$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fb1b0d6-54f2-43c0-8cd7-6527959ed703.roa File: 7fb1b0d6-54f2-43c0-8cd7-6527959ed703.roa (raw, json) Hash identifier: ozPcKlbnTiImcKls/CKdvD6j7fIsmCZ+taf9vnu1AKk= Subject key identifier: 6D:CB:2A:31:05:58:68:23:1A:82:F9:47:98:15:45:39:BE:57:A0:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 223E4829840E8894E356A25E6987CB417E25E4DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fb1b0d6-54f2-43c0-8cd7-6527959ed703.roa Signing time: Mon 23 Feb 2026 02:00:11 +0000 ROA not before: Mon 23 Feb 2026 02:00:11 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3e:48:29:84:0e:88:94:e3:56:a2:5e:69:87:cb:41:7e:25:e4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 02:00:11 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=6ab99865f61848d2e415b4c0cf83b508a5f154e4e5e1916fc7226a026c035641, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:7d:86:5b:41:7d:81:1e:f8:ba:2f:ef:27: 4b:88:66:c0:b4:1c:57:c7:89:3a:f9:d0:3f:7e:22: a9:23:13:b5:e7:51:52:d1:84:b8:55:f0:ea:cf:82: 81:31:71:16:87:49:f1:dd:01:28:0c:80:1d:be:c4: 48:fe:1d:dc:64:50:de:f6:18:d3:c2:e2:a3:8b:e7: f7:56:b1:e2:10:19:be:ad:7b:54:50:77:c4:bb:9b: ba:38:b2:0b:af:16:a2:01:73:68:f1:43:85:28:7d: b3:a3:e1:c7:df:07:07:b8:2a:9f:72:8c:65:2c:11: 25:06:ed:ba:e9:93:09:38:9f:fc:27:f1:a3:48:94: a5:d6:31:94:99:0c:9d:8f:66:c7:d9:67:e7:95:77: 68:7a:a0:9d:4a:65:ae:43:60:fe:9b:c9:02:6f:c1: d6:0b:b5:1a:be:3b:45:e3:02:a9:76:2d:35:81:38: 7e:18:74:b5:5c:64:2d:90:c4:7f:2c:a5:ba:de:b6: e8:6e:47:d3:05:e9:57:05:f0:31:b9:8d:c7:a1:cf: a7:1c:aa:2e:d6:27:ab:34:51:ac:e7:88:1f:cf:cf: 75:f8:25:a5:d2:e4:03:f7:df:78:13:f6:70:9b:6e: bf:96:53:57:f0:4f:09:2a:fc:03:12:53:63:74:a2: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CB:2A:31:05:58:68:23:1A:82:F9:47:98:15:45:39:BE:57:A0:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fb1b0d6-54f2-43c0-8cd7-6527959ed703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.235.0/24 Signature Algorithm: sha256WithRSAEncryption 13:10:12:6f:da:fa:ec:d4:79:85:2c:2e:34:49:e9:77:22:4b: 67:7a:75:fc:c4:73:c4:e5:07:1c:18:38:76:bb:65:a1:cf:98: 8b:cf:e7:6e:5b:ee:db:e7:44:84:6b:5e:f7:cb:ff:bc:15:9b: 7c:2e:d0:21:89:04:52:cb:da:42:10:55:1f:b4:f8:83:04:56: 8c:7e:e3:9b:cc:76:dc:0d:aa:e1:82:ef:ac:c4:8c:67:d0:03: 7b:fa:72:9d:c7:c2:dd:60:71:51:27:ce:2b:40:03:92:55:a1: f1:a0:0a:5d:8b:bf:57:e1:34:39:e5:a7:17:aa:77:99:91:11: 79:84:60:44:49:42:9b:7b:4a:df:52:fe:f8:49:f8:8d:81:fa: 23:ff:2d:9a:90:c7:ea:46:ad:21:0f:d8:06:52:79:e8:b9:63: cc:6e:29:42:d2:02:64:27:fc:7a:c4:8d:e2:a8:18:0e:bb:5a: b6:17:a2:48:9e:e5:b7:d4:41:f7:cc:e8:ca:c0:69:1d:fb:42: 5c:77:7a:19:28:b2:e6:8c:75:dd:c1:8a:58:45:b7:16:83:d0: 98:f6:13:7f:11:86:a0:7b:24:fd:78:9e:d1:9f:47:84:b2:5c: 47:3c:8c:df:9b:86:f8:a8:5d:a3:9f:c1:59:b7:93:c9:c0:85: 44:33:76:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIj5IKYQOiJTjVqJeaYfLQX4l5N4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDIwMDExWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWI5OTg2NWY2MTg0OGQyZTQxNWI0YzBjZjgzYjUwOGE1 ZjE1NGU0ZTVlMTkxNmZjNzIyNmEwMjZjMDM1NjQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCy32GW0F9gR74ui/vJ0uIZsC0HFfHiTr50D9+IqkjE7Xn UVLRhLhV8OrPgoExcRaHSfHdASgMgB2+xEj+HdxkUN72GNPC4qOL5/dWseIQGb6t e1RQd8S7m7o4sguvFqIBc2jxQ4UofbOj4cffBwe4Kp9yjGUsESUG7brpkwk4n/wn 8aNIlKXWMZSZDJ2PZsfZZ+eVd2h6oJ1KZa5DYP6byQJvwdYLtRq+O0XjAql2LTWB OH4YdLVcZC2QxH8spbretuhuR9MF6VcF8DG5jcehz6ccqi7WJ6s0UazniB/Pz3X4 JaXS5AP333gT9nCbbr+WU1fwTwkq/AMSU2N0onHDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbcsqMQVYaCMagvlHmBVFOb5XoC4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmYjFiMGQ2LTU0ZjItNDNjMC04Y2Q3LTY1Mjc5NTllZDcwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fOswDQYJKoZIhvcNAQELBQADggEBABMQEm/a+uzUeYUsLjRJ6XciS2d6 dfzEc8TlBxwYOHa7ZaHPmIvP525b7tvnRIRrXvfL/7wVm3wu0CGJBFLL2kIQVR+0 +IMEVox+45vMdtwNquGC76zEjGfQA3v6cp3Hwt1gcVEnzitAA5JVofGgCl2Lv1fh NDnlpxeqd5mREXmEYERJQpt7St9S/vhJ+I2B+iP/LZqQx+pGrSEP2AZSeei5Y8xu KULSAmQn/HrEjeKoGA67WrYXokie5bfUQffM6MrAaR37Qlx3ehkosuaMdd3BilhF txaD0Jj2E38RhqB7JP14ntGfR4SyXEc8jN+bhvioXaOfwVm3k8nAhUQzdqA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:58 2026 by rpki-client