$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/511e6291-de99-4a88-bab1-6d51bbe7a84a.roa File: 511e6291-de99-4a88-bab1-6d51bbe7a84a.roa (raw, json) Hash identifier: LVetHkndL0ug6rNMQPHQfgsvGu4Eb6KZuNajG+tEjHk= Subject key identifier: 8F:20:36:AA:22:76:7A:19:85:28:13:48:DE:F6:45:45:EA:CA:C2:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A1D3D4B692ABE62623BA49788953A4A9B55DD61 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/511e6291-de99-4a88-bab1-6d51bbe7a84a.roa Signing time: Mon 23 Feb 2026 00:10:31 +0000 ROA not before: Mon 23 Feb 2026 00:10:31 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.158.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1d:3d:4b:69:2a:be:62:62:3b:a4:97:88:95:3a:4a:9b:55:dd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:10:31 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=00edb2a16af7025087d1117db37cdc8fd4d5d2deae123edb32bb57ae03a228d9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:d5:a0:dd:ac:e2:4c:e7:b2:bb:33:ab:9d: f2:06:e1:e7:4a:0d:b9:6c:d5:7d:27:dc:e1:62:ce: 69:cc:96:4f:d5:ec:59:ba:f5:cd:b1:9f:22:82:b1: 1b:ba:07:f0:d4:74:72:9c:e4:ee:03:ae:6b:ed:dd: 73:02:98:37:8a:79:9c:ed:33:79:97:cd:ac:f5:58: d6:4d:91:d6:00:0d:b2:9b:a7:6c:80:8a:00:6c:ce: 7a:90:a9:60:e3:87:17:33:e2:97:0e:c4:39:07:fb: 33:12:94:d9:b3:d3:45:fb:2f:45:62:c8:03:46:05: a0:5f:e3:f7:5c:d8:8b:d2:a6:3b:9e:27:e3:fa:53: 2f:69:3b:df:ae:a9:99:bf:18:47:1c:88:71:07:f9: 3a:11:f8:4d:e6:68:3a:a8:6e:74:4c:f9:18:e2:db: a0:90:e6:9c:36:4b:88:24:28:32:05:b0:6b:7d:50: 4a:2d:43:f1:33:db:82:db:cd:9a:91:e6:10:3e:37: 43:d8:db:ff:96:fe:7a:98:f3:7f:ba:48:b6:60:c6: 0e:f1:2e:44:0c:46:e8:f5:1c:04:57:bc:34:c7:9f: 6f:6c:eb:a9:12:fb:15:9b:1b:1f:f3:f2:27:e3:7e: 68:d9:44:0f:05:49:4a:77:16:cb:49:dc:bc:b5:49: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:36:AA:22:76:7A:19:85:28:13:48:DE:F6:45:45:EA:CA:C2:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/511e6291-de99-4a88-bab1-6d51bbe7a84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.158.128.0/18 Signature Algorithm: sha256WithRSAEncryption 10:d4:79:e4:3a:79:ee:d5:6b:4c:cc:7e:ea:49:5b:5d:67:17: 87:d9:72:74:99:81:a5:d0:76:c3:c8:30:5d:de:d6:b6:ba:6c: 18:8c:c1:3c:5c:33:ae:65:f1:3d:bf:17:a5:35:68:c4:8f:a2: 48:a1:1d:d6:2f:59:22:99:65:51:3a:ed:77:58:f7:c1:68:44: 3e:d8:c5:37:9b:c7:06:83:92:5d:1f:a0:14:de:93:f0:33:f5: 2b:4b:c2:60:c0:99:85:17:88:b0:5f:78:ca:b5:e4:ed:0d:27: f2:84:71:6b:64:61:27:37:b6:8b:dd:e5:91:7d:a6:02:4d:79: f2:d3:cc:62:fa:e2:0e:1e:d5:53:4b:54:92:8d:ff:e0:47:c3: 05:18:3c:89:c3:ba:64:72:81:d6:db:ea:4b:ad:49:ca:e4:63: 57:c2:f1:d9:f1:2f:ed:3b:02:6b:a0:32:76:f2:82:9b:9c:9a: d5:ae:cb:4d:3d:b5:9a:75:21:94:8d:81:28:cc:df:f3:da:a8: 94:f0:d4:fd:ff:51:8a:6e:bf:8e:d8:fd:ca:14:03:3f:41:d4: f0:18:09:e3:89:88:c1:da:c4:a2:5b:0d:71:cf:68:c4:3a:6a: 78:9d:33:65:f6:d3:ac:c3:a0:d6:96:e7:84:ff:8d:1a:e7:6c: d1:2d:3c:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSh09S2kqvmJiO6SXiJU6SptV3WEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAxMDMxWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGVkYjJhMTZhZjcwMjUwODdkMTExN2RiMzdjZGM4ZmQ0 ZDVkMmRlYWUxMjNlZGIzMmJiNTdhZTAzYTIyOGQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDptWg3aziTOeyuzOrnfIG4edKDbls1X0n3OFizmnMlk/V 7Fm69c2xnyKCsRu6B/DUdHKc5O4Drmvt3XMCmDeKeZztM3mXzaz1WNZNkdYADbKb p2yAigBsznqQqWDjhxcz4pcOxDkH+zMSlNmz00X7L0ViyANGBaBf4/dc2IvSpjue J+P6Uy9pO9+uqZm/GEcciHEH+ToR+E3maDqobnRM+Rji26CQ5pw2S4gkKDIFsGt9 UEotQ/Ez24LbzZqR5hA+N0PY2/+W/nqY83+6SLZgxg7xLkQMRuj1HARXvDTHn29s 66kS+xWbGx/z8ifjfmjZRA8FSUp3FstJ3Ly1SXEPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjyA2qiJ2ehmFKBNI3vZFRerKwi8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxMWU2MjkxLWRlOTktNGE4OC1iYWIxLTZkNTFiYmU3YTg0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2noAwDQYJKoZIhvcNAQELBQADggEBABDUeeQ6ee7Va0zMfupJW11nF4fZ cnSZgaXQdsPIMF3e1ra6bBiMwTxcM65l8T2/F6U1aMSPokihHdYvWSKZZVE67XdY 98FoRD7YxTebxwaDkl0foBTek/Az9StLwmDAmYUXiLBfeMq15O0NJ/KEcWtkYSc3 tovd5ZF9pgJNefLTzGL64g4e1VNLVJKN/+BHwwUYPInDumRygdbb6kutScrkY1fC 8dnxL+07AmugMnbygpucmtWuy009tZp1IZSNgSjM3/PaqJTw1P3/UYpuv47Y/coU Az9B1PAYCeOJiMHaxKJbDXHPaMQ6anidM2X206zDoNaW54T/jRrnbNEtPPM= -----END CERTIFICATE-----Generated at Thu Feb 26 02:06:23 2026 by rpki-client