$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fddd55ad-e2c5-4929-9efa-4afba85448bc.roa File: fddd55ad-e2c5-4929-9efa-4afba85448bc.roa (raw, json) Hash identifier: VUD3dZvqjTpuhZM6lrH8gI7dzUwsg852Fivx3OgfgdA= Subject key identifier: EE:C1:EA:21:26:30:60:88:0D:94:37:83:28:F1:34:04:05:21:56:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 138A0D7EC717C41DCFACC469B3A42CEE6D37CDF5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fddd55ad-e2c5-4929-9efa-4afba85448bc.roa Signing time: Tue 24 Feb 2026 03:00:48 +0000 ROA not before: Tue 24 Feb 2026 03:00:48 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.235.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8a:0d:7e:c7:17:c4:1d:cf:ac:c4:69:b3:a4:2c:ee:6d:37:cd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:00:48 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=a998aaf716af546254bb2a30a3ddc0c99fd3c0b30bcf2c328fe47c75ee2256d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:2a:cc:67:f5:79:8a:3a:c8:a2:d6:31:7d: d8:7a:ef:d9:88:8b:a7:27:83:82:4e:01:7a:55:49: b8:d6:2b:ad:7b:45:17:14:43:c5:22:64:d0:13:ac: d4:3c:30:65:dc:d7:44:06:4c:6e:73:84:a3:3d:55: 9b:30:78:78:88:e5:93:fb:af:31:56:bb:e4:6f:3c: 31:1c:2e:11:dd:36:a3:e5:de:97:57:82:aa:70:8a: 84:d8:19:be:e1:05:61:08:05:b7:61:fc:4f:af:c2: 2a:58:96:be:b4:eb:bc:ac:3d:ac:53:b0:9a:ef:47: fa:f5:43:ad:fa:03:07:b9:5a:2c:9b:3d:ba:a9:89: ac:b6:35:ce:a0:0a:0a:13:08:60:80:6b:94:9b:b4: dc:a1:63:a4:26:29:23:8d:fe:39:f5:96:02:e0:e9: 2e:ef:8e:1f:1d:31:30:d7:51:0d:63:6c:87:3e:f5: 20:a6:69:a1:05:a7:14:5c:c0:5d:78:e9:7f:f4:7c: df:80:2f:a8:dc:43:62:6a:6c:3b:bd:00:0a:84:6f: 17:bd:4a:58:31:4c:c0:08:2d:33:4e:74:4c:28:9d: e5:c9:be:3c:c6:06:75:91:a3:b4:7d:98:65:ce:f7: cc:88:2a:f8:5b:86:93:77:8f:5a:de:03:6b:21:54: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:EA:21:26:30:60:88:0D:94:37:83:28:F1:34:04:05:21:56:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fddd55ad-e2c5-4929-9efa-4afba85448bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.235.224.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:79:8b:9d:ec:3a:91:ba:25:c4:5c:34:3d:91:d5:fa:58:ce: d5:50:d4:6d:a6:a4:6f:0d:76:04:22:bb:4f:70:42:0e:11:9a: 1c:04:f9:23:b0:81:68:dd:3a:06:7c:67:93:1f:f5:bc:3b:d9: 75:ac:7b:97:a7:24:fd:e1:66:68:cc:c8:3a:49:a7:ab:12:d1: bc:10:34:64:48:93:6a:8a:d7:69:07:19:f1:27:33:42:0f:be: fb:de:d5:1a:af:84:8b:1c:43:a0:31:f3:a2:74:12:4a:80:91: c7:24:f0:4a:91:e6:fd:ea:f4:8e:26:a6:00:3f:06:48:ae:a5: 7d:b9:33:05:68:b6:6d:aa:3c:07:9a:c3:cd:0a:d7:d4:59:8e: aa:b3:39:96:6c:f2:74:7d:16:3d:ff:92:14:ba:30:f8:86:d4: 7f:17:04:6a:7c:1b:85:41:6b:50:b1:94:b2:29:07:cc:85:fa: 12:cd:8c:60:aa:2e:25:00:2e:85:c4:6c:83:c5:da:3a:2d:d6: 60:b3:e8:ec:a4:75:90:0d:47:1f:21:51:23:7e:de:76:e3:0d: 3d:22:10:d8:b9:ee:41:d2:83:d4:22:bf:9c:7e:72:30:5e:f3: 6f:2a:aa:24:c6:e2:9a:bb:06:fb:d5:c5:8c:6b:60:02:ef:ed: 85:b6:bf:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE4oNfscXxB3PrMRps6Qs7m03zfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMwMDQ4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTk4YWFmNzE2YWY1NDYyNTRiYjJhMzBhM2RkYzBjOTlm ZDNjMGIzMGJjZjJjMzI4ZmU0N2M3NWVlMjI1NmQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN/yrMZ/V5ijrIotYxfdh679mIi6cng4JOAXpVSbjWK617 RRcUQ8UiZNATrNQ8MGXc10QGTG5zhKM9VZsweHiI5ZP7rzFWu+RvPDEcLhHdNqPl 3pdXgqpwioTYGb7hBWEIBbdh/E+vwipYlr6067ysPaxTsJrvR/r1Q636Awe5Wiyb Pbqpiay2Nc6gCgoTCGCAa5SbtNyhY6QmKSON/jn1lgLg6S7vjh8dMTDXUQ1jbIc+ 9SCmaaEFpxRcwF146X/0fN+AL6jcQ2JqbDu9AAqEbxe9SlgxTMAILTNOdEwoneXJ vjzGBnWRo7R9mGXO98yIKvhbhpN3j1reA2shVMutAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7sHqISYwYIgNlDeDKPE0BAUhVp4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkZGQ1NWFkLWUyYzUtNDkyOS05ZWZhLTRhZmJhODU0NDhiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM26+AwDQYJKoZIhvcNAQELBQADggEBAGx5i53sOpG6JcRcND2R1fpYztVQ 1G2mpG8NdgQiu09wQg4RmhwE+SOwgWjdOgZ8Z5Mf9bw72XWse5enJP3hZmjMyDpJ p6sS0bwQNGRIk2qK12kHGfEnM0IPvvve1RqvhIscQ6Ax86J0EkqAkcck8EqR5v3q 9I4mpgA/BkiupX25MwVotm2qPAeaw80K19RZjqqzOZZs8nR9Fj3/khS6MPiG1H8X BGp8G4VBa1CxlLIpB8yF+hLNjGCqLiUALoXEbIPF2jot1mCz6OykdZANRx8hUSN+ 3nbjDT0iENi57kHSg9Qiv5x+cjBe828qqiTG4pq7BvvVxYxrYALv7YW2v0A= -----END CERTIFICATE-----Generated at Sun Mar 1 21:41:26 2026 by rpki-client