$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/849f4ae1-c72b-4097-8ab8-8f050df59e7f.roa File: 849f4ae1-c72b-4097-8ab8-8f050df59e7f.roa (raw, json) Hash identifier: qa+NCk9lT/tfcKj4GEirhMoAi6SmLoxmh/xMWteBnqg= Subject key identifier: BB:B7:98:55:09:E7:23:6F:F9:47:98:B3:FE:71:F6:07:7F:9E:28:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4754EA5B9F8CEDB168590D3BFB077938B9BCC292 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/849f4ae1-c72b-4097-8ab8-8f050df59e7f.roa Signing time: Tue 19 May 2026 01:50:16 +0000 ROA not before: Tue 19 May 2026 01:50:16 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.221.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:ea:5b:9f:8c:ed:b1:68:59:0d:3b:fb:07:79:38:b9:bc:c2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 01:50:16 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=d659e45b9ccbd4ca4998a60f7f5175c25434d7862c94599f54cceb9503109c69, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:86:51:1f:1d:17:be:0b:ca:4c:c2:47:64: a6:2d:3b:2f:f7:6e:ae:76:7b:07:54:43:b7:e2:df: 4b:55:98:6f:a1:cb:4c:44:52:69:34:56:d5:d6:2e: 43:4d:5b:19:75:4e:f8:96:2b:fe:82:ad:81:ca:29: cc:f2:f1:ee:05:0e:23:46:dd:fd:0a:5b:22:cf:f5: a1:c4:cb:e4:de:cf:31:46:f2:5e:b0:b1:ae:ee:62: ac:db:d5:4c:29:f0:82:6b:21:b8:2d:3f:fc:85:7b: f0:1e:00:69:a6:b7:73:18:9b:b7:f8:6a:7c:9d:31: de:7e:51:d4:4b:da:bc:12:52:2c:14:f0:b0:c1:41: e8:7f:1a:2b:38:c2:ed:bf:89:4b:f2:bf:e4:16:49: f7:7a:05:f1:48:00:74:90:a4:7c:df:05:77:b8:1a: 3e:b1:0a:79:9f:91:7d:e9:99:87:3d:75:f3:a5:0f: f8:f9:3f:7a:94:29:5d:37:d5:7c:50:a3:92:5c:ed: 2a:d8:98:13:bd:a5:8e:44:2b:de:f9:9b:0b:33:11: ec:f3:af:b8:77:dd:75:d8:10:18:92:68:c7:7a:0c: 0d:11:aa:dc:91:1f:a6:a0:2f:91:fb:19:10:42:89: fd:1e:37:7f:ac:c7:e7:e9:4b:ef:68:37:2f:63:c4: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B7:98:55:09:E7:23:6F:F9:47:98:B3:FE:71:F6:07:7F:9E:28:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/849f4ae1-c72b-4097-8ab8-8f050df59e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.221.128.0/18 Signature Algorithm: sha256WithRSAEncryption 68:be:74:2c:63:9f:a8:f5:d3:97:56:cc:02:6b:1b:a1:fb:6c: 82:08:82:a6:47:d8:f0:89:40:9a:d5:23:f5:68:12:a0:d9:15: e7:ee:d0:36:53:bf:ef:55:4a:61:cc:54:63:c2:88:52:f3:2b: 6e:28:3d:b4:fb:34:8a:a8:0d:68:4b:a6:16:e2:f3:ba:6d:5d: 38:67:d3:22:20:51:d6:04:35:ef:95:b0:14:34:85:fa:82:0d: 74:05:9a:b9:a9:6f:4d:06:f8:05:e9:a4:81:e5:46:56:16:eb: 4d:ab:43:ab:87:1e:a7:53:6e:56:ac:06:31:35:a5:70:19:34: 1f:61:2c:20:31:7b:4d:de:6d:cb:9e:76:55:f4:af:0c:55:a6: 6a:81:56:71:d7:5b:ad:9c:c0:d0:fd:ab:60:4c:2b:52:73:f9: ed:41:6e:de:89:70:d9:ac:d2:2d:fc:bf:aa:21:78:3a:e3:34: 38:8d:b3:9b:0a:fd:f8:b8:58:c2:58:50:26:79:e5:c4:67:a1: 87:7a:54:77:ae:84:34:c9:a6:89:41:bb:d9:51:86:3a:fc:5e: 3d:df:df:61:f8:10:e7:28:f2:fb:42:fb:41:b7:1b:56:aa:4a: 2c:4b:88:0e:32:15:6f:44:34:97:81:e7:e3:7e:21:56:aa:57: ee:12:e7:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR1TqW5+M7bFoWQ07+wd5OLm8wpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDE1MDE2WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjU5ZTQ1YjljY2JkNGNhNDk5OGE2MGY3ZjUxNzVjMjU0 MzRkNzg2MmM5NDU5OWY1NGNjZWI5NTAzMTA5YzY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEkoZRHx0XvgvKTMJHZKYtOy/3bq52ewdUQ7fi30tVmG+h y0xEUmk0VtXWLkNNWxl1TviWK/6CrYHKKczy8e4FDiNG3f0KWyLP9aHEy+TezzFG 8l6wsa7uYqzb1Uwp8IJrIbgtP/yFe/AeAGmmt3MYm7f4anydMd5+UdRL2rwSUiwU 8LDBQeh/Gis4wu2/iUvyv+QWSfd6BfFIAHSQpHzfBXe4Gj6xCnmfkX3pmYc9dfOl D/j5P3qUKV031XxQo5Jc7SrYmBO9pY5EK975mwszEezzr7h33XXYEBiSaMd6DA0R qtyRH6agL5H7GRBCif0eN3+sx+fpS+9oNy9jxDdPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu7eYVQnnI2/5R5iz/nH2B3+eKJowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0OWY0YWUxLWM3MmItNDA5Ny04YWI4LThmMDUwZGY1OWU3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY23YAwDQYJKoZIhvcNAQELBQADggEBAGi+dCxjn6j105dWzAJrG6H7bIII gqZH2PCJQJrVI/VoEqDZFefu0DZTv+9VSmHMVGPCiFLzK24oPbT7NIqoDWhLphbi 87ptXThn0yIgUdYENe+VsBQ0hfqCDXQFmrmpb00G+AXppIHlRlYW602rQ6uHHqdT blasBjE1pXAZNB9hLCAxe03ebcuedlX0rwxVpmqBVnHXW62cwND9q2BMK1Jz+e1B bt6JcNms0i38v6oheDrjNDiNs5sK/fi4WMJYUCZ55cRnoYd6VHeuhDTJpolBu9lR hjr8Xj3f32H4EOco8vtC+0G3G1aqSixLiA4yFW9ENJeB5+N+IVaqV+4S57w= -----END CERTIFICATE-----Generated at Wed Jun 17 08:51:00 2026 by rpki-client