$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7071c94-38cb-4977-8d8d-99710895a550.roa File: b7071c94-38cb-4977-8d8d-99710895a550.roa (raw, json) Hash identifier: D7Lwe89vII/lppP2FBO7oioUV2L6cbTDtmeIs5HYXZI= Subject key identifier: A8:1A:B3:15:BF:32:9D:1E:94:78:08:73:56:B8:7B:97:A8:27:39:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 198676EF6CC2D6BA070DD5864AB592D2D451E81C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7071c94-38cb-4977-8d8d-99710895a550.roa Signing time: Tue 24 Feb 2026 03:51:38 +0000 ROA not before: Tue 24 Feb 2026 03:51:38 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:86:76:ef:6c:c2:d6:ba:07:0d:d5:86:4a:b5:92:d2:d4:51:e8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:51:38 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=fe7dcd911b920b250f2ada518d8d61109c605d3698db4571790ae99980856343, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:22:57:16:59:cf:26:cb:8d:71:a5:20:95: 12:36:38:8d:d6:be:dc:d1:83:93:f9:37:86:35:69: 08:d2:1a:75:26:f4:bb:28:c3:e8:db:bd:db:b2:a1: 88:06:40:08:86:a9:7a:c5:23:52:f4:ee:fb:14:83: 2e:98:65:55:47:7f:08:38:ce:f9:17:f8:92:a2:92: 29:44:04:3f:19:b4:a5:2f:7d:05:63:c7:fc:83:d8: b0:30:b2:f9:6a:36:95:58:89:85:eb:c0:ec:ed:23: 7a:bf:3e:2f:66:ba:ac:02:17:0e:2e:53:71:a9:9d: 29:43:bc:f7:6d:71:69:70:fd:1d:7f:ec:86:0b:b4: 0a:62:6d:7e:d1:14:ae:be:5b:98:8b:1c:68:9c:96: f1:75:59:9d:d4:fa:db:78:c5:65:c0:20:4d:ce:a2: e1:6f:e3:32:c7:26:4c:03:35:08:d8:5a:4f:f0:a9: 1f:af:71:c0:96:9a:c4:1a:a8:e3:1d:4a:1d:b8:21: b2:7a:86:20:49:02:6c:c6:45:58:cb:26:56:64:b9: f0:5c:5f:d0:d7:05:67:9b:18:74:48:46:95:fe:db: f5:2b:1d:17:89:f4:6d:ce:61:7c:5a:01:5e:77:9b: 97:1f:dc:7a:c7:e2:fe:e9:01:a0:93:18:cf:61:c4: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1A:B3:15:BF:32:9D:1E:94:78:08:73:56:B8:7B:97:A8:27:39:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7071c94-38cb-4977-8d8d-99710895a550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.224.0/20 Signature Algorithm: sha256WithRSAEncryption 15:d8:9e:98:86:5d:61:8b:fe:41:1c:62:08:24:f1:3a:35:92: cb:95:45:f3:ab:3a:98:74:7b:ba:c2:28:98:34:1a:2b:7f:6a: 82:ec:59:44:e6:6c:43:1c:6c:aa:ba:29:08:98:cb:cc:b6:96: 7c:86:42:c6:9f:af:98:c8:9c:86:29:95:6a:9a:27:b9:97:84: f6:b5:ea:87:73:37:4a:a0:3d:66:00:e9:e4:6b:8f:48:af:69: 82:ff:31:02:49:6a:61:6c:f1:23:19:82:15:9b:36:11:f9:79: 77:ad:10:0d:21:94:a3:06:fa:6f:35:47:12:58:7e:18:e0:07: 12:d6:28:9b:3e:45:07:d0:b6:e1:4e:e7:72:22:7a:99:f9:b4: 48:db:b9:00:44:92:88:dc:22:55:0c:1f:ae:e2:68:53:97:d2: 33:25:2f:e1:f3:6d:2f:2d:52:5a:a7:7d:a3:e7:95:d8:f6:7d: 13:0d:9b:55:c6:9d:31:31:d8:e5:6a:ff:4e:64:c3:9f:06:c5: 48:fd:c9:6e:fe:03:27:b7:fa:7e:7c:2e:0a:bd:df:80:19:56: 97:e6:6d:15:6b:2e:b2:43:5b:61:42:d0:d9:a3:a5:83:67:ce: 25:e9:0b:8d:04:c4:80:51:6b:64:74:36:9f:4d:8c:4a:be:69: 31:04:6b:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGYZ272zC1roHDdWGSrWS0tRR6BwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDM1MTM4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTdkY2Q5MTFiOTIwYjI1MGYyYWRhNTE4ZDhkNjExMDlj NjA1ZDM2OThkYjQ1NzE3OTBhZTk5OTgwODU2MzQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLmSJXFlnPJsuNcaUglRI2OI3WvtzRg5P5N4Y1aQjSGnUm 9Lsow+jbvduyoYgGQAiGqXrFI1L07vsUgy6YZVVHfwg4zvkX+JKikilEBD8ZtKUv fQVjx/yD2LAwsvlqNpVYiYXrwOztI3q/Pi9muqwCFw4uU3GpnSlDvPdtcWlw/R1/ 7IYLtApibX7RFK6+W5iLHGiclvF1WZ3U+tt4xWXAIE3OouFv4zLHJkwDNQjYWk/w qR+vccCWmsQaqOMdSh24IbJ6hiBJAmzGRVjLJlZkufBcX9DXBWebGHRIRpX+2/Ur HReJ9G3OYXxaAV53m5cf3HrH4v7pAaCTGM9hxC+tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqBqzFb8ynR6UeAhzVrh7l6gnOcYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I3MDcxYzk0LTM4Y2ItNDk3Ny04ZDhkLTk5NzEwODk1YTU1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27+AwDQYJKoZIhvcNAQELBQADggEBABXYnpiGXWGL/kEcYggk8To1ksuV RfOrOph0e7rCKJg0Git/aoLsWUTmbEMcbKq6KQiYy8y2lnyGQsafr5jInIYplWqa J7mXhPa16odzN0qgPWYA6eRrj0ivaYL/MQJJamFs8SMZghWbNhH5eXetEA0hlKMG +m81RxJYfhjgBxLWKJs+RQfQtuFO53Iiepn5tEjbuQBEkojcIlUMH67iaFOX0jMl L+HzbS8tUlqnfaPnldj2fRMNm1XGnTEx2OVq/05kw58GxUj9yW7+Aye3+n58Lgq9 34AZVpfmbRVrLrJDW2FC0NmjpYNnziXpC40ExIBRa2R0Np9NjEq+aTEEa1c= -----END CERTIFICATE-----Generated at Sun Mar 1 21:48:21 2026 by rpki-client