$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f692ea2b-fafc-4a80-ac21-d7fa86dfd9a0.roa File: f692ea2b-fafc-4a80-ac21-d7fa86dfd9a0.roa (raw, json) Hash identifier: H3RITKyaSxDJtuYY8uyTHwnna443aFtTzRcvYKWyymw= Subject key identifier: B3:E3:E6:F6:E1:AE:6D:9C:22:26:DD:28:A5:01:95:11:C2:6D:0A:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24500EF6136FC5D69703D15E7415F81D5490EFA7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f692ea2b-fafc-4a80-ac21-d7fa86dfd9a0.roa Signing time: Mon 27 Apr 2026 00:30:31 +0000 ROA not before: Mon 27 Apr 2026 00:30:31 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:50:0e:f6:13:6f:c5:d6:97:03:d1:5e:74:15:f8:1d:54:90:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 27 00:30:31 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=f90716b0abcda2a56da24b95065d923bc3ccab7c479467d1f4b998cd7793c0a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:4e:37:d0:ad:e5:79:47:ac:d1:3e:f0:b9: d4:b7:6d:29:45:41:36:ab:d3:47:fd:42:df:2e:38: 48:e2:18:a2:fa:fa:49:cd:75:fb:00:f2:30:88:d8: 59:c6:de:8b:bf:d6:bb:1e:49:57:a2:6a:41:8f:7a: f1:77:3d:cd:38:cd:61:de:82:b8:89:04:cd:b4:8e: aa:4e:7d:24:eb:fd:be:6f:1a:9f:82:7f:16:db:7a: 9b:c2:60:5c:4c:f1:55:32:e6:31:c1:23:6e:a5:0b: c7:51:17:e6:1e:37:3b:bd:78:60:74:09:6b:8f:31: 33:a7:d7:32:e0:ca:f6:b5:c7:2a:22:ce:c8:c9:e3: a6:f5:d6:90:46:f3:13:56:be:ee:b9:09:f3:45:61: cb:6e:74:1a:eb:0a:21:7d:3e:6a:50:b5:c2:8c:2d: c2:8b:e1:f4:fb:b4:86:c3:0a:3e:ff:5d:02:49:eb: ca:04:cd:21:60:75:1e:75:3e:51:b6:04:da:73:00: 6a:92:cb:c8:6e:67:f9:69:86:57:b1:01:d8:df:39: 8f:81:19:54:26:ab:5b:ab:83:f9:42:34:04:8e:21: 0e:88:54:66:c6:38:ba:17:bd:d3:d8:61:a3:10:85: 00:ce:f8:c1:63:40:66:cd:78:fe:98:eb:41:6d:d7: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E3:E6:F6:E1:AE:6D:9C:22:26:DD:28:A5:01:95:11:C2:6D:0A:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f692ea2b-fafc-4a80-ac21-d7fa86dfd9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.224.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:65:b4:50:9c:32:20:84:5e:ef:9b:80:55:44:60:9a:8d:bc: 95:74:26:14:2f:88:83:78:fe:2e:a9:f9:ad:ac:e6:60:20:35: a9:c2:b1:90:47:9d:cd:86:17:ec:56:ec:d5:3d:8c:40:59:e6: fd:f8:1c:4b:3e:9c:80:b6:08:31:6c:81:49:a7:60:4b:d8:ce: 6d:49:d5:19:21:27:b3:cf:2f:54:cb:16:a9:43:b2:a9:61:7b: 8a:2e:17:7b:25:8d:65:82:73:29:76:22:28:c2:f4:4f:52:7c: b9:11:c3:bc:5b:e0:82:6c:c5:d6:b1:c4:9c:75:d5:f3:0c:f5: b8:6c:f2:60:69:5d:61:38:e8:b7:0b:dd:b2:17:e3:79:29:23: 70:81:7a:11:37:ee:a3:6e:9d:ed:51:43:d7:a3:fa:d2:9d:c5: 5e:62:48:04:8f:b7:cf:6d:57:64:e0:85:e5:86:14:cc:e8:7c: c8:ff:e1:15:67:56:0c:6f:f1:c3:73:8a:ac:e3:99:88:e2:d1: ce:d6:f6:bd:bd:49:8c:cd:96:db:a8:a3:f0:6b:35:d8:7b:88: 35:51:5f:7e:3c:f9:76:67:86:22:3c:bb:0f:17:b4:8d:84:8d: fd:80:67:47:45:be:39:9e:bc:ad:cf:79:08:81:5f:ed:42:24: 99:d2:70:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJFAO9hNvxdaXA9FedBX4HVSQ76cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNDI3MDAzMDMxWhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTA3MTZiMGFiY2RhMmE1NmRhMjRiOTUwNjVkOTIzYmMz Y2NhYjdjNDc5NDY3ZDFmNGI5OThjZDc3OTNjMGE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD1U430K3leUes0T7wudS3bSlFQTar00f9Qt8uOEjiGKL6 +knNdfsA8jCI2FnG3ou/1rseSVeiakGPevF3Pc04zWHegriJBM20jqpOfSTr/b5v Gp+CfxbbepvCYFxM8VUy5jHBI26lC8dRF+YeNzu9eGB0CWuPMTOn1zLgyva1xyoi zsjJ46b11pBG8xNWvu65CfNFYctudBrrCiF9PmpQtcKMLcKL4fT7tIbDCj7/XQJJ 68oEzSFgdR51PlG2BNpzAGqSy8huZ/lphlexAdjfOY+BGVQmq1urg/lCNASOIQ6I VGbGOLoXvdPYYaMQhQDO+MFjQGbNeP6Y60Ft13ejAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs+Pm9uGubZwiJt0opQGVEcJtCiIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y2OTJlYTJiLWZhZmMtNGE4MC1hYzIxLWQ3ZmE4NmRmZDlhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0VeAwDQYJKoZIhvcNAQELBQADggEBAI1ltFCcMiCEXu+bgFVEYJqNvJV0 JhQviIN4/i6p+a2s5mAgNanCsZBHnc2GF+xW7NU9jEBZ5v34HEs+nIC2CDFsgUmn YEvYzm1J1RkhJ7PPL1TLFqlDsqlhe4ouF3sljWWCcyl2IijC9E9SfLkRw7xb4IJs xdaxxJx11fMM9bhs8mBpXWE46LcL3bIX43kpI3CBehE37qNune1RQ9ej+tKdxV5i SASPt89tV2TgheWGFMzofMj/4RVnVgxv8cNziqzjmYji0c7W9r29SYzNltuoo/Br Ndh7iDVRX348+XZnhiI8uw8XtI2Ejf2AZ0dFvjmevK3PeQiBX+1CJJnScLo= -----END CERTIFICATE-----Generated at Tue May 12 22:41:36 2026 by rpki-client