$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd42ab63-768e-4f05-affd-92624ae2211f.roa File: cd42ab63-768e-4f05-affd-92624ae2211f.roa (raw, json) Hash identifier: CSALztmmHLxhxD2++aGQZiOrudbAfQ1T8mk1zrAUPdo= Subject key identifier: E6:9B:DD:53:5E:0B:3D:29:D2:2C:A2:60:02:C3:F0:18:72:AA:0F:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D7006FFBD3A708A9B7193EDAEB3DD702F9AB166 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd42ab63-768e-4f05-affd-92624ae2211f.roa Signing time: Fri 08 May 2026 01:11:42 +0000 ROA not before: Fri 08 May 2026 01:11:42 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.88.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:70:06:ff:bd:3a:70:8a:9b:71:93:ed:ae:b3:dd:70:2f:9a:b1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 01:11:42 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=83f28e9a78dae7509c2628a4ff4661c7766c40db3a25f59e113758c70d16775b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:c3:d1:f0:a8:0f:b9:27:85:06:d9:fe:d4: 50:6a:36:ac:aa:38:d8:c2:d7:3b:30:60:a7:dd:75: f3:49:93:95:32:c6:d7:32:da:3b:77:26:ac:30:6b: 1a:35:37:0a:6a:6d:21:12:0b:8a:8a:be:ab:bb:27: 6e:f9:31:b5:a2:cc:e0:00:aa:ff:67:fd:dc:79:c8: ca:04:5e:b0:43:80:74:be:96:62:ac:bf:7f:ea:59: d6:aa:03:4e:67:6b:3a:2d:8d:ac:24:19:6c:c9:43: a6:5d:4c:66:63:0c:dc:d7:fd:dc:02:b9:82:7f:d5: 4c:d9:72:9f:4d:39:cc:6f:f0:3d:c8:bd:be:c7:10: 95:93:6c:2c:f2:84:c1:81:55:46:ff:3e:50:b0:7b: 03:24:ee:af:47:4a:30:7f:ae:bd:e4:d4:46:e7:43: af:a9:66:d2:78:ee:04:0f:58:c5:1c:fc:4d:05:60: c6:8d:4a:58:52:5f:da:1e:d5:5f:b6:ab:c2:32:6a: c5:e6:d6:b7:2e:17:eb:e3:5d:3e:a4:88:9b:6c:71: a3:a8:40:7d:b7:d7:60:ac:24:46:45:d4:d1:6e:2a: dc:e8:0f:c7:84:f7:0e:81:67:38:b6:dd:ba:87:8e: 83:20:86:2e:9a:ca:5c:41:1a:5b:70:4b:5b:6d:39: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9B:DD:53:5E:0B:3D:29:D2:2C:A2:60:02:C3:F0:18:72:AA:0F:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd42ab63-768e-4f05-affd-92624ae2211f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.64.0/19 Signature Algorithm: sha256WithRSAEncryption 46:5f:b5:29:b2:d7:e6:73:36:49:8d:d1:ea:53:37:38:8d:79: a7:3d:f9:f4:a9:33:d0:ba:6f:26:a0:a1:2e:69:73:2d:e1:c2: 8c:f9:23:05:d5:b6:ac:dd:38:f7:b4:05:f4:96:66:2d:12:d8: d8:f5:0b:8f:5c:4d:7c:fa:7d:83:81:24:de:a4:9f:01:09:2b: 0f:90:d6:57:7c:c3:2f:bf:d1:95:a3:4d:10:51:8b:d0:64:e5: 7c:99:f7:8f:17:ed:cc:88:74:8f:5f:3c:6a:07:15:2c:d8:fb: d9:11:5a:d5:d1:ca:28:3b:90:12:26:5f:93:9f:67:97:0e:61: 4c:bf:95:d7:4a:0b:a4:88:df:f6:c2:9a:17:dc:a9:7c:a6:49: 1e:6b:34:5f:b3:8c:da:8d:50:9c:03:fa:ae:13:92:ce:d6:0a: c3:94:03:54:6a:61:d8:a0:f9:3b:74:c4:98:5d:fe:a8:2f:ad: 1d:d1:9f:5d:01:0d:ba:de:ad:c1:fa:70:94:68:1f:76:5c:dc: 13:04:15:f7:7e:13:7d:51:ac:31:fb:84:eb:74:90:20:66:84: 34:22:d6:4c:1d:3d:82:68:eb:3c:6e:04:81:96:00:de:53:e2: 39:d1:83:7f:88:4b:5f:c9:7f:9d:cb:4e:58:7c:67:74:e7:de: 83:c3:5d:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTXAG/706cIqbcZPtrrPdcC+asWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDExMTQyWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2YyOGU5YTc4ZGFlNzUwOWMyNjI4YTRmZjQ2NjFjNzc2 NmM0MGRiM2EyNWY1OWUxMTM3NThjNzBkMTY3NzViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXX8PR8KgPuSeFBtn+1FBqNqyqONjC1zswYKfddfNJk5Uy xtcy2jt3Jqwwaxo1NwpqbSESC4qKvqu7J275MbWizOAAqv9n/dx5yMoEXrBDgHS+ lmKsv3/qWdaqA05nazotjawkGWzJQ6ZdTGZjDNzX/dwCuYJ/1UzZcp9NOcxv8D3I vb7HEJWTbCzyhMGBVUb/PlCwewMk7q9HSjB/rr3k1EbnQ6+pZtJ47gQPWMUc/E0F YMaNSlhSX9oe1V+2q8IyasXm1rcuF+vjXT6kiJtscaOoQH2312CsJEZF1NFuKtzo D8eE9w6BZzi23bqHjoMghi6aylxBGltwS1ttOdK7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5pvdU14LPSnSLKJgAsPwGHKqD1cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkNDJhYjYzLTc2OGUtNGYwNS1hZmZkLTkyNjI0YWUyMjExZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWEAwDQYJKoZIhvcNAQELBQADggEBAEZftSmy1+ZzNkmN0epTNziNeac9 +fSpM9C6byagoS5pcy3hwoz5IwXVtqzdOPe0BfSWZi0S2Nj1C49cTXz6fYOBJN6k nwEJKw+Q1ld8wy+/0ZWjTRBRi9Bk5XyZ948X7cyIdI9fPGoHFSzY+9kRWtXRyig7 kBImX5OfZ5cOYUy/lddKC6SI3/bCmhfcqXymSR5rNF+zjNqNUJwD+q4Tks7WCsOU A1RqYdig+Tt0xJhd/qgvrR3Rn10BDbrercH6cJRoH3Zc3BMEFfd+E31RrDH7hOt0 kCBmhDQi1kwdPYJo6zxuBIGWAN5T4jnRg3+IS1/Jf53LTlh8Z3Tn3oPDXaM= -----END CERTIFICATE-----Generated at Tue May 12 22:34:47 2026 by rpki-client