$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ba5e521-b105-44ae-8d7f-0e464b02efc1.roa File: 5ba5e521-b105-44ae-8d7f-0e464b02efc1.roa (raw, json) Hash identifier: +Vjod2Y1IF8pTCA2N6im5BxYFZNf7OXlldriiMtGXEo= Subject key identifier: 3B:76:CF:B1:DC:1A:4D:3E:8A:A3:39:59:42:99:FB:05:A3:90:B0:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18AE7785D27CF6CEE32B0D2B7967F0E324D3B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ba5e521-b105-44ae-8d7f-0e464b02efc1.roa Signing time: Thu 26 Feb 2026 01:20:07 +0000 ROA not before: Thu 26 Feb 2026 01:20:07 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ae:77:85:d2:7c:f6:ce:e3:2b:0d:2b:79:67:f0:e3:24:d3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:20:07 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=78a74c9edcd8768e8660c94d7de1d6237c163353a3231e6976168dce6c2d6e72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:3e:89:2a:c7:ef:91:78:eb:76:47:2a:8f: 6c:f3:52:d6:94:82:eb:a2:a2:6a:eb:1d:f1:66:00: 0a:6d:73:9a:38:25:a0:f5:93:65:e4:b5:70:30:ba: af:eb:5b:c2:5d:a6:4f:0f:f1:27:cf:57:53:a9:31: 0e:3e:32:83:0b:ae:5e:bf:46:62:20:cb:67:e4:e5: 02:50:d1:be:b0:fb:3a:ae:67:35:92:6c:66:0e:27: 4a:e5:1f:a5:f6:ab:83:d9:03:79:69:e6:7c:dc:0f: 23:de:19:7a:36:be:5b:63:70:76:cc:ea:f3:56:e1: 6b:43:67:5b:12:d0:93:f8:9f:92:9e:9d:c2:98:fc: 15:9d:c7:0d:96:7b:cc:38:c3:3b:05:e3:65:6c:40: 71:61:20:12:d6:d6:c1:55:93:34:7b:95:83:8a:14: 58:78:c0:4d:c2:48:2b:dd:6b:54:aa:30:51:5e:94: 95:11:d2:62:53:d3:ae:92:c2:46:75:e8:e1:80:cc: 6d:7f:8a:ff:95:19:d0:35:d2:4f:99:91:cc:66:ad: af:39:ea:43:3a:0f:42:80:59:7a:e4:89:ce:42:c1: 2c:99:f6:66:7a:fe:b8:43:df:6b:3d:6f:f8:5c:cb: 34:30:36:e1:62:a4:58:f8:5f:fd:39:e8:19:51:f5: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:76:CF:B1:DC:1A:4D:3E:8A:A3:39:59:42:99:FB:05:A3:90:B0:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ba5e521-b105-44ae-8d7f-0e464b02efc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.254.0/23 Signature Algorithm: sha256WithRSAEncryption 67:43:82:fb:10:e7:61:32:20:99:d1:4e:99:03:b8:7f:7b:94: 8c:44:13:b6:90:d5:7e:09:76:b0:c2:42:1d:7a:4e:83:5e:a7: 17:0a:85:0c:50:ff:3c:f5:b8:54:5f:47:84:a3:c7:97:72:92: d3:53:46:d2:5c:08:e6:1d:5c:25:d4:56:a5:ea:b3:6e:d2:f8: 32:ca:fe:68:a4:aa:a5:9f:ca:8a:8b:98:eb:7b:55:d7:84:5f: 5d:48:a7:e6:44:e3:92:ff:98:c5:61:73:7d:54:67:9c:fe:d5: a7:db:7e:8f:e7:17:17:bc:20:2d:8b:ea:c9:b9:04:44:be:f4: 4a:a5:97:6c:8e:49:39:7f:19:9e:57:c4:99:4d:f1:89:92:ff: ff:d7:74:16:d3:40:18:3d:69:a2:2c:3e:3a:00:1e:32:16:b0: a5:86:24:c4:46:7c:d9:2b:f6:fc:bf:48:34:b6:62:89:09:31: db:cb:3b:bd:e3:62:5e:e7:bb:e3:a1:fe:74:d8:23:98:bd:39: c0:c2:69:40:94:be:97:41:d1:68:d4:98:61:80:7b:d2:90:5e: ee:3b:46:e8:45:3e:b6:5e:e4:4b:99:1f:40:51:a2:43:51:de: 5c:6e:05:b6:9e:b4:be:c0:72:16:f8:33:a8:20:9f:8b:1d:0d: 80:5c:6b:08 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITGK53hdJ89s7jKw0reWfw4yTTsjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNjAyMjYwMTIwMDdaFw0yNjA1MjcyMzU5NTla MHoxSTBHBgNVBAUTQDc4YTc0YzllZGNkODc2OGU4NjYwYzk0ZDdkZTFkNjIzN2Mx NjMzNTNhMzIzMWU2OTc2MTY4ZGNlNmMyZDZlNzIxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJusPokqx++ReOt2RyqPbPNS1pSC66Kiausd8WYACm1zmjgl oPWTZeS1cDC6r+tbwl2mTw/xJ89XU6kxDj4ygwuuXr9GYiDLZ+TlAlDRvrD7Oq5n NZJsZg4nSuUfpfarg9kDeWnmfNwPI94Zeja+W2Nwdszq81bha0NnWxLQk/ifkp6d wpj8FZ3HDZZ7zDjDOwXjZWxAcWEgEtbWwVWTNHuVg4oUWHjATcJIK91rVKowUV6U lRHSYlPTrpLCRnXo4YDMbX+K/5UZ0DXST5mRzGatrznqQzoPQoBZeuSJzkLBLJn2 Znr+uEPfaz1v+FzLNDA24WKkWPhf/TnoGVH1Ys0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQ7ds+x3BpNPoqjOVlCmfsFo5CwkTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNWJhNWU1MjEtYjEwNS00NGFlLThkN2YtMGU0NjRiMDJlZmMxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEATRe/jANBgkqhkiG9w0BAQsFAAOCAQEAZ0OC+xDnYTIgmdFOmQO4f3uUjEQT tpDVfgl2sMJCHXpOg16nFwqFDFD/PPW4VF9HhKPHl3KS01NG0lwI5h1cJdRWpeqz btL4Msr+aKSqpZ/KiouY63tV14RfXUin5kTjkv+YxWFzfVRnnP7Vp9t+j+cXF7wg LYvqybkERL70SqWXbI5JOX8ZnlfEmU3xiZL//9d0FtNAGD1poiw+OgAeMhawpYYk xEZ82Sv2/L9INLZiiQkx28s7veNiXue746H+dNgjmL05wMJpQJS+l0HRaNSYYYB7 0pBe7jtG6EU+tl7kS5kfQFGiQ1HeXG4Ftp60vsByFvgzqCCfix0NgFxrCA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:07:42 2026 by rpki-client