$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa File: ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa (raw, json) Hash identifier: PhRa0YhgOq5AYpt6XTRQIEAg2Zh1cchhazkgOy0FGiw= Subject key identifier: E3:AC:63:E6:5B:3F:DC:8E:83:45:66:D0:3C:52:D9:FB:01:31:CF:F5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 318B8ACD719E8CCBCB84C21436327CB09AEEA4EF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa Signing time: Sat 28 Feb 2026 01:51:26 +0000 ROA not before: Sat 28 Feb 2026 01:51:26 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.221.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8b:8a:cd:71:9e:8c:cb:cb:84:c2:14:36:32:7c:b0:9a:ee:a4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 01:51:26 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=a1ff9250d9c3c6cba22ded9c4107f7357336c21776fc4182fea43dc3fc14ee75, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:87:9e:1c:3e:3a:c1:a1:23:47:64:e9:4c: ad:b4:4d:34:92:7a:81:cb:04:b8:33:ad:22:cb:8e: 50:49:06:24:ae:e1:69:62:eb:cd:b4:90:27:38:00: 91:f8:28:47:76:d6:60:c5:10:d4:c1:18:b2:0b:9e: 0c:c7:1e:37:66:41:2f:2e:6e:ad:f3:e8:59:3b:b9: 84:b3:6c:52:89:9a:d8:7d:89:64:89:c2:c4:20:07: 70:1e:cd:94:f6:12:e9:aa:d2:3a:fb:2f:78:ce:bf: 26:bd:3c:9b:8f:4f:9b:f2:04:5e:e0:25:bf:f5:1e: 51:a2:93:a4:9b:38:5b:bb:49:0d:67:cc:39:a1:8f: f2:dc:96:b2:ce:98:02:98:70:da:91:7b:9b:42:b9: c2:16:5e:dc:a9:0e:ad:bd:d8:09:af:17:64:a3:95: 35:98:81:3f:e3:48:54:c0:1b:b4:b9:fb:4f:78:f1: 8a:9a:a7:61:6f:84:2f:c4:de:33:fb:93:e4:d7:d8: fa:98:39:f9:f9:e0:ec:f8:ad:b4:a4:b4:0b:af:5d: 32:3c:09:b7:cc:3e:e2:94:6b:5e:cd:f9:7b:6e:ef: 83:12:7e:53:db:29:cb:1f:be:2b:8b:f2:da:e7:53: 82:fe:3d:84:06:7f:70:1d:a1:67:53:4a:30:50:07: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:63:E6:5B:3F:DC:8E:83:45:66:D0:3C:52:D9:FB:01:31:CF:F5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.221.192.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:c4:62:f3:1c:d8:18:bf:67:78:9c:b2:39:0d:3a:cd:0c:c3: 9a:a5:c2:54:61:17:56:40:1b:c9:ad:71:7a:ba:51:fb:a9:4b: 4e:a5:71:69:64:9c:6d:a5:d4:58:30:43:96:1b:3b:f1:7b:a1: 0a:c8:06:f0:f2:17:26:2b:52:0c:9a:c4:e0:80:f1:a0:a9:eb: c2:28:0b:37:14:24:74:89:7e:9f:a5:47:e1:76:d2:79:fd:cd: 59:97:3d:e2:39:9c:e1:56:5c:b3:24:14:e2:46:2a:14:5f:6c: dd:3c:f9:34:91:98:60:77:b9:5f:b6:7c:24:3e:8a:34:e7:b0: cd:fd:cd:07:34:39:ba:31:10:b4:ec:66:ae:57:7b:3f:47:5e: 55:19:63:d0:87:30:c7:ac:cb:0b:86:fb:58:11:a1:e4:ad:d2: 3e:c5:49:1c:f6:3a:c6:81:6a:0f:7e:1c:41:c7:03:74:ae:85: b1:7d:45:13:32:49:d0:3a:49:27:9a:af:2d:64:9e:68:0c:3c: fb:5c:f4:36:f3:ce:07:67:6f:31:7e:05:af:38:80:db:f7:33: b6:5e:7f:d4:b2:25:08:76:9e:2a:8e:e2:49:f0:c5:0e:38:d5: 28:3b:12:f5:7e:1e:3d:41:84:b9:e9:16:9d:1a:fe:60:c3:6c: 6d:e2:93:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMYuKzXGejMvLhMIUNjJ8sJrupO8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDE1MTI2WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWZmOTI1MGQ5YzNjNmNiYTIyZGVkOWM0MTA3ZjczNTcz MzZjMjE3NzZmYzQxODJmZWE0M2RjM2ZjMTRlZTc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXC4eeHD46waEjR2TpTK20TTSSeoHLBLgzrSLLjlBJBiSu 4Wli6820kCc4AJH4KEd21mDFENTBGLILngzHHjdmQS8ubq3z6Fk7uYSzbFKJmth9 iWSJwsQgB3AezZT2Eumq0jr7L3jOvya9PJuPT5vyBF7gJb/1HlGik6SbOFu7SQ1n zDmhj/LclrLOmAKYcNqRe5tCucIWXtypDq292AmvF2SjlTWYgT/jSFTAG7S5+094 8Yqap2FvhC/E3jP7k+TX2PqYOfn54Oz4rbSktAuvXTI8CbfMPuKUa17N+Xtu74MS flPbKcsfviuL8trnU4L+PYQGf3AdoWdTSjBQB8YLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU46xj5ls/3I6DRWbQPFLZ+wExz/UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlNzU5ZjYzLTZkMmYtNGYwZC1iMzg5LWMyN2MxMWFmYjdhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY23cAwDQYJKoZIhvcNAQELBQADggEBAAvEYvMc2Bi/Z3icsjkNOs0Mw5ql wlRhF1ZAG8mtcXq6UfupS06lcWlknG2l1FgwQ5YbO/F7oQrIBvDyFyYrUgyaxOCA 8aCp68IoCzcUJHSJfp+lR+F20nn9zVmXPeI5nOFWXLMkFOJGKhRfbN08+TSRmGB3 uV+2fCQ+ijTnsM39zQc0OboxELTsZq5Xez9HXlUZY9CHMMesywuG+1gRoeSt0j7F SRz2OsaBag9+HEHHA3SuhbF9RRMySdA6SSeary1knmgMPPtc9DbzzgdnbzF+Ba84 gNv3M7Zef9SyJQh2niqO4knwxQ441Sg7EvV+Hj1BhLnpFp0a/mDDbG3ik/Q= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:09 2026 by rpki-client