd58c8aee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:ad:82:f7:8e:2c:c1:57:6f:a3:19:e5:8a: 95:5d:9c:4b:3d:09:94:c4:b8:f5:02:cc:ca:75:2b: 7f:a0:91:4e:0b:13:88:88:4e:25:cc:8b:60:f7:8f: 04:02:6b:3f:37:0e:d2:ec:62:c0:51:7f:7e:3f:89: 89:46:8b:70:4a:0d:09:7b:37:b6:89:66:4f:db:6e: 02:15:02:a0:b7:e1:ac:01:3c:31:b7:00:33:8f:a5: df:4a:4a:b7:91:a2:f5:13:9f:f9:d6:83:dd:d4:05: 1d:b3:5c:65:36:14:f5:6f:88:e2:99:f7:a2:a7:a6: 4a:17:19:a2:04:fa:2d:fe:92:b8:35:ff:51:70:84: bb:b1:20:dc:6c:07:5d:eb:07:e8:f3:80:fd:60:f3: 80:ce:a9:bd:a5:0a:80:2e:3d:f7:f0:0e:e2:7c:3c: 70:b0:d5:77:05:d0:94:2f:0d:04:f6:72:c1:43:77: 15:58:c0:ae:9a:17:3e:4c:24:a9:c4:d3:29:af:05: a2:ca:22:11:56:03:31:2a:67:15:0d:79:be:aa:0c: de:e9:ca:9e:0a:ad:3e:d7:f9:c7:0a:76:17:54:cb: 6b:be:22:44:d6:1b:48:0e:d9:75:82:b5:8e:7c:dc: 7c:5f:58:c5:de:5a:21:6f:6c:31:a1:2c:99:6e:0f: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E7:58:8C:59:F1:7B:B4:2C:89:5D:CA:71:48:A0:33:73:7E:F9:42 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3455edb0-5870-49ae-aead-be18a7eaffdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.186.0/23 Signature Algorithm: sha256WithRSAEncryption 78:a2:4f:c5:d5:dc:11:74:7c:69:df:1a:7f:4b:3c:41:a5:1e: 04:ca:e2:ed:ee:84:d6:b5:5d:20:78:df:d3:54:17:f4:0d:62: 6f:20:d1:ab:e9:3d:fd:d0:33:71:41:5c:a9:c7:83:57:4f:7b: 99:6e:f1:8d:07:cd:28:93:76:b7:1f:63:da:65:8a:58:1c:7c: ea:0c:30:5b:fa:c4:fc:d8:f4:6e:c3:d8:ac:b5:fe:37:29:c9: b2:f9:7d:be:9d:55:71:94:c9:fe:44:5b:d3:1f:4b:78:65:51: 79:50:7a:7e:97:c0:f2:07:97:92:7c:a0:40:5c:84:59:46:eb: 6a:7c:54:6c:26:70:19:46:18:8c:fa:c1:95:cd:5e:12:01:90: 9f:f0:23:a5:63:5b:e4:ea:d8:90:37:ba:16:cd:25:41:c9:c0: 3e:7e:15:ca:73:53:92:1d:c2:52:62:3d:ad:52:8d:be:8b:c8: 12:13:40:8b:77:5b:24:4c:fb:24:29:08:9d:d6:6b:69:8f:75: 6e:1e:79:7d:11:a6:95:5e:f3:e5:2f:c5:37:5d:f5:fd:92:95: 2f:af:7b:35:d0:87:fe:6e:7c:b7:ce:0a:20:dc:a1:c4:0d:ef: fb:69:f9:77:b5:c9:53:45:bb:00:03:e1:18:db:53:a2:9c:9a: 3f:4e:39:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH/FL+tlG10i6zWzr5pl4zBnZTFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTIwMDAzMDQxWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTdlNmVmMTY5OTJhNDVmNmRmZmQ3MWQ5YWE4MjQwMmNi ZTUxM2M3NWVmMGZhYjlkOGRjMGI2ZmQ1OGM4YWVlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdj62C944swVdvoxnlipVdnEs9CZTEuPUCzMp1K3+gkU4L E4iITiXMi2D3jwQCaz83DtLsYsBRf34/iYlGi3BKDQl7N7aJZk/bbgIVAqC34awB PDG3ADOPpd9KSreRovUTn/nWg93UBR2zXGU2FPVviOKZ96KnpkoXGaIE+i3+krg1 /1FwhLuxINxsB13rB+jzgP1g84DOqb2lCoAuPffwDuJ8PHCw1XcF0JQvDQT2csFD dxVYwK6aFz5MJKnE0ymvBaLKIhFWAzEqZxUNeb6qDN7pyp4KrT7X+ccKdhdUy2u+ IkTWG0gO2XWCtY583HxfWMXeWiFvbDGhLJluD2YXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmudYjFnxe7QsiV3KcUigM3N++UIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM0NTVlZGIwLTU4NzAtNDlhZS1hZWFkLWJlMThhN2VhZmZkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM9rowDQYJKoZIhvcNAQELBQADggEBAHiiT8XV3BF0fGnfGn9LPEGlHgTK 4u3uhNa1XSB439NUF/QNYm8g0avpPf3QM3FBXKnHg1dPe5lu8Y0HzSiTdrcfY9pl ilgcfOoMMFv6xPzY9G7D2Ky1/jcpybL5fb6dVXGUyf5EW9MfS3hlUXlQen6XwPIH l5J8oEBchFlG62p8VGwmcBlGGIz6wZXNXhIBkJ/wI6VjW+Tq2JA3uhbNJUHJwD5+ FcpzU5IdwlJiPa1Sjb6LyBITQIt3WyRM+yQpCJ3Wa2mPdW4eeX0RppVe8+UvxTdd 9f2SlS+vezXQh/5ufLfOCiDcocQN7/tp+Xe1yVNFuwAD4RjbU6Kcmj9OObw= -----END CERTIFICATE-----Generated at Sat Jun 13 10:56:18 2026 by rpki-client