$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0cf51b0-1e41-4013-948a-929566dfff0d.roa File: a0cf51b0-1e41-4013-948a-929566dfff0d.roa (raw, json) Hash identifier: MDyHLHtMeRhI0nHVn/CEgE2BoM1W/47ICriGPh+ibfM= Subject key identifier: E2:74:2E:66:1B:72:26:64:34:DE:CE:B1:0D:D5:F0:47:F6:88:0A:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7CD22B4C802B5F37A121AAB93C6E12811F172BA4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0cf51b0-1e41-4013-948a-929566dfff0d.roa Signing time: Mon 23 Feb 2026 02:01:25 +0000 ROA not before: Mon 23 Feb 2026 02:01:25 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d2:2b:4c:80:2b:5f:37:a1:21:aa:b9:3c:6e:12:81:1f:17:2b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 02:01:25 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=f9925d0d1c150f022d7e0568da02615fe5a95b9d4f7e5dd1f66d3da03789f2a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:ea:cf:1e:0d:82:76:df:4b:01:93:9c:77: 96:24:04:09:5d:d1:52:bc:65:4b:55:ec:5f:4d:24: 90:20:b1:7c:01:fe:4b:49:40:b8:c6:5b:32:25:42: 25:9f:4f:89:04:c6:8d:d7:a9:55:81:55:1a:4e:67: cd:c9:1a:ed:d6:87:83:77:d3:57:90:fc:a6:9a:0e: 33:e7:a5:86:9a:82:3e:e2:b6:bc:00:9e:c8:62:dd: 1b:2e:54:1e:42:4e:82:ec:3f:5e:48:3a:bf:d3:4c: d0:e2:14:d0:4b:0e:31:ff:6c:99:a4:6c:d6:ca:89: 61:e8:68:28:6c:e0:ca:17:7c:ab:62:ae:60:fc:ae: 21:03:9b:a2:bc:37:a7:9f:96:f6:82:17:1c:5d:10: e4:b8:ca:4b:7f:9f:32:95:f3:c9:2e:62:2f:36:e6: cd:86:c1:f8:93:38:5e:ca:94:4b:b6:6a:58:66:b4: 8e:c7:f1:05:12:76:c2:93:77:6f:54:8f:8f:90:cd: 91:09:aa:85:2d:62:78:5d:8a:fa:25:d4:26:f5:51: 40:20:86:6d:86:18:b2:50:27:94:9b:43:fa:c8:84: eb:bd:c6:36:d5:da:57:a1:e4:cc:ce:b7:38:41:ae: c3:97:18:d4:11:a4:d0:3d:de:5b:98:fe:f2:6f:c4: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:2E:66:1B:72:26:64:34:DE:CE:B1:0D:D5:F0:47:F6:88:0A:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0cf51b0-1e41-4013-948a-929566dfff0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.112.0/20 Signature Algorithm: sha256WithRSAEncryption 82:5f:10:dd:91:8b:e6:c9:01:18:fd:20:f0:85:77:b5:a2:7b: 13:93:72:5e:0d:3c:fa:b2:df:5b:7d:cf:c9:6e:69:22:ca:80: 45:5b:95:25:35:a4:67:c2:67:51:2c:91:dd:6e:c8:d2:28:77: 78:f1:46:f0:3d:2d:3b:ae:01:e8:ae:10:b6:01:1c:12:fa:67: d0:1f:da:02:d2:f2:82:a9:ac:ae:33:a6:66:1b:17:77:e1:01: 54:67:be:6f:36:54:2b:d6:0d:d8:e6:4e:fe:5a:66:5e:6b:18: 0e:4a:25:e3:af:02:b2:8d:61:86:57:79:2a:17:31:75:2c:a7: 47:6a:f9:ae:bf:2e:8d:9c:9d:fa:25:e8:a6:e6:1e:17:4f:de: 01:91:66:59:34:a4:12:b1:0e:2c:01:fb:e9:31:c3:25:a8:56: fe:21:05:f4:58:73:e3:6b:2f:fc:cf:d0:6c:9b:40:b3:f5:d7: 12:a1:8c:ce:be:bf:e8:22:a9:aa:69:f6:85:b3:bf:00:b7:e9: 41:2f:91:42:7e:33:0c:42:4b:f0:db:c0:52:1d:53:16:90:8f: a5:b5:83:f8:1a:e2:7d:ec:32:41:eb:e8:dd:eb:13:cb:e5:b0: 3c:18:a4:64:e1:b4:1f:c9:20:2b:25:4d:c3:a1:9f:f4:7a:bf: ad:0d:00:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfNIrTIArXzehIaq5PG4SgR8XK6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDIwMTI1WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTkyNWQwZDFjMTUwZjAyMmQ3ZTA1NjhkYTAyNjE1ZmU1 YTk1YjlkNGY3ZTVkZDFmNjZkM2RhMDM3ODlmMmE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmnerPHg2Cdt9LAZOcd5YkBAld0VK8ZUtV7F9NJJAgsXwB /ktJQLjGWzIlQiWfT4kExo3XqVWBVRpOZ83JGu3Wh4N301eQ/KaaDjPnpYaagj7i trwAnshi3RsuVB5CToLsP15IOr/TTNDiFNBLDjH/bJmkbNbKiWHoaChs4MoXfKti rmD8riEDm6K8N6eflvaCFxxdEOS4ykt/nzKV88kuYi825s2GwfiTOF7KlEu2alhm tI7H8QUSdsKTd29Uj4+QzZEJqoUtYnhdivol1Cb1UUAghm2GGLJQJ5SbQ/rIhOu9 xjbV2leh5MzOtzhBrsOXGNQRpNA93luY/vJvxNglAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4nQuZhtyJmQ03s6xDdXwR/aICqIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwY2Y1MWIwLTFlNDEtNDAxMy05NDhhLTkyOTU2NmRmZmYwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2tnAwDQYJKoZIhvcNAQELBQADggEBAIJfEN2Ri+bJARj9IPCFd7WiexOT cl4NPPqy31t9z8luaSLKgEVblSU1pGfCZ1Eskd1uyNIod3jxRvA9LTuuAeiuELYB HBL6Z9Af2gLS8oKprK4zpmYbF3fhAVRnvm82VCvWDdjmTv5aZl5rGA5KJeOvArKN YYZXeSoXMXUsp0dq+a6/Lo2cnfol6KbmHhdP3gGRZlk0pBKxDiwB++kxwyWoVv4h BfRYc+NrL/zP0GybQLP11xKhjM6+v+giqapp9oWzvwC36UEvkUJ+MwxCS/DbwFId UxaQj6W1g/ga4n3sMkHr6N3rE8vlsDwYpGThtB/JICslTcOhn/R6v60NAB0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:19 2026 by rpki-client