$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa File: a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa (raw, json) Hash identifier: LlANXfcsXTQbuLNih9AY2YxrxrdXU16PA0mw9W6hm0A= Subject key identifier: E7:BC:C2:E3:D9:63:50:1B:78:A0:19:5E:FC:D2:AB:AA:93:C1:06:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68272FD40F8FFEB59EF0A92B93CD66C35DFC0FB2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa Signing time: Fri 24 Apr 2026 18:16:26 +0000 ROA not before: Fri 24 Apr 2026 18:16:26 +0000 ROA not after: Thu 23 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:27:2f:d4:0f:8f:fe:b5:9e:f0:a9:2b:93:cd:66:c3:5d:fc:0f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 24 18:16:26 2026 GMT Not After : Jul 23 23:59:59 2026 GMT Subject: serialNumber=a3cbff738adace575481c90760357db052bc69ce9e752be696a453a02e57fa72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:e5:54:f2:d7:c3:ac:d7:07:42:b0:13:b7: fd:6f:fa:2c:09:4e:53:e0:c9:e1:61:62:02:a6:90: dc:ed:af:0e:bf:cd:16:b9:44:58:b6:47:46:3a:11: dd:12:fb:a1:bd:3a:3a:f4:5b:6a:04:f6:a9:a7:b1: cf:9c:c4:88:7b:a1:d4:95:1d:4e:1f:db:85:51:8e: a6:3d:06:ee:a9:86:e2:10:5d:79:3f:00:88:f0:d3: 45:cd:2e:a1:16:be:2e:fb:95:fa:7f:ca:97:36:74: df:26:da:0b:5c:83:97:30:6d:8c:44:0c:0e:46:87: 63:0d:35:37:e6:2b:41:51:ea:cd:e3:eb:fc:28:1f: c8:f9:ec:7e:0e:05:27:e8:c7:7f:e8:c7:a3:da:f5: 90:e4:4e:32:b5:82:2f:cd:e6:eb:e0:a5:04:40:be: 00:b8:77:11:27:d1:43:ff:a7:f4:9b:3c:69:70:6f: 22:4a:3c:f7:0e:5d:07:3f:e0:32:ab:0e:34:63:13: 13:13:3e:6b:e0:08:cd:00:db:81:48:9f:08:97:09: 14:68:3f:c8:73:ac:9f:4e:c8:ee:8b:2d:a1:d6:a2: 03:2d:46:85:58:c9:5b:1f:98:93:5b:6b:b6:ba:e8: 42:b0:b8:35:fc:cc:0e:b4:2d:cc:8e:60:c1:d1:91: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BC:C2:E3:D9:63:50:1B:78:A0:19:5E:FC:D2:AB:AA:93:C1:06:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5a:95:ed:1c:a6:ef:d0:3e:fe:87:d7:52:f9:1b:6e:2f:69:d5: fd:97:02:d4:07:a7:17:20:e8:c6:7d:04:19:fe:36:5e:40:04: e6:d1:13:96:ae:02:21:18:bf:3b:8d:98:2c:33:d9:82:7d:03: d3:c0:64:90:45:2f:c2:d0:eb:89:16:d9:37:75:fd:70:d1:3c: e5:86:32:38:23:39:e9:23:db:ec:60:be:c2:e8:16:9e:9f:72: 48:10:9b:50:d3:82:37:fc:6a:4f:d1:2b:05:4c:b4:aa:b5:f0: 80:03:e7:a9:a2:55:6c:1b:ec:4f:9f:ac:74:30:cb:9b:5e:25: 81:2a:5c:d2:b8:00:3d:db:9c:bd:c9:44:22:3f:26:d2:27:04: 02:74:97:14:70:78:2a:d4:e6:aa:01:85:ce:02:4e:3b:30:7b: b0:23:8c:55:e7:0d:2e:9b:c0:50:d0:29:55:4c:2a:5c:89:2d: 54:6a:4a:2b:87:12:3a:18:77:e3:06:82:2f:61:d3:9b:1d:78: e5:f6:65:6c:df:10:f9:49:7d:bd:4a:0f:c3:4e:ba:81:3d:ad: be:26:f2:9a:1f:61:f3:bd:99:a6:1a:55:89:ed:cf:81:61:f8: d4:bf:7e:36:4a:dd:c5:8e:ca:7b:4f:7b:01:b7:cf:e6:98:b6: 6c:88:d0:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaCcv1A+P/rWe8Kkrk81mw138D7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNDI0MTgxNjI2WhcNMjYwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2NiZmY3MzhhZGFjZTU3NTQ4MWM5MDc2MDM1N2RiMDUy YmM2OWNlOWU3NTJiZTY5NmE0NTNhMDJlNTdmYTcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX5+VU8tfDrNcHQrATt/1v+iwJTlPgyeFhYgKmkNztrw6/ zRa5RFi2R0Y6Ed0S+6G9Ojr0W2oE9qmnsc+cxIh7odSVHU4f24VRjqY9Bu6phuIQ XXk/AIjw00XNLqEWvi77lfp/ypc2dN8m2gtcg5cwbYxEDA5Gh2MNNTfmK0FR6s3j 6/woH8j57H4OBSfox3/ox6Pa9ZDkTjK1gi/N5uvgpQRAvgC4dxEn0UP/p/SbPGlw byJKPPcOXQc/4DKrDjRjExMTPmvgCM0A24FInwiXCRRoP8hzrJ9OyO6LLaHWogMt RoVYyVsfmJNba7a66EKwuDX8zA60LcyOYMHRkcZhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU57zC49ljUBt4oBle/NKrqpPBBokwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0ZjIwZjIyLTcxNTMtNDMzZi1iYjY0LWMxYTlkZGIzNTE0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY28IAwDQYJKoZIhvcNAQELBQADggEBAFqV7Rym79A+/ofXUvkbbi9p1f2X AtQHpxcg6MZ9BBn+Nl5ABObRE5auAiEYvzuNmCwz2YJ9A9PAZJBFL8LQ64kW2Td1 /XDRPOWGMjgjOekj2+xgvsLoFp6fckgQm1DTgjf8ak/RKwVMtKq18IAD56miVWwb 7E+frHQwy5teJYEqXNK4AD3bnL3JRCI/JtInBAJ0lxRweCrU5qoBhc4CTjswe7Aj jFXnDS6bwFDQKVVMKlyJLVRqSiuHEjoYd+MGgi9h05sdeOX2ZWzfEPlJfb1KD8NO uoE9rb4m8pofYfO9maYaVYntz4Fh+NS/fjZK3cWOyntPewG3z+aYtmyI0Cc= -----END CERTIFICATE-----Generated at Thu Apr 30 01:04:26 2026 by rpki-client