$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8394241-4a57-495c-8e3c-240f9966d472.roa File: c8394241-4a57-495c-8e3c-240f9966d472.roa (raw, json) Hash identifier: lhs/Q180u1bBAq4xCoYcsfm1GHG2YqgCj2mB00PdwAg= Subject key identifier: BB:1F:11:5B:CD:4D:02:E7:0A:DB:F7:A3:88:EC:7F:4F:16:DD:92:3B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29A66D2ACB62E65162E272EC20F6F25362F0FC2E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8394241-4a57-495c-8e3c-240f9966d472.roa Signing time: Mon 23 Feb 2026 02:11:18 +0000 ROA not before: Mon 23 Feb 2026 02:11:18 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a6:6d:2a:cb:62:e6:51:62:e2:72:ec:20:f6:f2:53:62:f0:fc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 02:11:18 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=5a0429ec767ddb1eb092df872c18d5d932ab86428cf8a1ea19fc511afd35c04d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:18:12:ab:4b:f6:92:89:30:f2:ef:3c:da: 4d:75:1c:fe:bd:87:35:dc:a6:77:a7:47:6c:8f:b7: b6:a9:8d:2b:f4:94:42:32:f5:9f:68:f6:0c:5d:16: 22:3d:17:f1:36:d9:bc:5c:1f:2f:bc:7b:5e:af:bf: 67:91:88:a0:90:e0:8a:73:00:14:38:e4:f0:46:fc: af:e5:8f:46:2e:c3:d9:cf:6f:fb:45:f7:06:d9:a0: f7:10:ee:26:0d:6c:96:fd:a7:fa:f6:55:d9:08:5b: f3:e3:b6:48:0f:78:78:03:ce:af:8d:a6:c6:d4:5d: 5b:d2:02:b5:53:bc:80:7f:2c:63:d0:38:d5:2e:61: 11:66:91:b1:0d:39:a6:d9:6f:b6:ab:8b:02:9d:45: 5a:c7:d8:d1:44:c9:7e:9a:c5:26:26:4c:76:7e:4d: e7:00:52:5a:79:6c:ca:5f:36:c8:7a:2e:cb:b7:5d: 3d:2e:a9:0b:c7:00:e9:7c:63:5a:77:f1:bb:c3:da: eb:ba:87:62:a7:15:14:78:d6:a3:c1:78:92:d5:9a: c3:1e:cf:d1:8b:02:de:cf:c0:40:df:16:2a:b9:f7: 41:2d:22:8c:9c:9e:1c:2d:78:52:dd:31:a0:2b:d9: 5d:7b:6f:d6:01:8a:c0:e3:e8:4d:e1:1d:90:f1:fd: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1F:11:5B:CD:4D:02:E7:0A:DB:F7:A3:88:EC:7F:4F:16:DD:92:3B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8394241-4a57-495c-8e3c-240f9966d472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.190.0/24 Signature Algorithm: sha256WithRSAEncryption 60:2d:4d:c5:5a:f5:b0:25:38:50:54:d0:a5:c5:1f:01:7f:10: 74:d8:fd:f1:f8:b2:47:bc:bc:a8:91:3b:5f:cb:44:7e:58:ee: c1:42:f0:5d:f0:47:92:e7:10:de:3c:55:9c:6c:d5:e5:3a:93: 49:2b:a5:02:82:b1:9a:d3:52:9d:a7:4e:7f:b7:58:af:e7:9b: 28:83:5f:44:e7:e8:ad:8d:18:4f:d1:ec:23:dc:4e:5e:d0:31: 86:30:53:a2:04:0e:9f:09:d7:94:c4:61:e9:65:ce:06:0e:e5: 95:7e:dc:27:b6:7c:ac:9b:9d:15:76:86:14:58:7e:14:84:ba: 42:13:58:ab:f2:34:31:bc:e3:ff:27:e8:61:38:8e:df:50:a1: 87:0c:55:f1:d8:65:9f:46:30:0f:a9:b4:27:44:cc:b6:f8:15: 35:64:90:70:6f:32:b8:a0:ad:0b:36:f0:30:86:32:48:0c:5a: 40:ff:88:35:05:04:18:ca:c3:85:9d:35:c8:51:5c:13:14:aa: 11:96:ca:c0:ee:63:a3:8a:54:ec:df:c5:ea:49:3c:0c:2a:84: f1:88:b3:73:80:68:fa:e1:61:a4:91:eb:50:33:0a:41:9d:2c: 0a:0f:7a:6c:cb:6a:d6:b6:2b:7a:b9:11:27:cb:02:da:57:e2: 9b:f5:17:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKaZtKsti5lFi4nLsIPbyU2Lw/C4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDIxMTE4WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTA0MjllYzc2N2RkYjFlYjA5MmRmODcyYzE4ZDVkOTMy YWI4NjQyOGNmOGExZWExOWZjNTExYWZkMzVjMDRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeiBgSq0v2kokw8u882k11HP69hzXcpnenR2yPt7apjSv0 lEIy9Z9o9gxdFiI9F/E22bxcHy+8e16vv2eRiKCQ4IpzABQ45PBG/K/lj0Yuw9nP b/tF9wbZoPcQ7iYNbJb9p/r2VdkIW/PjtkgPeHgDzq+NpsbUXVvSArVTvIB/LGPQ ONUuYRFmkbENOabZb7ariwKdRVrH2NFEyX6axSYmTHZ+TecAUlp5bMpfNsh6Lsu3 XT0uqQvHAOl8Y1p38bvD2uu6h2KnFRR41qPBeJLVmsMez9GLAt7PwEDfFiq590Et IoycnhwteFLdMaAr2V17b9YBisDj6E3hHZDx/WQxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUux8RW81NAucK2/ejiOx/TxbdkjswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M4Mzk0MjQxLTRhNTctNDk1Yy04ZTNjLTI0MGY5OTY2ZDQ3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fL4wDQYJKoZIhvcNAQELBQADggEBAGAtTcVa9bAlOFBU0KXFHwF/EHTY /fH4ske8vKiRO1/LRH5Y7sFC8F3wR5LnEN48VZxs1eU6k0krpQKCsZrTUp2nTn+3 WK/nmyiDX0Tn6K2NGE/R7CPcTl7QMYYwU6IEDp8J15TEYellzgYO5ZV+3Ce2fKyb nRV2hhRYfhSEukITWKvyNDG84/8n6GE4jt9QoYcMVfHYZZ9GMA+ptCdEzLb4FTVk kHBvMrigrQs28DCGMkgMWkD/iDUFBBjKw4WdNchRXBMUqhGWysDuY6OKVOzfxepJ PAwqhPGIs3OAaPrhYaSR61AzCkGdLAoPemzLata2K3q5ESfLAtpX4pv1F4Q= -----END CERTIFICATE-----Generated at Sun Mar 1 21:50:23 2026 by rpki-client