$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4e1556b-7f71-4a13-90a7-74b14da59510.roa File: a4e1556b-7f71-4a13-90a7-74b14da59510.roa (raw, json) Hash identifier: AhxiZNByLocqnyCVlznpM73r59L/3Rpavs68GDEXQGQ= Subject key identifier: CD:F1:08:E5:7B:E8:14:B2:88:CA:E9:42:11:2D:97:EE:CB:5E:79:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C7CAD05B32C57CCF81C9E30FA67FD7D09FB125C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4e1556b-7f71-4a13-90a7-74b14da59510.roa Signing time: Fri 08 May 2026 02:20:07 +0000 ROA not before: Fri 08 May 2026 02:20:07 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7c:ad:05:b3:2c:57:cc:f8:1c:9e:30:fa:67:fd:7d:09:fb:12:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:20:07 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=9e9de9a4c2f757388c7bd46d0c4435054dbc1ca70f84dd964dc72079a9db5687, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:84:6a:45:2d:17:cf:52:ff:38:98:21:cf: b8:53:58:7b:59:18:8a:6c:92:e3:6a:44:fc:fb:10: 85:7a:a7:bb:d7:c1:6c:91:9e:39:ff:31:3a:0e:80: 90:21:ec:70:f9:0a:9e:ff:24:d9:14:e7:be:3c:b4: 2f:e7:8c:0b:5b:80:99:2f:f3:fd:d1:70:5e:83:80: aa:83:a4:21:2e:51:cc:2f:76:3f:d1:7f:99:49:89: 32:61:2d:9a:e6:d2:e6:0d:a8:e9:75:35:63:57:e2: 08:a7:5d:03:e7:e2:00:74:12:7e:2c:e0:59:51:70: 19:c4:ab:8c:01:b3:9d:43:ec:78:a8:e8:0f:42:1a: 44:ba:88:ee:72:a4:10:94:2f:2e:2a:e6:70:bc:cf: e8:0b:97:9a:5d:17:fa:94:6e:94:3d:26:0f:18:88: ed:21:21:6a:67:96:4d:67:ce:1b:02:54:d3:14:22: e1:7c:34:d5:f2:8c:b2:f3:22:cd:5e:2a:12:b5:4d: 8b:5a:47:41:24:c4:53:21:f3:60:1f:d6:3b:f2:01: cf:54:d2:56:66:6e:d1:42:6e:45:e2:60:b2:45:56: de:14:49:a9:22:ef:3c:78:09:a2:e1:f7:e3:08:14: 40:59:77:ab:0e:12:28:b8:fe:01:ea:b0:95:76:35: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F1:08:E5:7B:E8:14:B2:88:CA:E9:42:11:2D:97:EE:CB:5E:79:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4e1556b-7f71-4a13-90a7-74b14da59510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.250.0/24 Signature Algorithm: sha256WithRSAEncryption b4:4c:ae:29:5f:ef:56:73:f0:85:77:96:57:e5:ba:d0:82:9d: 0a:fe:ab:65:db:b5:f2:e7:91:87:19:3a:b5:3f:4d:46:95:d9: 8e:df:98:8d:74:ad:73:cf:9a:c9:7e:ed:c0:ac:14:80:15:e3: bb:e7:6d:d6:38:d6:e1:5a:2b:1b:a2:78:46:42:62:0f:5d:42: b6:75:a2:b4:cb:44:d6:1b:3a:8c:dd:e1:1c:58:2e:e5:88:45: ee:b8:f1:af:58:3f:d3:79:f3:42:7d:3e:ea:e0:88:94:3a:a2: 73:61:12:ba:55:7b:0f:b9:c9:8c:1e:3f:43:60:8e:4d:fa:3e: 2e:b2:35:ac:36:40:d2:9d:dc:12:9d:87:cc:91:b5:41:29:22: 5c:be:de:48:3b:53:41:c0:fe:63:33:9f:56:79:3d:3c:7f:54: 8c:b0:de:0a:cc:ea:3e:51:fc:40:1b:df:c0:0b:eb:27:27:46: 5b:b0:5e:bc:25:b8:f5:bb:9a:66:c0:8b:77:71:3b:95:34:aa: 97:16:c4:0f:38:a1:5c:2e:2c:f7:a3:53:e7:21:1e:d7:b6:ba: 90:84:92:d7:4b:fc:06:d7:a3:59:ed:c6:d6:88:f1:7c:dd:d3: 90:0f:01:3a:b7:b9:6b:e0:98:02:e0:1b:76:17:e2:cb:5f:17: 88:ee:05:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXHytBbMsV8z4HJ4w+mf9fQn7ElwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIyMDA3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTlkZTlhNGMyZjc1NzM4OGM3YmQ0NmQwYzQ0MzUwNTRk YmMxY2E3MGY4NGRkOTY0ZGM3MjA3OWE5ZGI1Njg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDekYRqRS0Xz1L/OJghz7hTWHtZGIpskuNqRPz7EIV6p7vX wWyRnjn/MToOgJAh7HD5Cp7/JNkU5748tC/njAtbgJkv8/3RcF6DgKqDpCEuUcwv dj/Rf5lJiTJhLZrm0uYNqOl1NWNX4ginXQPn4gB0En4s4FlRcBnEq4wBs51D7Hio 6A9CGkS6iO5ypBCULy4q5nC8z+gLl5pdF/qUbpQ9Jg8YiO0hIWpnlk1nzhsCVNMU IuF8NNXyjLLzIs1eKhK1TYtaR0EkxFMh82Af1jvyAc9U0lZmbtFCbkXiYLJFVt4U Saki7zx4CaLh9+MIFEBZd6sOEii4/gHqsJV2Nf6DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzfEI5XvoFLKIyulCES2X7steeQEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0ZTE1NTZiLTdmNzEtNGExMy05MGE3LTc0YjE0ZGE1OTUxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0E/owDQYJKoZIhvcNAQELBQADggEBALRMrilf71Zz8IV3llflutCCnQr+ q2XbtfLnkYcZOrU/TUaV2Y7fmI10rXPPmsl+7cCsFIAV47vnbdY41uFaKxuieEZC Yg9dQrZ1orTLRNYbOozd4RxYLuWIRe648a9YP9N580J9PurgiJQ6onNhErpVew+5 yYweP0Ngjk36Pi6yNaw2QNKd3BKdh8yRtUEpIly+3kg7U0HA/mMzn1Z5PTx/VIyw 3grM6j5R/EAb38AL6ycnRluwXrwluPW7mmbAi3dxO5U0qpcWxA84oVwuLPejU+ch Hte2upCEktdL/AbXo1ntxtaI8Xzd05APATq3uWvgmALgG3YX4stfF4juBTY= -----END CERTIFICATE-----Generated at Tue May 12 22:25:39 2026 by rpki-client