$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa File: 2da90977-8e35-4017-a057-21f12034dc42.roa (raw, json) Hash identifier: qY3HeEp9Ed2suf+EQEbzGVFWFuLRoutFNiA8Dj4a5C0= Subject key identifier: 66:88:25:7C:B9:DA:F4:89:F7:BF:AD:C4:2B:58:9C:75:85:8A:86:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 582453D624454A9F34F8057BB74AC2D5C74E9EF7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa Signing time: Sat 28 Feb 2026 03:31:00 +0000 ROA not before: Sat 28 Feb 2026 03:31:00 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:24:53:d6:24:45:4a:9f:34:f8:05:7b:b7:4a:c2:d5:c7:4e:9e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 03:31:00 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=ba15e0484f2fdcade7b205d3d80607acf255f8e03ea5779528c996ae7ed2ee9f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:3a:75:5e:e9:0a:a7:e4:7e:f4:49:7c:29: 71:18:33:3a:2e:bc:b3:4b:4b:af:25:c3:e4:e0:99: 73:57:46:bb:5c:c7:b5:85:4c:fe:c8:c1:88:27:18: 50:4e:5d:13:8f:8e:11:b4:d2:2b:ee:7d:86:17:5e: c9:ad:c8:13:08:a4:df:e9:0e:0f:13:f2:e8:74:2d: d9:5b:81:1f:3f:49:a6:95:f6:29:52:07:42:79:fa: 1d:87:8d:bd:17:dd:7a:10:9c:f4:23:20:25:e1:f1: c6:f1:26:c6:a6:29:6b:a7:13:69:9c:ac:5a:88:5e: 2e:05:77:cf:a1:46:f4:df:84:cf:79:cf:cf:ef:93: ac:5f:6f:9c:2a:b7:95:28:12:b8:7d:3f:83:e4:17: ba:01:c4:54:ce:f7:cf:89:be:ad:2c:3f:88:40:d8: 2d:9b:64:20:ee:5c:ae:7a:a4:0c:7b:32:c3:ec:f6: 16:60:fe:be:c9:9d:e8:eb:b8:9f:a4:5f:42:bb:b3: 5c:87:b1:21:37:6d:25:de:ff:a0:70:7b:cf:4c:90: 5a:56:32:33:20:a7:5a:0c:6b:d3:34:af:3b:58:fc: 77:bf:8a:8b:1f:6e:ec:f1:e8:58:e3:de:8a:45:2a: 03:10:79:d8:55:5b:f8:e1:64:0d:0c:41:d0:b1:db: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:25:7C:B9:DA:F4:89:F7:BF:AD:C4:2B:58:9C:75:85:8A:86:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.3.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:4e:b3:90:e2:2a:68:8c:18:da:00:2b:27:be:03:95:d1:09: e8:5e:1e:12:e3:1d:06:97:74:ae:9b:5e:60:62:68:b7:7a:d9: 9d:66:9b:a6:d9:fb:b6:d1:81:52:f9:7a:ae:03:11:b9:f9:2e: 19:dd:d9:de:db:86:c1:57:c7:e5:e2:0d:9b:8d:55:10:91:f6: 7d:2e:d7:ad:f2:3d:fb:14:92:d8:03:e5:a4:10:ad:ae:a6:17: f5:bc:20:68:01:74:bf:70:9d:9d:20:0c:8f:68:fb:b5:65:11: 8b:fa:18:99:d4:d2:f4:b7:12:61:1e:42:2a:4e:f5:89:01:39: 67:6d:d6:a0:41:45:d3:64:cb:76:59:f6:f6:bf:45:22:64:34: eb:89:29:aa:08:e7:82:7f:a3:18:af:9c:fd:36:e9:c8:0a:28: cb:e9:57:da:d3:be:51:9e:5d:11:af:99:26:52:e6:15:12:f1: 80:a3:24:e4:98:d7:ff:1d:73:bb:e0:3b:61:4e:0f:74:5f:31: 6b:2f:ce:d6:d0:75:69:98:ee:1d:3d:11:56:c9:e0:e6:db:c4: bc:48:4d:dc:24:52:d4:d2:88:63:0e:99:fe:47:6a:98:ce:47: ad:bc:db:dd:39:67:a5:fe:a7:df:9d:12:0c:4a:9f:06:5b:41: b4:0f:ef:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWCRT1iRFSp80+AV7t0rC1cdOnvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDMzMTAwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTE1ZTA0ODRmMmZkY2FkZTdiMjA1ZDNkODA2MDdhY2Yy NTVmOGUwM2VhNTc3OTUyOGM5OTZhZTdlZDJlZTlmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjETp1XukKp+R+9El8KXEYMzouvLNLS68lw+TgmXNXRrtc x7WFTP7IwYgnGFBOXROPjhG00ivufYYXXsmtyBMIpN/pDg8T8uh0LdlbgR8/SaaV 9ilSB0J5+h2Hjb0X3XoQnPQjICXh8cbxJsamKWunE2mcrFqIXi4Fd8+hRvTfhM95 z8/vk6xfb5wqt5UoErh9P4PkF7oBxFTO98+Jvq0sP4hA2C2bZCDuXK56pAx7MsPs 9hZg/r7JnejruJ+kX0K7s1yHsSE3bSXe/6Bwe89MkFpWMjMgp1oMa9M0rztY/He/ iosfbuzx6Fjj3opFKgMQedhVW/jhZA0MQdCx23z/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZoglfLna9In3v63EK1icdYWKhgMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkYTkwOTc3LThlMzUtNDAxNy1hMDU3LTIxZjEyMDM0ZGM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XQMwDQYJKoZIhvcNAQELBQADggEBAHtOs5DiKmiMGNoAKye+A5XRCehe HhLjHQaXdK6bXmBiaLd62Z1mm6bZ+7bRgVL5eq4DEbn5Lhnd2d7bhsFXx+XiDZuN VRCR9n0u163yPfsUktgD5aQQra6mF/W8IGgBdL9wnZ0gDI9o+7VlEYv6GJnU0vS3 EmEeQipO9YkBOWdt1qBBRdNky3ZZ9va/RSJkNOuJKaoI54J/oxivnP026cgKKMvp V9rTvlGeXRGvmSZS5hUS8YCjJOSY1/8dc7vgO2FOD3RfMWsvztbQdWmY7h09EVbJ 4ObbxLxITdwkUtTSiGMOmf5HapjOR6282905Z6X+p9+dEgxKnwZbQbQP7xw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:27:28 2026 by rpki-client