$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e59d7bcd-e983-4447-a974-8f3cefa63e37.roa File: e59d7bcd-e983-4447-a974-8f3cefa63e37.roa (raw, json) Hash identifier: KnLZG0s68I35rZ3k0sG66cmMSUGApBhkYe6tfmdxHts= Subject key identifier: 9A:4C:5C:3E:23:10:85:72:3C:6E:1C:BB:4E:8E:7E:89:2E:EC:93:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BD00016346B0525A2B12F50F827E4D9DF7664E6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e59d7bcd-e983-4447-a974-8f3cefa63e37.roa Signing time: Tue 17 Feb 2026 01:50:55 +0000 ROA not before: Tue 17 Feb 2026 01:50:55 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 34.248.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d0:00:16:34:6b:05:25:a2:b1:2f:50:f8:27:e4:d9:df:76:64:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:50:55 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=525b165a5473c073365c319f4de42f3191443d596579878ce740dc33f09e2240, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:1e:93:11:f5:41:89:5c:bb:39:61:bb:bc: 7e:00:f4:df:58:02:dd:8e:1c:38:ab:79:76:5a:c4: 2c:8a:22:33:d3:da:70:e1:77:89:f9:68:98:6e:32: 45:3a:6b:b0:61:89:c1:e7:a6:43:74:f0:f7:e1:da: 61:bd:43:af:1c:28:46:4d:ce:30:1c:77:7f:dd:2b: 62:b4:78:3b:b1:bc:18:42:1f:18:f4:d1:d5:26:c6: 3c:7e:c0:63:33:5f:a4:8c:e4:83:67:67:fe:42:9b: 8a:4c:d7:5b:b0:31:8f:30:4a:ed:76:3d:8f:b8:27: 95:81:53:a9:20:ad:6c:e9:cc:4c:28:0f:36:34:dc: dc:67:e3:f0:e3:10:4a:7b:a5:0d:3b:da:58:7a:ec: 67:18:7d:c1:4c:d6:69:33:98:5e:84:c6:88:3f:b3: 55:3c:b3:c1:90:0e:ff:b8:ec:88:e0:9d:07:48:71: f9:2c:55:dc:9b:3e:54:0d:7f:8f:47:85:89:e3:ce: ca:89:5e:41:b6:14:98:52:00:6e:44:97:09:ba:29: 6a:e8:09:14:b2:ae:72:a1:15:be:2e:47:48:1f:f7: 17:fb:61:23:a7:d9:db:25:0c:17:ac:df:f8:ec:ed: 64:8b:4b:e3:a6:cc:53:cc:b7:37:64:c6:23:2c:c5: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4C:5C:3E:23:10:85:72:3C:6E:1C:BB:4E:8E:7E:89:2E:EC:93:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e59d7bcd-e983-4447-a974-8f3cefa63e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.248.64.0/18 Signature Algorithm: sha256WithRSAEncryption ae:8a:cb:2c:14:cc:f1:b7:89:ba:53:1b:51:32:d5:b0:e4:42: 31:e4:b5:25:f3:b4:ae:10:3d:f8:ef:8e:68:2a:8e:04:cc:01: 01:5c:b2:0f:7e:0f:c7:46:e9:63:49:7b:b7:69:df:c6:88:b7: 43:7a:17:24:cb:ca:1d:90:a0:94:a1:ec:1b:ca:c1:9c:fb:f6: 40:fe:4e:8d:72:ad:a5:5d:b9:31:a1:2f:a8:e6:3c:5e:6f:7a: 1a:dc:1d:fa:f5:fc:1a:84:3a:5a:38:1a:9c:d5:61:f1:72:fa: 0c:fa:14:79:24:ef:ed:18:bc:8d:1f:e3:ec:24:67:0d:52:76: c8:72:2e:d6:23:3c:d1:36:e4:8f:6c:f1:ea:bc:38:46:5f:83: 0b:ed:f4:3a:e4:90:2a:cb:e0:3d:b4:86:7b:d1:e0:44:39:63: 7d:5f:af:33:33:a1:40:f1:22:2a:65:d8:de:b6:38:4c:c7:74: be:e9:bd:5b:f5:80:41:ea:e6:10:a6:f3:4b:41:0d:e5:87:08: 61:60:1e:73:43:fb:f5:a7:43:92:22:ef:8a:8a:40:c4:2f:8d: 80:ab:0a:4e:32:4c:cb:b7:3c:af:fb:96:31:4d:b0:04:5f:a5: b0:23:40:c0:14:2d:fa:3a:23:48:26:55:33:35:00:57:22:84: 91:eb:05:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS9AAFjRrBSWisS9Q+Cfk2d92ZOYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDE1MDU1WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjViMTY1YTU0NzNjMDczMzY1YzMxOWY0ZGU0MmYzMTkx NDQzZDU5NjU3OTg3OGNlNzQwZGMzM2YwOWUyMjQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK5B6TEfVBiVy7OWG7vH4A9N9YAt2OHDireXZaxCyKIjPT 2nDhd4n5aJhuMkU6a7BhicHnpkN08Pfh2mG9Q68cKEZNzjAcd3/dK2K0eDuxvBhC Hxj00dUmxjx+wGMzX6SM5INnZ/5Cm4pM11uwMY8wSu12PY+4J5WBU6kgrWzpzEwo DzY03Nxn4/DjEEp7pQ072lh67GcYfcFM1mkzmF6Exog/s1U8s8GQDv+47IjgnQdI cfksVdybPlQNf49HhYnjzsqJXkG2FJhSAG5Elwm6KWroCRSyrnKhFb4uR0gf9xf7 YSOn2dslDBes3/js7WSLS+OmzFPMtzdkxiMsxeP3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmkxcPiMQhXI8bhy7To5+iS7sk1kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U1OWQ3YmNkLWU5ODMtNDQ0Ny1hOTc0LThmM2NlZmE2M2UzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi+EAwDQYJKoZIhvcNAQELBQADggEBAK6KyywUzPG3ibpTG1Ey1bDkQjHk tSXztK4QPfjvjmgqjgTMAQFcsg9+D8dG6WNJe7dp38aIt0N6FyTLyh2QoJSh7BvK wZz79kD+To1yraVduTGhL6jmPF5vehrcHfr1/BqEOlo4GpzVYfFy+gz6FHkk7+0Y vI0f4+wkZw1SdshyLtYjPNE25I9s8eq8OEZfgwvt9DrkkCrL4D20hnvR4EQ5Y31f rzMzoUDxIipl2N62OEzHdL7pvVv1gEHq5hCm80tBDeWHCGFgHnND+/WnQ5Ii74qK QMQvjYCrCk4yTMu3PK/7ljFNsARfpbAjQMAULfo6I0gmVTM1AFcihJHrBfY= -----END CERTIFICATE-----Generated at Sun Mar 1 21:41:19 2026 by rpki-client