$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa File: b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa (raw, json) Hash identifier: vDPLKGKDTzqfSmEV1y6EdxiJ/7FN0ZxZJ7MqBNmhU54= Subject key identifier: 3C:00:8D:0A:39:13:07:E9:84:56:73:48:BE:47:C7:45:0F:BA:1C:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2894DF50FD70F773645472A7D1086730231DEAA0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa Signing time: Sat 28 Feb 2026 04:00:46 +0000 ROA not before: Sat 28 Feb 2026 04:00:46 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:94:df:50:fd:70:f7:73:64:54:72:a7:d1:08:67:30:23:1d:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 04:00:46 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=6766eee9de51ded5ce5bac0db4a700016c82e1f6e9a862b81af4826a31027b03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:79:37:d5:13:0a:18:33:8e:af:21:e7:2e: 91:cf:36:9a:a9:1b:fa:0c:21:f6:a1:59:f1:5b:2a: 65:7d:20:79:00:80:4a:86:30:e9:92:54:4f:9d:57: 2b:a6:6b:64:eb:97:e4:61:bb:52:fb:5b:2a:2d:b3: 05:d3:e3:74:61:c3:15:1e:4d:95:fa:97:91:e8:0c: 12:a7:dd:90:00:03:d6:2e:8c:46:a9:44:11:8a:da: c5:f0:d7:8a:c3:9f:df:55:5f:9a:8c:2a:86:e3:ae: b7:e1:44:7b:46:60:86:62:38:de:29:4f:67:42:88: 50:07:97:71:9c:15:51:7f:8c:8b:4b:c7:c9:42:a4: 65:5c:f0:3c:eb:80:d9:4d:57:6a:96:40:13:63:50: f6:d4:aa:a6:f5:a1:69:90:b8:58:0b:90:23:50:46: b6:fe:33:ce:98:33:6f:51:17:f5:9a:fa:ba:99:fc: 60:f2:74:62:78:8b:48:fc:0c:67:7a:04:9c:02:b3: f0:4b:4b:51:7d:50:8c:d5:db:a0:cc:9e:6c:db:32: aa:64:4b:c1:d3:e7:bb:6d:ed:44:c4:6a:ba:a5:70: 9f:3d:98:2d:8e:69:ee:03:89:7d:cf:ba:20:26:de: b5:67:9a:5c:e6:1d:f9:04:19:fb:29:66:19:e8:8d: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:00:8D:0A:39:13:07:E9:84:56:73:48:BE:47:C7:45:0F:BA:1C:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.74.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3c:68:2d:e8:65:d4:cf:8d:72:45:24:97:f6:83:f8:ed:ea:f8: 25:05:11:e8:c7:41:f3:75:1b:2e:bd:e6:28:70:30:f5:1f:0c: b0:35:10:9f:a0:e0:55:53:75:c9:53:74:58:6f:09:c1:48:c4: 3c:b8:e4:4b:1f:01:9e:54:6b:12:d0:e5:ca:da:81:06:b8:8b: 89:c1:3e:a3:75:3e:a5:87:e4:3a:59:20:60:79:17:a3:f6:3d: a6:e1:f0:8e:7d:75:8c:73:82:dc:6c:2f:cf:28:e4:0f:ec:c8: a7:c3:53:c0:cc:f3:9b:37:ca:8f:2e:30:c0:29:9d:68:63:22: b9:1e:8c:2f:50:94:47:80:73:a3:31:ff:72:b6:a0:52:e6:d5: d9:35:d3:34:a6:fc:c8:46:84:07:d7:5d:14:36:82:d3:4a:71: 65:36:85:f8:90:4a:5e:30:d7:ed:c2:9f:18:fa:b7:87:31:bc: eb:c1:df:cb:9b:3f:f3:7a:bd:f1:62:db:d1:fa:9d:71:a7:40: 26:a5:0f:80:20:c0:72:42:3e:23:95:52:74:b9:3a:fa:fe:d5: 71:d1:4d:f8:43:0f:7c:c0:8f:3a:b0:b2:ac:3e:80:e3:6e:24: 55:3a:91:49:73:d0:d9:51:a3:80:9e:f5:7e:3e:67:2a:1f:40: 0b:48:1f:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKJTfUP1w93NkVHKn0QhnMCMd6qAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDQwMDQ2WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzY2ZWVlOWRlNTFkZWQ1Y2U1YmFjMGRiNGE3MDAwMTZj ODJlMWY2ZTlhODYyYjgxYWY0ODI2YTMxMDI3YjAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKpXk31RMKGDOOryHnLpHPNpqpG/oMIfahWfFbKmV9IHkA gEqGMOmSVE+dVyuma2Trl+Rhu1L7WyotswXT43RhwxUeTZX6l5HoDBKn3ZAAA9Yu jEapRBGK2sXw14rDn99VX5qMKobjrrfhRHtGYIZiON4pT2dCiFAHl3GcFVF/jItL x8lCpGVc8DzrgNlNV2qWQBNjUPbUqqb1oWmQuFgLkCNQRrb+M86YM29RF/Wa+rqZ /GDydGJ4i0j8DGd6BJwCs/BLS1F9UIzV26DMnmzbMqpkS8HT57tt7UTEarqlcJ89 mC2Oae4DiX3PuiAm3rVnmlzmHfkEGfspZhnojaNRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPACNCjkTB+mEVnNIvkfHRQ+6HHMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyM2Q4ZDJiLTdkNzctNGNkZC05MzQ0LTgwMzZjOGYwZmQwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2SoAwDQYJKoZIhvcNAQELBQADggEBADxoLehl1M+NckUkl/aD+O3q+CUF EejHQfN1Gy695ihwMPUfDLA1EJ+g4FVTdclTdFhvCcFIxDy45EsfAZ5UaxLQ5cra gQa4i4nBPqN1PqWH5DpZIGB5F6P2Pabh8I59dYxzgtxsL88o5A/syKfDU8DM85s3 yo8uMMApnWhjIrkejC9QlEeAc6Mx/3K2oFLm1dk10zSm/MhGhAfXXRQ2gtNKcWU2 hfiQSl4w1+3Cnxj6t4cxvOvB38ubP/N6vfFi29H6nXGnQCalD4AgwHJCPiOVUnS5 Ovr+1XHRTfhDD3zAjzqwsqw+gONuJFU6kUlz0NlRo4Ce9X4+ZyofQAtIH3U= -----END CERTIFICATE-----Generated at Mon Mar 2 01:00:33 2026 by rpki-client