$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4705a99-6eb1-42e0-9ef6-93b507f54ffb.roa File: f4705a99-6eb1-42e0-9ef6-93b507f54ffb.roa (raw, json) Hash identifier: YPloioyxnajRtOPmb4D9Rmdf4U99vsGU1Um1zSA5M/g= Subject key identifier: 52:FD:9F:85:A3:B9:1E:FF:80:D5:EA:25:4B:5E:9C:84:A7:46:4F:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 41FFD04A9764834491C059EE8C00E28C435C2C37 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4705a99-6eb1-42e0-9ef6-93b507f54ffb.roa Signing time: Tue 19 May 2026 03:00:05 +0000 ROA not before: Tue 19 May 2026 03:00:05 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.228.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ff:d0:4a:97:64:83:44:91:c0:59:ee:8c:00:e2:8c:43:5c:2c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 03:00:05 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=561eaef8e148f1c662bbc0667a6a1a5fd62279d6e1951688ab95d2649b4b82a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:37:19:05:46:d2:2c:25:90:6c:94:0e:d7: d2:68:4b:0c:3e:56:26:67:f6:45:26:f7:c9:36:af: 7a:f2:83:55:fd:72:aa:60:33:e8:92:d5:a0:0e:dc: 35:14:66:04:14:48:4d:ac:bb:e7:25:f5:a6:10:44: 65:28:c0:d6:00:14:0c:b4:93:e1:2e:0f:da:15:50: 57:31:74:51:df:b2:2e:d0:48:5c:89:59:89:78:a9: ec:73:65:0d:26:95:86:55:ad:a8:62:48:6a:0c:33: 2f:2e:4b:de:60:03:69:26:d0:90:2f:3a:af:e4:6a: 15:bf:ea:2c:a1:1b:6f:ff:74:6d:73:cd:68:d4:dd: ca:d3:a8:79:f8:f1:80:f0:eb:aa:6a:92:9e:34:3f: 1b:4f:09:f0:15:da:75:be:f1:8c:ea:b3:5b:ef:ad: 89:4a:0c:96:36:e1:8b:bd:0c:53:23:7d:19:89:6d: bc:5f:88:84:82:51:a1:51:58:89:82:ff:33:7a:2b: 24:8a:b9:ed:b3:96:3d:0d:a2:11:51:45:a4:eb:0b: 5d:7d:af:54:09:3e:13:76:27:3b:d9:5b:8a:20:76: 2f:03:da:08:9e:ed:dd:f7:74:bf:95:1f:a6:82:e7: d4:de:32:77:38:ce:8f:cb:50:42:03:9f:14:7b:d7: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:9F:85:A3:B9:1E:FF:80:D5:EA:25:4B:5E:9C:84:A7:46:4F:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4705a99-6eb1-42e0-9ef6-93b507f54ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.228.246.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:18:91:86:eb:35:f7:bc:97:2d:60:04:6b:29:db:de:06:09: 18:34:08:f8:26:30:07:9b:15:8d:a0:63:11:cb:12:01:ba:e2: a2:95:68:c9:3c:83:2d:69:4f:dc:b5:fd:70:f7:f4:0f:76:29: 7a:9c:d5:8c:a3:ec:42:1d:63:4a:06:31:d7:a8:9b:af:4e:a0: bb:41:b4:c4:cb:f7:01:37:71:0c:65:8f:99:cd:ea:9f:93:bb: 6a:83:35:06:35:7d:48:65:a3:71:1f:58:41:82:f1:50:c0:0d: da:cb:d5:fe:da:9b:17:a4:5f:9e:c0:63:c9:74:07:18:fe:01: 97:cf:a3:a2:7b:c6:f8:04:11:b0:eb:f6:cc:1f:2c:8c:e4:92: 91:e1:74:43:f1:d0:d5:d6:98:49:63:d5:2d:2d:0a:68:bd:51: 96:77:75:66:38:ee:9d:c3:9a:ca:60:dc:34:ca:05:64:84:61: fa:25:c0:07:d0:b4:eb:ab:57:f0:08:c3:3a:99:00:d0:cf:02: 5d:c7:b8:04:1b:32:92:8f:36:ec:fd:6d:df:e9:a0:16:c8:87: 29:e6:f7:0d:ea:e7:26:23:86:c2:43:e2:84:8f:73:5f:50:75: 58:b4:9c:a9:e7:d4:3e:bc:e6:4b:a9:d9:23:11:f5:ea:3b:67: cf:e2:5d:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQf/QSpdkg0SRwFnujADijENcLDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDMwMDA1WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjFlYWVmOGUxNDhmMWM2NjJiYmMwNjY3YTZhMWE1ZmQ2 MjI3OWQ2ZTE5NTE2ODhhYjk1ZDI2NDliNGI4MmE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVZTcZBUbSLCWQbJQO19JoSww+ViZn9kUm98k2r3ryg1X9 cqpgM+iS1aAO3DUUZgQUSE2su+cl9aYQRGUowNYAFAy0k+EuD9oVUFcxdFHfsi7Q SFyJWYl4qexzZQ0mlYZVrahiSGoMMy8uS95gA2km0JAvOq/kahW/6iyhG2//dG1z zWjU3crTqHn48YDw66pqkp40PxtPCfAV2nW+8Yzqs1vvrYlKDJY24Yu9DFMjfRmJ bbxfiISCUaFRWImC/zN6KySKue2zlj0NohFRRaTrC119r1QJPhN2JzvZW4ogdi8D 2gie7d33dL+VH6aC59TeMnc4zo/LUEIDnxR717tDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUv2fhaO5Hv+A1eolS16chKdGTxMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y0NzA1YTk5LTZlYjEtNDJlMC05ZWY2LTkzYjUwN2Y1NGZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES5PYwDQYJKoZIhvcNAQELBQADggEBAJoYkYbrNfe8ly1gBGsp294GCRg0 CPgmMAebFY2gYxHLEgG64qKVaMk8gy1pT9y1/XD39A92KXqc1Yyj7EIdY0oGMdeo m69OoLtBtMTL9wE3cQxlj5nN6p+Tu2qDNQY1fUhlo3EfWEGC8VDADdrL1f7amxek X57AY8l0Bxj+AZfPo6J7xvgEEbDr9swfLIzkkpHhdEPx0NXWmElj1S0tCmi9UZZ3 dWY47p3Dmspg3DTKBWSEYfolwAfQtOurV/AIwzqZANDPAl3HuAQbMpKPNuz9bd/p oBbIhynm9w3q5yYjhsJD4oSPc19QdVi0nKnn1D685kup2SMR9eo7Z8/iXX0= -----END CERTIFICATE-----Generated at Sat Jun 13 04:49:16 2026 by rpki-client