$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdae1dd6-58dd-4004-b207-bb1afbb63d08.roa File: fdae1dd6-58dd-4004-b207-bb1afbb63d08.roa (raw, json) Hash identifier: DUG0iEf3A0V7GSTPI+f52MAT38qNDGcpNvOGLN8hKpA= Subject key identifier: A6:14:4C:38:3C:01:5E:C1:73:27:8D:7A:94:D6:65:07:57:A4:0C:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 75183828FCF953A3DB81E735AC49F6A038FB8DBC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdae1dd6-58dd-4004-b207-bb1afbb63d08.roa Signing time: Fri 24 Apr 2026 17:46:24 +0000 ROA not before: Fri 24 Apr 2026 17:46:24 +0000 ROA not after: Thu 23 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:18:38:28:fc:f9:53:a3:db:81:e7:35:ac:49:f6:a0:38:fb:8d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 24 17:46:24 2026 GMT Not After : Jul 23 23:59:59 2026 GMT Subject: serialNumber=8c503f6a2b83eba6d1fa66c6e87082f3183fa5aa79554518c2bf442960842c4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:7d:2c:91:59:fb:74:ea:84:55:ff:8d:ca: 1d:ec:f3:04:73:2b:d4:d1:b4:e5:94:b2:fd:68:60: 1a:01:b3:4e:2c:c5:fb:f3:e0:49:01:9b:75:c2:43: 1d:78:b7:b6:3c:16:a0:f6:18:4d:7b:a5:cc:03:5d: 4d:9d:bc:5b:02:f6:06:64:bc:35:d1:d0:0f:dc:f7: 8c:2d:e3:12:fe:db:6e:2f:73:a8:c6:a0:c2:70:de: b8:c6:c1:db:7a:17:7f:8f:b1:ca:8f:3b:3f:fb:15: ce:ca:a2:d4:4e:4c:cc:84:e8:76:b6:fa:29:79:ba: f2:9c:b5:9d:f4:81:cb:5c:7e:66:a9:31:91:b3:7f: 00:fd:a4:3a:82:73:e1:2d:d2:a1:f9:ea:3e:6e:28: e3:0d:0d:d3:e4:a5:76:b1:bc:4c:66:d5:1a:01:7b: 63:6a:49:e3:c7:7a:61:06:fc:83:df:84:99:0d:02: ee:da:92:e4:0f:be:80:21:ed:0f:99:31:8f:d1:be: 6c:fc:66:38:e7:c2:11:bd:a0:31:30:bf:76:34:6f: 4d:81:a5:de:40:72:ba:73:f5:db:c2:a3:8c:e5:c5: 9e:d8:ba:c0:a5:01:0b:66:b9:ee:a4:eb:07:99:bd: 41:cc:29:bc:e6:b4:0b:89:df:95:8d:4d:58:5e:24: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:14:4C:38:3C:01:5E:C1:73:27:8D:7A:94:D6:65:07:57:A4:0C:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdae1dd6-58dd-4004-b207-bb1afbb63d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:ba:78:d2:e4:9a:2f:b9:6a:a2:5c:c3:c2:8c:6e:8d:89:10: b3:14:dc:7a:bf:3e:bf:97:a3:27:e4:04:67:c2:1c:7b:38:3e: 23:33:a3:d7:76:9b:de:14:2d:b0:59:e9:d9:8d:6f:18:a2:36: d1:f7:68:6a:8e:fa:a8:3a:2a:76:0f:20:01:b0:e5:69:7e:f4: e1:43:d9:a5:2c:4e:a8:18:49:d4:5f:5b:1c:12:0c:f4:35:c3: c5:77:c5:1e:45:36:30:0c:6f:9a:f4:84:3c:85:ed:c6:f9:1a: 47:64:11:3b:22:22:37:e7:32:2e:7e:a4:05:78:d0:80:f7:3c: 4d:bc:1a:c8:02:91:2f:f7:b8:6a:c6:1d:f6:dd:21:ff:33:e3: b8:44:3d:af:9b:5f:53:15:f5:c2:49:de:fa:b5:15:39:99:89: 79:0f:5e:46:a6:1a:42:43:b0:4c:9d:80:ec:05:5e:a3:ee:57: 0e:4c:a3:68:66:d8:d1:06:20:d2:81:c7:3d:7b:9a:7b:20:00: 55:c4:cb:2a:91:a5:ea:da:73:8c:38:b7:e0:f8:aa:13:95:03: ec:8a:99:c7:d7:f1:48:80:e9:e3:fb:f5:7d:0c:bf:10:1a:c5: 60:2a:6c:43:eb:f7:57:f6:a8:28:b8:94:2f:25:56:83:3a:0c: 0f:03:f5:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdRg4KPz5U6Pbgec1rEn2oDj7jbwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNDI0MTc0NjI0WhcNMjYwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzUwM2Y2YTJiODNlYmE2ZDFmYTY2YzZlODcwODJmMzE4 M2ZhNWFhNzk1NTQ1MThjMmJmNDQyOTYwODQyYzRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxo30skVn7dOqEVf+Nyh3s8wRzK9TRtOWUsv1oYBoBs04s xfvz4EkBm3XCQx14t7Y8FqD2GE17pcwDXU2dvFsC9gZkvDXR0A/c94wt4xL+224v c6jGoMJw3rjGwdt6F3+PscqPOz/7Fc7KotROTMyE6Ha2+il5uvKctZ30gctcfmap MZGzfwD9pDqCc+Et0qH56j5uKOMNDdPkpXaxvExm1RoBe2NqSePHemEG/IPfhJkN Au7akuQPvoAh7Q+ZMY/Rvmz8ZjjnwhG9oDEwv3Y0b02Bpd5Acrpz9dvCo4zlxZ7Y usClAQtmue6k6weZvUHMKbzmtAuJ35WNTVheJLwTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUphRMODwBXsFzJ416lNZlB1ekDGcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkYWUxZGQ2LTU4ZGQtNDAwNC1iMjA3LWJiMWFmYmI2M2QwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY274AwDQYJKoZIhvcNAQELBQADggEBAD+6eNLkmi+5aqJcw8KMbo2JELMU 3Hq/Pr+XoyfkBGfCHHs4PiMzo9d2m94ULbBZ6dmNbxiiNtH3aGqO+qg6KnYPIAGw 5Wl+9OFD2aUsTqgYSdRfWxwSDPQ1w8V3xR5FNjAMb5r0hDyF7cb5GkdkETsiIjfn Mi5+pAV40ID3PE28GsgCkS/3uGrGHfbdIf8z47hEPa+bX1MV9cJJ3vq1FTmZiXkP XkamGkJDsEydgOwFXqPuVw5Mo2hm2NEGINKBxz17mnsgAFXEyyqRperac4w4t+D4 qhOVA+yKmcfX8UiA6eP79X0MvxAaxWAqbEPr91f2qCi4lC8lVoM6DA8D9Ww= -----END CERTIFICATE-----Generated at Thu Apr 30 01:04:26 2026 by rpki-client