$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baa4fad9-de42-4250-aa7c-828bcb5751ca.roa File: baa4fad9-de42-4250-aa7c-828bcb5751ca.roa (raw, json) Hash identifier: 44afZ4szLbEmVT5yp4Y4iNn+tyvdSZ0SGbSSVIehpG4= Subject key identifier: 29:4C:68:3F:81:6E:F1:52:7D:1D:8E:F3:A6:3E:62:57:F0:16:B2:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0BB6982C13E1D401520CDAB0968124FD2CDDE929 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baa4fad9-de42-4250-aa7c-828bcb5751ca.roa Signing time: Wed 25 Feb 2026 02:51:15 +0000 ROA not before: Wed 25 Feb 2026 02:51:15 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.255.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b6:98:2c:13:e1:d4:01:52:0c:da:b0:96:81:24:fd:2c:dd:e9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 25 02:51:15 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=49e8c3901f0701d7bbcfb94d61fc11cca6072addc72099ece181af9d68a18987, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:1b:30:6c:d6:79:6b:43:48:ce:10:5f:31: 2a:ef:8e:d4:9e:b3:e5:c6:03:76:6f:67:e9:70:b3: ea:ac:49:6c:7b:d2:04:49:87:12:96:49:cb:8c:53: 4b:55:55:a9:59:7d:a9:31:4e:d0:89:e2:de:56:a6: 26:89:73:0b:d0:a5:3d:f2:51:19:a6:07:9d:b6:e6: 30:a8:21:d7:6a:a1:3a:1a:46:86:99:16:b8:a7:42: f8:ac:e8:63:f2:6e:25:a6:24:a2:8c:26:93:89:4d: 43:e1:3f:a2:52:72:70:31:93:35:06:49:59:2a:fb: a2:89:83:28:70:ca:7b:17:1b:44:17:1f:78:b6:a4: e3:67:40:5f:f1:f6:95:70:26:96:c0:6c:ec:53:f4: 38:a7:7c:46:de:a3:99:e4:5f:7f:7c:96:47:22:6d: 88:45:bc:d4:75:99:05:2b:8d:83:d6:7b:24:06:32: 22:7f:96:9e:25:10:07:bc:27:57:36:70:49:a4:44: 4d:0b:3e:10:29:44:2f:2e:74:56:7e:c7:37:3d:54: 18:50:af:7a:09:d5:d0:38:74:46:a4:43:02:79:63: c1:1e:90:4f:ac:50:2f:0f:87:e1:24:08:76:bb:df: 18:c2:47:90:a1:57:cc:66:18:92:86:46:36:0b:5c: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:68:3F:81:6E:F1:52:7D:1D:8E:F3:A6:3E:62:57:F0:16:B2:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baa4fad9-de42-4250-aa7c-828bcb5751ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.255.128.0/17 Signature Algorithm: sha256WithRSAEncryption 32:1a:04:5f:d0:e4:29:5a:07:a8:01:6c:34:d5:1a:a0:53:5b: 53:5c:c0:d3:64:66:60:bf:ab:df:84:25:d8:10:23:94:2d:38: 84:10:61:c1:c3:83:96:41:6c:2a:f4:70:03:e1:1b:10:63:d5: 10:82:01:0f:6f:9a:8a:b0:da:a8:42:b4:20:40:b4:b0:5e:8d: 29:38:8e:73:b5:19:8b:98:ce:65:4b:83:fa:9e:a6:eb:77:2a: b4:46:c4:a6:40:2e:b7:d0:54:66:e3:23:fe:e8:e4:2b:29:aa: 2f:6d:8b:07:a0:79:d8:e4:b4:52:ca:74:2b:af:29:77:ff:8b: af:da:6a:80:59:4d:67:c9:51:7f:b1:d0:1f:89:1b:85:88:73: 04:7c:37:47:2e:f6:9c:e1:a6:3a:59:59:3b:db:5b:45:c6:b7: 44:bb:6a:5a:ed:ad:da:ee:e4:ff:8c:bf:d4:b6:fe:80:9a:a4: 91:0c:d6:81:ff:99:1f:33:31:19:f4:99:a4:cf:79:64:c3:fe: 56:d6:f4:08:b8:86:cf:9e:58:ff:4f:24:17:34:5c:d6:18:57: 4a:ae:6f:72:8a:f6:c0:7a:52:bf:ed:3c:d5:10:46:31:0d:26: ac:f2:2d:e1:d1:ee:07:9d:74:2e:d6:63:b5:c3:41:ee:f1:0a: 67:55:96:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC7aYLBPh1AFSDNqwloEk/Szd6SkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI1MDI1MTE1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWU4YzM5MDFmMDcwMWQ3YmJjZmI5NGQ2MWZjMTFjY2E2 MDcyYWRkYzcyMDk5ZWNlMTgxYWY5ZDY4YTE4OTg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV2hswbNZ5a0NIzhBfMSrvjtSes+XGA3ZvZ+lws+qsSWx7 0gRJhxKWScuMU0tVValZfakxTtCJ4t5WpiaJcwvQpT3yURmmB5225jCoIddqoToa RoaZFrinQvis6GPybiWmJKKMJpOJTUPhP6JScnAxkzUGSVkq+6KJgyhwynsXG0QX H3i2pONnQF/x9pVwJpbAbOxT9DinfEbeo5nkX398lkcibYhFvNR1mQUrjYPWeyQG MiJ/lp4lEAe8J1c2cEmkRE0LPhApRC8udFZ+xzc9VBhQr3oJ1dA4dEakQwJ5Y8Ee kE+sUC8Ph+EkCHa73xjCR5ChV8xmGJKGRjYLXCjrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKUxoP4Fu8VJ9HY7zpj5iV/AWsiAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhYTRmYWQ5LWRlNDItNDI1MC1hYTdjLTgyOGJjYjU3NTFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2/4AwDQYJKoZIhvcNAQELBQADggEBADIaBF/Q5ClaB6gBbDTVGqBTW1Nc wNNkZmC/q9+EJdgQI5QtOIQQYcHDg5ZBbCr0cAPhGxBj1RCCAQ9vmoqw2qhCtCBA tLBejSk4jnO1GYuYzmVLg/qeput3KrRGxKZALrfQVGbjI/7o5Cspqi9tiwegedjk tFLKdCuvKXf/i6/aaoBZTWfJUX+x0B+JG4WIcwR8N0cu9pzhpjpZWTvbW0XGt0S7 alrtrdru5P+Mv9S2/oCapJEM1oH/mR8zMRn0maTPeWTD/lbW9Ai4hs+eWP9PJBc0 XNYYV0qub3KK9sB6Ur/tPNUQRjENJqzyLeHR7geddC7WY7XDQe7xCmdVloY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:48:58 2026 by rpki-client