$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c42fecc6-02df-4bdb-b3fa-dceeba786665.roa File: c42fecc6-02df-4bdb-b3fa-dceeba786665.roa (raw, json) Hash identifier: y8evbyUtWJi7xsHsQfkhvr0wwEsfwDjhi7O8ac0vYZw= Subject key identifier: 18:DD:69:12:44:E3:CD:2F:BD:B2:AB:BE:1E:C2:B1:F9:A9:03:8D:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25740C4ED0216776BE28A59ADDA21022B4768411 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c42fecc6-02df-4bdb-b3fa-dceeba786665.roa Signing time: Mon 23 Feb 2026 00:21:11 +0000 ROA not before: Mon 23 Feb 2026 00:21:11 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:74:0c:4e:d0:21:67:76:be:28:a5:9a:dd:a2:10:22:b4:76:84:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:21:11 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=19846d7dd869fbcb0c3ed737a00384d77814dc9bccd1d55c4f2f9baa382582a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:dc:d9:34:b8:4d:45:72:f2:e3:19:5a:68: f9:1e:06:fd:53:4d:66:f7:59:ab:ab:a7:ae:8a:64: f3:15:d8:1a:c3:33:5a:88:e8:de:c1:a2:a1:98:0f: c3:ad:fd:07:bb:23:5e:a3:9e:33:81:c6:cd:d4:b8: 3a:20:e9:8d:17:64:d3:91:2a:b6:fd:4d:19:3d:21: 90:d2:49:4f:01:9b:8d:02:87:65:7d:2c:5c:f9:ac: d5:1a:2c:af:bc:61:8f:13:68:6e:3c:e3:7f:ea:10: 09:21:11:42:f5:db:08:e9:f6:9c:13:dd:21:19:b6: 4b:49:0f:b5:df:ad:da:e5:35:b4:e0:61:c0:f6:d0: cf:70:a4:03:d0:fe:aa:f0:6b:04:91:92:80:e5:d7: 60:f1:a2:85:86:ce:bf:28:5d:57:12:99:f9:28:d0: a8:b6:39:60:14:94:04:de:0e:08:e9:f3:80:b7:96: 55:6e:69:ce:98:de:25:df:92:78:93:57:9a:0e:fa: ae:e9:ad:b1:12:87:7d:53:47:90:e7:be:7d:77:14: de:b4:f2:b0:36:f9:58:0f:54:45:5f:93:9c:dd:a4: 10:c5:4a:63:95:6c:f7:a1:53:bb:91:2b:8e:96:5d: 2e:55:01:b1:50:5f:9e:a0:55:20:de:a8:e7:81:b9: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DD:69:12:44:E3:CD:2F:BD:B2:AB:BE:1E:C2:B1:F9:A9:03:8D:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c42fecc6-02df-4bdb-b3fa-dceeba786665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.234.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:c1:e7:97:6b:fd:0c:b9:ae:63:64:60:92:6a:37:51:ae:ca: 56:4f:38:5a:aa:9b:89:bd:68:6b:ed:3d:a3:b2:0c:0b:60:29: 33:ad:84:06:c2:98:09:44:e5:ae:ee:21:c5:c7:39:65:9c:b9: 28:c1:6f:be:0a:61:a2:ef:d4:75:de:f2:ef:54:2b:30:0c:87: 7c:20:95:9b:0c:a2:78:0c:80:31:97:e5:4d:38:14:0f:14:e1: 49:b0:af:99:cb:82:b7:a8:97:30:b8:ef:78:1e:4a:51:4a:9d: e2:c6:a4:66:7d:cb:fc:80:77:92:4f:63:7b:f9:65:b3:7c:ee: 7c:24:47:dd:01:e5:21:af:03:23:35:38:ea:f1:be:0c:a3:c9: b3:da:7e:e1:25:1f:6b:4a:0a:d0:98:e7:dd:32:57:bc:79:27: ce:de:cd:5b:00:6a:77:91:c6:bf:db:b7:77:b7:2e:0a:47:5b: 98:96:ec:0b:82:3d:1b:07:05:d6:e8:98:52:0b:09:29:48:33: 3a:94:fe:dd:70:f4:00:09:03:12:68:61:30:90:38:b7:91:c3: 45:89:b3:a5:ba:e4:b6:8b:1c:5c:33:5b:a7:2a:26:fa:e2:51: cc:dd:7d:18:3f:fd:80:97:1f:09:b9:eb:37:c8:d1:5e:67:7f: ca:f7:f2:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJXQMTtAhZ3a+KKWa3aIQIrR2hBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAyMTExWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTg0NmQ3ZGQ4NjlmYmNiMGMzZWQ3MzdhMDAzODRkNzc4 MTRkYzliY2NkMWQ1NWM0ZjJmOWJhYTM4MjU4MmE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWp9zZNLhNRXLy4xlaaPkeBv1TTWb3Waurp66KZPMV2BrD M1qI6N7BoqGYD8Ot/Qe7I16jnjOBxs3UuDog6Y0XZNORKrb9TRk9IZDSSU8Bm40C h2V9LFz5rNUaLK+8YY8TaG4843/qEAkhEUL12wjp9pwT3SEZtktJD7XfrdrlNbTg YcD20M9wpAPQ/qrwawSRkoDl12DxooWGzr8oXVcSmfko0Ki2OWAUlATeDgjp84C3 llVuac6Y3iXfkniTV5oO+q7prbESh31TR5Dnvn13FN608rA2+VgPVEVfk5zdpBDF SmOVbPehU7uRK46WXS5VAbFQX56gVSDeqOeBue2TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGN1pEkTjzS+9squ+HsKx+akDjWAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M0MmZlY2M2LTAyZGYtNGJkYi1iM2ZhLWRjZWViYTc4NjY2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fOowDQYJKoZIhvcNAQELBQADggEBAB3B55dr/Qy5rmNkYJJqN1GuylZP OFqqm4m9aGvtPaOyDAtgKTOthAbCmAlE5a7uIcXHOWWcuSjBb74KYaLv1HXe8u9U KzAMh3wglZsMongMgDGX5U04FA8U4Umwr5nLgreolzC473geSlFKneLGpGZ9y/yA d5JPY3v5ZbN87nwkR90B5SGvAyM1OOrxvgyjybPafuElH2tKCtCY590yV7x5J87e zVsAaneRxr/bt3e3LgpHW5iW7AuCPRsHBdbomFILCSlIMzqU/t1w9AAJAxJoYTCQ OLeRw0WJs6W65LaLHFwzW6cqJvriUczdfRg//YCXHwm56zfI0V5nf8r38ig= -----END CERTIFICATE-----Generated at Mon Mar 2 02:46:16 2026 by rpki-client