$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdecd168-aed1-49b8-a059-1ce909151bae.roa File: cdecd168-aed1-49b8-a059-1ce909151bae.roa (raw, json) Hash identifier: bSXiZpgyqNke7vA+otBcRf/JKN9rlhr1r6dMbDPy1RY= Subject key identifier: 67:94:EA:52:C6:50:0A:DD:14:0D:1B:18:45:C1:B9:50:A6:EC:73:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 658AFBCB7FD7DEFE92931E680EF327C1E4193E9C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdecd168-aed1-49b8-a059-1ce909151bae.roa Signing time: Mon 23 Feb 2026 01:41:07 +0000 ROA not before: Mon 23 Feb 2026 01:41:07 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.147.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8a:fb:cb:7f:d7:de:fe:92:93:1e:68:0e:f3:27:c1:e4:19:3e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:41:07 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=6c2f99cd5cda695b43a7e66a96a0acf9aaa338e794c40fa17678ab1f4d82817d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:75:8f:a4:6e:3b:bf:5b:90:44:1c:e7:1f: ef:5d:91:f6:25:39:90:a1:52:59:a0:77:41:23:ca: fd:3d:bb:16:20:9b:29:6f:73:87:41:ed:62:3e:18: b8:c6:7d:33:3a:2f:22:18:6a:71:e3:58:41:7c:ec: db:70:e6:82:ac:92:05:52:88:9e:79:6b:be:d7:55: 4d:69:6d:fe:70:bb:21:be:de:31:80:74:d6:a8:de: 48:7d:e5:8f:5f:d9:53:66:21:7a:79:be:92:0e:cb: 91:87:1c:a3:1e:f5:22:57:26:60:fd:80:11:35:48: d1:e1:77:5f:d7:08:38:32:53:8e:26:c2:a8:a5:8c: a7:ee:74:cf:80:7f:30:2a:a5:1d:ac:c0:86:cf:84: 69:e4:1d:d2:b0:78:a5:62:7c:03:20:52:5b:b3:a3: 46:ec:c6:5c:f3:6d:4a:5e:c8:7e:1d:ba:48:ed:16: 99:31:18:9f:cc:29:8f:e3:0a:3b:0f:9b:41:d6:9d: 96:96:2c:76:1f:09:dd:47:e7:6b:5d:6f:d5:87:3a: 58:0d:a0:a6:e9:e2:b1:2f:b9:cf:02:d3:1b:5d:c6: c5:9e:b1:4e:db:6e:ff:b3:ac:4e:01:95:62:71:77: 54:4b:6d:bc:d5:29:a6:54:72:6f:13:63:42:af:01: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:94:EA:52:C6:50:0A:DD:14:0D:1B:18:45:C1:B9:50:A6:EC:73:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdecd168-aed1-49b8-a059-1ce909151bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.147.128.0/18 Signature Algorithm: sha256WithRSAEncryption a1:27:80:79:eb:9b:e2:ea:b4:18:c1:03:c5:fe:9e:1f:7b:3f: 1a:b0:97:c6:f3:87:91:28:9e:72:6d:51:44:28:52:9a:9c:89: 8e:c2:b9:45:9f:3e:1b:cd:7c:98:9a:ed:8e:48:34:c8:8f:6f: 5e:4c:2c:b3:8b:d3:25:bc:b6:90:91:b8:5f:e6:76:23:f1:79: 42:e2:d2:31:57:8e:53:09:ab:f6:6c:48:88:e9:ed:ba:44:e4: 0f:6a:c5:24:7c:5a:13:7a:ed:af:37:6f:37:e4:92:fb:fa:e8: 47:2d:2c:24:71:0f:21:46:f1:98:5e:f9:2e:ca:04:18:1e:f1: 7c:a2:96:f0:dd:85:5b:b8:db:5f:eb:9f:93:d5:2e:16:04:a9: 87:82:76:f4:63:9d:fa:f6:41:aa:c5:ec:7d:fb:ed:9b:f0:89: 78:83:bb:f0:57:f2:05:77:6e:da:18:02:0e:fa:19:6e:f7:b7: e0:5c:a4:ce:58:f0:a3:59:11:7d:91:a9:c4:1b:29:26:22:2e: 5d:3e:51:7b:69:cd:1b:4a:95:5c:db:72:93:7d:dc:a9:27:7c: 0f:ce:99:aa:d7:6c:84:d3:9b:87:48:8b:3e:aa:a2:fc:4a:e7: 6c:d0:cb:75:82:6b:de:15:ca:61:45:33:5e:fd:27:e8:c3:d5: 54:49:45:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZYr7y3/X3v6Skx5oDvMnweQZPpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDE0MTA3WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzJmOTljZDVjZGE2OTViNDNhN2U2NmE5NmEwYWNmOWFh YTMzOGU3OTRjNDBmYTE3Njc4YWIxZjRkODI4MTdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYA3WPpG47v1uQRBznH+9dkfYlOZChUlmgd0Ejyv09uxYg mylvc4dB7WI+GLjGfTM6LyIYanHjWEF87Ntw5oKskgVSiJ55a77XVU1pbf5wuyG+ 3jGAdNao3kh95Y9f2VNmIXp5vpIOy5GHHKMe9SJXJmD9gBE1SNHhd1/XCDgyU44m wqiljKfudM+AfzAqpR2swIbPhGnkHdKweKVifAMgUluzo0bsxlzzbUpeyH4dukjt FpkxGJ/MKY/jCjsPm0HWnZaWLHYfCd1H52tdb9WHOlgNoKbp4rEvuc8C0xtdxsWe sU7bbv+zrE4BlWJxd1RLbbzVKaZUcm8TY0KvAeoJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ5TqUsZQCt0UDRsYRcG5UKbsc0AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkZWNkMTY4LWFlZDEtNDliOC1hMDU5LTFjZTkwOTE1MWJhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2k4AwDQYJKoZIhvcNAQELBQADggEBAKEngHnrm+LqtBjBA8X+nh97Pxqw l8bzh5EonnJtUUQoUpqciY7CuUWfPhvNfJia7Y5INMiPb15MLLOL0yW8tpCRuF/m diPxeULi0jFXjlMJq/ZsSIjp7bpE5A9qxSR8WhN67a83bzfkkvv66EctLCRxDyFG 8Zhe+S7KBBge8XyilvDdhVu421/rn5PVLhYEqYeCdvRjnfr2QarF7H377ZvwiXiD u/BX8gV3btoYAg76GW73t+BcpM5Y8KNZEX2RqcQbKSYiLl0+UXtpzRtKlVzbcpN9 3KknfA/OmarXbITTm4dIiz6qovxK52zQy3WCa94VymFFM179J+jD1VRJRV0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:46:00 2026 by rpki-client