$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abf44f44-93e7-42bc-a8c9-933606066f4b.roa File: abf44f44-93e7-42bc-a8c9-933606066f4b.roa (raw, json) Hash identifier: FFWZ4DV8bqEYp2OQakPyMHf/y8b8XUX4YNNPMbzA1OM= Subject key identifier: D5:EC:99:D4:F9:2E:A6:B6:46:3F:D0:11:31:49:4E:1E:1F:68:14:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D7E76C19034E2501227D45389F5E10F99F8ECA2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abf44f44-93e7-42bc-a8c9-933606066f4b.roa Signing time: Tue 24 Feb 2026 03:01:23 +0000 ROA not before: Tue 24 Feb 2026 03:01:23 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:76:c1:90:34:e2:50:12:27:d4:53:89:f5:e1:0f:99:f8:ec:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:01:23 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=01957a40adaf36e7678c4121b0483a4d9f3dfe438941f3aab3f63070f1dc96cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:4d:98:6c:b4:c4:97:27:42:7f:1b:3b:7c: 0f:96:3a:fb:64:ac:22:bd:fb:f2:3f:fe:40:e5:66: 6b:f1:3f:b0:dc:5c:df:f7:26:d3:11:d7:95:35:46: 1b:30:bb:c2:7f:3b:a6:d8:32:8d:47:3b:67:aa:cf: ed:4d:76:9f:a3:2d:f8:eb:48:06:6c:2e:ef:e2:54: 29:14:1c:d3:24:5c:a7:10:5a:36:33:22:7a:ff:03: bc:01:a1:bc:99:a8:fa:03:db:e4:18:24:04:b1:2f: 53:80:25:d8:01:3e:eb:08:ae:9b:18:73:b4:04:a4: da:a3:8a:d3:92:51:17:ce:e7:2b:70:77:54:2a:e6: 02:91:bd:d1:cc:a4:48:f3:f5:e6:38:78:a2:85:30: bb:1c:f6:1f:aa:9a:87:da:9f:3a:bd:b8:0d:b8:db: fa:07:78:57:af:bd:86:99:f0:61:b3:0a:10:ab:d5: 2b:42:4a:13:1e:7b:2e:72:10:05:77:f7:ba:5b:5c: b5:a8:e6:86:dc:d5:02:1d:35:eb:7c:00:45:c3:19: f8:74:2a:04:da:01:0d:88:d3:37:a3:4e:ae:34:53: b0:19:89:7c:cf:d8:da:6c:23:b9:2d:24:7f:a8:14: 8f:72:fd:d6:ae:30:ae:a8:3d:34:1e:0a:ab:e5:a7: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EC:99:D4:F9:2E:A6:B6:46:3F:D0:11:31:49:4E:1E:1F:68:14:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abf44f44-93e7-42bc-a8c9-933606066f4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.98.0/24 Signature Algorithm: sha256WithRSAEncryption 27:04:af:73:71:f5:ce:a5:c0:02:fc:dd:e3:f0:9e:03:c6:8d: fe:06:b9:a3:3f:d1:e2:ca:c8:1a:6e:5c:58:64:20:c2:34:e5: 42:2b:17:fd:06:15:77:d2:45:cd:bc:c0:cb:2d:94:7d:b9:94: 3b:9d:66:41:54:bd:32:dd:cc:3c:98:c5:f1:82:b4:81:d2:aa: 73:bb:45:9f:6a:ef:66:46:d1:6b:4e:e1:a8:74:ad:94:04:b9: f9:1a:12:43:f9:6e:26:44:3f:29:b9:06:79:74:b2:5e:bb:fb: bb:ca:10:67:50:e6:76:39:7b:d2:18:b9:59:6f:e2:40:b3:20: 95:c5:a4:d1:68:7c:0c:90:dc:87:81:d7:2d:d8:db:9a:a7:af: 99:f1:d9:fe:33:a2:ae:10:33:33:6a:91:4f:56:e9:d5:35:13: 69:5a:c7:96:80:a0:1d:06:04:61:2b:8f:ca:e9:d8:1a:25:90: 67:24:82:23:23:44:58:2b:7f:b7:91:ec:0b:0b:1c:bc:46:5e: 20:5b:b2:35:a5:a4:24:00:d3:49:c9:81:4c:6e:04:6e:75:ff: ed:9c:bc:0e:c8:f6:08:92:9b:37:aa:86:33:cf:7c:d5:14:0d: 59:12:fd:1f:52:af:be:a6:88:96:a7:44:49:2b:19:a1:19:af: bf:58:13:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTX52wZA04lASJ9RTifXhD5n47KIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMwMTIzWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTk1N2E0MGFkYWYzNmU3Njc4YzQxMjFiMDQ4M2E0ZDlm M2RmZTQzODk0MWYzYWFiM2Y2MzA3MGYxZGM5NmNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKnE2YbLTElydCfxs7fA+WOvtkrCK9+/I//kDlZmvxP7Dc XN/3JtMR15U1Rhswu8J/O6bYMo1HO2eqz+1Ndp+jLfjrSAZsLu/iVCkUHNMkXKcQ WjYzInr/A7wBobyZqPoD2+QYJASxL1OAJdgBPusIrpsYc7QEpNqjitOSURfO5ytw d1Qq5gKRvdHMpEjz9eY4eKKFMLsc9h+qmofanzq9uA242/oHeFevvYaZ8GGzChCr 1StCShMeey5yEAV397pbXLWo5obc1QIdNet8AEXDGfh0KgTaAQ2I0zejTq40U7AZ iXzP2NpsI7ktJH+oFI9y/dauMK6oPTQeCqvlp/4jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1eyZ1PkuprZGP9ARMUlOHh9oFE8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiZjQ0ZjQ0LTkzZTctNDJiYy1hOGM5LTkzMzYwNjA2NmY0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA272IwDQYJKoZIhvcNAQELBQADggEBACcEr3Nx9c6lwAL83ePwngPGjf4G uaM/0eLKyBpuXFhkIMI05UIrF/0GFXfSRc28wMstlH25lDudZkFUvTLdzDyYxfGC tIHSqnO7RZ9q72ZG0WtO4ah0rZQEufkaEkP5biZEPym5Bnl0sl67+7vKEGdQ5nY5 e9IYuVlv4kCzIJXFpNFofAyQ3IeB1y3Y25qnr5nx2f4zoq4QMzNqkU9W6dU1E2la x5aAoB0GBGErj8rp2BolkGckgiMjRFgrf7eR7AsLHLxGXiBbsjWlpCQA00nJgUxu BG51/+2cvA7I9giSmzeqhjPPfNUUDVkS/R9Sr76miJanREkrGaEZr79YE8o= -----END CERTIFICATE-----Generated at Mon Mar 2 01:27:46 2026 by rpki-client