$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99cfaae9-44ac-48cf-b084-39272bb3a3d6.roa File: 99cfaae9-44ac-48cf-b084-39272bb3a3d6.roa (raw, json) Hash identifier: vgYDl+kC1tJN3ul09YgTMd6JH6Dw7gBDWJ3sHkdoW+c= Subject key identifier: 1A:A0:43:86:2D:C7:6D:A2:08:9A:EC:60:E9:EE:51:E3:75:97:2E:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AB95548FBB99A4EBB935CF1D03535C7B3B47BC7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99cfaae9-44ac-48cf-b084-39272bb3a3d6.roa Signing time: Thu 14 May 2026 01:20:10 +0000 ROA not before: Thu 14 May 2026 01:20:10 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.146.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b9:55:48:fb:b9:9a:4e:bb:93:5c:f1:d0:35:35:c7:b3:b4:7b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 14 01:20:10 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=f919ae54cc219bfb8a5f146ef1ace97fbbe122e07e3ce0a4a6ccc091f15c3aba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:a0:43:fb:eb:c4:0c:74:f6:14:df:d1:a5: a5:29:95:35:76:ff:41:1c:5f:3a:70:bc:1c:71:24: 60:22:e2:2f:07:b7:8b:83:eb:5c:08:24:35:d2:6b: c3:3a:61:b8:e8:9d:62:65:0b:57:d4:1c:85:27:65: cd:92:49:39:58:79:98:87:7e:df:b8:1b:46:20:e8: c6:2a:90:8e:ac:68:d3:cc:bc:5a:6d:cd:7f:9f:d1: 8f:e1:47:41:75:e4:5f:8b:db:7e:73:74:f1:56:0a: 3f:db:2a:4d:5e:0c:98:74:04:16:5a:81:64:d0:76: 48:7e:46:c3:1a:67:ee:5f:8d:40:78:c6:32:77:19: 8b:e7:2b:60:ac:00:22:04:35:d5:3b:da:6a:6e:51: f7:7a:00:59:9b:92:60:03:57:26:8a:39:b5:71:dc: e7:9f:41:25:bd:44:b2:0e:97:8d:31:e0:f7:90:ff: 2a:c8:19:b9:cd:06:17:b8:7a:dd:ba:ee:59:25:29: 92:ca:7a:0d:d3:b9:7e:5f:8b:f1:0c:ef:26:70:46: cb:98:a1:b2:60:d6:01:55:e7:65:d0:54:00:44:6d: 73:ae:23:a5:61:c4:af:7c:63:e1:b6:3d:a5:67:c7: d3:cd:d0:f5:18:fb:e9:b1:5d:28:c7:c4:ce:74:1d: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:43:86:2D:C7:6D:A2:08:9A:EC:60:E9:EE:51:E3:75:97:2E:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99cfaae9-44ac-48cf-b084-39272bb3a3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.146.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0a:8b:0b:40:b4:d2:6e:b4:bd:39:9f:10:f9:2b:4c:7f:8b:53: 4d:da:0d:20:54:4a:9d:f9:bb:ab:f0:d1:34:46:30:e2:fe:39: a4:5a:3b:02:b6:1b:fa:02:ba:ea:1f:d9:4b:4d:b6:bd:a0:c2: 53:b0:3b:19:4b:47:f3:a7:7a:30:35:75:65:51:16:9b:21:5c: 75:01:78:a6:a9:d3:e9:05:9b:5c:de:b2:b8:a4:3b:1b:e6:a0: ce:e3:b1:bd:94:73:2a:38:6f:e3:13:eb:82:d6:0f:11:25:bc: 13:08:a7:d4:ee:f7:09:aa:25:9f:6f:ea:4d:1e:ed:12:26:57: ca:21:c6:bc:43:8c:88:11:ed:f2:bb:2b:be:ab:e3:28:3e:e1: 7c:fc:7c:a0:d9:2a:80:3b:96:0d:ee:7b:6a:9f:f7:35:1a:85: 7e:3c:0f:89:31:df:24:1f:c9:d9:fd:d6:da:52:83:94:4c:10: 7b:2a:1e:0b:23:7c:f0:a8:da:a1:96:75:c5:41:7c:aa:55:2a: 7e:32:dd:ef:63:ff:96:a8:92:55:67:ce:d2:8a:4c:f3:e8:cb: 8a:f3:32:d1:8a:b5:cb:57:a6:c2:52:4d:14:0f:63:01:06:b2: ad:43:8a:6d:37:d4:71:4f:5d:0e:72:cf:b7:39:51:e6:bb:4a: d6:17:6b:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGrlVSPu5mk67k1zx0DU1x7O0e8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDEyMDEwWhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTE5YWU1NGNjMjE5YmZiOGE1ZjE0NmVmMWFjZTk3ZmJi ZTEyMmUwN2UzY2UwYTRhNmNjYzA5MWYxNWMzYWJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKH6BD++vEDHT2FN/RpaUplTV2/0EcXzpwvBxxJGAi4i8H t4uD61wIJDXSa8M6YbjonWJlC1fUHIUnZc2SSTlYeZiHft+4G0Yg6MYqkI6saNPM vFptzX+f0Y/hR0F15F+L235zdPFWCj/bKk1eDJh0BBZagWTQdkh+RsMaZ+5fjUB4 xjJ3GYvnK2CsACIENdU72mpuUfd6AFmbkmADVyaKObVx3OefQSW9RLIOl40x4PeQ /yrIGbnNBhe4et267lklKZLKeg3TuX5fi/EM7yZwRsuYobJg1gFV52XQVABEbXOu I6VhxK98Y+G2PaVnx9PN0PUY++mxXSjHxM50Hb0RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGqBDhi3HbaIImuxg6e5R43WXLpcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5Y2ZhYWU5LTQ0YWMtNDhjZi1iMDg0LTM5MjcyYmIzYTNkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2koAwDQYJKoZIhvcNAQELBQADggEBAAqLC0C00m60vTmfEPkrTH+LU03a DSBUSp35u6vw0TRGMOL+OaRaOwK2G/oCuuof2UtNtr2gwlOwOxlLR/OnejA1dWVR FpshXHUBeKap0+kFm1zesrikOxvmoM7jsb2Ucyo4b+MT64LWDxElvBMIp9Tu9wmq JZ9v6k0e7RImV8ohxrxDjIgR7fK7K76r4yg+4Xz8fKDZKoA7lg3ue2qf9zUahX48 D4kx3yQfydn91tpSg5RMEHsqHgsjfPCo2qGWdcVBfKpVKn4y3e9j/5aoklVnztKK TPPoy4rzMtGKtctXpsJSTRQPYwEGsq1Dim031HFPXQ5yz7c5Uea7StYXa94= -----END CERTIFICATE-----Generated at Wed Jun 17 08:32:00 2026 by rpki-client