$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fba706a-a052-4dd1-8d2a-7e8a28c73545.roa File: 2fba706a-a052-4dd1-8d2a-7e8a28c73545.roa (raw, json) Hash identifier: MtH8892Uq0CO9erTzRdTbIrWguvr29tJhoW2SPelj04= Subject key identifier: 38:5E:F7:9D:D6:08:2C:2E:79:0A:7B:2C:31:D6:0D:DA:E1:CE:BC:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A5277FDB22156006A96B51AB30227D6BB48A485 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fba706a-a052-4dd1-8d2a-7e8a28c73545.roa Signing time: Tue 24 Feb 2026 03:21:50 +0000 ROA not before: Tue 24 Feb 2026 03:21:50 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.241.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:52:77:fd:b2:21:56:00:6a:96:b5:1a:b3:02:27:d6:bb:48:a4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:21:50 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=c6144724a8f1d4498d9398abbe8edee699e356d45883121270377463b3eda328, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:7c:4f:23:19:24:76:2f:75:d3:39:2c:c1: f5:22:d9:a1:2c:d3:15:fd:6c:19:60:5e:74:13:09: b3:04:91:19:90:0b:18:1f:c6:fd:d9:e4:cf:4a:36: fe:60:e0:61:4d:81:97:a7:c9:75:ca:55:97:35:2d: b4:05:e9:1e:e7:ca:a0:0f:9c:75:d9:79:58:00:25: 97:6e:19:88:5b:61:98:82:83:5a:1e:19:f9:53:b3: 9f:49:a0:0f:9c:ea:9f:da:bf:c7:e1:f2:fc:82:c1: 4c:90:c8:85:6a:93:91:bd:97:67:bf:65:7a:0c:79: 51:5f:a6:7a:9c:e9:d0:5f:85:f5:9d:73:e2:e1:81: bf:94:5f:49:3d:f2:ce:fd:eb:6a:15:62:81:05:d1: 20:93:2d:c8:87:ff:c9:da:a5:c7:e1:5e:58:90:70: 7a:76:bb:58:79:31:e1:9e:57:a8:ec:bb:53:f3:b8: 7b:42:0a:31:3d:cf:74:db:b3:3e:f2:c6:30:e8:2f: 5c:26:07:d3:30:d4:42:df:59:87:f4:bd:95:13:64: cb:9f:3b:43:49:c0:ee:26:14:1e:87:54:0c:da:3c: bc:4f:04:66:c1:0b:27:88:45:a8:6e:65:28:3a:97: 36:70:65:ac:78:3c:b7:13:07:72:5b:bb:e7:0b:06: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5E:F7:9D:D6:08:2C:2E:79:0A:7B:2C:31:D6:0D:DA:E1:CE:BC:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fba706a-a052-4dd1-8d2a-7e8a28c73545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.241.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:b4:d4:21:ba:71:20:48:03:bc:cc:3e:2d:27:ed:77:5d:c0: 18:77:2d:79:19:6a:b6:b2:e8:d9:8e:8e:8a:44:fe:c3:e7:48: 2c:4c:6b:46:48:82:37:0f:60:78:16:62:18:b8:34:ec:2b:6c: 56:f0:cb:37:bb:78:bf:c6:33:cd:0c:1e:d0:f6:54:e0:4b:f0: 6e:54:60:49:00:0c:49:89:f1:a1:80:27:37:ff:4d:9e:a5:d4: d5:ff:75:aa:47:d8:43:e3:e9:a5:e9:f3:f3:2b:46:02:6b:1f: bf:40:d6:fd:20:fe:7c:29:d4:07:19:66:1e:19:b0:42:6f:f2: c3:7a:43:5f:fc:79:5f:e9:7c:ba:9e:93:3a:05:db:93:56:9c: 9b:79:0f:a5:19:11:56:c9:07:47:1b:f7:63:e3:16:23:0b:2a: 20:c0:f7:aa:30:be:31:b2:d4:44:3a:33:4a:3a:9b:b1:4c:73: b2:cf:51:d3:4c:76:c9:c6:96:1e:9d:ea:1e:15:f3:0c:cf:66: 1f:c2:62:6b:e6:8c:c9:40:0a:5d:e2:03:2c:ed:6d:4f:f4:bf: 82:f3:02:92:db:f0:1a:fc:b2:fe:5a:1e:67:d7:62:fe:11:35: 4b:98:62:c7:ca:0c:87:8e:e9:8f:e4:d4:dc:dd:b1:78:cf:9a: f7:b3:23:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUalJ3/bIhVgBqlrUaswIn1rtIpIUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMyMTUwWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjE0NDcyNGE4ZjFkNDQ5OGQ5Mzk4YWJiZThlZGVlNjk5 ZTM1NmQ0NTg4MzEyMTI3MDM3NzQ2M2IzZWRhMzI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAunxPIxkkdi910zkswfUi2aEs0xX9bBlgXnQTCbMEkRmQ Cxgfxv3Z5M9KNv5g4GFNgZenyXXKVZc1LbQF6R7nyqAPnHXZeVgAJZduGYhbYZiC g1oeGflTs59JoA+c6p/av8fh8vyCwUyQyIVqk5G9l2e/ZXoMeVFfpnqc6dBfhfWd c+Lhgb+UX0k98s7962oVYoEF0SCTLciH/8napcfhXliQcHp2u1h5MeGeV6jsu1Pz uHtCCjE9z3Tbsz7yxjDoL1wmB9Mw1ELfWYf0vZUTZMufO0NJwO4mFB6HVAzaPLxP BGbBCyeIRahuZSg6lzZwZax4PLcTB3Jbu+cLBoaLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOF73ndYILC55CnssMdYN2uHOvKMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmYmE3MDZhLWEwNTItNGRkMS04ZDJhLTdlOGEyOGM3MzU0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU28QAwDQYJKoZIhvcNAQELBQADggEBACy01CG6cSBIA7zMPi0n7XddwBh3 LXkZaray6NmOjopE/sPnSCxMa0ZIgjcPYHgWYhi4NOwrbFbwyze7eL/GM80MHtD2 VOBL8G5UYEkADEmJ8aGAJzf/TZ6l1NX/dapH2EPj6aXp8/MrRgJrH79A1v0g/nwp 1AcZZh4ZsEJv8sN6Q1/8eV/pfLqekzoF25NWnJt5D6UZEVbJB0cb92PjFiMLKiDA 96owvjGy1EQ6M0o6m7FMc7LPUdNMdsnGlh6d6h4V8wzPZh/CYmvmjMlACl3iAyzt bU/0v4LzApLb8Br8sv5aHmfXYv4RNUuYYsfKDIeO6Y/k1NzdsXjPmvezI7I= -----END CERTIFICATE-----Generated at Sun Mar 1 23:20:29 2026 by rpki-client