$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2501765-3375-4a8e-87aa-a58b9537fd86.roa File: a2501765-3375-4a8e-87aa-a58b9537fd86.roa (raw, json) Hash identifier: zBw/Cw9LLWnwbTqkTu+YbYID32l42T6+wXE7ixQEqGM= Subject key identifier: 95:A0:23:60:4E:DD:C1:4F:BD:48:06:0D:6F:FA:26:D1:38:03:2E:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3AAD794A9DFF943E15505E9958790A8BDEB227C8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2501765-3375-4a8e-87aa-a58b9537fd86.roa Signing time: Mon 23 Feb 2026 00:21:12 +0000 ROA not before: Mon 23 Feb 2026 00:21:12 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.144.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ad:79:4a:9d:ff:94:3e:15:50:5e:99:58:79:0a:8b:de:b2:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:21:12 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=15ac6370c685f175b16caa04e3682fd534271a30722079894d15379c526fe873, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:92:9a:dc:78:63:c7:0d:a9:cd:34:7c:c7:30: 48:8c:0e:d2:8b:17:63:2c:b2:e2:52:af:98:4f:cd: 07:91:4f:d6:c8:ea:b8:56:64:24:dd:78:27:39:ac: 7a:ec:e9:f5:58:f2:01:f6:b9:b6:68:42:42:bf:51: 02:f8:8e:b9:6b:e1:52:40:c0:70:98:21:92:69:6a: f7:30:2e:f7:30:13:db:7a:19:03:54:59:a2:3f:87: 66:73:3f:09:77:f4:c7:3f:24:98:96:26:5a:8f:21: 68:77:3c:c6:60:24:9c:14:18:e0:fb:c2:54:37:5e: 52:84:e4:87:71:d3:a2:77:d9:e4:77:73:59:30:94: a8:3c:1f:76:32:bb:e0:2c:58:e4:8a:b0:61:b7:7f: 76:99:cd:f9:52:ff:21:69:d3:57:25:3a:9f:bc:44: 38:b7:f5:22:b8:87:eb:31:81:38:5b:74:d4:8a:01: a7:8e:07:0f:ee:1f:1e:3b:b5:ff:89:da:1f:8b:e2: 33:08:96:01:b8:8b:58:6a:4b:e9:55:3b:11:8c:27: 2b:33:65:34:9c:14:cf:8f:a0:35:ed:2b:c4:7d:d7: b4:af:10:e6:2e:be:58:3d:4b:4f:ad:aa:2e:5b:cb: 7b:11:46:6b:ec:5e:fd:b9:60:7a:1f:51:13:98:7d: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A0:23:60:4E:DD:C1:4F:BD:48:06:0D:6F:FA:26:D1:38:03:2E:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2501765-3375-4a8e-87aa-a58b9537fd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.144.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5e:9a:7d:56:65:46:26:45:fd:ce:7a:98:26:80:3d:3e:65:32: 25:a3:54:bf:cf:71:2d:d9:54:90:de:6a:69:d7:f4:e4:67:b6: 25:d8:a3:25:15:7f:0f:1a:80:df:d9:99:e3:f5:79:09:5e:a9: ac:90:2b:26:7e:2b:7a:50:a8:9b:4a:bf:6f:a7:ad:c6:10:5c: e3:c9:c4:db:9d:f6:b7:ba:bb:dc:c5:c7:ef:1f:03:e0:ed:73: bc:5a:09:a5:fb:3c:4a:65:53:41:69:d6:cc:13:3d:11:1a:31: 4b:9c:66:a3:38:b4:db:cb:b6:e3:72:e7:95:c5:c6:1c:ed:14: bd:c6:18:d2:ce:1a:64:2a:f8:a3:f2:4e:07:a6:5a:7e:f1:75: ec:0a:eb:b6:5d:5a:fc:9c:65:92:b1:2a:ce:94:15:30:1d:93: 45:b8:93:d9:0f:99:ee:c2:d9:2e:6c:66:25:a5:f9:a8:1d:4f: c7:9d:7b:99:16:e4:6f:d2:f7:82:1f:d5:06:e6:74:bb:1b:d9: e2:6d:44:d3:85:13:1d:87:a5:84:c5:e6:39:1c:d8:60:17:1f: 32:cd:83:1a:c4:20:7d:0b:ac:b3:17:d7:62:a6:8d:18:60:42: c7:bd:2d:1f:31:ce:0d:c4:a0:e4:f2:9f:c7:29:74:2b:c5:04: cf:32:4b:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOq15Sp3/lD4VUF6ZWHkKi96yJ8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAyMTEyWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWFjNjM3MGM2ODVmMTc1YjE2Y2FhMDRlMzY4MmZkNTM0 MjcxYTMwNzIyMDc5ODk0ZDE1Mzc5YzUyNmZlODczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRkprceGPHDanNNHzHMEiMDtKLF2MssuJSr5hPzQeRT9bI 6rhWZCTdeCc5rHrs6fVY8gH2ubZoQkK/UQL4jrlr4VJAwHCYIZJpavcwLvcwE9t6 GQNUWaI/h2ZzPwl39Mc/JJiWJlqPIWh3PMZgJJwUGOD7wlQ3XlKE5Idx06J32eR3 c1kwlKg8H3Yyu+AsWOSKsGG3f3aZzflS/yFp01clOp+8RDi39SK4h+sxgThbdNSK AaeOBw/uHx47tf+J2h+L4jMIlgG4i1hqS+lVOxGMJyszZTScFM+PoDXtK8R917Sv EOYuvlg9S0+tqi5by3sRRmvsXv25YHofUROYfdobAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlaAjYE7dwU+9SAYNb/om0TgDLp8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyNTAxNzY1LTMzNzUtNGE4ZS04N2FhLWE1OGI5NTM3ZmQ4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2kAAwDQYJKoZIhvcNAQELBQADggEBAF6afVZlRiZF/c56mCaAPT5lMiWj VL/PcS3ZVJDeamnX9ORntiXYoyUVfw8agN/ZmeP1eQleqayQKyZ+K3pQqJtKv2+n rcYQXOPJxNud9re6u9zFx+8fA+Dtc7xaCaX7PEplU0Fp1swTPREaMUucZqM4tNvL tuNy55XFxhztFL3GGNLOGmQq+KPyTgemWn7xdewK67ZdWvycZZKxKs6UFTAdk0W4 k9kPme7C2S5sZiWl+agdT8ede5kW5G/S94If1QbmdLsb2eJtRNOFEx2HpYTF5jkc 2GAXHzLNgxrEIH0LrLMX12KmjRhgQse9LR8xzg3EoOTyn8cpdCvFBM8yS0c= -----END CERTIFICATE-----Generated at Thu Feb 26 02:05:48 2026 by rpki-client