$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31cd1149-4d7b-4696-a346-4314bab184c3.roa File: 31cd1149-4d7b-4696-a346-4314bab184c3.roa (raw, json) Hash identifier: d81Bflhc0799/eZgew++ikkQ15zshZZcdKDbG0fYtl4= Subject key identifier: AC:D8:E7:F7:E6:89:71:D6:04:A4:0E:D4:73:B5:9F:0A:6D:37:29:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42EA140BE5C8083A808E155BF29CAF24A21F1120 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31cd1149-4d7b-4696-a346-4314bab184c3.roa Signing time: Tue 24 Feb 2026 03:11:09 +0000 ROA not before: Tue 24 Feb 2026 03:11:09 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.235.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ea:14:0b:e5:c8:08:3a:80:8e:15:5b:f2:9c:af:24:a2:1f:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:11:09 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=26440fb01e91bdc448496596d5c4069276cb59ad5a70428a00a4262c4e11f2f4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:bc:ba:47:51:dd:06:4e:54:cd:f7:79:16: 9d:6f:84:f2:3f:b3:b0:1b:07:a1:e4:aa:1e:8a:ed: e8:4b:77:05:da:e3:11:f9:0d:ba:86:09:1c:91:20: 5e:96:87:51:04:8f:52:6c:9b:47:51:ec:5a:d1:fb: 79:fd:47:52:51:c5:4c:d2:1f:0f:91:c8:10:db:78: fb:91:38:3b:b0:1a:a8:14:ea:d8:db:15:20:39:6b: df:3e:27:48:ad:e6:41:67:f7:ba:83:95:53:f9:0c: 1d:ce:4a:4e:06:af:af:46:f1:af:3a:24:2b:ad:12: 48:9c:a7:59:08:1d:84:c5:5f:ba:a4:44:60:b7:6e: e9:4b:d5:ff:7a:24:fb:55:92:8d:fa:57:3e:61:15: d1:92:e8:d0:d9:66:18:a2:ff:8e:1e:3f:8a:c0:04: ad:60:92:3f:df:1a:ba:97:6c:31:7b:8f:62:4b:cc: 8f:10:72:96:0d:51:c8:5e:53:a5:f2:a4:f9:94:0a: 6c:d6:88:ac:a4:40:4f:26:9a:5e:bb:61:6d:41:5e: 82:26:9a:6c:b1:d2:d4:0a:67:eb:6a:a6:bb:b7:12: d9:e9:2a:f0:35:14:f6:91:77:69:c1:53:17:73:b1: 3e:21:bf:8c:8a:6e:8d:cc:98:bb:fc:c6:14:c9:46: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:E7:F7:E6:89:71:D6:04:A4:0E:D4:73:B5:9F:0A:6D:37:29:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31cd1149-4d7b-4696-a346-4314bab184c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.235.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:3b:8b:1b:a6:1c:ab:56:e7:19:3a:19:a3:a7:18:78:4d:fe: 26:91:85:fd:c7:1c:41:fd:12:9d:02:9e:49:5b:68:05:a8:fc: f9:b8:52:e7:35:43:d0:b8:47:98:a9:49:e7:cc:67:7c:26:8a: bb:32:02:45:3f:9e:81:52:a6:fd:a1:5c:d7:ad:44:50:5c:9d: 24:88:0e:71:70:6b:2e:9e:cd:2a:3e:73:6b:36:82:b3:e2:b4: c5:ce:47:97:4d:c9:9e:5c:b0:82:a5:46:2b:94:bd:40:67:d6: f1:09:af:ec:6e:92:02:d6:df:de:e7:53:72:e8:44:7c:5d:8e: 75:7b:e0:ca:2f:37:85:c8:d3:f3:af:14:18:56:6e:9e:53:00: b6:6c:8b:5b:16:c2:75:ad:51:5b:4d:db:a1:0f:5d:49:53:e0: 14:96:68:15:57:c7:d8:0f:cd:d0:52:52:e4:ba:d2:37:73:9a: 05:b0:cc:6e:bf:86:15:91:32:bf:c8:ed:17:12:9c:d2:e8:93: c3:5c:5e:67:86:c4:5b:f5:77:6f:ee:d9:29:da:3a:0c:c9:26: a5:4d:c4:00:b8:d0:f3:ed:8b:18:e3:20:2b:b1:e7:c2:9f:9a: 19:56:c5:fa:30:b7:52:88:d0:8d:64:90:5b:65:ac:9c:24:12: 35:f5:88:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQuoUC+XICDqAjhVb8pyvJKIfESAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMxMTA5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjQ0MGZiMDFlOTFiZGM0NDg0OTY1OTZkNWM0MDY5Mjc2 Y2I1OWFkNWE3MDQyOGEwMGE0MjYyYzRlMTFmMmY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRTby6R1HdBk5Uzfd5Fp1vhPI/s7AbB6Hkqh6K7ehLdwXa 4xH5DbqGCRyRIF6Wh1EEj1Jsm0dR7FrR+3n9R1JRxUzSHw+RyBDbePuRODuwGqgU 6tjbFSA5a98+J0it5kFn97qDlVP5DB3OSk4Gr69G8a86JCutEkicp1kIHYTFX7qk RGC3bulL1f96JPtVko36Vz5hFdGS6NDZZhii/44eP4rABK1gkj/fGrqXbDF7j2JL zI8QcpYNUcheU6XypPmUCmzWiKykQE8mml67YW1BXoImmmyx0tQKZ+tqpru3Etnp KvA1FPaRd2nBUxdzsT4hv4yKbo3MmLv8xhTJRvw1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrNjn9+aJcdYEpA7Uc7WfCm03KaEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxY2QxMTQ5LTRkN2ItNDY5Ni1hMzQ2LTQzMTRiYWIxODRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY264AwDQYJKoZIhvcNAQELBQADggEBAA07ixumHKtW5xk6GaOnGHhN/iaR hf3HHEH9Ep0CnklbaAWo/Pm4Uuc1Q9C4R5ipSefMZ3wmirsyAkU/noFSpv2hXNet RFBcnSSIDnFway6ezSo+c2s2grPitMXOR5dNyZ5csIKlRiuUvUBn1vEJr+xukgLW 397nU3LoRHxdjnV74MovN4XI0/OvFBhWbp5TALZsi1sWwnWtUVtN26EPXUlT4BSW aBVXx9gPzdBSUuS60jdzmgWwzG6/hhWRMr/I7RcSnNLok8NcXmeGxFv1d2/u2Sna OgzJJqVNxAC40PPtixjjICux58KfmhlWxfowt1KI0I1kkFtlrJwkEjX1iGg= -----END CERTIFICATE-----Generated at Sun Mar 1 21:49:43 2026 by rpki-client