$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9b69ac1-4e46-4fdb-a530-5813beee3272.roa File: a9b69ac1-4e46-4fdb-a530-5813beee3272.roa (raw, json) Hash identifier: c8Oi9SScTkXX0Cmd0gAoFnDK7vqzcRvdvvooWon7sG0= Subject key identifier: 86:EE:5D:58:32:F0:C4:54:BA:ED:34:E4:1A:A6:66:FE:CB:18:AB:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0423F6B0EA42C38C7BC1A665BA3F6B6CC6173B17 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9b69ac1-4e46-4fdb-a530-5813beee3272.roa Signing time: Mon 23 Feb 2026 01:51:13 +0000 ROA not before: Mon 23 Feb 2026 01:51:13 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:23:f6:b0:ea:42:c3:8c:7b:c1:a6:65:ba:3f:6b:6c:c6:17:3b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:51:13 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=8ffb79f2f23f45343d557c6233d113f6f1b344fbc8135b6f9cf1e1556eef3fdd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c4:48:a6:19:6e:fd:98:cc:fc:a0:5b:44:f5: 3a:36:d6:08:d7:55:40:bc:2e:71:c3:29:80:cc:3f: d2:67:e2:6f:a2:9a:7e:c3:73:b5:70:94:a0:ac:2c: 0a:e1:1b:01:13:e5:1c:88:28:0b:1b:cc:46:06:a3: 0e:de:fd:01:ab:75:83:8c:43:c5:74:35:f6:7c:d2: e3:7a:5f:20:05:bb:19:79:8b:9b:0f:2c:50:45:ab: c9:5e:b2:ea:ef:d8:ce:47:ac:15:bb:01:f1:5f:00: e0:7c:1c:05:4e:27:51:de:5f:5a:4f:ff:2b:43:07: 3a:d9:84:c5:96:80:77:c4:57:eb:5e:c8:20:5a:8f: d4:1f:15:5e:af:be:7a:5d:e3:64:91:85:45:ce:ef: ca:75:0d:0b:2c:8e:c7:40:19:db:ba:4e:3c:25:23: 1e:0a:14:5f:ca:04:7a:30:04:c8:bc:a1:0c:82:11: ad:69:f5:de:ea:d5:d3:fc:75:bd:73:14:fa:ae:a8: 4f:54:eb:82:19:51:21:87:30:2c:53:5b:50:53:6c: e7:97:8e:a1:9b:15:1e:16:2f:29:8b:8a:cf:d9:58: 5e:de:16:37:19:09:23:bf:c9:cb:72:06:f4:49:87: 3c:d5:12:98:0a:d1:f8:09:84:96:70:98:c1:90:75: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:5D:58:32:F0:C4:54:BA:ED:34:E4:1A:A6:66:FE:CB:18:AB:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9b69ac1-4e46-4fdb-a530-5813beee3272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.233.0/24 Signature Algorithm: sha256WithRSAEncryption 64:9d:96:91:98:f9:87:a8:52:2a:5e:aa:76:39:c4:51:3b:1b: 0d:9c:ae:8f:1a:ff:2a:88:a3:24:75:ea:9b:6e:ec:7d:b1:78: ec:c0:e7:ac:49:f7:89:5c:6f:32:27:41:3c:f7:9f:60:f2:1f: f9:94:9e:34:34:56:12:8e:93:a7:76:89:37:60:af:79:5d:27: b2:d2:13:58:f8:2b:53:23:e9:89:1e:21:eb:02:aa:8a:d2:d0: a7:20:e3:70:99:a9:29:5a:50:ac:b8:4d:23:f3:5a:24:3d:03: 20:dc:c0:22:c1:46:d4:e8:86:23:21:de:dc:23:c6:fa:4b:68: 12:30:a5:c4:df:1c:e8:80:cc:d7:16:0e:fc:d8:29:6f:73:c1: aa:a3:96:36:26:0e:27:6d:80:4a:70:30:3d:fe:26:b2:f2:15: 81:e2:b6:09:c2:b0:d1:63:df:6a:09:e8:2c:83:f5:5a:45:92: dc:83:f4:dd:d3:a2:51:bc:63:4d:fc:36:1e:e2:c0:03:94:b0: f2:5b:80:1b:46:55:5d:2f:e2:be:ff:b9:fb:fa:29:b3:5f:07: c2:f9:c2:73:6d:93:b9:d4:29:e3:b8:ce:77:ac:b3:8a:cd:39: 67:37:f4:6d:5d:a9:33:58:24:a3:c1:79:ac:c8:ef:9c:93:8b: c3:b9:10:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBCP2sOpCw4x7waZluj9rbMYXOxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDE1MTEzWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmZiNzlmMmYyM2Y0NTM0M2Q1NTdjNjIzM2QxMTNmNmYx YjM0NGZiYzgxMzViNmY5Y2YxZTE1NTZlZWYzZmRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqxEimGW79mMz8oFtE9To21gjXVUC8LnHDKYDMP9Jn4m+i mn7Dc7VwlKCsLArhGwET5RyIKAsbzEYGow7e/QGrdYOMQ8V0NfZ80uN6XyAFuxl5 i5sPLFBFq8lesurv2M5HrBW7AfFfAOB8HAVOJ1HeX1pP/ytDBzrZhMWWgHfEV+te yCBaj9QfFV6vvnpd42SRhUXO78p1DQssjsdAGdu6TjwlIx4KFF/KBHowBMi8oQyC Ea1p9d7q1dP8db1zFPquqE9U64IZUSGHMCxTW1BTbOeXjqGbFR4WLymLis/ZWF7e FjcZCSO/yctyBvRJhzzVEpgK0fgJhJZwmMGQda9VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhu5dWDLwxFS67TTkGqZm/ssYq5kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5YjY5YWMxLTRlNDYtNGZkYi1hNTMwLTU4MTNiZWVlMzI3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fOkwDQYJKoZIhvcNAQELBQADggEBAGSdlpGY+YeoUipeqnY5xFE7Gw2c ro8a/yqIoyR16ptu7H2xeOzA56xJ94lcbzInQTz3n2DyH/mUnjQ0VhKOk6d2iTdg r3ldJ7LSE1j4K1Mj6YkeIesCqorS0Kcg43CZqSlaUKy4TSPzWiQ9AyDcwCLBRtTo hiMh3twjxvpLaBIwpcTfHOiAzNcWDvzYKW9zwaqjljYmDidtgEpwMD3+JrLyFYHi tgnCsNFj32oJ6CyD9VpFktyD9N3TolG8Y038Nh7iwAOUsPJbgBtGVV0v4r7/ufv6 KbNfB8L5wnNtk7nUKeO4zness4rNOWc39G1dqTNYJKPBeazI75yTi8O5EPM= -----END CERTIFICATE-----Generated at Mon Mar 2 02:48:57 2026 by rpki-client