$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9c68054-f543-4dea-b9e2-438f43aecc49.roa File: e9c68054-f543-4dea-b9e2-438f43aecc49.roa (raw, json) Hash identifier: AwqAouQBuSOlN0SgY3Nb8PinLq6lTicq4vfBYZ5qDe4= Subject key identifier: E7:FF:2A:5F:D2:23:E2:DB:27:6F:49:0C:07:43:B5:0C:63:08:58:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 628040907C9025C40694B27E25B281FF12F5EF8A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9c68054-f543-4dea-b9e2-438f43aecc49.roa Signing time: Tue 24 Feb 2026 02:40:11 +0000 ROA not before: Tue 24 Feb 2026 02:40:11 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.252.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:80:40:90:7c:90:25:c4:06:94:b2:7e:25:b2:81:ff:12:f5:ef:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 02:40:11 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=b2c81d1407ab11ba84efbd9ae2925c3a975a14c6083579c6cb75257c2cd3db4a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:79:e5:ac:4d:d1:57:92:97:00:cf:fb:07: 2c:c2:70:e3:48:c9:fc:32:6a:99:af:29:a6:3b:24: 8e:25:38:aa:78:88:6f:07:b8:43:56:09:f3:e5:51: 94:0b:b3:a4:33:c8:fd:81:cb:00:3e:8d:ca:63:44: d4:48:ec:cf:d4:64:d8:38:93:39:37:02:35:e5:6a: 27:3d:2d:41:5a:9a:de:44:18:50:ad:ce:ba:00:a9: 69:70:d3:07:94:ed:56:04:16:a2:a3:f8:50:dc:13: c8:4c:a5:01:ba:03:7f:1c:a8:b5:05:7c:7a:1e:e3: d8:ba:ae:b0:d2:59:7d:35:eb:81:76:45:d2:8c:12: 99:cf:c8:0c:82:84:20:c4:3a:df:c9:00:13:3e:f4: 62:eb:c0:92:18:88:b0:30:70:be:ba:d0:a9:7b:fd: 39:cf:c7:7b:7e:df:df:4b:cf:46:a5:df:2c:3e:e9: f4:77:44:a5:a6:41:18:d0:6e:c5:2a:7c:ac:84:a4: ba:3a:b8:31:ff:41:b0:22:6d:3a:e9:0f:48:aa:ef: 2d:ee:e3:40:98:c4:e8:67:dc:69:8b:a6:ff:ef:8c: 13:ec:84:cb:33:b6:b2:6f:db:18:39:ee:a9:45:97: f2:37:73:91:b8:96:7d:07:a4:64:43:8e:ea:06:69: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FF:2A:5F:D2:23:E2:DB:27:6F:49:0C:07:43:B5:0C:63:08:58:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9c68054-f543-4dea-b9e2-438f43aecc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.252.32.0/19 Signature Algorithm: sha256WithRSAEncryption 70:0d:20:6e:fc:57:8e:d6:cd:e3:0f:04:55:67:e0:4c:f0:cd: 96:9d:b1:55:84:a4:db:d6:a5:85:b3:72:a4:c9:84:91:c4:97: c3:42:40:a2:78:0f:be:4d:92:0a:6b:f8:a1:6d:2b:23:c7:16: 2e:55:27:d5:aa:9f:17:9d:81:65:65:3f:03:78:7b:89:be:1a: c1:18:ef:5c:ad:49:02:c5:49:7e:ca:7f:91:c1:51:18:af:51: bf:76:2e:62:3f:cd:b7:22:fa:d0:8b:a1:90:20:4b:68:a6:2b: 87:15:6f:61:ea:3c:02:4a:1f:45:0f:3f:a4:82:37:ae:96:f5: d0:0b:0c:fa:ab:36:bd:c9:1c:1e:3d:3e:c9:e5:ad:2a:15:eb: 35:d5:1b:ac:0d:7a:2e:91:6f:58:75:d0:de:69:6f:71:35:40: 46:d1:53:74:73:c8:8d:93:dc:66:ea:b7:03:e9:85:73:6c:50: 00:ea:f6:49:d7:09:38:ee:3c:c5:0b:b4:6f:5a:98:1d:9e:01: f2:10:6a:0b:67:ce:df:95:40:eb:5b:26:50:ae:95:3a:40:f8: b4:69:2c:ef:70:88:1d:3e:4a:85:be:ce:4d:bf:72:c5:5a:a6: ec:eb:a5:b2:2a:55:fa:05:5a:36:bf:8a:f1:1e:98:73:ff:9e: c3:71:c6:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYoBAkHyQJcQGlLJ+JbKB/xL174owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDI0MDExWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmM4MWQxNDA3YWIxMWJhODRlZmJkOWFlMjkyNWMzYTk3 NWExNGM2MDgzNTc5YzZjYjc1MjU3YzJjZDNkYjRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWO3nlrE3RV5KXAM/7ByzCcONIyfwyapmvKaY7JI4lOKp4 iG8HuENWCfPlUZQLs6QzyP2BywA+jcpjRNRI7M/UZNg4kzk3AjXlaic9LUFamt5E GFCtzroAqWlw0weU7VYEFqKj+FDcE8hMpQG6A38cqLUFfHoe49i6rrDSWX0164F2 RdKMEpnPyAyChCDEOt/JABM+9GLrwJIYiLAwcL660Kl7/TnPx3t+399Lz0al3yw+ 6fR3RKWmQRjQbsUqfKyEpLo6uDH/QbAibTrpD0iq7y3u40CYxOhn3GmLpv/vjBPs hMsztrJv2xg57qlFl/I3c5G4ln0HpGRDjuoGaaq/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5/8qX9Ij4tsnb0kMB0O1DGMIWGkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5YzY4MDU0LWY1NDMtNGRlYS1iOWUyLTQzOGY0M2FlY2M0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2/CAwDQYJKoZIhvcNAQELBQADggEBAHANIG78V47WzeMPBFVn4EzwzZad sVWEpNvWpYWzcqTJhJHEl8NCQKJ4D75Nkgpr+KFtKyPHFi5VJ9WqnxedgWVlPwN4 e4m+GsEY71ytSQLFSX7Kf5HBURivUb92LmI/zbci+tCLoZAgS2imK4cVb2HqPAJK H0UPP6SCN66W9dALDPqrNr3JHB49PsnlrSoV6zXVG6wNei6Rb1h10N5pb3E1QEbR U3RzyI2T3GbqtwPphXNsUADq9knXCTjuPMULtG9amB2eAfIQagtnzt+VQOtbJlCu lTpA+LRpLO9wiB0+SoW+zk2/csVapuzrpbIqVfoFWja/ivEemHP/nsNxxpE= -----END CERTIFICATE-----Generated at Sun Mar 1 21:50:10 2026 by rpki-client