$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa File: 96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa (raw, json) Hash identifier: 2Lx8UcS6S/qngW9k/WQawqztGSilWJsIOy/tb1wcWNY= Subject key identifier: FD:68:7D:23:6B:9E:AB:2D:55:08:72:86:50:FC:DF:9C:77:42:D1:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1866B9027302C312A14DA052A73EE4274C4FE100 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa Signing time: Tue 24 Feb 2026 03:30:14 +0000 ROA not before: Tue 24 Feb 2026 03:30:14 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.237.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:66:b9:02:73:02:c3:12:a1:4d:a0:52:a7:3e:e4:27:4c:4f:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:30:14 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=5b1c4814b1778cd894ca1f5a5f73e8e6058bd4988a6d1f109ffd9e0db6307f2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:da:0d:5f:8e:d4:24:83:70:e5:d7:c3:b0: 62:6f:24:b4:03:96:2c:6e:c7:61:b3:1e:ed:97:2b: af:f5:6c:fa:36:cb:c3:dd:0c:3c:30:bc:bb:84:b8: 62:a6:c9:03:40:59:4e:05:6f:bd:a8:d7:f1:4e:1d: 2a:dd:c8:71:8f:0d:c9:d8:6b:2d:ab:81:d1:94:1e: 7d:e5:57:e0:0c:22:96:d1:ea:da:5a:e4:e1:6f:c5: 39:6b:21:13:46:9e:e8:46:2f:03:7b:61:7d:41:ed: a0:8b:0e:f8:78:a0:fa:89:5d:44:a5:06:c8:16:17: d5:10:5a:75:b6:89:a9:b4:32:59:91:26:b2:77:ba: 76:3b:6d:7f:c3:98:a3:dd:4d:dc:41:81:8c:86:03: 50:9a:c8:75:31:c5:b5:97:fb:60:da:c3:d0:02:cc: 4e:9d:0d:c5:2b:c9:09:be:5c:04:f2:4e:58:c6:bf: 95:25:63:2b:df:10:bf:d1:ac:c1:45:0e:e9:98:21: 12:c3:ea:91:09:0c:a0:5a:ae:67:fe:91:96:64:49: 09:33:91:32:21:02:3f:3b:20:83:00:c5:dc:56:6d: 72:7d:1f:f0:17:e5:51:cb:eb:f5:f4:a8:65:4e:cf: 79:74:81:3e:77:e7:14:86:1e:d6:be:70:ce:e1:9b: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:68:7D:23:6B:9E:AB:2D:55:08:72:86:50:FC:DF:9C:77:42:D1:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.237.224.0/20 Signature Algorithm: sha256WithRSAEncryption 18:fe:11:34:8d:30:9d:55:09:22:9c:e6:5c:1a:23:b1:8e:c6: ce:13:54:a9:5e:eb:ab:b7:a5:0a:22:02:04:e9:70:1d:bf:ac: cf:f3:08:fd:b8:0b:48:b9:5c:a3:dc:30:2a:8a:89:80:13:0f: c9:5e:5c:2d:38:7c:51:58:4c:64:3f:ba:43:55:ab:4c:98:a9: 04:c5:4c:04:04:20:43:ab:c8:fd:4f:bd:0c:6e:1d:d9:b4:f5: f4:68:d1:b5:b6:4f:a2:c6:ce:f7:c8:57:99:90:c3:b9:67:e9: e6:d0:12:65:27:48:59:dc:d7:02:03:0e:d2:06:0b:9e:00:f6: 49:51:9c:a8:63:54:66:78:65:fb:d8:a5:07:dc:5c:a5:bc:c7: 71:87:26:cc:e2:9a:07:76:90:11:79:04:ed:c5:32:ef:c1:bb: 13:8d:c3:22:60:58:5b:81:95:59:ef:40:2b:54:80:4c:8c:ec: 65:70:07:b8:5d:99:72:85:ed:22:75:93:83:e9:11:16:38:00: 0b:df:25:63:7a:60:0a:48:33:cf:ab:65:75:0b:0a:3d:84:09: f7:ed:62:4d:d1:d2:fd:0e:fd:86:60:7a:ac:7e:51:20:52:3b: b3:d2:36:85:2d:43:21:12:60:fe:ab:16:54:e4:c9:bf:49:94: 3d:25:75:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGGa5AnMCwxKhTaBSpz7kJ0xP4QAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMzMDE0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjFjNDgxNGIxNzc4Y2Q4OTRjYTFmNWE1ZjczZThlNjA1 OGJkNDk4OGE2ZDFmMTA5ZmZkOWUwZGI2MzA3ZjJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCshNoNX47UJINw5dfDsGJvJLQDlixux2GzHu2XK6/1bPo2 y8PdDDwwvLuEuGKmyQNAWU4Fb72o1/FOHSrdyHGPDcnYay2rgdGUHn3lV+AMIpbR 6tpa5OFvxTlrIRNGnuhGLwN7YX1B7aCLDvh4oPqJXUSlBsgWF9UQWnW2iam0MlmR JrJ3unY7bX/DmKPdTdxBgYyGA1CayHUxxbWX+2Daw9ACzE6dDcUryQm+XATyTljG v5UlYyvfEL/RrMFFDumYIRLD6pEJDKBarmf+kZZkSQkzkTIhAj87IIMAxdxWbXJ9 H/AX5VHL6/X0qGVOz3l0gT535xSGHta+cM7hm2U7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/Wh9I2ueqy1VCHKGUPzfnHdC0RAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2YWQzNmQyLTZmOGUtNDZmOS04NTMwLWJiZmEyMzEwOWZhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27eAwDQYJKoZIhvcNAQELBQADggEBABj+ETSNMJ1VCSKc5lwaI7GOxs4T VKle66u3pQoiAgTpcB2/rM/zCP24C0i5XKPcMCqKiYATD8leXC04fFFYTGQ/ukNV q0yYqQTFTAQEIEOryP1PvQxuHdm09fRo0bW2T6LGzvfIV5mQw7ln6ebQEmUnSFnc 1wIDDtIGC54A9klRnKhjVGZ4ZfvYpQfcXKW8x3GHJszimgd2kBF5BO3FMu/BuxON wyJgWFuBlVnvQCtUgEyM7GVwB7hdmXKF7SJ1k4PpERY4AAvfJWN6YApIM8+rZXUL Cj2ECfftYk3R0v0O/YZgeqx+USBSO7PSNoUtQyESYP6rFlTkyb9JlD0ldVE= -----END CERTIFICATE-----Generated at Thu Feb 26 02:05:06 2026 by rpki-client