$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0de033d3-f975-414a-afba-0b5ab3a28049.roa File: 0de033d3-f975-414a-afba-0b5ab3a28049.roa (raw, json) Hash identifier: fVg3sxpQ4H+DJW4E7TAqQJyeVH2kDvm2KazvyRk+5Lw= Subject key identifier: 91:28:81:97:32:3A:32:A9:8A:BB:D6:73:35:C4:0A:FA:65:64:62:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 275D54FCAF4B4FB8724F129992FC2668E6D2DACE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0de033d3-f975-414a-afba-0b5ab3a28049.roa Signing time: Tue 24 Feb 2026 03:30:10 +0000 ROA not before: Tue 24 Feb 2026 03:30:10 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.250.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5d:54:fc:af:4b:4f:b8:72:4f:12:99:92:fc:26:68:e6:d2:da:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:30:10 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=5fc9a3b9ac748a9d29ba29ab13049f4e9f667df2a5c99abed4c2242084b1c31d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:1d:6e:17:5f:e9:4e:84:7f:5f:13:43:03: 93:67:ad:68:aa:9e:da:36:a5:8e:0a:4d:48:9e:2d: d3:b1:5d:57:c6:ca:5b:73:8a:79:99:cb:10:38:51: 50:4b:f0:27:fc:f3:eb:2c:63:1d:3e:b6:be:b0:41: 0e:85:a7:2b:e0:29:f8:b5:65:db:bd:b3:2e:a6:32: 52:b0:04:92:19:09:a6:12:c5:e0:c9:73:ad:3c:82: 38:85:75:7f:0a:bf:58:a9:dc:62:67:e9:d5:bf:59: 54:6d:e1:a8:a6:bc:75:4c:e6:9f:f2:f4:ae:2b:e4: 89:03:57:da:82:84:8d:f0:09:69:90:08:fa:a8:3e: 7b:77:83:17:e3:e9:dc:0b:c5:de:f6:55:78:21:45: 9a:f0:5f:de:17:11:ac:51:1a:b6:e8:62:b5:67:b1: 7c:4d:47:4d:cd:5b:50:75:85:6d:22:d2:fc:56:20: 4c:1a:53:23:ac:24:3f:c5:da:54:6d:c8:a2:ae:48: 4e:2e:e9:c5:91:f2:75:83:9e:ad:92:d5:63:c5:93: 5d:3b:d8:3f:0e:2a:98:e7:67:74:9f:f9:74:e6:32: 56:bd:b5:7d:17:1c:0f:52:d9:a2:ee:01:91:39:31: 60:74:b3:5d:68:27:4a:38:a9:6d:87:3f:d8:f0:8a: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:81:97:32:3A:32:A9:8A:BB:D6:73:35:C4:0A:FA:65:64:62:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0de033d3-f975-414a-afba-0b5ab3a28049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.250.0.0/17 Signature Algorithm: sha256WithRSAEncryption 46:be:4c:61:b0:2e:ac:0c:e2:16:75:88:0d:3c:7b:09:a3:a2: 4d:26:9f:7d:ad:d6:12:4e:5d:3d:46:84:db:ba:52:81:87:9e: 95:2e:7a:c8:f4:bc:bc:4d:5a:a6:b2:31:fb:2a:d7:13:10:c5: 1d:9b:6c:64:ef:05:16:01:58:a6:87:02:1c:f0:f3:ed:8a:62: b2:f0:2b:97:62:be:a9:23:01:4f:d4:12:92:4c:ca:08:c6:de: 05:c8:cb:20:55:d9:b1:08:bd:64:e7:6b:35:bd:9a:f4:c5:d7: 86:eb:42:d9:3d:22:d2:cb:0f:e5:a0:4d:2a:d2:e1:36:25:3a: ce:d0:f9:b9:24:e4:6b:bf:03:b6:ab:ae:95:c8:cc:4e:fe:39: 55:a6:07:af:a8:57:38:5c:0e:d8:7e:81:a9:2f:c0:33:52:45: 93:c1:b3:7d:a0:91:fa:86:7c:92:91:bd:44:be:5b:26:e2:3c: 45:41:87:2e:b3:73:36:30:04:a1:37:d6:a8:b4:15:58:49:87: 26:28:a4:ba:d1:c0:f0:24:d9:34:b1:47:a3:ee:25:cc:b4:9b: d2:0e:b2:ab:06:c6:ad:36:5d:53:ef:2e:ef:5f:0a:af:6d:57: a5:45:62:48:28:1f:db:97:2c:af:7d:6e:6b:38:50:2d:b8:e7: 59:88:b4:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ11U/K9LT7hyTxKZkvwmaObS2s4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMzMDEwWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmM5YTNiOWFjNzQ4YTlkMjliYTI5YWIxMzA0OWY0ZTlm NjY3ZGYyYTVjOTlhYmVkNGMyMjQyMDg0YjFjMzFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqcR1uF1/pToR/XxNDA5NnrWiqnto2pY4KTUieLdOxXVfG yltzinmZyxA4UVBL8Cf88+ssYx0+tr6wQQ6FpyvgKfi1Zdu9sy6mMlKwBJIZCaYS xeDJc608gjiFdX8Kv1ip3GJn6dW/WVRt4aimvHVM5p/y9K4r5IkDV9qChI3wCWmQ CPqoPnt3gxfj6dwLxd72VXghRZrwX94XEaxRGrboYrVnsXxNR03NW1B1hW0i0vxW IEwaUyOsJD/F2lRtyKKuSE4u6cWR8nWDnq2S1WPFk1072D8OKpjnZ3Sf+XTmMla9 tX0XHA9S2aLuAZE5MWB0s11oJ0o4qW2HP9jwiqttAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkSiBlzI6MqmKu9ZzNcQK+mVkYgQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkZTAzM2QzLWY5NzUtNDE0YS1hZmJhLTBiNWFiM2EyODA0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2+gAwDQYJKoZIhvcNAQELBQADggEBAEa+TGGwLqwM4hZ1iA08ewmjok0m n32t1hJOXT1GhNu6UoGHnpUuesj0vLxNWqayMfsq1xMQxR2bbGTvBRYBWKaHAhzw 8+2KYrLwK5divqkjAU/UEpJMygjG3gXIyyBV2bEIvWTnazW9mvTF14brQtk9ItLL D+WgTSrS4TYlOs7Q+bkk5Gu/A7arrpXIzE7+OVWmB6+oVzhcDth+gakvwDNSRZPB s32gkfqGfJKRvUS+WybiPEVBhy6zczYwBKE31qi0FVhJhyYopLrRwPAk2TSxR6Pu Jcy0m9IOsqsGxq02XVPvLu9fCq9tV6VFYkgoH9uXLK99bms4UC2451mItHY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:47:35 2026 by rpki-client