$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b87e65-5763-4639-9a97-e29c0fbb8479.roa File: c5b87e65-5763-4639-9a97-e29c0fbb8479.roa (raw, json) Hash identifier: bH/A18ebmNlkFRxQuuifksaAyE/fnn3ZYMdVsoQ/rwQ= Subject key identifier: EB:6B:43:95:9F:51:8B:C1:CF:16:CB:99:56:44:ED:12:A3:90:FB:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35361421A68BAC68A659D34F8963F1A75784A083 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b87e65-5763-4639-9a97-e29c0fbb8479.roa Signing time: Tue 24 Feb 2026 02:51:41 +0000 ROA not before: Tue 24 Feb 2026 02:51:41 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.207.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:36:14:21:a6:8b:ac:68:a6:59:d3:4f:89:63:f1:a7:57:84:a0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 02:51:41 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=b8551420ef6ba0e7ec27b9f355e13b188a8bb188c85a890a4c3f62a145a20215, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:cb:28:16:68:0e:13:4b:04:c4:42:ad:cb: f1:09:3a:95:64:44:a1:bd:21:d0:2b:f1:67:62:25: f1:1f:8e:c6:87:27:c6:1b:b4:95:ee:fc:5d:3a:eb: f8:61:54:33:b6:b4:33:55:75:46:70:30:69:6d:f2: 2f:f2:48:71:3f:50:9d:4b:ab:db:75:4e:46:c9:36: 90:fa:38:12:d9:d6:ef:43:fb:ed:e3:59:b2:d6:fb: 23:4c:3b:cb:6e:2c:93:c0:62:69:c0:d1:7c:1c:82: b2:34:2f:2a:7b:e5:62:97:bf:21:b4:22:b2:fa:56: 2b:c6:9a:8b:0d:88:61:b6:b6:66:52:06:f1:9c:22: 40:22:59:79:05:6c:8d:ac:4d:61:46:87:06:bc:4f: e7:42:24:b9:ae:36:9f:bb:21:24:95:90:4e:a7:c2: 4f:cc:5b:ef:0d:d4:fd:e4:9e:86:0e:57:cd:77:ad: b9:c9:4d:ae:6e:7e:72:1d:1d:7b:91:25:dd:0f:16: e9:f3:02:d9:ff:a6:8b:de:ef:f8:35:d9:a8:f3:33: 78:f2:79:39:91:17:cc:96:9d:92:b4:46:b2:1d:b2: 88:dd:02:14:af:1c:b3:3b:b2:3a:51:bf:86:78:59: 02:cc:da:89:40:9b:bd:44:e1:e3:32:d2:5f:99:89: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6B:43:95:9F:51:8B:C1:CF:16:CB:99:56:44:ED:12:A3:90:FB:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b87e65-5763-4639-9a97-e29c0fbb8479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.207.128.0/18 Signature Algorithm: sha256WithRSAEncryption 8b:35:cc:4a:12:64:1f:94:1a:8d:c0:c1:13:97:53:b9:8d:39: 4e:75:d9:20:43:c6:8f:0b:d1:30:da:e9:77:5b:4a:bf:1b:ab: 1f:93:8c:2e:7a:61:f9:2c:ac:88:2f:55:57:ad:13:95:f1:c0: 13:ae:fc:05:db:a3:00:50:ba:45:2e:40:c0:08:db:89:38:30: 17:72:70:19:b1:aa:75:34:1c:44:e9:f5:5f:f8:c7:eb:5a:34: 7a:76:fe:48:25:e5:eb:40:d1:2f:db:bd:af:f3:68:3c:27:df: 74:4f:1a:79:05:6b:d2:a7:72:e3:3c:64:5f:55:e4:0c:88:c5: 72:aa:4e:17:bb:b6:e0:cf:4a:32:d0:e4:de:90:db:99:f3:36: 89:a3:71:5a:71:e0:bb:40:be:ca:72:3c:f8:ab:43:60:96:69: be:5b:a9:8c:aa:74:17:39:3f:c4:a0:4f:79:a6:62:2b:a6:3b: 89:3f:b2:7d:15:4f:bd:d9:6e:f1:9a:d0:a8:95:57:ed:19:6b: 77:d4:4d:fd:b3:f2:c5:f3:e7:f0:de:57:33:ce:fb:17:4d:ae: 66:8f:95:01:26:5b:b0:b3:2c:e4:4d:58:aa:c4:d3:2c:3a:66: 65:2b:10:2c:aa:af:1a:aa:24:c0:45:44:96:bf:b6:d5:1e:1b: f6:bd:f2:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNTYUIaaLrGimWdNPiWPxp1eEoIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDI1MTQxWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODU1MTQyMGVmNmJhMGU3ZWMyN2I5ZjM1NWUxM2IxODhh OGJiMTg4Yzg1YTg5MGE0YzNmNjJhMTQ1YTIwMjE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLFMsoFmgOE0sExEKty/EJOpVkRKG9IdAr8WdiJfEfjsaH J8YbtJXu/F066/hhVDO2tDNVdUZwMGlt8i/ySHE/UJ1Lq9t1TkbJNpD6OBLZ1u9D ++3jWbLW+yNMO8tuLJPAYmnA0XwcgrI0Lyp75WKXvyG0IrL6VivGmosNiGG2tmZS BvGcIkAiWXkFbI2sTWFGhwa8T+dCJLmuNp+7ISSVkE6nwk/MW+8N1P3knoYOV813 rbnJTa5ufnIdHXuRJd0PFunzAtn/pove7/g12ajzM3jyeTmRF8yWnZK0RrIdsojd AhSvHLM7sjpRv4Z4WQLM2olAm71E4eMy0l+ZiXaPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU62tDlZ9Ri8HPFsuZVkTtEqOQ+3swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1Yjg3ZTY1LTU3NjMtNDYzOS05YTk3LWUyOWMwZmJiODQ3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2z4AwDQYJKoZIhvcNAQELBQADggEBAIs1zEoSZB+UGo3AwROXU7mNOU51 2SBDxo8L0TDa6XdbSr8bqx+TjC56YfksrIgvVVetE5XxwBOu/AXbowBQukUuQMAI 24k4MBdycBmxqnU0HETp9V/4x+taNHp2/kgl5etA0S/bva/zaDwn33RPGnkFa9Kn cuM8ZF9V5AyIxXKqThe7tuDPSjLQ5N6Q25nzNomjcVpx4LtAvspyPPirQ2CWab5b qYyqdBc5P8SgT3mmYiumO4k/sn0VT73ZbvGa0KiVV+0Za3fUTf2z8sXz5/DeVzPO +xdNrmaPlQEmW7CzLORNWKrE0yw6ZmUrECyqrxqqJMBFRJa/ttUeG/a98qc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:21 2026 by rpki-client