$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b80efda-eeda-46b9-a4d2-4d1341510396.roa File: 1b80efda-eeda-46b9-a4d2-4d1341510396.roa (raw, json) Hash identifier: RqLxrzUVv+Ljaj5kXXXqKoPaC4k7rHd76PheFtMPlgQ= Subject key identifier: DB:91:6C:11:45:F2:3D:A9:FE:4D:31:AD:93:99:E6:FD:F3:73:42:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34F51A1B39048E0A5F2C8F279E092EB24CAF7D17 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b80efda-eeda-46b9-a4d2-4d1341510396.roa Signing time: Mon 23 Feb 2026 01:30:44 +0000 ROA not before: Mon 23 Feb 2026 01:30:44 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.151.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f5:1a:1b:39:04:8e:0a:5f:2c:8f:27:9e:09:2e:b2:4c:af:7d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:30:44 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=a72faa78afbee6addbce207467d0fc499598965eb490f466e8bd4f6db0128a03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:e3:aa:09:1c:55:f6:6a:e9:e4:f6:f0:91: 2b:dc:98:29:a2:fc:21:06:46:fc:0b:5f:9f:ce:92: 44:a6:d6:dc:a6:42:4b:45:90:9b:08:63:4d:10:e0: 5a:ed:73:09:c8:9f:c7:04:63:d3:33:fb:58:65:20: 7e:72:ea:aa:e6:5b:19:45:03:15:35:7f:6a:cf:9b: 6b:99:86:d5:ed:9d:d0:98:dc:9c:8e:4d:84:4a:2c: 89:01:c3:8e:45:e0:8f:b2:59:d7:ae:34:a4:09:db: 30:1e:23:d1:64:dd:7c:4d:82:73:00:91:24:f1:96: 52:ba:68:53:50:06:54:8b:e5:64:5a:7a:21:a5:bd: 9a:fb:32:b9:93:64:9a:7e:48:2b:4f:30:cd:20:8d: d8:70:7a:c2:93:d3:20:be:01:24:f0:57:65:9c:5f: 8e:c0:e4:40:19:3e:28:35:43:02:57:70:b4:71:f8: 1f:2f:88:90:6d:fd:a1:c4:5e:7b:a7:b2:f1:3d:9b: 62:de:00:55:ce:ab:8e:55:20:2d:02:06:8c:b9:43: ea:e2:1e:a5:c0:8f:54:57:2f:fd:76:e5:3f:ca:70: 25:ac:15:06:17:7f:28:7f:5f:e7:af:c5:6c:b2:69: 79:e9:14:89:2c:93:03:f6:3a:55:77:6c:6c:e8:51: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:91:6C:11:45:F2:3D:A9:FE:4D:31:AD:93:99:E6:FD:F3:73:42:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b80efda-eeda-46b9-a4d2-4d1341510396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.151.128.0/17 Signature Algorithm: sha256WithRSAEncryption 78:b3:01:54:a2:2a:ed:db:a2:59:41:87:b0:17:ff:09:1c:ec: ca:7e:f0:28:1d:9f:03:d8:47:98:7e:94:f5:92:2b:db:0b:8f: fa:0e:cd:c0:76:b2:bd:ee:d8:c0:a8:70:a6:b3:b5:1c:7b:64: ac:7f:7f:05:59:23:f7:12:67:d0:0c:9e:7c:44:c7:64:b4:07: 55:35:18:e3:25:de:33:f7:ad:2a:b4:ad:b9:6e:d0:b9:c2:32: 56:30:a2:a0:52:cb:92:bc:8f:7c:dc:3e:c6:07:00:3b:78:c7: ca:92:18:3e:71:eb:91:d4:83:64:c6:da:4d:af:df:6d:22:ea: 52:39:89:70:69:8f:fc:a1:14:57:95:ec:78:78:fd:b9:f2:93: 52:fe:90:a6:4e:4e:50:fc:e7:dd:51:fd:40:59:cb:b2:99:40: 58:04:2b:ed:be:e1:fe:24:b3:14:eb:3b:f8:01:d3:d4:e4:7d: c7:6e:3e:c0:28:23:b2:1e:3b:4c:cb:ba:e7:03:86:25:25:47: 18:b4:0a:a4:e5:ab:e1:7a:8a:85:b9:f7:80:9f:5d:53:d8:0d: a9:66:5c:4c:03:6a:51:ca:2d:5b:a2:02:43:99:7b:a2:92:be: 0b:8f:e6:17:80:db:4c:d4:4b:aa:4e:7a:f4:bc:05:60:da:9d: e3:dc:63:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNPUaGzkEjgpfLI8nngkuskyvfRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDEzMDQ0WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzJmYWE3OGFmYmVlNmFkZGJjZTIwNzQ2N2QwZmM0OTk1 OTg5NjVlYjQ5MGY0NjZlOGJkNGY2ZGIwMTI4YTAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9ceOqCRxV9mrp5PbwkSvcmCmi/CEGRvwLX5/OkkSm1tym QktFkJsIY00Q4FrtcwnIn8cEY9Mz+1hlIH5y6qrmWxlFAxU1f2rPm2uZhtXtndCY 3JyOTYRKLIkBw45F4I+yWdeuNKQJ2zAeI9Fk3XxNgnMAkSTxllK6aFNQBlSL5WRa eiGlvZr7MrmTZJp+SCtPMM0gjdhwesKT0yC+ASTwV2WcX47A5EAZPig1QwJXcLRx +B8viJBt/aHEXnunsvE9m2LeAFXOq45VIC0CBoy5Q+riHqXAj1RXL/125T/KcCWs FQYXfyh/X+evxWyyaXnpFIkskwP2OlV3bGzoURYdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU25FsEUXyPan+TTGtk5nm/fNzQlwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiODBlZmRhLWVlZGEtNDZiOS1hNGQyLTRkMTM0MTUxMDM5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2l4AwDQYJKoZIhvcNAQELBQADggEBAHizAVSiKu3bollBh7AX/wkc7Mp+ 8CgdnwPYR5h+lPWSK9sLj/oOzcB2sr3u2MCocKaztRx7ZKx/fwVZI/cSZ9AMnnxE x2S0B1U1GOMl3jP3rSq0rblu0LnCMlYwoqBSy5K8j3zcPsYHADt4x8qSGD5x65HU g2TG2k2v320i6lI5iXBpj/yhFFeV7Hh4/bnyk1L+kKZOTlD8591R/UBZy7KZQFgE K+2+4f4ksxTrO/gB09TkfcduPsAoI7IeO0zLuucDhiUlRxi0CqTlq+F6ioW594Cf XVPYDalmXEwDalHKLVuiAkOZe6KSvguP5heA20zUS6pOevS8BWDanePcY7I= -----END CERTIFICATE-----Generated at Mon Mar 2 02:48:43 2026 by rpki-client