$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa File: b1a9d485-3494-46cc-b104-fcee651d4b2b.roa (raw, json) Hash identifier: +dW8pKFWoE5rPym9Glb4yrY/5bImL0I/lom7BcMtmL4= Subject key identifier: 2C:E5:22:E3:16:6D:95:2A:31:3A:01:92:9C:C5:10:C4:01:FD:C5:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 667E1480757E5A7EEC94780CD87A813F1CBECE6F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa Signing time: Tue 19 May 2026 03:01:15 +0000 ROA not before: Tue 19 May 2026 03:01:15 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.79.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7e:14:80:75:7e:5a:7e:ec:94:78:0c:d8:7a:81:3f:1c:be:ce:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 03:01:15 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=4e0545d84ee32fdd15c67ba4e4fa93f39866aa742be14a896739150673b234bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:40:57:f1:05:65:fa:e2:20:55:6a:d3:c6:65: 2f:aa:45:ef:7a:9a:e7:02:2d:69:ed:39:59:da:7b: 43:cd:72:11:54:5f:c9:3b:4f:b6:7a:7c:fe:64:0d: 98:49:2d:28:aa:87:b9:46:1c:e6:3c:33:ee:48:7c: 95:b7:97:10:8a:1d:7e:a0:7f:86:c2:0e:a5:d0:75: a5:50:8d:51:ed:a5:82:d4:cb:b3:47:ab:71:16:9f: 6d:06:a9:fc:55:12:7b:75:a9:36:0a:82:f9:5a:eb: 4c:0f:bf:b5:15:72:ac:bd:3f:b7:90:8d:be:78:c7: 1e:f4:8d:56:eb:d1:1a:f2:14:06:45:a7:d0:2f:64: 13:d7:32:4d:fa:31:d7:4b:8a:08:77:36:e1:ad:fb: ec:27:c9:46:1b:53:19:5f:03:12:8f:00:97:38:7f: 02:dc:ab:c6:03:0d:7a:cd:d8:4c:99:83:25:06:8c: dc:7d:ce:13:77:68:5d:97:82:a1:d2:fa:71:4c:b9: 0b:f4:b8:9d:6a:c2:2a:81:6a:d7:35:fa:65:4b:19: 49:01:32:b9:a3:9c:a8:9b:f5:54:49:27:24:0d:43: 28:c6:5a:3b:83:08:8a:f0:58:73:be:c8:21:6e:19: 0c:51:03:2d:f3:dc:ec:83:86:fc:6c:9c:0d:6c:94: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E5:22:E3:16:6D:95:2A:31:3A:01:92:9C:C5:10:C4:01:FD:C5:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 48:8f:ea:4d:a0:8a:44:ac:d7:12:7a:ad:50:44:78:8b:59:cf: 4b:05:fa:f0:85:19:d6:9b:99:4a:8d:97:82:3b:ba:34:1e:dc: ae:08:d2:33:83:ac:3c:5a:98:3f:c1:1c:46:97:29:e3:a2:7e: 0f:58:9a:0c:f7:12:64:84:81:9e:cf:6d:4d:34:cf:80:8e:11: c3:cb:2b:45:1b:a0:01:c8:0c:cf:56:2f:14:c6:85:91:d9:08: b1:28:49:33:0d:09:be:f7:65:56:4e:fa:5d:4d:4f:ee:5c:1f: fa:7e:69:08:ff:0d:15:15:9f:f0:b9:79:77:8e:6b:50:11:a4: 0f:a4:c2:a8:d4:af:6b:a5:cf:8d:80:be:76:c1:21:03:60:66: 05:85:d4:b6:de:1b:04:35:01:34:de:3c:d8:15:13:5c:06:eb: 53:e2:1f:3b:22:f8:e0:aa:8b:f3:0c:95:b8:35:39:6b:84:62: 78:18:70:26:5e:af:26:cc:ac:53:23:e2:37:9f:13:a8:20:08: 79:83:57:80:1b:fd:12:b6:cd:d7:50:8e:da:e2:dc:eb:05:c2: 6a:a3:cf:c0:41:5f:73:fe:68:9f:d3:58:77:5d:3c:a0:ed:74: ba:09:c1:3d:99:b6:78:5b:ab:7f:20:f6:85:5c:44:ad:17:1a: de:3d:c2:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZn4UgHV+Wn7slHgM2HqBPxy+zm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDMwMTE1WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTA1NDVkODRlZTMyZmRkMTVjNjdiYTRlNGZhOTNmMzk4 NjZhYTc0MmJlMTRhODk2NzM5MTUwNjczYjIzNGJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQQFfxBWX64iBVatPGZS+qRe96mucCLWntOVnae0PNchFU X8k7T7Z6fP5kDZhJLSiqh7lGHOY8M+5IfJW3lxCKHX6gf4bCDqXQdaVQjVHtpYLU y7NHq3EWn20GqfxVEnt1qTYKgvla60wPv7UVcqy9P7eQjb54xx70jVbr0RryFAZF p9AvZBPXMk36MddLigh3NuGt++wnyUYbUxlfAxKPAJc4fwLcq8YDDXrN2EyZgyUG jNx9zhN3aF2XgqHS+nFMuQv0uJ1qwiqBatc1+mVLGUkBMrmjnKib9VRJJyQNQyjG WjuDCIrwWHO+yCFuGQxRAy3z3OyDhvxsnA1slDfnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULOUi4xZtlSoxOgGSnMUQxAH9xfcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxYTlkNDg1LTM0OTQtNDZjYy1iMTA0LWZjZWU2NTFkNGIyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2T4AwDQYJKoZIhvcNAQELBQADggEBAEiP6k2gikSs1xJ6rVBEeItZz0sF +vCFGdabmUqNl4I7ujQe3K4I0jODrDxamD/BHEaXKeOifg9Ymgz3EmSEgZ7PbU00 z4COEcPLK0UboAHIDM9WLxTGhZHZCLEoSTMNCb73ZVZO+l1NT+5cH/p+aQj/DRUV n/C5eXeOa1ARpA+kwqjUr2ulz42AvnbBIQNgZgWF1LbeGwQ1ATTePNgVE1wG61Pi Hzsi+OCqi/MMlbg1OWuEYngYcCZerybMrFMj4jefE6ggCHmDV4Ab/RK2zddQjtri 3OsFwmqjz8BBX3P+aJ/TWHddPKDtdLoJwT2Ztnhbq38g9oVcRK0XGt49wqQ= -----END CERTIFICATE-----Generated at Wed Jun 17 08:35:46 2026 by rpki-client