$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6878115e-c2d7-4294-8dda-2a60a5d9e62b.roa File: 6878115e-c2d7-4294-8dda-2a60a5d9e62b.roa (raw, json) Hash identifier: LSSu0duTLz4O4fTu5mdOLA5ZylSd4YuAAkk2vJi//mU= Subject key identifier: 0D:B7:EE:42:B0:A4:BB:4A:C4:92:85:8F:3B:8C:C4:1C:94:9C:96:D3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04BFC9190BD9C59958B6829F8EB02953AAE2D06F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6878115e-c2d7-4294-8dda-2a60a5d9e62b.roa Signing time: Mon 23 Feb 2026 00:21:50 +0000 ROA not before: Mon 23 Feb 2026 00:21:50 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.197.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bf:c9:19:0b:d9:c5:99:58:b6:82:9f:8e:b0:29:53:aa:e2:d0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:21:50 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=1bc452e40321095dc3707b3794b07a584a20459c111a9407382a5cbc65918352, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:bc:b7:cb:2d:21:95:40:e7:fa:fc:9a:0f: f1:12:ff:59:42:5c:5a:f2:ee:3d:8d:f6:e8:94:ae: e2:8e:af:94:93:09:3e:ca:0b:c2:4d:5f:a8:50:ce: f2:57:e8:b1:6d:68:a8:68:77:fc:b6:c8:2e:c8:08: d7:8d:17:a8:05:16:c1:4f:d9:49:15:5e:33:7e:b7: cc:d6:a0:a2:9b:3f:b3:b1:5c:fd:5c:7b:d0:9e:6e: f2:77:bf:83:a2:52:a3:80:d9:7a:85:fe:21:ac:2f: 03:31:ee:3b:e5:30:73:e4:8d:a5:ac:d2:4d:56:47: 69:09:4e:e6:aa:64:b2:ee:d5:26:79:68:d1:a0:bb: 7f:53:e8:01:26:90:98:bd:aa:62:97:63:26:b6:1e: d2:08:ab:ae:5c:04:be:20:21:bc:9d:1f:bd:f7:65: 20:9b:03:9e:1e:2d:ba:a3:fc:a5:de:2a:93:9f:fb: 8b:1d:ec:42:1e:4d:b1:0d:12:f5:8c:0d:7e:44:22: b9:02:cb:f7:4f:1d:ed:b0:11:f2:12:31:01:f6:3e: 8e:e3:cb:90:86:dd:bd:ce:04:6f:7c:bd:b0:af:81: 8e:85:9c:da:d8:6b:22:27:44:86:2d:3c:06:5a:79: 02:0a:18:6b:93:3d:27:ef:1d:35:84:52:b8:8a:0e: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B7:EE:42:B0:A4:BB:4A:C4:92:85:8F:3B:8C:C4:1C:94:9C:96:D3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6878115e-c2d7-4294-8dda-2a60a5d9e62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.193.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:0d:e0:3f:68:f7:41:d4:8f:ee:75:d8:b2:16:7c:7b:f2:a7: 95:f0:2e:46:aa:be:34:20:6a:19:8b:58:7d:39:83:d8:44:1d: 94:1e:55:a3:34:05:da:5c:03:81:39:4a:ab:0c:19:14:6a:36: 60:28:bf:55:2f:aa:e8:c0:b8:ee:56:2a:6f:d4:6d:fd:3b:64: bf:ff:5a:9d:10:e9:b5:4a:e5:fa:4d:d9:11:bb:05:84:ee:b8: 26:5d:b3:51:71:c4:bc:ae:a4:d8:36:17:7c:c5:47:57:2e:91: 4f:44:bd:4d:18:e5:e3:4e:26:1c:2d:ee:38:62:3f:e6:52:88: e3:44:eb:3d:9a:2b:6f:93:71:32:37:45:94:32:e7:21:ce:d9: f6:41:e1:fa:2d:7a:4c:8c:8c:19:87:db:80:0d:00:eb:67:70: eb:6a:bf:93:ec:8c:a7:e1:b7:a6:55:90:29:fd:a2:66:49:a7: 9b:8d:7c:aa:ce:25:4a:c3:f8:c2:af:93:9d:b7:b1:32:8d:ce: d4:fb:c8:e5:ad:d4:e1:f7:34:ba:28:40:64:2f:6c:df:52:78: 1d:57:83:da:4c:35:cf:04:ea:16:fc:6b:4b:25:c4:cd:52:d4: 37:49:8c:19:eb:09:5a:e7:13:6f:92:ef:0b:00:a7:47:9e:b0: ce:30:1a:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBL/JGQvZxZlYtoKfjrApU6ri0G8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAyMTUwWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmM0NTJlNDAzMjEwOTVkYzM3MDdiMzc5NGIwN2E1ODRh MjA0NTljMTExYTk0MDczODJhNWNiYzY1OTE4MzUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnpLy3yy0hlUDn+vyaD/ES/1lCXFry7j2N9uiUruKOr5ST CT7KC8JNX6hQzvJX6LFtaKhod/y2yC7ICNeNF6gFFsFP2UkVXjN+t8zWoKKbP7Ox XP1ce9CebvJ3v4OiUqOA2XqF/iGsLwMx7jvlMHPkjaWs0k1WR2kJTuaqZLLu1SZ5 aNGgu39T6AEmkJi9qmKXYya2HtIIq65cBL4gIbydH733ZSCbA54eLbqj/KXeKpOf +4sd7EIeTbENEvWMDX5EIrkCy/dPHe2wEfISMQH2Po7jy5CG3b3OBG98vbCvgY6F nNrYayInRIYtPAZaeQIKGGuTPSfvHTWEUriKDuEhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDbfuQrCku0rEkoWPO4zEHJScltMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4NzgxMTVlLWMyZDctNDI5NC04ZGRhLTJhNjBhNWQ5ZTYyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2xcEwDQYJKoZIhvcNAQELBQADggEBAEwN4D9o90HUj+512LIWfHvyp5Xw LkaqvjQgahmLWH05g9hEHZQeVaM0BdpcA4E5SqsMGRRqNmAov1UvqujAuO5WKm/U bf07ZL//Wp0Q6bVK5fpN2RG7BYTuuCZds1FxxLyupNg2F3zFR1cukU9EvU0Y5eNO Jhwt7jhiP+ZSiONE6z2aK2+TcTI3RZQy5yHO2fZB4fotekyMjBmH24ANAOtncOtq v5PsjKfht6ZVkCn9omZJp5uNfKrOJUrD+MKvk523sTKNztT7yOWt1OH3NLooQGQv bN9SeB1Xg9pMNc8E6hb8a0slxM1S1DdJjBnrCVrnE2+S7wsAp0eesM4wGqs= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:47 2026 by rpki-client