$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa File: 4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa (raw, json) Hash identifier: 172YbRSVmdCcRXw+AxaStcuOMrZTfB2bVFh5FHBTmLE= Subject key identifier: AD:C5:C5:EC:74:34:62:DA:DB:C8:B5:AE:C8:A1:C5:B0:6C:BB:A5:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20B2A077D936FBF60FFE6F0EF4AC44C9078C9F1C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa Signing time: Fri 08 May 2026 02:41:34 +0000 ROA not before: Fri 08 May 2026 02:41:34 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.88.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b2:a0:77:d9:36:fb:f6:0f:fe:6f:0e:f4:ac:44:c9:07:8c:9f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:41:34 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=7879948314a3cfe130dc8ad4a1660b6d7297f84b403179308b3f3f7965323340, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:29:78:30:4d:3f:09:44:22:ec:d2:97:be: 8d:7d:b7:bf:30:5c:85:71:86:c8:89:61:9f:35:88: 9b:f0:01:d4:33:de:17:fc:ec:68:b5:06:9c:e1:74: 4e:ea:a9:af:46:b3:b4:ac:e7:27:07:9f:a8:36:e5: b1:ff:36:32:42:8a:f7:09:02:16:55:4e:27:a9:6a: 1d:96:6a:1f:8d:a9:99:5a:7f:17:1d:92:61:1d:d6: a8:a7:95:bb:1b:85:bf:3a:37:0c:48:0d:ca:84:6b: b7:3c:53:d5:27:9e:55:af:6b:61:25:b1:f4:c6:ed: e5:25:eb:f1:05:87:01:4a:fe:bd:b3:b2:a7:60:30: d1:81:09:d7:ed:93:26:90:93:bf:e3:09:e9:85:2f: 3c:89:e1:d2:89:79:1a:54:0d:cd:42:1f:ec:61:0b: b8:6f:73:47:7c:07:dc:8f:b4:64:66:59:e4:6f:35: 38:c7:0f:6d:28:e1:19:f4:7a:51:4b:1f:0e:4c:c5: d0:01:cd:53:29:f1:28:aa:cc:ea:97:62:5a:0d:ea: 2d:cb:1a:41:04:6d:7c:3a:3c:3c:70:78:21:cd:f8: 1d:f9:e3:e8:80:19:0f:77:4a:ed:d7:9a:d9:bb:59: 42:f7:9b:57:49:94:ad:3d:e2:8e:11:64:de:e9:5a: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C5:C5:EC:74:34:62:DA:DB:C8:B5:AE:C8:A1:C5:B0:6C:BB:A5:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5d:4f:f7:78:f7:08:a6:3e:6c:29:2f:29:47:7c:cb:23:2f:68: e5:5e:0c:4a:7e:23:c7:fc:dd:00:a0:f2:fe:11:48:2c:72:4b: e2:e6:6a:15:e2:ae:67:ac:b7:34:87:c1:5a:5c:ec:25:8e:d0: 2f:93:11:5b:7b:06:9d:d2:05:11:b8:c3:03:cd:ce:bb:16:17: cf:90:41:1a:65:c9:b2:05:e6:f3:87:bf:86:fe:b2:d7:b8:b5: 7b:fb:20:0d:fe:91:28:4f:d4:86:80:74:17:55:74:92:0d:68: cf:dc:4c:2c:c1:05:d2:5f:81:0e:cc:bf:a4:bb:e7:c7:1c:a5: 08:ec:39:37:ec:5a:6d:d9:10:2d:44:ab:36:75:60:05:69:fe: 2e:da:76:c2:94:08:c4:5d:8c:6d:33:51:5c:2e:56:51:e6:47: 81:07:0e:19:45:e7:c7:94:45:8d:d7:53:64:5d:0e:7b:5a:f7: ec:e0:b3:d1:b0:a4:9c:14:69:6a:20:ea:43:75:39:0e:86:3b: e5:3d:9e:da:69:49:e6:64:6a:8b:d6:c4:91:7a:3b:88:ba:cd: 08:9a:d9:d0:bf:81:08:6e:83:99:85:b2:4e:d3:87:63:39:fe: 00:3a:f8:6a:f8:9b:b0:a5:44:da:aa:11:fb:d1:4a:42:c5:6f: b6:46:33:47 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUILKgd9k2+/YP/m8O9KxEyQeMnxwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDI0MTM0WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODc5OTQ4MzE0YTNjZmUxMzBkYzhhZDRhMTY2MGI2ZDcy OTdmODRiNDAzMTc5MzA4YjNmM2Y3OTY1MzIzMzQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgail4ME0/CUQi7NKXvo19t78wXIVxhsiJYZ81iJvwAdQz 3hf87Gi1BpzhdE7qqa9Gs7Ss5ycHn6g25bH/NjJCivcJAhZVTiepah2Wah+NqZla fxcdkmEd1qinlbsbhb86NwxIDcqEa7c8U9UnnlWva2ElsfTG7eUl6/EFhwFK/r2z sqdgMNGBCdftkyaQk7/jCemFLzyJ4dKJeRpUDc1CH+xhC7hvc0d8B9yPtGRmWeRv NTjHD20o4Rn0elFLHw5MxdABzVMp8SiqzOqXYloN6i3LGkEEbXw6PDxweCHN+B35 4+iAGQ93Su3Xmtm7WUL3m1dJlK094o4RZN7pWuqnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrcXF7HQ0YtrbyLWuyKHFsGy7paIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjYWI5MmJjLTlhYTEtNGI0OC04M2JkLTExNTkwYTcxNmZiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESWDANBgkqhkiG9w0BAQsFAAOCAQEAXU/3ePcIpj5sKS8pR3zLIy9o5V4M Sn4jx/zdAKDy/hFILHJL4uZqFeKuZ6y3NIfBWlzsJY7QL5MRW3sGndIFEbjDA83O uxYXz5BBGmXJsgXm84e/hv6y17i1e/sgDf6RKE/UhoB0F1V0kg1oz9xMLMEF0l+B Dsy/pLvnxxylCOw5N+xabdkQLUSrNnVgBWn+Ltp2wpQIxF2MbTNRXC5WUeZHgQcO GUXnx5RFjddTZF0Oe1r37OCz0bCknBRpaiDqQ3U5DoY75T2e2mlJ5mRqi9bEkXo7 iLrNCJrZ0L+BCG6DmYWyTtOHYzn+ADr4avibsKVE2qoR+9FKQsVvtkYzRw== -----END CERTIFICATE-----Generated at Tue May 12 22:00:12 2026 by rpki-client