$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9afe6c45-a90c-4b00-91e3-91d02b339778.roa File: 9afe6c45-a90c-4b00-91e3-91d02b339778.roa (raw, json) Hash identifier: B36AehmMfBMWTh8C21FkQT/MI4p6j+NfoRTgnXXs0Bs= Subject key identifier: 82:95:8B:20:64:8A:DB:0F:C7:09:E8:06:B6:98:78:D6:A9:73:47:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09F6EEF09C6732C654725DB8210621BA904A2729 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9afe6c45-a90c-4b00-91e3-91d02b339778.roa Signing time: Tue 17 Feb 2026 01:10:34 +0000 ROA not before: Tue 17 Feb 2026 01:10:34 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.189.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f6:ee:f0:9c:67:32:c6:54:72:5d:b8:21:06:21:ba:90:4a:27:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:10:34 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=469f1c81d1200dd2bf0f9a73963919a2bdf33124c763c0f32b809e7a1a489864, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:a4:aa:2a:27:e2:d9:52:ca:07:fa:47:43: 93:08:16:9a:8b:15:e3:4b:3a:8d:d4:58:8c:3c:a1: a1:27:df:2c:4a:83:ea:77:a6:96:e5:a5:2d:7d:df: 95:5d:68:70:04:1a:d0:49:bb:81:05:01:34:6c:24: d8:77:11:c2:3a:ae:c9:12:aa:c8:a5:d6:c1:71:4f: db:db:8b:e1:c6:62:0d:a4:c5:e1:13:64:1e:5b:1b: fc:eb:b3:56:19:81:30:de:62:77:02:eb:b3:29:85: a5:f4:8d:1c:83:ff:d2:04:07:b2:13:38:88:3b:1d: 4e:63:52:db:7f:7b:b9:c2:d8:85:28:07:cb:d7:53: 73:68:40:a3:0f:a4:ed:60:18:72:f4:d2:f2:9f:cf: 84:20:e7:fc:06:92:d6:5c:5d:31:e3:9e:c8:c9:16: 21:67:37:e6:c0:b6:ba:f5:c5:09:24:6a:53:51:a8: 07:d1:ae:86:9a:24:88:2f:b3:45:50:40:d0:21:1a: e1:3f:99:91:99:0d:81:2d:ea:ff:2e:9f:35:cf:67: bd:47:ec:68:99:b0:07:37:41:97:96:14:a6:8c:8e: af:34:16:e3:fa:0b:70:90:7c:69:05:a6:b1:da:e5: 27:ff:d7:7e:58:95:51:e5:0e:c7:ae:92:4a:72:f1: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:95:8B:20:64:8A:DB:0F:C7:09:E8:06:B6:98:78:D6:A9:73:47:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9afe6c45-a90c-4b00-91e3-91d02b339778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.189.252.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:ad:4e:bb:48:7a:2f:a4:9c:1f:e2:04:ac:41:0d:ff:2f:fd: 29:09:59:c0:d1:84:a0:d1:ce:b9:35:8c:bc:97:71:c2:26:5f: 0f:21:b0:71:27:fd:95:e7:b4:70:1a:77:45:9b:db:bc:e7:f1: bd:e4:91:24:6f:64:e3:58:a7:a0:ca:05:83:75:5a:af:62:c3: 87:04:51:eb:90:0d:62:d0:ba:be:8e:0d:68:36:1c:38:c5:de: 1d:2e:ec:1b:a5:f9:2b:5b:79:eb:a2:0f:61:78:5a:ff:7f:e9: e5:64:cc:ef:9e:5c:fe:ce:54:4c:08:31:75:d1:5e:cf:7b:bb: 2f:db:a1:fe:0a:c8:f2:2d:f9:0f:29:a7:38:d9:7e:55:4c:48: 32:c2:6b:5c:81:c6:5e:92:42:ed:cd:e8:d8:1f:56:e7:57:42: de:80:da:1c:58:85:aa:13:04:96:9f:7d:c1:78:fd:90:d3:65: 5d:87:d4:d2:67:96:4e:fe:6e:42:e9:86:12:52:51:12:6b:bb: c6:32:c5:d4:e8:51:fc:28:a9:99:b7:57:91:6c:26:32:af:04: 6b:8e:bf:50:ae:0e:ea:1f:73:45:ea:18:da:60:e0:63:13:5f: 17:bb:f8:40:ef:f1:12:0c:41:41:8e:59:f4:37:cd:a0:e6:4a: 77:26:b4:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCfbu8JxnMsZUcl24IQYhupBKJykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDExMDM0WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjlmMWM4MWQxMjAwZGQyYmYwZjlhNzM5NjM5MTlhMmJk ZjMzMTI0Yzc2M2MwZjMyYjgwOWU3YTFhNDg5ODY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPKqSqKifi2VLKB/pHQ5MIFpqLFeNLOo3UWIw8oaEn3yxK g+p3ppblpS1935VdaHAEGtBJu4EFATRsJNh3EcI6rskSqsil1sFxT9vbi+HGYg2k xeETZB5bG/zrs1YZgTDeYncC67MphaX0jRyD/9IEB7ITOIg7HU5jUtt/e7nC2IUo B8vXU3NoQKMPpO1gGHL00vKfz4Qg5/wGktZcXTHjnsjJFiFnN+bAtrr1xQkkalNR qAfRroaaJIgvs0VQQNAhGuE/mZGZDYEt6v8unzXPZ71H7GiZsAc3QZeWFKaMjq80 FuP6C3CQfGkFprHa5Sf/135YlVHlDseukkpy8dElAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgpWLIGSK2w/HCegGtph41qlzR0AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZmU2YzQ1LWE5MGMtNGIwMC05MWUzLTkxZDAyYjMzOTc3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2vfwwDQYJKoZIhvcNAQELBQADggEBAEqtTrtIei+knB/iBKxBDf8v/SkJ WcDRhKDRzrk1jLyXccImXw8hsHEn/ZXntHAad0Wb27zn8b3kkSRvZONYp6DKBYN1 Wq9iw4cEUeuQDWLQur6ODWg2HDjF3h0u7Bul+StbeeuiD2F4Wv9/6eVkzO+eXP7O VEwIMXXRXs97uy/bof4KyPIt+Q8ppzjZflVMSDLCa1yBxl6SQu3N6NgfVudXQt6A 2hxYhaoTBJaffcF4/ZDTZV2H1NJnlk7+bkLphhJSURJru8YyxdToUfwoqZm3V5Fs JjKvBGuOv1CuDuofc0XqGNpg4GMTXxe7+EDv8RIMQUGOWfQ3zaDmSncmtCk= -----END CERTIFICATE-----Generated at Sun Mar 1 21:53:30 2026 by rpki-client