$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebac5fb6-c90b-40d5-8711-a896cc687524.roa File: ebac5fb6-c90b-40d5-8711-a896cc687524.roa (raw, json) Hash identifier: dmurOE8cO3Paq5PkH6fyUb7qxvPQ2CtLPoxgSfChNww= Subject key identifier: 50:7F:EA:B7:A3:26:9C:A3:56:77:61:07:FD:7E:B6:2C:88:92:5C:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7963E94A69EE5C67F1A34D33EA31472F29562EE8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebac5fb6-c90b-40d5-8711-a896cc687524.roa Signing time: Mon 23 Feb 2026 02:00:09 +0000 ROA not before: Mon 23 Feb 2026 02:00:09 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:e9:4a:69:ee:5c:67:f1:a3:4d:33:ea:31:47:2f:29:56:2e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 02:00:09 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=db580fd1097456f56a96a63e1a68a621327a64a301134e0897d980159b777827, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:37:57:b9:e3:2f:51:01:ff:0a:9e:ce:53: 8a:74:5c:9b:eb:a2:9a:ed:1f:09:a6:79:8e:09:99: a1:93:35:38:22:e9:06:f3:e1:06:ef:b2:9d:dd:39: 95:20:0c:26:43:99:bc:3b:20:4c:61:90:b6:fd:95: 40:02:6f:f6:07:58:35:40:73:2b:6d:66:90:f7:8b: 7c:c6:dc:e6:2c:ed:a5:fd:a4:b8:72:fa:19:11:ed: d1:2d:29:e9:f4:5a:07:5f:04:f4:a7:78:e3:9d:d7: be:78:81:78:6a:21:de:20:5d:a0:df:22:ee:8a:46: 49:86:74:6e:60:9a:9c:3c:7a:03:58:b2:09:97:0e: 59:89:a5:d3:f9:33:a2:6a:ac:d4:f4:c8:e9:aa:dd: c9:12:20:fd:c3:9b:dd:8e:4b:86:a3:36:10:b9:e8: ef:61:2e:d8:c4:80:99:d8:e0:36:ae:f1:20:ea:e8: e1:39:e2:5f:20:97:aa:12:1c:ca:fb:b1:90:ae:9e: 57:bd:2f:db:1c:f8:90:34:6f:b4:c0:53:19:5b:a3: d6:ca:b4:73:8a:b3:7a:70:41:32:8d:5c:a0:ae:d2: 6f:8c:ef:9f:00:98:95:0e:a0:fa:4a:60:fc:a1:25: 1e:80:87:53:e1:2d:58:f1:b7:94:74:ee:c2:71:c7: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7F:EA:B7:A3:26:9C:A3:56:77:61:07:FD:7E:B6:2C:88:92:5C:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebac5fb6-c90b-40d5-8711-a896cc687524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.212.0/24 Signature Algorithm: sha256WithRSAEncryption 97:a4:a8:c6:36:2f:69:0c:40:98:04:19:7e:67:74:c3:13:37: ad:0a:e4:a0:78:b1:99:0f:91:92:a8:04:f6:20:39:f7:57:c4: 12:9f:f0:bf:15:c7:bc:f0:ff:61:0b:db:1e:87:33:c4:2c:24: 63:fd:51:ac:c9:b5:a8:21:e5:61:cf:90:d7:fe:c2:87:b3:8c: 95:ee:e8:6d:e1:0b:8c:38:44:fe:d0:ec:3f:64:8b:35:8a:a1: 0c:44:0c:9f:ce:e3:0d:94:53:b0:46:e3:3d:17:b7:69:b9:6a: d9:28:02:43:dd:c8:80:1e:4b:f3:5f:2c:5b:d2:59:c1:ba:66: 5c:c3:62:69:eb:f6:1e:a2:77:d8:c3:06:99:46:60:eb:bc:ea: 55:e0:56:8a:ad:cd:c7:0c:e6:1b:7a:40:5b:e7:05:88:7b:1d: 8d:74:ab:d1:73:a4:a1:68:21:e4:67:65:71:8c:57:b1:7e:29: 1b:c1:b3:5c:c5:6d:05:a0:0d:85:4c:9f:d7:09:f3:0d:dc:7e: 95:34:18:12:f9:80:2b:bf:20:58:11:bc:03:ba:8b:00:00:b3: 1b:ff:b8:1b:ce:0c:1d:3f:df:d1:d1:b5:10:e2:a6:a7:14:8f: ef:4f:f4:a8:6f:28:a5:65:40:e4:57:61:03:61:eb:ec:49:e1: 00:22:41:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeWPpSmnuXGfxo00z6jFHLylWLugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDIwMDA5WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjU4MGZkMTA5NzQ1NmY1NmE5NmE2M2UxYTY4YTYyMTMy N2E2NGEzMDExMzRlMDg5N2Q5ODAxNTliNzc3ODI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAuTdXueMvUQH/Cp7OU4p0XJvroprtHwmmeY4JmaGTNTgi 6Qbz4Qbvsp3dOZUgDCZDmbw7IExhkLb9lUACb/YHWDVAcyttZpD3i3zG3OYs7aX9 pLhy+hkR7dEtKen0WgdfBPSneOOd1754gXhqId4gXaDfIu6KRkmGdG5gmpw8egNY sgmXDlmJpdP5M6JqrNT0yOmq3ckSIP3Dm92OS4ajNhC56O9hLtjEgJnY4Dau8SDq 6OE54l8gl6oSHMr7sZCunle9L9sc+JA0b7TAUxlbo9bKtHOKs3pwQTKNXKCu0m+M 758AmJUOoPpKYPyhJR6Ah1PhLVjxt5R07sJxxwObAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUH/qt6MmnKNWd2EH/X62LIiSXMgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViYWM1ZmI2LWM5MGItNDBkNS04NzExLWE4OTZjYzY4NzUyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRNQwDQYJKoZIhvcNAQELBQADggEBAJekqMY2L2kMQJgEGX5ndMMTN60K 5KB4sZkPkZKoBPYgOfdXxBKf8L8Vx7zw/2EL2x6HM8QsJGP9UazJtagh5WHPkNf+ woezjJXu6G3hC4w4RP7Q7D9kizWKoQxEDJ/O4w2UU7BG4z0Xt2m5atkoAkPdyIAe S/NfLFvSWcG6ZlzDYmnr9h6id9jDBplGYOu86lXgVoqtzccM5ht6QFvnBYh7HY10 q9FzpKFoIeRnZXGMV7F+KRvBs1zFbQWgDYVMn9cJ8w3cfpU0GBL5gCu/IFgRvAO6 iwAAsxv/uBvODB0/39HRtRDipqcUj+9P9KhvKKVlQORXYQNh6+xJ4QAiQZs= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:13 2026 by rpki-client