$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa File: 0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa (raw, json) Hash identifier: IH1cE1yxwfF0mNSJp/Hzb3g/IqW+CBPI9FbJVl/aEkw= Subject key identifier: 5A:B5:DA:3E:F7:B6:AD:46:44:DD:85:0E:90:B8:75:3C:0F:13:DA:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AA1BD580C61C51F23800267C88A9A0691F3BC9A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa Signing time: Tue 24 Feb 2026 03:11:10 +0000 ROA not before: Tue 24 Feb 2026 03:11:10 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.206.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a1:bd:58:0c:61:c5:1f:23:80:02:67:c8:8a:9a:06:91:f3:bc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:11:10 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=f226247bf271c63d0eb2ee71d32421537428ebf49f64bfae7be5ca35626301f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:6e:ea:84:39:fc:a5:d1:12:6e:0b:9a:bb: d6:20:4f:27:41:f6:c4:70:a1:f8:48:88:90:a4:c1: 5d:28:d5:50:5b:23:1a:3f:57:de:3a:c5:e1:38:6d: a6:98:0f:94:60:5b:06:fd:b1:23:cf:e4:fa:a7:44: 1e:30:c2:4f:11:14:82:dd:fd:0b:e5:63:16:a0:27: c8:a6:2a:05:86:d3:00:4c:5b:a0:de:fe:59:aa:71: ce:8c:a4:b3:78:cd:96:4d:0c:e3:cd:eb:bc:97:30: cb:e4:22:93:2e:de:9e:18:fb:f8:83:ad:88:0d:c0: eb:a9:8c:34:3f:38:10:d0:2b:a5:77:c0:d0:55:64: 84:c2:06:5c:f6:12:0e:4f:b9:93:66:55:75:3a:f3: ac:99:fb:1f:0a:a7:1d:0c:56:28:3b:32:2e:d0:03: 56:98:66:2e:ac:93:54:5a:6d:43:5f:e2:ea:2a:77: 7d:92:6f:10:4b:6f:cb:7d:47:77:2d:20:d3:cf:56: 69:03:dd:47:65:6d:73:00:fe:70:59:bb:97:35:09: 4e:74:28:73:64:ba:06:70:b5:ba:b6:ec:c8:45:51: a7:24:99:54:1c:27:22:08:3f:9a:43:94:8c:ee:05: 2b:dd:6d:12:c7:8d:e2:9c:76:d2:18:84:5b:90:71: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:DA:3E:F7:B6:AD:46:44:DD:85:0E:90:B8:75:3C:0F:13:DA:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.206.248.0/22 Signature Algorithm: sha256WithRSAEncryption 86:4f:0e:ca:3f:ce:ba:6d:d3:8c:af:f5:49:42:89:c9:0e:87: a2:21:9f:06:f3:e1:50:f4:6b:f8:bc:3a:a5:56:70:58:08:5e: 37:c7:37:0e:cc:b1:5e:d2:43:c9:e7:82:55:de:b5:3c:fb:f8: c5:6e:09:8b:40:7d:6b:53:28:8b:c4:63:dc:c3:27:48:30:b8: 21:86:44:78:2f:44:95:40:4e:14:74:43:ef:82:29:45:9f:2b: 48:b7:42:e6:71:85:66:fe:60:bd:6c:0c:e4:c5:2b:58:36:e1: d3:55:ac:bf:ab:72:04:fb:3c:e4:73:43:30:65:d9:0f:b1:25: 34:97:9a:46:12:34:a2:43:e5:f7:92:54:61:69:83:65:71:03: 5c:e7:ef:34:31:6c:54:45:e7:c0:80:72:9c:99:f5:c7:44:74: 2f:36:3b:de:fb:95:85:7b:8e:1e:60:49:45:d2:16:55:53:12: 22:f3:29:3e:1f:65:06:97:e7:ac:0d:83:0c:d0:87:43:06:58: d5:d6:14:e1:c2:78:86:50:bc:7d:bb:cb:9a:cd:8b:80:84:7a: 66:d0:7c:83:0e:95:b0:b2:02:40:35:b6:05:24:b8:bd:c4:eb: d0:03:9d:ed:58:18:cc:68:2d:1d:e8:64:8f:69:b2:3e:29:a4: 3a:eb:74:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCqG9WAxhxR8jgAJnyIqaBpHzvJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMxMTEwWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjI2MjQ3YmYyNzFjNjNkMGViMmVlNzFkMzI0MjE1Mzc0 MjhlYmY0OWY2NGJmYWU3YmU1Y2EzNTYyNjMwMWY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN0m7qhDn8pdESbguau9YgTydB9sRwofhIiJCkwV0o1VBb Ixo/V946xeE4baaYD5RgWwb9sSPP5PqnRB4wwk8RFILd/QvlYxagJ8imKgWG0wBM W6De/lmqcc6MpLN4zZZNDOPN67yXMMvkIpMu3p4Y+/iDrYgNwOupjDQ/OBDQK6V3 wNBVZITCBlz2Eg5PuZNmVXU686yZ+x8Kpx0MVig7Mi7QA1aYZi6sk1RabUNf4uoq d32SbxBLb8t9R3ctINPPVmkD3UdlbXMA/nBZu5c1CU50KHNkugZwtbq27MhFUack mVQcJyIIP5pDlIzuBSvdbRLHjeKcdtIYhFuQcfpjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWrXaPve2rUZE3YUOkLh1PA8T2lAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlNjkwYjFiLWNlZmUtNDgwMy1hMDFkLTBmNjQzMWI5NWI5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2zvgwDQYJKoZIhvcNAQELBQADggEBAIZPDso/zrpt04yv9UlCickOh6Ih nwbz4VD0a/i8OqVWcFgIXjfHNw7MsV7SQ8nnglXetTz7+MVuCYtAfWtTKIvEY9zD J0gwuCGGRHgvRJVAThR0Q++CKUWfK0i3QuZxhWb+YL1sDOTFK1g24dNVrL+rcgT7 PORzQzBl2Q+xJTSXmkYSNKJD5feSVGFpg2VxA1zn7zQxbFRF58CAcpyZ9cdEdC82 O977lYV7jh5gSUXSFlVTEiLzKT4fZQaX56wNgwzQh0MGWNXWFOHCeIZQvH27y5rN i4CEembQfIMOlbCyAkA1tgUkuL3E69ADne1YGMxoLR3oZI9psj4ppDrrdDI= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:56 2026 by rpki-client