$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9319dab-7a24-4128-aa46-6a40b5617a5d.roa File: c9319dab-7a24-4128-aa46-6a40b5617a5d.roa (raw, json) Hash identifier: oBZ43kj8gUt10oEHtVBTy1QxgVtPHJw5Gee5crbsTlE= Subject key identifier: B0:39:EB:47:59:4E:93:A9:AB:6D:AA:0C:64:DB:7A:1C:CF:36:3F:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 751FC659DC0D4D2C0E7B12138BC61A5BC865257A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9319dab-7a24-4128-aa46-6a40b5617a5d.roa Signing time: Wed 25 Feb 2026 02:50:03 +0000 ROA not before: Wed 25 Feb 2026 02:50:03 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1f:c6:59:dc:0d:4d:2c:0e:7b:12:13:8b:c6:1a:5b:c8:65:25:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 25 02:50:03 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=2a47a650100ced33a22eea3df56a5bcc72140c4ee5524135125ed772851d93f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:e9:31:f9:3f:13:46:01:2c:c1:01:b2:f2: 84:9c:f1:d3:13:70:9f:35:47:60:0b:c3:18:7d:84: 74:aa:b2:4a:d8:a4:1f:37:86:ed:90:90:99:81:4d: 3b:9f:c0:a5:e6:40:11:22:bd:df:e4:85:8c:32:8c: 08:38:0f:65:50:c2:92:2d:9e:7b:e4:c6:c0:e7:dc: c6:b3:b0:58:05:6a:12:be:23:de:0a:74:98:e0:ef: 6a:0b:11:52:1f:68:96:59:7c:15:74:3b:07:51:55: b5:c4:45:92:4f:52:b8:0c:88:c1:32:05:b0:5a:a8: 43:28:d2:77:40:ad:5b:8f:43:dd:d7:b5:e1:4b:fd: 3a:61:e8:3e:92:22:88:b1:bc:85:37:25:17:b6:66: a7:62:35:74:08:9d:47:db:07:ed:66:5b:3d:e3:b2: e3:9d:87:e8:57:3f:a5:24:74:32:de:e8:42:d1:ff: 5f:e1:7f:be:96:ff:00:8c:2f:e7:b8:d5:18:11:0b: b4:bb:e5:a1:b7:28:14:d6:fd:f1:1f:a1:e7:8a:0a: 4f:aa:fc:5b:e9:a4:a2:13:f8:d5:24:dc:94:1c:14: fc:4c:61:e9:4f:93:59:3e:e4:da:60:26:9c:cb:d8: f1:55:71:33:c2:06:2b:65:db:60:8d:cc:a2:86:d6: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:39:EB:47:59:4E:93:A9:AB:6D:AA:0C:64:DB:7A:1C:CF:36:3F:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9319dab-7a24-4128-aa46-6a40b5617a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.240.0/23 Signature Algorithm: sha256WithRSAEncryption 81:3e:a4:c2:ed:49:46:68:58:93:43:e8:7c:df:62:23:35:a5: 30:e7:71:bb:a8:a0:1e:b1:56:a9:84:ec:4a:34:fc:5b:86:b4: a8:82:88:86:0e:53:e8:b1:d9:cd:39:1e:1b:ca:9c:01:58:a9: b7:16:84:ca:1c:6e:44:fa:f9:74:fd:75:26:ae:0e:f4:53:8e: 7b:90:4e:58:e1:99:e2:35:07:3a:e4:8c:ec:d9:91:68:e1:8e: 90:a5:5b:bb:45:8c:24:fe:1f:70:12:0e:ff:7e:ce:35:45:14: 8c:e2:31:74:6f:24:7c:33:40:27:a1:fd:aa:f1:7a:1b:fc:04: ce:f8:2d:d7:6b:22:b8:92:56:84:43:6e:bb:5c:9e:ed:31:08: 03:4f:69:c0:66:78:c9:a7:f5:2c:a6:e4:80:3d:84:df:15:4d: c9:3d:53:11:d6:ad:07:93:1d:97:d5:c3:eb:5e:cf:b8:ee:08: 63:a4:d4:dc:90:5f:c8:2b:75:1a:7b:ef:38:95:2f:f7:a4:92: 1f:e3:85:89:a4:95:45:af:59:fc:c3:f2:52:79:35:2e:37:f6: 04:6c:4a:72:32:1a:a5:20:2e:87:b8:6b:d8:9e:43:b3:e1:1f: ae:ab:f4:61:84:cb:f2:8b:eb:b6:91:4c:05:99:d6:43:bf:cd: c2:cf:e8:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdR/GWdwNTSwOexITi8YaW8hlJXowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI1MDI1MDAzWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTQ3YTY1MDEwMGNlZDMzYTIyZWVhM2RmNTZhNWJjYzcy MTQwYzRlZTU1MjQxMzUxMjVlZDc3Mjg1MWQ5M2Y4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA+ukx+T8TRgEswQGy8oSc8dMTcJ81R2ALwxh9hHSqskrY pB83hu2QkJmBTTufwKXmQBEivd/khYwyjAg4D2VQwpItnnvkxsDn3MazsFgFahK+ I94KdJjg72oLEVIfaJZZfBV0OwdRVbXERZJPUrgMiMEyBbBaqEMo0ndArVuPQ93X teFL/Tph6D6SIoixvIU3JRe2ZqdiNXQInUfbB+1mWz3jsuOdh+hXP6UkdDLe6ELR /1/hf76W/wCML+e41RgRC7S75aG3KBTW/fEfoeeKCk+q/FvppKIT+NUk3JQcFPxM YelPk1k+5NpgJpzL2PFVcTPCBitl22CNzKKG1j+9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsDnrR1lOk6mrbaoMZNt6HM82P8UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M5MzE5ZGFiLTdhMjQtNDEyOC1hYTQ2LTZhNDBiNTYxN2E1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wPAwDQYJKoZIhvcNAQELBQADggEBAIE+pMLtSUZoWJND6HzfYiM1pTDn cbuooB6xVqmE7Eo0/FuGtKiCiIYOU+ix2c05HhvKnAFYqbcWhMocbkT6+XT9dSau DvRTjnuQTljhmeI1BzrkjOzZkWjhjpClW7tFjCT+H3ASDv9+zjVFFIziMXRvJHwz QCeh/arxehv8BM74LddrIriSVoRDbrtcnu0xCANPacBmeMmn9Sym5IA9hN8VTck9 UxHWrQeTHZfVw+tez7juCGOk1NyQX8grdRp77ziVL/ekkh/jhYmklUWvWfzD8lJ5 NS439gRsSnIyGqUgLoe4a9ieQ7PhH66r9GGEy/KL67aRTAWZ1kO/zcLP6MA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:46:38 2026 by rpki-client