$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa8145e1-4297-4b15-b1ca-4016db943c6e.roa File: aa8145e1-4297-4b15-b1ca-4016db943c6e.roa (raw, json) Hash identifier: lEIruZQeoY2qwhUDKSoveC6UQg77y8SExHtnRRn4tFk= Subject key identifier: 9F:E9:80:5C:65:32:70:5B:E9:4A:F5:7F:10:32:AB:80:F7:89:54:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DEF9AA046F632ED1C750D29852E453E7378954B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa8145e1-4297-4b15-b1ca-4016db943c6e.roa Signing time: Wed 20 May 2026 00:40:07 +0000 ROA not before: Wed 20 May 2026 00:40:07 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ef:9a:a0:46:f6:32:ed:1c:75:0d:29:85:2e:45:3e:73:78:95:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 00:40:07 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=1486c0cb77a50b5b6589aa1511a0c017ea5a54058bc5469189d259a2e873f0b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:46:8b:38:19:54:a3:ab:4b:81:17:18:19: bc:93:1e:1c:d1:dd:94:e6:b8:e4:b1:14:a1:13:b1: 0e:e1:9b:ec:0b:31:49:3e:f2:ca:3a:eb:21:ea:0f: 72:2b:16:da:3e:c9:2e:c0:ed:8c:bc:ca:aa:7c:db: 38:91:7a:91:03:6a:7b:a7:c1:33:31:ab:e6:be:4c: 5f:89:ad:1c:42:96:37:b6:f6:79:de:88:5d:4e:40: 09:4a:32:25:9a:0c:0f:9d:65:94:58:3c:15:61:80: be:66:16:a7:bd:98:9c:ac:02:4f:d3:88:b1:a6:d2: 43:4e:f7:fc:82:38:f3:de:a6:e8:1e:92:0d:fb:de: 48:4c:fb:c3:c9:23:ea:7d:59:dd:09:a3:d9:59:59: 63:b8:2f:b0:fe:51:e5:12:2c:3e:ce:74:f5:d7:f4: 03:c6:b6:18:40:3c:b8:a4:3d:ae:c3:b4:73:9c:2d: 9b:62:d7:cb:3f:a9:ea:39:27:4c:82:f6:67:62:13: 68:d9:8c:ea:e9:17:ea:83:14:f1:21:8d:5d:4f:6c: 50:bd:0d:15:d8:76:10:b2:45:bd:0f:ab:6f:68:c8: 2a:16:22:63:e8:fa:7d:0e:9e:e1:f5:f7:f1:66:9c: 0c:d1:39:a1:72:03:4c:53:3e:86:dd:7f:ea:ed:61: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:80:5C:65:32:70:5B:E9:4A:F5:7F:10:32:AB:80:F7:89:54:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa8145e1-4297-4b15-b1ca-4016db943c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.224.0/20 Signature Algorithm: sha256WithRSAEncryption 06:89:91:4f:b6:1d:00:a6:46:50:42:81:98:e5:63:c3:08:da: 6a:29:84:4b:fe:78:e6:bb:51:a2:1c:46:80:19:d5:a2:04:41: 46:4a:20:80:8c:22:92:39:5f:a4:d0:c5:cb:a9:dc:15:09:db: 45:58:55:27:d5:53:ae:a7:24:7f:79:76:d4:5c:42:e0:cb:1e: 9f:31:d5:e6:46:14:c9:82:0f:1e:e5:40:d8:d1:b5:55:c8:0f: 6c:8c:df:44:fd:dd:68:22:ea:d9:06:56:e7:11:01:a4:36:e5: 1f:ad:15:e5:df:e7:fe:b8:a6:95:d0:2b:cd:81:68:1e:b9:31: 3d:8b:c5:f6:75:25:97:6c:04:52:be:4f:01:6b:e5:04:13:2f: 6b:5a:a5:75:fe:7a:a9:ad:a9:e6:a3:64:19:29:18:d4:4d:76: f9:fd:ee:e6:fc:d4:54:27:01:41:ac:eb:1c:f6:d9:2c:89:9a: e0:c8:93:5f:c2:6b:fc:57:12:cd:be:4a:40:0d:f1:3e:6e:0b: e5:c3:1c:bb:bc:ca:b6:0d:5d:d8:86:e9:32:9f:c1:b8:6d:ad: d5:6a:7c:1f:c6:ff:e4:67:4c:0f:61:38:86:82:c8:4b:c6:87: 81:d7:83:27:ae:51:ad:72:fc:a4:84:03:bd:57:56:92:90:53: 79:da:d0:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbe+aoEb2Mu0cdQ0phS5FPnN4lUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTIwMDA0MDA3WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDg2YzBjYjc3YTUwYjViNjU4OWFhMTUxMWEwYzAxN2Vh NWE1NDA1OGJjNTQ2OTE4OWQyNTlhMmU4NzNmMGI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH+kaLOBlUo6tLgRcYGbyTHhzR3ZTmuOSxFKETsQ7hm+wL MUk+8so66yHqD3IrFto+yS7A7Yy8yqp82ziRepEDanunwTMxq+a+TF+JrRxClje2 9nneiF1OQAlKMiWaDA+dZZRYPBVhgL5mFqe9mJysAk/TiLGm0kNO9/yCOPPepuge kg373khM+8PJI+p9Wd0Jo9lZWWO4L7D+UeUSLD7OdPXX9APGthhAPLikPa7DtHOc LZti18s/qeo5J0yC9mdiE2jZjOrpF+qDFPEhjV1PbFC9DRXYdhCyRb0Pq29oyCoW ImPo+n0OnuH19/FmnAzROaFyA0xTPobdf+rtYalvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn+mAXGUycFvpSvV/EDKrgPeJVH0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhODE0NWUxLTQyOTctNGIxNS1iMWNhLTQwMTZkYjk0M2M2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2wOAwDQYJKoZIhvcNAQELBQADggEBAAaJkU+2HQCmRlBCgZjlY8MI2mop hEv+eOa7UaIcRoAZ1aIEQUZKIICMIpI5X6TQxcup3BUJ20VYVSfVU66nJH95dtRc QuDLHp8x1eZGFMmCDx7lQNjRtVXID2yM30T93Wgi6tkGVucRAaQ25R+tFeXf5/64 ppXQK82BaB65MT2LxfZ1JZdsBFK+TwFr5QQTL2tapXX+eqmtqeajZBkpGNRNdvn9 7ub81FQnAUGs6xz22SyJmuDIk1/Ca/xXEs2+SkAN8T5uC+XDHLu8yrYNXdiG6TKf wbhtrdVqfB/G/+RnTA9hOIaCyEvGh4HXgyeuUa1y/KSEA71XVpKQU3na0IA= -----END CERTIFICATE-----Generated at Sat Jun 13 04:49:27 2026 by rpki-client