$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a8ad419-80e8-4f51-a7c0-2715212906e9.roa File: 4a8ad419-80e8-4f51-a7c0-2715212906e9.roa (raw, json) Hash identifier: Rnf9VcR+1PMhqURzSl+Q4EKaXsLARcis3ttzgHerCZc= Subject key identifier: EB:37:C2:DE:B6:B0:66:17:55:ED:C2:ED:2E:85:B0:48:3F:5A:EC:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CE151E3C5E0DD493A4298C8B34EDA5ED065BA22 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a8ad419-80e8-4f51-a7c0-2715212906e9.roa Signing time: Sun 17 May 2026 01:41:13 +0000 ROA not before: Sun 17 May 2026 01:41:13 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e1:51:e3:c5:e0:dd:49:3a:42:98:c8:b3:4e:da:5e:d0:65:ba:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 17 01:41:13 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=d53840bd3d3e1486516ed048e9c565b5b6d6104e0f40234cd82850027343566e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:c4:34:aa:52:9b:b5:80:de:1b:0f:13:b2: 08:e6:d1:1e:78:6b:5a:ee:74:93:2b:98:72:58:46: 64:89:a7:5d:f4:25:ff:b9:1f:03:5c:cb:d0:98:0a: 71:2d:72:c3:d3:fa:c2:3c:da:50:30:68:70:74:ae: 93:37:03:32:5a:78:63:85:32:b2:82:2a:e8:9c:d2: 1a:ee:e6:8e:3f:bd:aa:8c:7e:dc:5f:4b:bb:86:3a: 93:51:b5:e2:40:f7:1f:43:c2:eb:fb:60:13:98:b7: 7e:bb:40:84:79:c2:dd:3b:23:a7:76:57:93:ad:eb: 5b:23:fc:11:a0:e2:e6:ce:2b:8c:64:cb:0b:10:97: a4:4f:2f:b5:2f:03:ea:1c:0e:1b:77:a4:4f:da:66: 27:0e:74:2a:e3:cb:70:c4:24:3d:32:25:fb:38:75: df:84:19:eb:c8:c3:ca:dd:1d:a6:9c:1b:57:1f:21: 12:17:f0:69:fe:cc:5a:30:6b:96:2c:13:99:28:cd: 1c:ff:02:c5:37:ac:41:ee:91:bf:39:c4:76:be:87: 0f:20:68:90:1a:86:c8:18:1c:16:7d:44:85:c6:d5: 0e:7d:f3:2d:26:1c:a3:e6:dd:94:5f:71:9e:c8:b4: 77:d6:27:36:9b:74:c1:ce:58:ad:79:67:0e:ae:63: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:C2:DE:B6:B0:66:17:55:ED:C2:ED:2E:85:B0:48:3F:5A:EC:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a8ad419-80e8-4f51-a7c0-2715212906e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.3.0/24 Signature Algorithm: sha256WithRSAEncryption 92:d8:80:44:f3:57:8e:ba:b0:95:d9:d8:d4:4f:b2:36:e5:7a: e4:a7:30:08:07:8f:ad:b0:a6:bd:d3:49:84:84:77:72:ba:b5: 29:0e:a1:91:85:76:98:18:f7:2f:14:14:77:dd:6b:39:88:c3: 97:ae:3d:7f:91:24:ab:f2:7e:91:d9:eb:09:69:70:2a:c6:48: 12:e1:a0:89:31:c6:17:8f:1f:e8:81:23:54:a3:5f:f7:7c:e0: eb:11:2c:17:54:0e:4d:9f:3b:f8:df:26:b8:37:b6:a5:2f:a8: 6b:e4:9c:22:12:57:7a:da:41:0a:c1:c5:cb:a7:4b:d3:ba:47: f6:ad:03:c2:c9:d7:17:88:1a:1e:20:50:e1:b6:34:b5:f2:85: 77:35:41:87:c6:27:67:f2:c1:60:eb:8c:0b:69:09:54:2c:42: af:8f:21:36:09:75:7d:85:4d:2f:5b:b0:81:ef:4e:cb:35:60: 48:e9:c7:09:ee:9c:e9:60:5b:21:f1:97:fb:82:dd:ca:3d:ab: 8a:2a:d2:fc:6b:fb:9a:2a:4c:01:f6:4b:52:43:78:35:99:d4: 68:3e:33:5c:cf:63:0e:ce:b9:a1:b0:60:48:d9:71:e3:32:48: 16:6f:99:7c:aa:d1:f5:32:c8:88:7c:2b:6f:b0:0b:2b:bc:1c: 33:5f:80:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULOFR48Xg3Uk6QpjIs07aXtBluiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE3MDE0MTEzWhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTM4NDBiZDNkM2UxNDg2NTE2ZWQwNDhlOWM1NjViNWI2 ZDYxMDRlMGY0MDIzNGNkODI4NTAwMjczNDM1NjZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEUMQ0qlKbtYDeGw8Tsgjm0R54a1rudJMrmHJYRmSJp130 Jf+5HwNcy9CYCnEtcsPT+sI82lAwaHB0rpM3AzJaeGOFMrKCKuic0hru5o4/vaqM ftxfS7uGOpNRteJA9x9Dwuv7YBOYt367QIR5wt07I6d2V5Ot61sj/BGg4ubOK4xk ywsQl6RPL7UvA+ocDht3pE/aZicOdCrjy3DEJD0yJfs4dd+EGevIw8rdHaacG1cf IRIX8Gn+zFowa5YsE5kozRz/AsU3rEHukb85xHa+hw8gaJAahsgYHBZ9RIXG1Q59 8y0mHKPm3ZRfcZ7ItHfWJzabdMHOWK15Zw6uY2abAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6zfC3rawZhdV7cLtLoWwSD9a7BQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhOGFkNDE5LTgwZTgtNGY1MS1hN2MwLTI3MTUyMTI5MDZlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAgMwDQYJKoZIhvcNAQELBQADggEBAJLYgETzV466sJXZ2NRPsjbleuSn MAgHj62wpr3TSYSEd3K6tSkOoZGFdpgY9y8UFHfdazmIw5euPX+RJKvyfpHZ6wlp cCrGSBLhoIkxxhePH+iBI1SjX/d84OsRLBdUDk2fO/jfJrg3tqUvqGvknCISV3ra QQrBxcunS9O6R/atA8LJ1xeIGh4gUOG2NLXyhXc1QYfGJ2fywWDrjAtpCVQsQq+P ITYJdX2FTS9bsIHvTss1YEjpxwnunOlgWyHxl/uC3co9q4oq0vxr+5oqTAH2S1JD eDWZ1Gg+M1zPYw7OuaGwYEjZceMySBZvmXyq0fUyyIh8K2+wCyu8HDNfgDM= -----END CERTIFICATE-----Generated at Wed Jun 17 08:35:33 2026 by rpki-client