$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa File: 4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa (raw, json) Hash identifier: MJBOjLmqPchHnGduzlgR9yFI7V8qQNzYo6QDN83wd94= Subject key identifier: CA:F3:58:91:ED:3A:95:BE:1C:58:CC:62:08:7A:54:04:65:72:2C:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 210C551C4FB4197618DAC278D9BB7FAEBBB15116 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa Signing time: Sun 17 May 2026 01:30:14 +0000 ROA not before: Sun 17 May 2026 01:30:14 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0c:55:1c:4f:b4:19:76:18:da:c2:78:d9:bb:7f:ae:bb:b1:51:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 17 01:30:14 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=8fe68cf371d8847484fe2a7be877ae2b8f3f9791293c223e95ebb6de26173c40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:72:e3:ff:41:55:6d:94:e9:13:dd:b6:59: 42:3e:3c:37:92:ac:3f:f6:4b:cb:65:fc:89:d9:d1: 88:a2:47:13:e4:7a:70:9a:84:36:46:d7:0a:7f:42: 59:7d:dc:86:d8:6a:f2:1e:ce:ae:49:9e:ba:5d:e4: 1f:b1:98:93:cb:43:a8:5a:76:cd:50:ec:ec:3a:8c: 72:af:dd:3d:48:6c:bd:2d:13:51:47:b1:f5:5e:f4: a9:70:e6:41:1a:e4:17:55:b9:d0:63:7a:c3:9e:9c: 72:0d:87:a2:ff:f8:57:3f:67:b9:9d:c3:d1:0e:73: a7:dc:c8:a5:ec:46:b0:82:7e:00:16:21:15:4a:d5: 92:d3:b5:0b:77:a7:c2:ba:1f:0b:ca:a7:2d:b8:d3: f3:35:c2:0e:f0:d0:cc:93:f7:f3:95:96:d3:ba:c1: 32:0c:97:09:a6:c5:75:f3:b8:31:f5:63:ba:c6:e4: a3:bc:78:49:f3:18:b6:28:f7:f1:72:91:e9:d5:2b: a4:01:47:2a:47:25:a6:ac:39:22:25:f4:e9:9c:69: c0:76:f9:24:3d:52:08:b2:45:d3:04:1a:dc:c4:ef: 00:25:4b:c7:f0:ca:c1:fb:9e:a4:97:c7:cd:26:f3: 8d:80:70:5e:e8:c1:18:97:c5:4c:03:bc:f6:a3:35: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F3:58:91:ED:3A:95:BE:1C:58:CC:62:08:7A:54:04:65:72:2C:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.111.0/24 Signature Algorithm: sha256WithRSAEncryption 14:37:2a:94:1c:6a:bb:e7:9d:9c:b3:46:8b:b6:58:db:e9:09: 48:fc:46:be:ac:a2:04:fc:51:1f:bf:09:b3:2e:e3:09:17:7e: bd:93:09:6c:4d:75:88:57:2f:d6:63:c6:50:28:b8:dd:df:54: 5b:26:1e:ba:13:ff:d1:c6:12:d1:00:14:3a:6c:7a:9c:97:48: 00:60:7f:45:d8:44:e4:7d:94:a9:64:db:29:e5:0f:87:9c:e4: 1d:e4:89:84:10:7b:3f:05:65:c9:7c:c2:75:1d:55:d6:eb:b5: 9d:4d:14:cc:f6:6e:fe:f1:4c:85:74:28:54:e4:b1:d1:0c:22: e3:d2:26:8e:29:c4:7b:4f:f8:f7:95:8b:8b:0a:47:1d:0a:ff: ec:02:dc:06:99:c1:7a:94:e5:3c:9a:39:c8:42:00:f5:d0:ae: 64:aa:5f:ce:95:05:36:a3:b0:62:60:d2:2b:74:eb:27:2b:64: 95:d2:d7:10:9f:ed:d9:76:af:e8:1c:3c:36:59:36:98:d0:a0: 5b:63:29:a8:2f:82:92:72:af:ab:3d:8f:09:37:25:2d:6c:cf: a8:11:05:52:7a:2b:29:9b:ab:06:1d:54:ba:e1:f2:ec:ec:ae: 86:19:ae:fd:08:85:a9:9e:6e:08:a4:51:1f:8c:3b:93:f2:7f: 56:6c:62:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQxVHE+0GXYY2sJ42bt/rruxURYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE3MDEzMDE0WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmU2OGNmMzcxZDg4NDc0ODRmZTJhN2JlODc3YWUyYjhm M2Y5NzkxMjkzYzIyM2U5NWViYjZkZTI2MTczYzQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQdnLj/0FVbZTpE922WUI+PDeSrD/2S8tl/InZ0YiiRxPk enCahDZG1wp/Qll93IbYavIezq5Jnrpd5B+xmJPLQ6hads1Q7Ow6jHKv3T1IbL0t E1FHsfVe9Klw5kEa5BdVudBjesOenHINh6L/+Fc/Z7mdw9EOc6fcyKXsRrCCfgAW IRVK1ZLTtQt3p8K6HwvKpy240/M1wg7w0MyT9/OVltO6wTIMlwmmxXXzuDH1Y7rG 5KO8eEnzGLYo9/FykenVK6QBRypHJaasOSIl9OmcacB2+SQ9UgiyRdMEGtzE7wAl S8fwysH7nqSXx80m842AcF7owRiXxUwDvPajNYVtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyvNYke06lb4cWMxiCHpUBGVyLJYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjZmQ0NmQzLWE5ZDItNDdhMS05Y2Q4LTQwZWZhY2UyYmEzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28G8wDQYJKoZIhvcNAQELBQADggEBABQ3KpQcarvnnZyzRou2WNvpCUj8 Rr6sogT8UR+/CbMu4wkXfr2TCWxNdYhXL9ZjxlAouN3fVFsmHroT/9HGEtEAFDps epyXSABgf0XYROR9lKlk2ynlD4ec5B3kiYQQez8FZcl8wnUdVdbrtZ1NFMz2bv7x TIV0KFTksdEMIuPSJo4pxHtP+PeVi4sKRx0K/+wC3AaZwXqU5TyaOchCAPXQrmSq X86VBTajsGJg0it06ycrZJXS1xCf7dl2r+gcPDZZNpjQoFtjKagvgpJyr6s9jwk3 JS1sz6gRBVJ6KymbqwYdVLrh8uzsroYZrv0IhamebgikUR+MO5Pyf1ZsYoc= -----END CERTIFICATE-----Generated at Wed Jun 17 12:23:08 2026 by rpki-client