$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d1b07c0-98b3-4578-85f9-7964c0554db7.roa File: 3d1b07c0-98b3-4578-85f9-7964c0554db7.roa (raw, json) Hash identifier: B+/v5oIOeY3L/+NEK/4Da9BzHZsN0Xx2jB8X1WxKd7o= Subject key identifier: BB:BE:3F:D1:A8:4B:B6:94:76:B0:E6:60:A3:A4:97:3A:02:C6:8E:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4819E363F5FDD5128BFCEA502D1E403740ECF857 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d1b07c0-98b3-4578-85f9-7964c0554db7.roa Signing time: Tue 24 Feb 2026 02:51:42 +0000 ROA not before: Tue 24 Feb 2026 02:51:42 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:19:e3:63:f5:fd:d5:12:8b:fc:ea:50:2d:1e:40:37:40:ec:f8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 02:51:42 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=03ffd8d72964db6d348ed26392d25d1c8d62a6e45cd8582da97d675cbc1da44f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:18:6c:8e:67:fb:87:a7:e9:3d:6c:d2:62: 42:2a:95:27:cd:75:87:e1:d0:0f:37:07:20:4f:33: 71:fc:6d:fd:23:82:56:ca:f3:07:51:af:b9:07:69: a8:72:8c:2b:66:32:dc:57:f9:c0:ee:31:fc:90:36: 8b:90:66:ed:21:5d:a2:f7:83:86:8b:39:b2:2c:bb: ce:33:62:49:7b:4a:71:80:69:7e:23:e8:9e:9b:e1: 3f:e0:fe:41:4f:62:ed:de:28:c5:68:6d:82:26:33: 18:b0:87:57:9a:37:b9:e1:a4:23:19:ad:fe:fe:43: a1:d2:d9:e2:a6:bc:8d:21:5d:0a:45:fe:19:65:3d: c2:e7:dc:00:45:e2:47:e5:1f:e3:7f:63:6d:f4:4a: 92:ad:8d:80:75:f9:ae:68:cc:2e:66:ea:10:9b:70: 26:88:e5:3d:79:8a:c4:d4:aa:25:93:1c:a8:85:c4: 25:d9:5a:9f:f4:67:9e:e4:3d:6f:37:ef:6d:ce:f4: ab:ff:83:ff:1d:ef:76:2f:5b:bc:30:bc:a1:87:39: 55:ba:65:90:64:1e:ca:0d:c7:70:bd:00:ea:64:9e: 05:25:db:3e:f5:75:dc:ee:f0:f1:8b:c5:a8:52:e4: 33:22:b3:81:73:12:74:f0:42:91:2b:f8:a9:63:01: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:3F:D1:A8:4B:B6:94:76:B0:E6:60:A3:A4:97:3A:02:C6:8E:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d1b07c0-98b3-4578-85f9-7964c0554db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:6c:3d:11:88:15:df:87:39:29:55:ca:33:86:43:60:b3:dc: 17:0c:f9:20:72:1b:fd:f1:6b:c9:ab:75:5a:fc:b1:2c:37:c2: d4:a2:9d:b2:19:24:0b:63:14:4e:6d:ba:cc:f8:3f:1b:43:0a: 7f:42:4f:ac:8c:07:48:a4:f9:71:39:09:5c:b6:68:7c:82:d6: 44:df:e3:fb:84:6d:0a:32:b8:5c:b7:0a:df:18:64:e9:4c:d9: 59:7c:60:03:e4:54:7b:80:a7:f7:12:03:02:57:d6:b0:d9:d6: 37:9a:be:31:93:ef:a6:02:31:93:56:22:8e:06:d4:7a:92:56: ff:97:57:37:ec:17:56:ad:27:13:79:d5:2e:77:dd:c4:f4:07: a5:08:e0:df:43:0a:5e:a4:21:74:be:c6:2a:52:c0:0f:39:8e: e6:b2:fc:20:54:ce:b8:00:44:58:04:f5:40:76:8b:f9:82:03: 00:a7:6a:de:ef:4b:42:9c:3b:80:82:b6:ae:e6:f9:af:aa:7c: 5f:89:4c:94:f9:65:0d:97:3b:9f:8d:8d:a0:79:c0:e4:91:0d: 57:ea:ab:f8:e9:0a:56:77:28:06:53:e9:fb:32:b1:d5:ca:56: a4:fe:54:e2:4b:69:6b:c1:be:e7:af:1f:3f:e6:63:c0:54:5a: b7:08:01:43 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSBnjY/X91RKL/OpQLR5AN0Ds+FcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDI1MTQyWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2ZmZDhkNzI5NjRkYjZkMzQ4ZWQyNjM5MmQyNWQxYzhk NjJhNmU0NWNkODU4MmRhOTdkNjc1Y2JjMWRhNDRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpnhhsjmf7h6fpPWzSYkIqlSfNdYfh0A83ByBPM3H8bf0j glbK8wdRr7kHaahyjCtmMtxX+cDuMfyQNouQZu0hXaL3g4aLObIsu84zYkl7SnGA aX4j6J6b4T/g/kFPYu3eKMVobYImMxiwh1eaN7nhpCMZrf7+Q6HS2eKmvI0hXQpF /hllPcLn3ABF4kflH+N/Y230SpKtjYB1+a5ozC5m6hCbcCaI5T15isTUqiWTHKiF xCXZWp/0Z57kPW83723O9Kv/g/8d73YvW7wwvKGHOVW6ZZBkHsoNx3C9AOpkngUl 2z71ddzu8PGLxahS5DMis4FzEnTwQpEr+KljATj3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu74/0ahLtpR2sOZgo6SXOgLGjiEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkMWIwN2MwLTk4YjMtNDU3OC04NWY5LTc5NjRjMDU1NGRiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28IQwDQYJKoZIhvcNAQELBQADggEBADpsPRGIFd+HOSlVyjOGQ2Cz3BcM +SByG/3xa8mrdVr8sSw3wtSinbIZJAtjFE5tusz4PxtDCn9CT6yMB0ik+XE5CVy2 aHyC1kTf4/uEbQoyuFy3Ct8YZOlM2Vl8YAPkVHuAp/cSAwJX1rDZ1jeavjGT76YC MZNWIo4G1HqSVv+XVzfsF1atJxN51S533cT0B6UI4N9DCl6kIXS+xipSwA85juay /CBUzrgARFgE9UB2i/mCAwCnat7vS0KcO4CCtq7m+a+qfF+JTJT5ZQ2XO5+NjaB5 wOSRDVfqq/jpClZ3KAZT6fsysdXKVqT+VOJLaWvBvuevHz/mY8BUWrcIAUM= -----END CERTIFICATE-----Generated at Sun Mar 1 21:48:46 2026 by rpki-client