$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa File: ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa (raw, json) Hash identifier: ObWXnRMoJ3NhtP3u+BfJbbHWWTMR70tK4Qn+IwGFbTs= Subject key identifier: D8:F1:39:9E:4A:84:30:F9:6A:1E:B3:E9:10:07:42:62:BE:2D:37:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5302FBDA7DADA45E48B9FCCE797B4182A4D6B804 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa Signing time: Tue 17 Feb 2026 02:11:21 +0000 ROA not before: Tue 17 Feb 2026 02:11:21 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.170.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:02:fb:da:7d:ad:a4:5e:48:b9:fc:ce:79:7b:41:82:a4:d6:b8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 02:11:21 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=33ccf4b29d3d91f233e3884101b6c514416a60b0e1769aeb97763c5cfbee584e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:d1:6c:f2:5e:35:06:4d:e1:78:89:ca:64: d3:52:a3:7d:68:e2:2a:00:1e:e1:61:21:3c:6f:4d: 32:3a:68:c4:25:34:e5:84:ea:82:64:7f:20:ea:12: 0d:d3:bd:cc:04:1f:4f:60:e3:4c:7f:f1:cd:cb:f3: 37:9a:ed:5c:88:80:ff:06:fc:49:1c:03:a7:59:61: 10:97:09:69:ca:d8:3c:ce:1c:09:89:a7:93:70:9c: 35:29:c6:b5:be:a0:e1:54:c2:bc:5a:7e:a1:3e:ae: f6:07:35:4b:d1:97:b3:a3:0a:f1:be:eb:b5:a6:1d: 6e:52:8d:7b:ca:16:b7:bb:2a:61:36:99:24:af:93: d9:91:52:95:d4:de:33:7f:ba:71:4b:03:96:c1:74: e2:06:ca:04:90:bd:e5:86:3e:b7:df:3f:02:ac:da: 52:89:41:87:5e:04:f4:14:dc:1e:df:f7:60:6e:1a: 19:4d:7b:a6:fc:a1:ab:de:cf:20:cf:62:58:45:59: 3c:7b:51:44:70:be:2c:dc:f8:24:49:9a:9c:89:8f: 16:1c:1f:e1:f6:f8:46:2a:67:23:9e:d4:f0:cc:18: cc:41:da:c7:81:55:99:b2:96:3d:e9:a9:4a:c2:8f: 90:f7:a7:7c:90:dc:42:36:da:31:6c:52:49:a7:5c: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:39:9E:4A:84:30:F9:6A:1E:B3:E9:10:07:42:62:BE:2D:37:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.170.0.0/15 Signature Algorithm: sha256WithRSAEncryption 37:53:88:32:ac:46:a3:50:0e:38:09:0f:7d:0d:94:41:3c:f5: f4:b3:0b:fd:14:01:79:c9:35:59:93:e2:87:e3:08:35:92:e2: e7:60:23:b4:84:a4:84:8b:14:a7:09:ed:5b:99:02:23:11:93: 02:c9:b5:97:78:38:51:33:90:67:2b:2f:df:a9:7e:78:2a:19: d8:73:4d:df:cb:c6:ea:7c:86:92:d7:7c:a0:3b:8a:e9:37:1d: 61:9f:1e:35:17:22:9b:c0:21:75:88:3b:1e:55:4f:98:71:f3: ee:1e:6c:a2:d9:93:3e:4f:ca:9e:3c:c4:da:f8:62:c4:d0:0a: 69:bc:48:82:71:0c:1a:58:55:78:88:d7:0e:75:3c:24:84:7a: b1:7d:73:ed:c1:30:08:d3:1e:d5:cb:f4:cc:62:50:25:71:da: 02:f5:01:b3:82:84:d2:d6:59:2f:28:0e:d7:2e:0a:c9:3f:1d: 35:f2:95:9e:3e:51:22:09:b6:e7:70:32:76:23:80:22:02:e9: c7:cb:f7:02:f0:c9:55:51:51:6b:97:3a:33:91:1c:5e:55:ab: 15:d9:d6:27:43:cd:57:46:4a:d2:d5:68:cb:0e:be:50:0c:f7: c9:54:46:3d:4a:6b:5e:18:e5:34:57:a6:a5:ca:ea:df:1f:47: a0:75:91:db -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUwL72n2tpF5IufzOeXtBgqTWuAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDIxMTIxWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2NjZjRiMjlkM2Q5MWYyMzNlMzg4NDEwMWI2YzUxNDQx NmE2MGIwZTE3NjlhZWI5Nzc2M2M1Y2ZiZWU1ODRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiRtFs8l41Bk3heInKZNNSo31o4ioAHuFhITxvTTI6aMQl NOWE6oJkfyDqEg3TvcwEH09g40x/8c3L8zea7VyIgP8G/EkcA6dZYRCXCWnK2DzO HAmJp5NwnDUpxrW+oOFUwrxafqE+rvYHNUvRl7OjCvG+67WmHW5SjXvKFre7KmE2 mSSvk9mRUpXU3jN/unFLA5bBdOIGygSQveWGPrffPwKs2lKJQYdeBPQU3B7f92Bu GhlNe6b8oavezyDPYlhFWTx7UURwvizc+CRJmpyJjxYcH+H2+EYqZyOe1PDMGMxB 2seBVZmylj3pqUrCj5D3p3yQ3EI22jFsUkmnXOC9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2PE5nkqEMPlqHrPpEAdCYr4tN1YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlNGE0NGU0LTAxODItNGQ1OC1hYjJiLTJhMWQxZDE4YzAyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2qjANBgkqhkiG9w0BAQsFAAOCAQEAN1OIMqxGo1AOOAkPfQ2UQTz19LML /RQBeck1WZPih+MINZLi52AjtISkhIsUpwntW5kCIxGTAsm1l3g4UTOQZysv36l+ eCoZ2HNN38vG6nyGktd8oDuK6TcdYZ8eNRcim8AhdYg7HlVPmHHz7h5sotmTPk/K njzE2vhixNAKabxIgnEMGlhVeIjXDnU8JIR6sX1z7cEwCNMe1cv0zGJQJXHaAvUB s4KE0tZZLygO1y4KyT8dNfKVnj5RIgm253AydiOAIgLpx8v3AvDJVVFRa5c6M5Ec XlWrFdnWJ0PNV0ZK0tVoyw6+UAz3yVRGPUprXhjlNFempcrq3x9HoHWR2w== -----END CERTIFICATE-----Generated at Sun Mar 1 21:42:05 2026 by rpki-client