$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f0c689-ff16-4581-8f2c-df50728b514a.roa File: 70f0c689-ff16-4581-8f2c-df50728b514a.roa (raw, json) Hash identifier: xsNqRedG43tfZgIM7hbCb+//20TUx/Yu6xJxbvB0730= Subject key identifier: DF:B5:2C:42:7D:54:2C:DF:BD:03:50:01:98:8E:F7:5B:20:E0:32:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C333656752925F3E5F5DCCD22B9DB66341D7423 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f0c689-ff16-4581-8f2c-df50728b514a.roa Signing time: Sat 28 Feb 2026 01:00:10 +0000 ROA not before: Sat 28 Feb 2026 01:00:10 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 52.119.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:33:36:56:75:29:25:f3:e5:f5:dc:cd:22:b9:db:66:34:1d:74:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 01:00:10 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=a3086e2c4c54ce9f808778372f36987f95c133bcf520c45e1456ebb07877b2aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:57:2d:f1:3d:87:3f:5c:14:f1:46:2f:e7: da:8e:df:7a:52:46:ee:bd:0b:02:59:01:60:30:65: 2b:db:fe:5e:aa:28:1d:b4:f0:56:38:39:76:1e:6d: 6e:56:a7:cb:c2:1c:eb:45:f3:36:ff:90:21:d0:14: 42:8a:ed:01:ad:ae:f3:ca:fd:b2:68:40:0d:ff:3b: e7:91:a3:4d:46:54:b4:33:b0:65:8a:50:0d:90:fa: bd:4a:ba:f7:61:c3:00:55:e3:5a:08:56:8b:be:c4: 05:42:38:68:c0:55:1a:37:b4:9c:e6:c3:be:65:f3: 8c:ff:b3:48:93:3d:e6:7a:b9:f5:49:ef:c7:46:16: e5:37:2b:93:1f:5d:f3:e0:05:22:a4:df:30:51:ac: 6e:8e:f1:4b:79:77:ec:ed:53:0b:b1:3a:67:3e:40: 29:65:9e:0d:21:b8:43:46:7d:9c:d6:ec:e0:11:75: 29:5d:9a:b1:4c:54:2b:2f:e7:69:ca:63:48:e5:7a: d2:d8:4a:13:98:10:0f:6d:11:07:4b:68:4e:de:42: 4c:3b:5b:b8:57:a1:0a:c0:dc:3e:b4:1b:e7:7d:cd: af:ee:48:49:89:91:b1:be:f2:1e:11:ef:75:17:12: d1:1d:c3:b0:7d:08:55:be:13:df:2d:f7:49:3c:c2: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:2C:42:7D:54:2C:DF:BD:03:50:01:98:8E:F7:5B:20:E0:32:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f0c689-ff16-4581-8f2c-df50728b514a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.224.0/21 Signature Algorithm: sha256WithRSAEncryption 03:5d:8d:65:f0:1c:72:cb:11:a8:34:f0:4f:a2:a9:10:8d:ad: 3d:fa:72:48:4a:5f:21:2a:0a:5b:0d:0d:87:c6:0b:9e:b8:88: 74:02:31:ef:42:af:76:5d:a9:72:63:2d:77:0b:ec:41:fb:7f: 9f:e5:2f:7b:8d:8c:d3:4d:3a:20:0d:59:57:f9:85:f3:27:67: 14:9c:6b:ab:78:56:b5:b2:f9:ef:1e:f6:19:de:4f:7d:a4:e8: f9:d4:1c:c5:45:1a:f3:c0:00:09:08:7e:0a:db:1c:ce:d9:6e: d4:ec:e6:d2:dc:c0:8d:8d:fd:c4:e1:57:58:aa:01:6b:51:8e: e5:3e:e4:01:e3:13:67:d7:c1:80:93:8d:33:d4:8e:0c:be:be: fd:1f:7f:b3:e9:f2:47:36:4d:00:25:6a:43:f5:91:d3:7c:b9: e4:53:34:17:fe:d1:b0:b6:9e:90:00:91:f3:7c:fd:c2:49:9b: 19:d9:5c:c4:a8:74:81:cf:6f:b6:44:6f:f4:6f:44:03:5b:00: fc:06:a5:91:3f:0e:c1:e3:90:ea:ca:33:ce:07:3d:21:61:66: 92:6c:f3:29:a3:dc:08:3a:82:4c:d6:e4:33:80:3e:01:7d:03: ae:2d:f9:56:99:c1:fe:18:ec:f4:dc:33:79:f6:31:d1:d7:28: 63:dd:b5:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDDM2VnUpJfPl9dzNIrnbZjQddCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDEwMDEwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzA4NmUyYzRjNTRjZTlmODA4Nzc4MzcyZjM2OTg3Zjk1 YzEzM2JjZjUyMGM0NWUxNDU2ZWJiMDc4NzdiMmFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDC1ct8T2HP1wU8UYv59qO33pSRu69CwJZAWAwZSvb/l6q KB208FY4OXYebW5Wp8vCHOtF8zb/kCHQFEKK7QGtrvPK/bJoQA3/O+eRo01GVLQz sGWKUA2Q+r1KuvdhwwBV41oIVou+xAVCOGjAVRo3tJzmw75l84z/s0iTPeZ6ufVJ 78dGFuU3K5MfXfPgBSKk3zBRrG6O8Ut5d+ztUwuxOmc+QCllng0huENGfZzW7OAR dSldmrFMVCsv52nKY0jletLYShOYEA9tEQdLaE7eQkw7W7hXoQrA3D60G+d9za/u SEmJkbG+8h4R73UXEtEdw7B9CFW+E98t90k8wl5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU37UsQn1ULN+9A1ABmI73WyDgMkAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwZjBjNjg5LWZmMTYtNDU4MS04ZjJjLWRmNTA3MjhiNTE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0d+AwDQYJKoZIhvcNAQELBQADggEBAANdjWXwHHLLEag08E+iqRCNrT36 ckhKXyEqClsNDYfGC564iHQCMe9Cr3ZdqXJjLXcL7EH7f5/lL3uNjNNNOiANWVf5 hfMnZxSca6t4VrWy+e8e9hneT32k6PnUHMVFGvPAAAkIfgrbHM7ZbtTs5tLcwI2N /cThV1iqAWtRjuU+5AHjE2fXwYCTjTPUjgy+vv0ff7Pp8kc2TQAlakP1kdN8ueRT NBf+0bC2npAAkfN8/cJJmxnZXMSodIHPb7ZEb/RvRANbAPwGpZE/DsHjkOrKM84H PSFhZpJs8ymj3Ag6gkzW5DOAPgF9A64t+VaZwf4Y7PTcM3n2MdHXKGPdtTE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:35:31 2026 by rpki-client