$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa File: 50ef1f8a-b614-47b4-aac9-43160386dd5e.roa (raw, json) Hash identifier: 78qKZyFiAbEgZZvJlEHIgeWCjitV+wUloKzLKZOY1Eo= Subject key identifier: 1A:C7:05:85:BC:8D:68:60:3E:94:32:1C:14:30:C0:37:70:1E:D8:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40359CC077BB1A6451101202493BDB40ACA34EAF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa Signing time: Tue 17 Feb 2026 02:10:49 +0000 ROA not before: Tue 17 Feb 2026 02:10:49 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 34.253.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:35:9c:c0:77:bb:1a:64:51:10:12:02:49:3b:db:40:ac:a3:4e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 02:10:49 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=9420bc05ba9d8a936e02373366a03bb09235a704419a87145f8177ca8e4e533a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:b6:5d:66:53:4a:b7:5d:b7:68:c7:80:3e: 29:b8:95:d2:57:f3:67:77:89:49:d6:e5:64:24:b4: 4c:00:ea:d6:60:f4:5b:f4:9e:59:cc:d0:28:e0:d9: 9f:24:a3:0e:7a:13:9d:85:25:4f:2a:8b:f9:85:4b: 71:f2:0b:aa:53:b5:72:c9:9f:c1:38:b5:5f:cb:94: 01:fc:2d:4f:2f:7f:40:41:d1:3b:6c:52:03:ca:2d: 1c:22:ba:c7:4e:6e:8a:b6:b4:ec:e2:9c:70:6c:92: 6c:c7:d4:0b:a6:5e:b7:b9:a2:70:a5:a0:79:33:bc: 55:e2:c9:75:31:07:22:92:36:80:f9:d2:0c:6a:bc: 7f:b5:49:5c:dc:b0:cb:dc:1a:e8:fc:70:49:38:04: 36:43:d1:c4:26:35:aa:19:6b:8e:09:a6:a1:de:87: e5:5d:23:8a:24:05:42:52:14:f5:4a:81:99:89:a9: 67:ba:9e:84:54:18:86:c9:51:57:50:f8:56:c1:2b: 55:4a:ba:27:56:fb:63:04:45:f8:12:07:c8:df:9a: 56:47:4d:e7:b9:e1:be:27:db:55:81:29:4b:78:1a: 0c:1b:27:29:09:f9:80:0b:8b:dc:ac:9b:10:b0:20: e0:4f:ed:75:a8:f6:50:a8:31:ce:c4:4c:3e:56:89: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C7:05:85:BC:8D:68:60:3E:94:32:1C:14:30:C0:37:70:1E:D8:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.253.0.0/18 Signature Algorithm: sha256WithRSAEncryption 05:aa:06:b9:d5:ea:b4:bc:08:77:83:40:b3:16:2d:fc:c7:73: fb:ba:4f:2c:34:78:e9:7d:11:36:ee:07:00:ac:0f:14:0b:f2: b2:b1:94:f1:17:eb:d0:bd:6d:d7:e0:90:4d:53:e4:75:b2:d6: 6c:4d:ac:05:c5:aa:50:52:c4:77:a5:8f:7a:01:42:f1:17:4a: c9:fa:84:cf:1c:a2:d2:b4:5d:a6:ba:87:a5:c6:e2:00:fe:5f: 54:49:75:03:1b:a9:9b:da:2d:d7:c8:56:95:a1:3a:d3:ac:fc: a1:34:fc:b1:6c:e8:c6:85:b2:07:4c:2d:8a:f2:d4:a0:3a:35: de:16:7c:ff:cc:b2:be:6a:34:ea:0b:37:e2:7f:00:69:7b:cd: 9c:c5:29:3c:8e:10:1f:e9:a1:af:4c:30:da:65:01:04:57:63: c8:9a:fe:63:09:9c:bf:b3:a1:74:9f:3b:a2:97:ce:28:61:2f: ad:db:ab:c2:47:6b:4e:81:e3:c3:4f:b2:ff:83:77:a2:ff:0c: 92:63:33:39:b8:fa:51:85:ed:49:57:d5:4b:b6:bc:5b:12:50: 5e:d4:e2:ed:7e:93:32:86:f1:50:2b:27:db:f6:0f:5d:2e:c4: e3:5a:d8:57:b9:8d:57:ee:a1:b7:72:01:f3:78:06:c2:15:d8: 81:30:e7:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQDWcwHe7GmRREBICSTvbQKyjTq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDIxMDQ5WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDIwYmMwNWJhOWQ4YTkzNmUwMjM3MzM2NmEwM2JiMDky MzVhNzA0NDE5YTg3MTQ1ZjgxNzdjYThlNGU1MzNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCndrZdZlNKt123aMeAPim4ldJX82d3iUnW5WQktEwA6tZg 9Fv0nlnM0Cjg2Z8kow56E52FJU8qi/mFS3HyC6pTtXLJn8E4tV/LlAH8LU8vf0BB 0TtsUgPKLRwiusdOboq2tOzinHBskmzH1AumXre5onCloHkzvFXiyXUxByKSNoD5 0gxqvH+1SVzcsMvcGuj8cEk4BDZD0cQmNaoZa44JpqHeh+VdI4okBUJSFPVKgZmJ qWe6noRUGIbJUVdQ+FbBK1VKuidW+2MERfgSB8jfmlZHTee54b4n21WBKUt4Ggwb JykJ+YALi9ysmxCwIOBP7XWo9lCoMc7ETD5WiajJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGscFhbyNaGA+lDIcFDDAN3Ae2FowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwZWYxZjhhLWI2MTQtNDdiNC1hYWM5LTQzMTYwMzg2ZGQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/QAwDQYJKoZIhvcNAQELBQADggEBAAWqBrnV6rS8CHeDQLMWLfzHc/u6 Tyw0eOl9ETbuBwCsDxQL8rKxlPEX69C9bdfgkE1T5HWy1mxNrAXFqlBSxHelj3oB QvEXSsn6hM8cotK0Xaa6h6XG4gD+X1RJdQMbqZvaLdfIVpWhOtOs/KE0/LFs6MaF sgdMLYry1KA6Nd4WfP/Msr5qNOoLN+J/AGl7zZzFKTyOEB/poa9MMNplAQRXY8ia /mMJnL+zoXSfO6KXzihhL63bq8JHa06B48NPsv+Dd6L/DJJjMzm4+lGF7UlX1Uu2 vFsSUF7U4u1+kzKG8VArJ9v2D10uxONa2Fe5jVfuobdyAfN4BsIV2IEw55g= -----END CERTIFICATE-----Generated at Sun Mar 1 21:48:41 2026 by rpki-client