$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa File: ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa (raw, json) Hash identifier: vIQR6OH15ZysDGrV/QbP0ULB9vQrt09aM52wLXOiK/o= Subject key identifier: EC:05:EF:25:22:63:E6:A1:88:51:48:74:70:78:51:CD:DF:11:07:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12519322B5F43BF19B45F0CC21A1DBDDC5EEB4B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa Signing time: Tue 17 Feb 2026 01:31:03 +0000 ROA not before: Tue 17 Feb 2026 01:31:03 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.253.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:51:93:22:b5:f4:3b:f1:9b:45:f0:cc:21:a1:db:dd:c5:ee:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:31:03 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=d1eae8311608ef6cfedd3ebf116bc77ab7bcc22905a1b47d7d5a2abd6f853858, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:19:64:a4:f6:38:eb:fb:f9:84:ae:6f:85: da:5b:0d:d1:c5:02:d9:ca:f6:e7:9d:55:1b:1a:e7: 72:a9:e3:24:6d:a1:53:89:37:58:78:a1:f6:ee:ab: 80:af:dc:15:01:f5:87:84:51:66:08:5c:81:66:e4: a3:8a:1f:36:48:6e:ba:0e:77:da:cd:43:83:55:f9: 4b:3e:a7:ca:a1:46:23:4b:21:b0:2e:49:39:d7:50: c5:99:49:6a:c9:b0:6f:c1:ce:46:c3:e5:54:93:de: a3:71:b4:de:1b:74:20:33:cf:a7:e8:62:ec:d3:7b: aa:a6:b5:a4:f6:fd:3f:10:5b:6d:01:58:c2:7e:aa: 5d:0c:70:7c:63:de:b3:2c:1f:3d:3f:5b:b2:d2:8c: e6:23:cf:97:e3:37:61:79:8e:6b:8c:5b:e7:3f:37: bc:cc:48:cf:7b:6a:c4:23:d2:48:8e:9b:47:9b:8d: 95:a9:46:db:42:c4:47:85:63:80:80:eb:61:f9:96: 00:15:22:20:fd:f5:a4:1c:8c:1d:77:07:8c:d0:24: 0f:53:95:8c:ef:3b:71:db:a9:af:6e:46:2e:1e:6c: 05:62:1a:41:21:1b:ac:a6:16:d2:aa:ee:46:6a:2a: bb:ce:05:07:1e:be:b7:d2:f8:0c:a9:b0:79:44:85: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:05:EF:25:22:63:E6:A1:88:51:48:74:70:78:51:CD:DF:11:07:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.253.212.0/22 Signature Algorithm: sha256WithRSAEncryption 38:dc:8e:76:10:ab:7d:63:26:c5:69:4b:dc:89:72:ba:ad:8b: 8e:1c:90:c1:64:c0:a9:3d:09:7f:06:fd:6a:d9:c4:8d:47:06: 30:52:9e:f9:5d:eb:f1:78:54:41:57:fa:c2:15:49:79:3e:41: f0:78:59:aa:5a:ff:cc:3f:66:75:63:be:9f:80:f3:ef:d7:3b: eb:b2:98:86:12:89:e1:6b:f6:7a:cc:d5:53:73:2d:dd:f4:5f: b5:ad:32:5c:54:9c:67:5e:91:8b:7a:ba:a3:97:83:7c:f0:40: d5:ab:b5:e3:cd:8a:b3:b3:ed:9d:a2:5f:39:54:86:3a:5b:8f: 4e:1e:d9:2d:cd:a7:c4:2a:ec:8c:06:5e:95:69:3b:52:12:ef: a1:72:71:6a:c4:11:b3:f7:8c:8d:5b:0f:56:ea:d9:3f:a2:33: 16:37:72:70:e3:e6:16:33:41:99:4b:51:0a:38:60:b3:7a:25: 43:83:b7:a8:aa:53:11:6f:84:10:68:e2:14:75:29:0f:ad:77: d7:3d:4a:e5:a2:f6:f4:4a:48:de:59:d8:a0:71:12:d7:5f:1d: 92:c9:65:26:46:6f:af:1c:86:69:aa:22:95:40:2f:6a:c4:1b: 7d:35:ce:99:12:22:79:55:73:83:79:8a:a3:fc:86:a2:ff:d3: 33:8e:d5:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUElGTIrX0O/GbRfDMIaHb3cXutLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDEzMTAzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWVhZTgzMTE2MDhlZjZjZmVkZDNlYmYxMTZiYzc3YWI3 YmNjMjI5MDVhMWI0N2Q3ZDVhMmFiZDZmODUzODU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMAhlkpPY46/v5hK5vhdpbDdHFAtnK9uedVRsa53Kp4yRt oVOJN1h4ofbuq4Cv3BUB9YeEUWYIXIFm5KOKHzZIbroOd9rNQ4NV+Us+p8qhRiNL IbAuSTnXUMWZSWrJsG/BzkbD5VST3qNxtN4bdCAzz6foYuzTe6qmtaT2/T8QW20B WMJ+ql0McHxj3rMsHz0/W7LSjOYjz5fjN2F5jmuMW+c/N7zMSM97asQj0kiOm0eb jZWpRttCxEeFY4CA62H5lgAVIiD99aQcjB13B4zQJA9TlYzvO3Hbqa9uRi4ebAVi GkEhG6ymFtKq7kZqKrvOBQcevrfS+AypsHlEhcIPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7AXvJSJj5qGIUUh0cHhRzd8RB5gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmNGQxYTQ1LTUxYzEtNDlhNi04ZmYwLTM5ZTFiNmJlNDBhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAID/dQwDQYJKoZIhvcNAQELBQADggEBADjcjnYQq31jJsVpS9yJcrqti44c kMFkwKk9CX8G/WrZxI1HBjBSnvld6/F4VEFX+sIVSXk+QfB4Wapa/8w/ZnVjvp+A 8+/XO+uymIYSieFr9nrM1VNzLd30X7WtMlxUnGdekYt6uqOXg3zwQNWrtePNirOz 7Z2iXzlUhjpbj04e2S3Np8Qq7IwGXpVpO1IS76FycWrEEbP3jI1bD1bq2T+iMxY3 cnDj5hYzQZlLUQo4YLN6JUODt6iqUxFvhBBo4hR1KQ+td9c9SuWi9vRKSN5Z2KBx EtdfHZLJZSZGb68chmmqIpVAL2rEG301zpkSInlVc4N5iqP8hqL/0zOO1V4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:35:18 2026 by rpki-client