$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1940f2e5-555e-4037-bf7d-1cd60d8aa7b1.roa File: 1940f2e5-555e-4037-bf7d-1cd60d8aa7b1.roa (raw, json) Hash identifier: xaSU/5PfhOqOcn5NNJh5dwj0aF7K/bVpMzTcx3OylFI= Subject key identifier: 64:3F:19:BE:3A:97:CF:47:7C:A7:8B:E0:B0:2E:53:4E:4E:B6:26:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B5281A2F9B72D3A62ACE98DBC614188C92781 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1940f2e5-555e-4037-bf7d-1cd60d8aa7b1.roa Signing time: Sat 28 Feb 2026 01:51:24 +0000 ROA not before: Sat 28 Feb 2026 01:51:24 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:52:81:a2:f9:b7:2d:3a:62:ac:e9:8d:bc:61:41:88:c9:27:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 01:51:24 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=c6400c3450ea5160d43968064da9621811fa8d18b4f7755b89d7307f34dbf878, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4a:ef:6e:5f:42:61:45:f3:b9:73:f8:61:07: cc:8c:7e:e5:06:e8:3e:89:3b:bb:b7:e5:74:84:46: dc:9f:75:88:44:3f:59:b9:2c:25:2f:5e:8d:fd:c5: be:eb:75:40:2c:5d:8d:56:af:ad:e3:a5:ed:19:43: f9:e9:68:f0:b2:5e:37:02:12:51:ae:1c:f4:84:2c: c1:df:94:5c:6d:04:34:55:3c:af:bc:29:0b:48:ce: 9f:4d:44:dd:81:24:3b:e5:c8:5e:bf:66:c5:3a:8e: 20:e9:14:b6:56:1f:03:9a:4b:76:fb:a0:e6:5d:dc: 3b:5d:14:5e:ec:69:fe:74:f7:fe:93:62:3a:25:33: ee:2d:da:2b:52:20:f4:09:d9:e4:24:8c:54:2a:9f: 15:4b:a2:3c:0e:18:94:a6:ee:7c:24:6c:ff:05:ad: aa:7b:ae:c8:e3:03:fa:0e:34:48:09:6c:82:f9:aa: 03:20:d5:16:5b:db:50:29:90:07:5d:2f:b5:a2:15: 4a:d6:94:f1:9c:92:5f:e3:1b:a5:d1:c1:7b:f2:63: 5f:31:17:9c:8e:e2:4d:3f:be:6d:62:3a:8a:6a:bb: 44:aa:a6:ce:55:fc:8b:12:0c:56:ba:6b:9a:2a:a1: e9:e0:a0:e9:be:ad:e1:8e:b5:8a:3c:02:26:ba:99: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:19:BE:3A:97:CF:47:7C:A7:8B:E0:B0:2E:53:4E:4E:B6:26:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1940f2e5-555e-4037-bf7d-1cd60d8aa7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.128.0/19 Signature Algorithm: sha256WithRSAEncryption 10:91:73:11:db:2a:fb:56:cd:fb:d7:e1:8e:66:8f:84:58:af: 0e:c4:95:ec:3c:a8:0c:f9:ec:36:37:5b:69:8c:bb:ea:98:e8: 21:43:a1:8c:a7:ec:97:89:72:ab:39:58:98:35:8e:ec:89:0d: c0:8f:50:ce:d5:63:ae:66:6e:39:df:62:57:93:49:0a:d6:82: cd:43:e3:4f:19:73:7a:0f:68:98:95:7a:6d:87:eb:20:5f:45: ff:65:ac:ae:10:34:ac:33:e8:3d:61:fa:55:c4:3e:40:4a:d9: df:33:7e:0f:13:03:5b:4b:21:33:6d:33:c1:66:06:db:30:11: 91:e8:1b:5d:f5:3f:63:f4:2e:24:8b:f5:a8:69:6d:62:a8:f3: 42:f0:82:9b:7e:cb:f8:7f:63:a5:86:e6:4a:71:ab:e4:34:c2: b2:22:4a:31:2b:32:00:01:a2:4f:67:32:56:1e:ce:47:c5:a6: 51:22:41:03:55:1c:e0:69:3a:89:c2:12:5e:94:c1:e6:8b:cd: 34:7c:6f:95:ed:1b:b9:76:ad:48:65:9b:55:82:7a:49:79:a2: ab:89:a0:f8:4c:18:0a:89:51:c4:ca:cb:31:df:37:47:1a:e6: 79:82:75:96:bf:e5:74:eb:09:2b:f5:09:c9:85:c1:d2:f8:a3: 67:92:b5:c6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITS1KBovm3LTpirOmNvGFBiMkngTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNjAyMjgwMTUxMjRaFw0yNjA1MjkyMzU5NTla MHoxSTBHBgNVBAUTQGM2NDAwYzM0NTBlYTUxNjBkNDM5NjgwNjRkYTk2MjE4MTFm YThkMThiNGY3NzU1Yjg5ZDczMDdmMzRkYmY4NzgxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJBK725fQmFF87lz+GEHzIx+5QboPok7u7fldIRG3J91iEQ/ WbksJS9ejf3Fvut1QCxdjVavreOl7RlD+elo8LJeNwISUa4c9IQswd+UXG0ENFU8 r7wpC0jOn01E3YEkO+XIXr9mxTqOIOkUtlYfA5pLdvug5l3cO10UXuxp/nT3/pNi OiUz7i3aK1Ig9AnZ5CSMVCqfFUuiPA4YlKbufCRs/wWtqnuuyOMD+g40SAlsgvmq AyDVFlvbUCmQB10vtaIVStaU8ZySX+MbpdHBe/JjXzEXnI7iTT++bWI6imq7RKqm zlX8ixIMVrprmiqh6eCg6b6t4Y61ijwCJrqZB1cCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRkPxm+OpfPR3yni+CwLlNOTrYmvTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMTk0MGYyZTUtNTU1ZS00MDM3LWJmN2QtMWNkNjBkOGFhN2IxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTbvgDANBgkqhkiG9w0BAQsFAAOCAQEAEJFzEdsq+1bN+9fhjmaPhFivDsSV 7DyoDPnsNjdbaYy76pjoIUOhjKfsl4lyqzlYmDWO7IkNwI9QztVjrmZuOd9iV5NJ CtaCzUPjTxlzeg9omJV6bYfrIF9F/2WsrhA0rDPoPWH6VcQ+QErZ3zN+DxMDW0sh M20zwWYG2zARkegbXfU/Y/QuJIv1qGltYqjzQvCCm37L+H9jpYbmSnGr5DTCsiJK MSsyAAGiT2cyVh7OR8WmUSJBA1Uc4Gk6icISXpTB5ovNNHxvle0buXatSGWbVYJ6 SXmiq4mg+EwYColRxMrLMd83RxrmeYJ1lr/ldOsJK/UJyYXB0vijZ5K1xg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:06 2026 by rpki-client