$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa File: 9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa (raw, json) Hash identifier: mkfszNFDxuRdOzWGq543dKZWm1qnhxu67ooTOxlkLw8= Subject key identifier: 28:3D:5A:E0:6C:EC:92:C8:F9:5F:38:73:05:53:16:6E:73:4C:96:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B7C7023687AB5F4E17DA4D8D3D9B1F9ADFDD263 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa Signing time: Sat 28 Feb 2026 02:30:11 +0000 ROA not before: Sat 28 Feb 2026 02:30:11 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 52.95.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7c:70:23:68:7a:b5:f4:e1:7d:a4:d8:d3:d9:b1:f9:ad:fd:d2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:30:11 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b96a54634978a36addf5baf2ff67d60427c0a8ee25f5c214f2e754a4a0064195, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:7e:ed:76:86:a0:cd:3f:26:03:22:b7:3e: 34:30:9c:c2:df:54:bc:13:d1:6d:9b:0c:ed:b6:5b: 05:b6:07:9b:1c:e2:ca:50:0a:69:8f:b0:ec:5b:54: f5:6f:79:d9:bb:d1:35:8b:bd:7a:f8:bf:ac:5e:25: de:f9:ab:f6:bb:41:27:00:dd:86:09:69:86:58:94: 0c:63:f3:a0:b4:03:5c:3e:a6:ac:46:d7:cd:70:59: f1:f1:93:cd:95:0e:4b:61:8e:42:ed:05:66:5a:f7: 05:70:45:08:c0:e4:e5:8a:b8:26:10:5f:4d:55:e4: f5:b3:a3:4c:b2:12:f3:29:3f:ac:b9:fa:14:56:93: b7:aa:23:a3:16:c9:4d:12:ba:b4:04:58:b5:38:7c: 62:8a:96:a4:a8:5e:a2:6b:fa:dc:ae:72:a9:5f:ee: 90:4a:c4:32:5c:c9:2d:3c:a6:4d:02:00:45:c7:01: ed:db:0e:79:f9:bf:fb:9b:31:be:86:85:cc:bc:35: b5:c0:08:34:9f:7c:8d:b4:f1:ba:a8:f6:71:de:b6: 69:1b:04:c1:a5:c3:62:f5:4c:30:fe:f9:80:ec:ff: 52:dd:c0:6c:40:6e:d3:3e:6f:6d:cb:78:dd:be:34: ad:ad:d7:aa:c2:04:f9:9f:f8:2b:96:a9:e8:33:6c: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:5A:E0:6C:EC:92:C8:F9:5F:38:73:05:53:16:6E:73:4C:96:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.208.0/22 Signature Algorithm: sha256WithRSAEncryption 61:a6:6e:6a:57:c0:20:49:22:0f:81:62:e5:bb:e3:33:cd:d3: 01:d0:e8:7a:a0:ce:33:81:13:63:32:da:00:93:d1:fb:14:f3: d0:e9:30:96:f5:9d:38:3d:22:46:87:5c:a5:cb:b3:f9:3d:b3: cd:1f:ba:25:70:ff:b9:f8:13:98:fc:c8:44:da:6c:29:e9:c0: 23:c7:54:15:6b:f7:62:42:5d:e8:66:9a:64:7f:f2:99:44:42: d4:c4:11:a9:f9:00:4e:90:ba:04:12:3f:0b:46:9b:f4:91:a3: 2d:a4:f3:20:f7:b0:bd:46:fa:2e:84:cb:03:29:dc:da:26:50: f9:eb:19:d3:72:5d:c5:18:96:b4:f2:07:21:da:28:e0:95:a1: a2:b8:82:4c:9f:d1:dd:71:60:17:ba:4f:e4:79:be:a4:d3:60: 26:b2:0c:7b:ad:2e:2e:fe:4a:22:2e:ca:58:80:a4:a2:58:43: 41:33:4b:02:ca:d8:4b:64:8e:70:82:d4:06:1a:d0:d6:c0:39: c7:b6:70:f5:ee:df:69:32:79:32:b7:be:df:07:a8:98:6e:80: 00:ac:f4:4c:84:b3:f3:9d:da:fb:ec:7d:9f:59:c7:1f:2d:32: 2c:88:44:ff:25:76:93:18:39:b9:fe:c3:c3:0a:3a:ce:f4:82: 86:46:82:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO3xwI2h6tfThfaTY09mx+a390mMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDIzMDExWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTZhNTQ2MzQ5NzhhMzZhZGRmNWJhZjJmZjY3ZDYwNDI3 YzBhOGVlMjVmNWMyMTRmMmU3NTRhNGEwMDY0MTk1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC18n7tdoagzT8mAyK3PjQwnMLfVLwT0W2bDO22WwW2B5sc 4spQCmmPsOxbVPVvedm70TWLvXr4v6xeJd75q/a7QScA3YYJaYZYlAxj86C0A1w+ pqxG181wWfHxk82VDkthjkLtBWZa9wVwRQjA5OWKuCYQX01V5PWzo0yyEvMpP6y5 +hRWk7eqI6MWyU0SurQEWLU4fGKKlqSoXqJr+tyucqlf7pBKxDJcyS08pk0CAEXH Ae3bDnn5v/ubMb6Ghcy8NbXACDSffI208bqo9nHetmkbBMGlw2L1TDD++YDs/1Ld wGxAbtM+b23LeN2+NK2t16rCBPmf+CuWqegzbOhfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKD1a4Gzsksj5XzhzBVMWbnNMlrEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkMzJiOGY2LTFmYWYtNGIzMi05ZDc1LTc2YjVlYTVkYzMxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0X9AwDQYJKoZIhvcNAQELBQADggEBAGGmbmpXwCBJIg+BYuW74zPN0wHQ 6HqgzjOBE2My2gCT0fsU89DpMJb1nTg9IkaHXKXLs/k9s80fuiVw/7n4E5j8yETa bCnpwCPHVBVr92JCXehmmmR/8plEQtTEEan5AE6QugQSPwtGm/SRoy2k8yD3sL1G +i6EywMp3NomUPnrGdNyXcUYlrTyByHaKOCVoaK4gkyf0d1xYBe6T+R5vqTTYCay DHutLi7+SiIuyliApKJYQ0EzSwLK2EtkjnCC1AYa0NbAOce2cPXu32kyeTK3vt8H qJhugACs9EyEs/Od2vvsfZ9Zxx8tMiyIRP8ldpMYObn+w8MKOs70goZGgjE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:20:00 2026 by rpki-client