$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9233163e-e62d-4785-9259-1569e9d2c970.roa File: 9233163e-e62d-4785-9259-1569e9d2c970.roa (raw, json) Hash identifier: 43JGq9spSkJfvZCidKJosahFYS23ogQ+54/ZZ1wOfzM= Subject key identifier: B3:45:4C:54:E8:94:7B:FD:68:4A:00:74:27:7C:8F:22:39:C4:6B:F3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73671A13C9184DEF7710A10C0640D3E7C677590C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9233163e-e62d-4785-9259-1569e9d2c970.roa Signing time: Tue 24 Feb 2026 03:30:57 +0000 ROA not before: Tue 24 Feb 2026 03:30:57 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.241.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:67:1a:13:c9:18:4d:ef:77:10:a1:0c:06:40:d3:e7:c6:77:59:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:30:57 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=3b03e4cedc67ec7fd26d42c5ac355a9b3a9eff2834b342be4cc390a96b854a79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:58:22:7c:2b:b0:4e:a3:2a:33:f2:09:5c:19: 4d:e8:52:5c:ba:f6:f1:37:58:41:b0:d9:34:33:c2: 29:6b:79:6c:92:bc:16:80:f9:9f:4a:fe:06:8b:0d: 05:e0:f8:3d:de:ff:a6:ba:12:1b:17:af:c8:59:fd: 4f:74:22:74:8a:80:36:df:fe:7d:41:ba:85:50:b0: 3c:6c:ca:91:b1:e1:66:9d:4b:da:84:36:fc:47:76: 4f:43:d8:82:0c:cb:15:69:8a:f6:19:9a:bc:ed:e0: 2b:f7:60:4d:b6:e9:36:21:0f:29:ff:6d:c7:ed:75: 85:66:27:f7:94:fc:1f:7f:a1:cf:7e:2f:f2:df:3f: 63:63:a7:83:9c:2f:71:13:12:c1:48:b1:f1:f2:79: 7e:cb:c9:47:40:92:9f:b6:c2:f2:37:6e:c6:f0:d9: 4f:f2:7c:32:59:f5:26:7b:53:ee:8a:8a:1a:b0:bd: f3:65:88:59:36:56:ab:af:e3:8f:39:9c:6a:34:32: 5b:67:fc:7e:80:60:9b:2c:5f:16:d2:26:c5:d1:e1: 24:25:b5:b8:cc:6e:4e:ab:37:03:a4:ee:cf:fe:bc: 59:3f:0f:d1:ae:4e:23:4d:34:46:93:81:db:15:cd: ed:93:c0:9e:6a:5f:33:2a:0f:65:2f:0f:99:59:59: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:45:4C:54:E8:94:7B:FD:68:4A:00:74:27:7C:8F:22:39:C4:6B:F3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9233163e-e62d-4785-9259-1569e9d2c970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.241.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0d:c6:50:34:b4:a9:69:be:82:a2:c3:36:1c:f9:4e:a3:84:76: 86:43:74:2d:66:fb:df:fb:1f:57:63:31:8b:c2:1c:a5:5a:9f: 60:8b:37:c3:c4:53:40:6a:28:49:ce:86:38:b1:81:6d:ff:19: f8:ae:c4:27:fe:b0:c8:be:fa:25:6a:2c:a0:d1:6e:0c:b6:c8: 2d:55:9a:c8:ac:ba:53:b8:24:39:29:e6:85:57:c1:ff:ac:68: 2f:df:22:4b:f4:36:89:ba:dd:28:da:50:cd:2f:b8:b3:79:ef: 37:61:1e:c5:68:ff:bf:71:8c:1a:15:42:9e:29:3c:b4:f7:a6: 87:e0:24:4b:3f:21:b6:76:b3:7d:04:26:d4:32:f8:4a:d1:93: 5c:fd:b8:d2:57:5c:34:da:01:c4:d1:5b:16:98:d2:a7:cf:b3: 4b:3b:11:27:d8:ea:fd:69:03:52:e8:30:19:a2:cc:46:bf:9d: 50:7b:40:f8:f9:92:12:86:87:2d:6f:03:b7:71:87:b0:8b:c4: a1:0d:ce:fd:24:fb:bd:be:e0:fd:e7:24:57:35:46:ca:3e:05: d9:27:dd:11:5a:bb:ae:1c:8d:1c:75:a3:ea:d1:89:54:3a:68: 69:29:9b:88:2a:67:11:95:bb:59:cd:c7:0a:a9:3c:d6:43:e5: 1e:62:74:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc2caE8kYTe93EKEMBkDT58Z3WQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMzMDU3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjAzZTRjZWRjNjdlYzdmZDI2ZDQyYzVhYzM1NWE5YjNh OWVmZjI4MzRiMzQyYmU0Y2MzOTBhOTZiODU0YTc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3WCJ8K7BOoyoz8glcGU3oUly69vE3WEGw2TQzwilreWyS vBaA+Z9K/gaLDQXg+D3e/6a6EhsXr8hZ/U90InSKgDbf/n1BuoVQsDxsypGx4Wad S9qENvxHdk9D2IIMyxVpivYZmrzt4Cv3YE226TYhDyn/bcftdYVmJ/eU/B9/oc9+ L/LfP2Njp4OcL3ETEsFIsfHyeX7LyUdAkp+2wvI3bsbw2U/yfDJZ9SZ7U+6Kihqw vfNliFk2Vquv4485nGo0Mltn/H6AYJssXxbSJsXR4SQltbjMbk6rNwOk7s/+vFk/ D9GuTiNNNEaTgdsVze2TwJ5qXzMqD2UvD5lZWUFhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs0VMVOiUe/1oSgB0J3yPIjnEa/MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyMzMxNjNlLWU2MmQtNDc4NS05MjU5LTE1NjllOWQyYzk3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc28QAwDQYJKoZIhvcNAQELBQADggEBAA3GUDS0qWm+gqLDNhz5TqOEdoZD dC1m+9/7H1djMYvCHKVan2CLN8PEU0BqKEnOhjixgW3/GfiuxCf+sMi++iVqLKDR bgy2yC1VmsisulO4JDkp5oVXwf+saC/fIkv0Nom63SjaUM0vuLN57zdhHsVo/79x jBoVQp4pPLT3pofgJEs/IbZ2s30EJtQy+ErRk1z9uNJXXDTaAcTRWxaY0qfPs0s7 ESfY6v1pA1LoMBmizEa/nVB7QPj5khKGhy1vA7dxh7CLxKENzv0k+72+4P3nJFc1 Rso+Bdkn3RFau64cjRx1o+rRiVQ6aGkpm4gqZxGVu1nNxwqpPNZD5R5idD0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:26 2026 by rpki-client