$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd8582f2-711d-49f5-9208-ce76c6466e79.roa File: fd8582f2-711d-49f5-9208-ce76c6466e79.roa (raw, json) Hash identifier: 984l4Up5nPH7rfxFloRYean72ZhEY2Q7pj52Bzb7OiE= Subject key identifier: AA:52:1D:31:D3:65:11:C2:EC:0D:89:76:2C:89:F6:F6:28:C2:62:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BB6724B3498586C1FD09B48519211EB458A501A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd8582f2-711d-49f5-9208-ce76c6466e79.roa Signing time: Tue 19 May 2026 03:20:58 +0000 ROA not before: Tue 19 May 2026 03:20:58 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b6:72:4b:34:98:58:6c:1f:d0:9b:48:51:92:11:eb:45:8a:50:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 03:20:58 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=6d94bf4c52004381045971fc62b785ca5358f57b76644b13720604027358b1b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:72:ad:d4:cc:82:ef:5d:5f:51:b1:9c:30: 37:d6:4f:0c:79:6c:3e:d1:28:11:d4:50:d1:4e:17: 28:28:bd:58:e5:75:7d:25:90:ec:57:ae:28:13:a2: 9f:99:f0:ed:c1:f2:77:79:70:a9:2f:89:bb:0a:d8: 97:2b:58:d5:36:06:e4:6a:f7:95:47:93:45:83:9c: 36:31:13:4c:4c:e7:de:78:d5:13:f0:87:d2:c6:9f: 30:cf:33:c8:95:19:f9:6a:a7:33:78:9d:d9:6c:91: 63:81:93:1f:99:d1:aa:ca:e4:a5:ab:1b:e7:78:f9: 16:44:20:82:4a:53:c9:59:a2:3f:14:51:34:a5:ec: 0c:0b:34:f6:78:a2:e4:a3:db:f5:43:5b:41:fa:88: 01:fd:58:c5:90:08:68:2a:07:82:bf:12:90:ab:17: 40:c9:25:15:8f:d8:fe:5d:db:8f:e7:23:79:9f:f4: db:a4:b0:36:6c:26:33:3a:f5:11:f3:13:1d:6c:f3: da:0e:b4:f5:86:51:11:28:d6:c9:99:d3:16:68:42: e6:b3:d2:da:da:d0:1b:01:4b:b2:e2:a9:74:a8:df: 9b:00:27:88:bf:a5:8c:ce:b2:c2:85:bc:4c:b0:a3: d6:e8:93:21:5d:b6:d3:25:b6:e5:09:2d:31:3d:51: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:52:1D:31:D3:65:11:C2:EC:0D:89:76:2C:89:F6:F6:28:C2:62:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd8582f2-711d-49f5-9208-ce76c6466e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:22:b7:97:73:c0:f2:6a:29:39:cb:71:5b:01:14:d2:1d:8e: 60:c4:a5:c7:1a:ea:06:45:4d:09:dc:70:f3:86:2e:51:85:12: b8:af:b3:9b:b8:df:26:df:69:b0:68:45:94:4f:11:4c:73:64: ec:af:cd:85:8e:97:e2:da:d6:04:f3:27:99:ef:89:1a:6c:40: 9e:3c:9d:b6:c9:41:25:42:6c:11:31:a5:02:bb:b7:c6:b5:b7: ea:ca:ab:47:29:65:51:30:37:3b:b5:50:f0:a6:3a:e4:54:fa: a5:14:49:d2:f4:45:25:80:46:4f:aa:65:58:eb:4a:24:85:02: df:5e:cf:1c:99:5b:35:8e:d2:b3:d2:98:17:97:e2:c5:5a:79: f8:67:44:53:79:fb:1d:93:2e:50:76:9c:07:06:58:47:1d:7c: 2c:3c:c2:27:fe:73:7d:bf:54:07:3c:e0:0c:6c:c9:5e:45:01: 12:10:c6:5d:4f:a1:69:c3:55:67:ea:23:70:15:42:e4:a2:e5: 30:97:78:d4:65:be:d8:53:1c:11:ee:bc:c9:e7:ed:d3:21:52: e8:2e:d2:05:30:9a:bc:d6:b9:f2:fd:86:b0:b9:7c:5f:1d:76: d3:10:14:d3:0a:f3:bc:12:2e:df:38:f7:03:47:7a:ec:5c:0a: 8b:a5:dd:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS7ZySzSYWGwf0JtIUZIR60WKUBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDMyMDU4WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDk0YmY0YzUyMDA0MzgxMDQ1OTcxZmM2MmI3ODVjYTUz NThmNTdiNzY2NDRiMTM3MjA2MDQwMjczNThiMWI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSzXKt1MyC711fUbGcMDfWTwx5bD7RKBHUUNFOFygovVjl dX0lkOxXrigTop+Z8O3B8nd5cKkvibsK2JcrWNU2BuRq95VHk0WDnDYxE0xM5954 1RPwh9LGnzDPM8iVGflqpzN4ndlskWOBkx+Z0arK5KWrG+d4+RZEIIJKU8lZoj8U UTSl7AwLNPZ4ouSj2/VDW0H6iAH9WMWQCGgqB4K/EpCrF0DJJRWP2P5d24/nI3mf 9NuksDZsJjM69RHzEx1s89oOtPWGUREo1smZ0xZoQuaz0tra0BsBS7LiqXSo35sA J4i/pYzOssKFvEywo9bokyFdttMltuUJLTE9UdvZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqlIdMdNlEcLsDYl2LIn29ijCYigwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkODU4MmYyLTcxMWQtNDlmNS05MjA4LWNlNzZjNjQ2NmU3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XzgwDQYJKoZIhvcNAQELBQADggEBAF0it5dzwPJqKTnLcVsBFNIdjmDE pcca6gZFTQnccPOGLlGFErivs5u43ybfabBoRZRPEUxzZOyvzYWOl+La1gTzJ5nv iRpsQJ48nbbJQSVCbBExpQK7t8a1t+rKq0cpZVEwNzu1UPCmOuRU+qUUSdL0RSWA Rk+qZVjrSiSFAt9ezxyZWzWO0rPSmBeX4sVaefhnRFN5+x2TLlB2nAcGWEcdfCw8 wif+c32/VAc84AxsyV5FARIQxl1PoWnDVWfqI3AVQuSi5TCXeNRlvthTHBHuvMnn 7dMhUugu0gUwmrzWufL9hrC5fF8ddtMQFNMK87wSLt849wNHeuxcCoul3T0= -----END CERTIFICATE-----Generated at Sat Jun 13 04:50:16 2026 by rpki-client