$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e141abd5-e079-4e6d-9f9d-f49f5859fd6e.roa File: e141abd5-e079-4e6d-9f9d-f49f5859fd6e.roa (raw, json) Hash identifier: UdYVR/p3Q64ksRI8Ky6yLBvAGm2vzxlRaJ9DhVIgUDg= Subject key identifier: 32:EC:29:0E:62:72:52:D7:B5:22:21:40:9D:6A:53:D7:43:36:18:5E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2958E0CFAC4CE74C8158ABD2F695ED484840B041 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e141abd5-e079-4e6d-9f9d-f49f5859fd6e.roa Signing time: Tue 24 Feb 2026 03:20:56 +0000 ROA not before: Tue 24 Feb 2026 03:20:56 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:e0:cf:ac:4c:e7:4c:81:58:ab:d2:f6:95:ed:48:48:40:b0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 24 03:20:56 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=ab02c2f53eed3762d8e46ba01bc75aec99fbc61ab37d7ba32c17de4c9cd5d5bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:67:45:8a:7d:69:0d:7f:0b:90:5d:7b:1f: 87:9f:70:1c:e6:6e:49:69:17:6a:a1:a9:a1:78:68: 59:80:46:e0:64:f9:89:da:ac:de:87:ce:88:ec:cd: c1:d3:c1:e2:f6:ee:72:51:37:3e:e6:31:ed:52:2b: 54:61:32:8a:5c:2c:99:85:69:5d:90:fe:82:7f:0c: 6b:f4:c7:63:56:34:bb:f3:91:d5:de:cd:78:62:f8: 53:a1:6d:c0:56:f3:7e:5f:72:68:aa:8f:f5:c2:79: 46:f6:e7:b8:d8:11:0f:c0:cb:66:93:50:72:42:84: 5e:93:4a:17:f9:1c:50:2e:66:1c:c6:7f:28:b9:f0: 11:cd:64:98:13:b2:95:5d:f9:2b:2c:1c:2a:d7:6b: 11:3d:33:2f:45:a7:ce:59:dd:61:0c:62:9a:e3:d6: a1:f6:3c:8f:97:9b:5a:ae:47:f5:e8:99:15:95:d0: 6e:29:08:c1:d7:8c:55:93:43:b1:8a:80:dc:8f:40: 69:ef:0c:88:9c:a5:1d:61:e5:63:24:36:e7:ae:8a: 4d:61:64:e5:5e:36:28:62:e9:f4:f5:5b:6d:8b:ea: 53:5b:b2:e3:4f:ff:86:35:d3:22:f0:90:4a:53:39: 71:36:81:34:66:4a:10:91:9a:f2:ef:41:73:0f:1d: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EC:29:0E:62:72:52:D7:B5:22:21:40:9D:6A:53:D7:43:36:18:5E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e141abd5-e079-4e6d-9f9d-f49f5859fd6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.208.0/21 Signature Algorithm: sha256WithRSAEncryption 65:45:7e:f8:3d:61:4a:b7:a0:ea:e7:0c:10:d9:6a:92:94:3b: 6a:fd:d4:ed:e3:f1:c4:73:38:5f:8c:30:a2:68:b9:11:ab:de: 38:53:f8:d8:97:9c:43:a2:4d:0f:7e:0a:b6:b1:61:96:0b:ea: 28:d8:66:a2:4c:4d:07:06:84:e8:ea:fe:d3:cd:9f:bb:3d:39: ea:48:85:49:0f:9d:ad:52:4c:fd:ed:93:51:f0:d4:72:16:10: b1:a5:7a:14:90:0b:75:fc:75:a8:03:bf:3c:0b:69:1c:c5:15: 8a:cd:ae:25:d8:40:5e:fb:6a:bf:3c:0c:c5:06:b7:fd:2f:71: f5:72:8c:67:87:e5:ad:06:e3:dc:20:7c:c2:b1:d3:55:3b:fa: b5:83:66:a9:ac:e4:34:47:2d:3a:0c:23:77:34:39:75:cc:73: 25:81:4c:6e:a8:6d:7c:ed:66:d8:58:dd:44:cf:11:92:c4:17: 07:37:a3:30:a5:4d:bc:b6:75:c5:71:b8:11:e5:47:e7:a2:c4: 92:c8:a3:c7:c2:7c:b5:55:51:43:67:90:12:83:8c:d3:87:eb: cf:34:32:69:aa:4f:9f:4a:74:d5:7c:61:92:67:84:15:c9:45: f3:e0:bf:dc:10:15:ff:82:53:d8:68:41:fe:63:4d:1d:0f:d8: 16:4f:08:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVjgz6xM50yBWKvS9pXtSEhAsEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMyMDU2WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjAyYzJmNTNlZWQzNzYyZDhlNDZiYTAxYmM3NWFlYzk5 ZmJjNjFhYjM3ZDdiYTMyYzE3ZGU0YzljZDVkNWJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwUGdFin1pDX8LkF17H4efcBzmbklpF2qhqaF4aFmARuBk +YnarN6HzojszcHTweL27nJRNz7mMe1SK1RhMopcLJmFaV2Q/oJ/DGv0x2NWNLvz kdXezXhi+FOhbcBW835fcmiqj/XCeUb257jYEQ/Ay2aTUHJChF6TShf5HFAuZhzG fyi58BHNZJgTspVd+SssHCrXaxE9My9Fp85Z3WEMYprj1qH2PI+Xm1quR/XomRWV 0G4pCMHXjFWTQ7GKgNyPQGnvDIicpR1h5WMkNueuik1hZOVeNihi6fT1W22L6lNb suNP/4Y10yLwkEpTOXE2gTRmShCRmvLvQXMPHee3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMuwpDmJyUte1IiFAnWpT10M2GF4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxNDFhYmQ1LWUwNzktNGU2ZC05ZjlkLWY0OWY1ODU5ZmQ2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2xdAwDQYJKoZIhvcNAQELBQADggEBAGVFfvg9YUq3oOrnDBDZapKUO2r9 1O3j8cRzOF+MMKJouRGr3jhT+NiXnEOiTQ9+CraxYZYL6ijYZqJMTQcGhOjq/tPN n7s9OepIhUkPna1STP3tk1Hw1HIWELGlehSQC3X8dagDvzwLaRzFFYrNriXYQF77 ar88DMUGt/0vcfVyjGeH5a0G49wgfMKx01U7+rWDZqms5DRHLToMI3c0OXXMcyWB TG6obXztZthY3UTPEZLEFwc3ozClTby2dcVxuBHlR+eixJLIo8fCfLVVUUNnkBKD jNOH6880MmmqT59KdNV8YZJnhBXJRfPgv9wQFf+CU9hoQf5jTR0P2BZPCOE= -----END CERTIFICATE-----Generated at Thu Feb 26 02:09:50 2026 by rpki-client