$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad195d6-eeb7-465e-a642-13789d32195e.roa File: 3ad195d6-eeb7-465e-a642-13789d32195e.roa (raw, json) Hash identifier: FdhYwK2tQue8qcluPCxKbmeDKV4EsLhSBSctmZcyVPw= Subject key identifier: 96:DF:CA:AA:FC:B6:E7:45:D4:04:C3:C5:41:CE:71:49:B0:AF:5B:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F8552CA79635FD6054ADE2114F86737822FFF2B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad195d6-eeb7-465e-a642-13789d32195e.roa Signing time: Sun 17 May 2026 01:10:58 +0000 ROA not before: Sun 17 May 2026 01:10:58 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:85:52:ca:79:63:5f:d6:05:4a:de:21:14:f8:67:37:82:2f:ff:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 17 01:10:58 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=7cc74bfd6fde283ea30a82dad12f3f712c385d68e7d0bd5684c5560ee938083b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:14:5d:f3:c1:44:4c:9c:be:9d:6f:ea:e8: 35:5c:b8:b1:d3:a9:be:ed:03:9c:a7:02:05:71:ea: 9c:c5:48:fa:5d:18:3f:1a:3a:77:cf:e1:07:ea:c0: 85:1b:3d:87:80:a0:8e:38:ee:73:1e:8b:de:35:aa: ab:64:ff:64:17:58:4b:e7:8a:26:f0:a8:fd:55:d2: 91:df:33:a4:27:73:09:3b:27:89:22:1d:93:b7:ba: d8:ca:34:00:21:f1:df:48:75:2e:91:cc:85:ef:fe: 5c:7e:e4:c7:d5:0e:de:57:0b:a2:41:9a:7d:42:8e: 5d:8f:65:8e:30:ea:85:ea:42:4f:e5:e2:d2:43:9e: 9c:c3:cf:8d:23:7e:17:a2:9c:95:58:9f:c0:34:0e: a6:03:ed:bd:55:c6:d8:cb:82:a3:1c:f1:fb:af:29: ad:26:38:fb:94:38:0f:40:fe:70:d9:15:22:92:9e: d3:d7:4a:65:23:9e:a8:8a:91:ee:97:cc:e2:8f:61: 68:d6:43:14:2d:07:e8:c9:02:bc:84:1b:c6:2e:8d: 84:e9:96:a9:f9:22:7e:cf:75:d6:c9:94:65:16:0c: 2e:fb:f8:43:4a:d4:8b:34:48:4f:4d:d6:e1:e9:37: bf:b6:08:6b:fc:6b:e1:6b:c6:16:2c:7f:79:1b:56: d1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:CA:AA:FC:B6:E7:45:D4:04:C3:C5:41:CE:71:49:B0:AF:5B:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad195d6-eeb7-465e-a642-13789d32195e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.112.0/24 Signature Algorithm: sha256WithRSAEncryption 12:5d:0c:a5:2e:f5:fc:21:92:21:5a:89:83:85:e3:f5:72:71: 8b:fb:bb:1d:94:64:d7:f8:d1:7e:78:7c:ac:8a:ee:70:d7:f4: c2:ea:a6:91:a2:ba:5f:32:67:56:3b:e6:3e:2b:64:e5:59:1f: 56:68:40:89:02:0c:a9:a7:4a:32:21:3c:c0:2b:ea:36:a7:e3: 00:4d:a6:94:7d:75:a2:d8:35:5c:16:d6:dc:bf:06:d0:af:87: 0f:bd:5d:a1:12:cc:a9:59:80:67:de:86:f8:80:f6:01:07:62: 2d:ff:2a:4f:a0:9a:f3:ec:0f:48:4d:a9:66:a9:22:84:91:cb: a4:df:f1:b3:a1:68:16:db:34:2d:8b:8a:56:0f:82:eb:c9:ac: 1a:68:9f:3a:9c:18:55:8d:66:d0:8b:a3:88:e1:24:b2:4e:44: 7a:ec:52:13:cd:a1:bc:26:69:56:7c:3d:62:d7:ca:42:be:ee: 16:d5:80:cb:01:63:fd:c8:a4:4c:2f:0b:1c:79:95:3d:bb:9f: 57:e5:89:91:ed:0a:9f:7b:e9:40:cf:0e:51:c1:ee:5e:fc:f6: 32:98:04:80:43:44:c5:c5:36:a0:9f:14:68:b7:c5:78:55:e2: 8e:09:02:70:cf:17:e9:49:d6:f8:2a:76:6b:53:64:3f:7c:43: bc:d4:d5:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT4VSynljX9YFSt4hFPhnN4Iv/yswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE3MDExMDU4WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2M3NGJmZDZmZGUyODNlYTMwYTgyZGFkMTJmM2Y3MTJj Mzg1ZDY4ZTdkMGJkNTY4NGM1NTYwZWU5MzgwODNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5SRRd88FETJy+nW/q6DVcuLHTqb7tA5ynAgVx6pzFSPpd GD8aOnfP4QfqwIUbPYeAoI447nMei941qqtk/2QXWEvniibwqP1V0pHfM6Qncwk7 J4kiHZO3utjKNAAh8d9IdS6RzIXv/lx+5MfVDt5XC6JBmn1Cjl2PZY4w6oXqQk/l 4tJDnpzDz40jfheinJVYn8A0DqYD7b1VxtjLgqMc8fuvKa0mOPuUOA9A/nDZFSKS ntPXSmUjnqiKke6XzOKPYWjWQxQtB+jJAryEG8YujYTplqn5In7PddbJlGUWDC77 +ENK1Is0SE9N1uHpN7+2CGv8a+FrxhYsf3kbVtEvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlt/Kqvy250XUBMPFQc5xSbCvW0QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhZDE5NWQ2LWVlYjctNDY1ZS1hNjQyLTEzNzg5ZDMyMTk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA273AwDQYJKoZIhvcNAQELBQADggEBABJdDKUu9fwhkiFaiYOF4/VycYv7 ux2UZNf40X54fKyK7nDX9MLqppGiul8yZ1Y75j4rZOVZH1ZoQIkCDKmnSjIhPMAr 6jan4wBNppR9daLYNVwW1ty/BtCvhw+9XaESzKlZgGfehviA9gEHYi3/Kk+gmvPs D0hNqWapIoSRy6Tf8bOhaBbbNC2LilYPguvJrBponzqcGFWNZtCLo4jhJLJORHrs UhPNobwmaVZ8PWLXykK+7hbVgMsBY/3IpEwvCxx5lT27n1fliZHtCp976UDPDlHB 7l789jKYBIBDRMXFNqCfFGi3xXhV4o4JAnDPF+lJ1vgqdmtTZD98Q7zU1bI= -----END CERTIFICATE-----Generated at Wed Jun 17 08:36:07 2026 by rpki-client