$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ce6c4-4700-4354-9222-9e25c8a83e36.roa File: 862ce6c4-4700-4354-9222-9e25c8a83e36.roa (raw, json) Hash identifier: KslJUxdCGz2yi6SSlXc5aOfVOBuBRrCr53EVlaNA5IY= Subject key identifier: BD:DD:8F:D0:9D:98:75:65:F4:D5:B0:57:40:0A:FB:72:7E:1E:B8:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 540AFFDAD7BB1C44C70FF414A61982B3047A910C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ce6c4-4700-4354-9222-9e25c8a83e36.roa Signing time: Sat 28 Feb 2026 02:31:19 +0000 ROA not before: Sat 28 Feb 2026 02:31:19 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.66.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0a:ff:da:d7:bb:1c:44:c7:0f:f4:14:a6:19:82:b3:04:7a:91:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:31:19 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=3d7f1d113c190d52f6833804ec768948499598b421dc8e2a2f507c1b95ca1b2b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:1e:82:83:aa:11:08:16:14:44:3d:68:47: 26:54:59:55:fe:9f:87:47:fb:39:b7:ea:8b:05:4d: 44:e5:5e:cd:4f:6a:97:39:9e:00:17:ff:b9:89:55: 7c:26:89:be:e6:d1:4f:ae:3b:4f:dc:ea:41:b4:b0: 40:20:28:56:e3:89:e0:a3:5c:93:b0:81:b6:59:bf: 7e:df:1e:5f:5e:de:51:d5:22:4f:b2:49:cc:f7:c9: b6:0f:39:b2:43:02:ce:fe:b3:30:89:cd:30:44:b0: 77:6f:e2:e1:48:62:0e:5a:db:c7:a2:8b:fb:62:c4: e1:1d:33:fb:18:af:ac:62:43:6e:a1:44:5d:6a:7b: 9e:db:3d:1d:d7:33:fe:04:d5:b6:2e:42:02:89:88: 24:e1:42:01:41:cb:6d:07:00:39:ef:51:79:5a:f4: 6b:b3:af:ca:c4:b4:9b:f6:a3:6e:2a:4d:db:bd:3c: 4b:66:2d:03:e8:da:78:e1:bf:8f:2f:55:2c:94:3c: 7b:07:63:9a:81:ef:e0:68:f4:11:77:52:b2:44:16: e1:93:96:37:ef:ea:c5:8d:60:c1:76:4b:81:b9:15: e4:73:db:53:26:3d:61:96:79:76:dc:f8:7a:78:dd: ab:58:81:42:1e:c6:f6:fc:d4:33:a8:02:c3:3b:32: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:8F:D0:9D:98:75:65:F4:D5:B0:57:40:0A:FB:72:7E:1E:B8:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ce6c4-4700-4354-9222-9e25c8a83e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.66.64.0/19 Signature Algorithm: sha256WithRSAEncryption 42:ba:e6:34:53:f7:7e:8b:2c:15:a0:ad:16:02:fb:22:f3:30: 81:c7:d8:36:57:d9:f9:97:27:9c:b1:94:e0:e0:e8:03:8d:eb: 40:f0:e2:b1:ad:c9:5a:68:4d:f5:2e:3e:f9:bb:ee:64:99:54: 18:7f:fb:c8:97:3b:37:a6:1a:65:ee:93:4e:3c:d8:29:e0:d3: 2c:e9:16:05:18:9e:c2:0e:6d:d6:71:38:a9:8a:d5:38:5f:b6: d4:a8:0b:43:ac:85:69:0b:a5:55:d6:8c:1b:8e:4a:a1:a4:fa: 5a:90:4c:bb:54:69:b8:2b:34:ad:30:2c:e4:c3:05:73:06:14: 40:29:31:d6:c1:bc:8b:cf:6d:fb:71:78:7b:d9:63:9f:f8:98: 21:4e:95:2e:bf:f6:b9:77:15:54:12:48:99:d2:0a:0a:c2:fe: c9:a1:ed:ca:66:a7:7c:32:0e:11:d2:27:26:74:3c:83:89:5e: 52:9c:80:ae:76:64:ab:ee:c7:d3:1d:4e:df:ff:82:ef:19:d1: 93:49:c7:3d:50:5b:ff:f5:10:73:d6:b0:de:b6:ba:d2:7c:c5: 84:04:a4:fc:18:a7:12:39:44:20:22:08:19:c1:0e:85:5c:36: 59:fe:bb:e2:ba:6e:f0:a4:5f:87:96:dc:f0:27:3b:d1:49:21: 84:71:57:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVAr/2te7HETHD/QUphmCswR6kQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDIzMTE5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDdmMWQxMTNjMTkwZDUyZjY4MzM4MDRlYzc2ODk0ODQ5 OTU5OGI0MjFkYzhlMmEyZjUwN2MxYjk1Y2ExYjJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw6x6Cg6oRCBYURD1oRyZUWVX+n4dH+zm36osFTUTlXs1P apc5ngAX/7mJVXwmib7m0U+uO0/c6kG0sEAgKFbjieCjXJOwgbZZv37fHl9e3lHV Ik+yScz3ybYPObJDAs7+szCJzTBEsHdv4uFIYg5a28eii/tixOEdM/sYr6xiQ26h RF1qe57bPR3XM/4E1bYuQgKJiCThQgFBy20HADnvUXla9Guzr8rEtJv2o24qTdu9 PEtmLQPo2njhv48vVSyUPHsHY5qB7+Bo9BF3UrJEFuGTljfv6sWNYMF2S4G5FeRz 21MmPWGWeXbc+Hp43atYgUIexvb81DOoAsM7MrE5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvd2P0J2YdWX01bBXQAr7cn4euFEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2MmNlNmM0LTQ3MDAtNDM1NC05MjIyLTllMjVjOGE4M2UzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2QkAwDQYJKoZIhvcNAQELBQADggEBAEK65jRT936LLBWgrRYC+yLzMIHH 2DZX2fmXJ5yxlODg6AON60Dw4rGtyVpoTfUuPvm77mSZVBh/+8iXOzemGmXuk048 2Cng0yzpFgUYnsIObdZxOKmK1ThfttSoC0OshWkLpVXWjBuOSqGk+lqQTLtUabgr NK0wLOTDBXMGFEApMdbBvIvPbftxeHvZY5/4mCFOlS6/9rl3FVQSSJnSCgrC/smh 7cpmp3wyDhHSJyZ0PIOJXlKcgK52ZKvux9MdTt//gu8Z0ZNJxz1QW//1EHPWsN62 utJ8xYQEpPwYpxI5RCAiCBnBDoVcNln+u+K6bvCkX4eW3PAnO9FJIYRxV1c= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:56 2026 by rpki-client