$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88ea63a8-d38f-41bf-872c-ad50495de76c.roa File: 88ea63a8-d38f-41bf-872c-ad50495de76c.roa (raw, json) Hash identifier: B/pAiEKDhs4SbcQz968LqjPqAg6ClMlXRYPiOjguYRA= Subject key identifier: 68:8C:37:66:61:66:EA:7F:0A:E0:EA:F8:B2:91:2C:7E:75:22:D9:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0BD5BC217A05361218C970168E2F032BC5696DA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88ea63a8-d38f-41bf-872c-ad50495de76c.roa Signing time: Mon 23 Feb 2026 01:20:57 +0000 ROA not before: Mon 23 Feb 2026 01:20:57 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d5:bc:21:7a:05:36:12:18:c9:70:16:8e:2f:03:2b:c5:69:6d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:20:57 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=88683a5bb0465c757b558d7665ee9466c5b6fcfc670e25dabf8e6b4cc71ea5c4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:af:70:f6:67:59:20:56:5c:a2:77:d5:6e: 10:21:e5:18:3a:15:ab:93:f6:d6:2b:02:64:32:e5: aa:47:e4:87:38:dd:be:cb:2b:42:d0:a0:7c:cf:db: 42:9d:31:cb:89:90:47:1c:1f:46:c2:90:e4:b2:eb: 74:1c:9f:a6:18:a5:6b:78:76:64:ae:b7:07:b1:32: cf:1f:a8:d1:7f:93:af:a0:8f:cf:64:3d:87:25:13: ae:bb:72:ab:14:a8:53:1d:57:8b:a3:9d:39:db:e9: 21:1e:32:92:dc:fb:f6:38:a9:00:d2:99:b5:2d:39: 71:3c:79:44:58:52:fe:70:39:9e:20:fd:e3:f9:79: f5:01:71:c4:69:85:32:65:81:31:18:ad:01:8f:3f: a6:96:98:c4:f4:78:50:a2:7c:09:fb:0c:28:2a:8c: 57:c2:77:fe:aa:c3:45:e1:b6:63:e0:d6:7c:c3:35: 22:ab:3f:62:b5:ab:68:c8:ae:d0:04:12:e0:9a:59: a4:b1:0d:a3:f3:36:1a:78:03:b8:f8:1c:28:86:ca: 21:b2:b7:c0:b5:2a:b4:85:68:3c:64:3d:3e:32:25: 29:ad:7b:c9:ad:9f:21:f1:eb:96:3c:b1:b3:2c:5d: d1:96:ab:8f:9a:0e:31:24:3b:bd:3e:48:bd:df:49: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:37:66:61:66:EA:7F:0A:E0:EA:F8:B2:91:2C:7E:75:22:D9:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88ea63a8-d38f-41bf-872c-ad50495de76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.170.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:d1:94:e0:8e:45:e0:a2:21:8b:e0:ae:b3:3c:d7:2e:59:63: 6d:93:66:0a:6c:4e:8f:36:ce:d3:2a:b8:80:30:03:e6:d2:d1: 82:2c:18:09:d9:1e:14:94:e6:e9:a4:76:38:db:c6:26:e6:63: a6:72:4c:ef:8e:b1:61:df:69:cb:36:38:20:19:d7:16:ec:f4: 1d:a6:7b:1d:92:18:ce:6c:b6:85:2b:5d:eb:27:f4:59:2f:24: 02:c1:f0:3f:1f:ba:79:f0:6d:d5:b9:a9:99:d5:44:05:0a:0d: bc:4b:64:83:3b:4c:cb:04:28:f9:ba:24:18:a7:64:06:45:04: c4:82:77:fd:d9:8e:15:34:14:fe:d8:d3:ff:97:f8:c4:65:55: fd:07:2f:03:4b:5e:a4:dd:c2:2a:b8:7c:d4:6f:6f:a1:78:93: 04:23:96:fa:1d:c6:e5:bc:67:a6:52:c4:af:dd:62:1d:ec:91: fc:e3:b0:f7:49:35:24:89:7f:cc:15:9d:fa:9e:32:7a:0d:28: c4:9e:23:f4:c7:5f:fa:6b:2d:d1:42:4a:72:97:fc:c9:19:37: a7:08:2c:2e:f5:1b:6d:ea:d1:e6:54:c7:6a:c9:2f:74:3d:58: fc:7e:34:73:59:28:89:ca:68:36:c6:98:be:8b:7f:53:79:15: 3f:9c:ad:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC9W8IXoFNhIYyXAWji8DK8VpbaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDEyMDU3WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODY4M2E1YmIwNDY1Yzc1N2I1NThkNzY2NWVlOTQ2NmM1 YjZmY2ZjNjcwZTI1ZGFiZjhlNmI0Y2M3MWVhNWM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtJa9w9mdZIFZconfVbhAh5Rg6FauT9tYrAmQy5apH5Ic4 3b7LK0LQoHzP20KdMcuJkEccH0bCkOSy63Qcn6YYpWt4dmSutwexMs8fqNF/k6+g j89kPYclE667cqsUqFMdV4ujnTnb6SEeMpLc+/Y4qQDSmbUtOXE8eURYUv5wOZ4g /eP5efUBccRphTJlgTEYrQGPP6aWmMT0eFCifAn7DCgqjFfCd/6qw0XhtmPg1nzD NSKrP2K1q2jIrtAEEuCaWaSxDaPzNhp4A7j4HCiGyiGyt8C1KrSFaDxkPT4yJSmt e8mtnyHx65Y8sbMsXdGWq4+aDjEkO70+SL3fST8hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaIw3ZmFm6n8K4Or4spEsfnUi2REwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4ZWE2M2E4LWQzOGYtNDFiZi04NzJjLWFkNTA0OTVkZTc2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fKowDQYJKoZIhvcNAQELBQADggEBAG/RlOCOReCiIYvgrrM81y5ZY22T ZgpsTo82ztMquIAwA+bS0YIsGAnZHhSU5umkdjjbxibmY6ZyTO+OsWHfacs2OCAZ 1xbs9B2mex2SGM5stoUrXesn9FkvJALB8D8funnwbdW5qZnVRAUKDbxLZIM7TMsE KPm6JBinZAZFBMSCd/3ZjhU0FP7Y0/+X+MRlVf0HLwNLXqTdwiq4fNRvb6F4kwQj lvodxuW8Z6ZSxK/dYh3skfzjsPdJNSSJf8wVnfqeMnoNKMSeI/THX/prLdFCSnKX /MkZN6cILC71G23q0eZUx2rJL3Q9WPx+NHNZKInKaDbGmL6Lf1N5FT+crQQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:20 2026 by rpki-client