$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa File: f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa (raw, json) Hash identifier: ceL4HQMAsRIhaog3Sqt+fdU33bv0cKyY35731nQ6C6I= Subject key identifier: 60:0B:03:B0:1A:78:34:08:21:FC:59:8E:11:86:1E:D6:8E:39:E6:8E Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 63FD1BD6C58F767E900189165F8ECF61E8D72EA0 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa Signing time: Sat 28 Feb 2026 00:50:43 +0000 ROA not before: Sat 28 Feb 2026 00:50:43 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fd:1b:d6:c5:8f:76:7e:90:01:89:16:5f:8e:cf:61:e8:d7:2e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Feb 28 00:50:43 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b874147687352bb224732115ea3caf55b3561d0a2fcc2646e17edbab36e73137, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:75:7a:d4:b8:09:61:72:3f:8a:ca:8e:c1: aa:bb:2f:97:69:d1:12:fa:b0:c3:85:bd:c1:1c:54: fd:74:96:3f:ef:d0:79:0b:eb:3b:74:dc:7e:e1:53: d0:39:ba:c0:40:a6:2b:f0:b9:07:dd:2d:af:8e:27: 2f:7f:34:59:b6:cb:a9:13:2c:c1:7a:94:a4:d3:94: 85:7b:75:7e:55:a8:3a:54:52:da:96:f5:9a:04:20: d5:d0:ed:41:ad:b9:62:f6:49:d6:2e:70:69:ac:61: 00:76:a7:06:92:65:85:64:1b:00:37:74:0b:60:fe: ea:40:95:bc:b4:29:f6:59:fe:4a:36:ce:39:c9:63: 79:22:ce:b4:8b:e3:bd:ae:bd:10:a3:bf:f6:bf:f8: 56:52:35:8e:d0:dd:27:ba:8f:2d:b5:46:24:76:fb: 1b:be:b6:f9:bc:f5:70:a2:98:b8:97:5d:b3:b1:24: 3f:b0:d2:a5:45:9a:5c:a2:25:f8:77:2f:5a:d4:4a: 49:53:94:33:3e:51:b6:4d:7f:ec:5c:97:07:a3:21: d6:8c:a0:01:da:6c:33:79:81:a8:64:b0:4e:a1:4a: b6:59:2e:8b:d3:07:7e:bc:4f:9e:e7:47:2d:9f:b3: 92:a6:2a:43:9c:e4:d1:21:f6:42:46:e7:09:dc:8e: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0B:03:B0:1A:78:34:08:21:FC:59:8E:11:86:1E:D6:8E:39:E6:8E X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:57:c6:ba:73:21:0d:3a:43:d3:e7:ce:fc:b4:09:60:1c:95: 2f:43:a9:3d:c7:2c:e3:a4:74:ce:87:c4:03:c6:a5:2a:11:ce: 20:af:4f:36:b0:7d:b9:b7:c2:ec:3b:0a:0f:04:7a:9a:58:fe: 5e:81:4a:38:36:5e:86:a7:17:8d:16:1c:a1:2f:f1:9b:8a:23: 37:22:c7:dc:3a:4b:f9:69:a5:f1:1a:7b:0e:8e:fb:2f:cb:56: 29:8b:4e:ea:b3:92:06:b7:53:29:56:73:08:c5:a9:97:25:40: 3f:9d:f7:df:86:4b:30:14:6c:b7:58:f4:c5:04:54:4d:d4:1e: d2:44:0b:e7:6c:47:65:ea:4c:a1:ed:40:2d:81:4e:12:fb:a1: 90:ad:32:3d:70:72:33:c7:69:d1:3d:c3:56:38:0c:07:5a:4e: b4:09:ce:65:69:1f:2b:fb:85:31:a3:9f:cc:33:e4:24:59:15: 85:b7:05:e8:7f:ab:77:69:68:2d:c6:c1:62:e1:b2:54:a9:ea: 33:ed:bc:a7:38:b6:8f:a9:f7:9c:81:1c:07:e7:1c:9a:84:2b: 02:65:5a:d2:44:fa:52:ec:9e:4d:fc:5e:d0:2b:6f:8d:8d:d5: 53:e5:c6:55:80:ae:f1:fc:cb:65:d8:f9:17:cc:d1:08:8e:b5: 51:7f:2d:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY/0b1sWPdn6QAYkWX47PYejXLqAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwMjI4MDA1MDQzWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODc0MTQ3Njg3MzUyYmIyMjQ3MzIxMTVlYTNjYWY1NWIz NTYxZDBhMmZjYzI2NDZlMTdlZGJhYjM2ZTczMTM3MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCro3V61LgJYXI/isqOwaq7L5dp0RL6sMOFvcEcVP10lj/v 0HkL6zt03H7hU9A5usBApivwuQfdLa+OJy9/NFm2y6kTLMF6lKTTlIV7dX5VqDpU UtqW9ZoEINXQ7UGtuWL2SdYucGmsYQB2pwaSZYVkGwA3dAtg/upAlby0KfZZ/ko2 zjnJY3kizrSL472uvRCjv/a/+FZSNY7Q3Se6jy21RiR2+xu+tvm89XCimLiXXbOx JD+w0qVFmlyiJfh3L1rUSklTlDM+UbZNf+xclwejIdaMoAHabDN5gahksE6hSrZZ LovTB368T57nRy2fs5KmKkOc5NEh9kJG5wncjvyJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYAsDsBp4NAgh/FmOEYYe1o455o4wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2YzZTc4YzlkLWNhZmYtNDIzNy1hYWJhLWI0MGY5MDFlM2M4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBAA9XxrpzIQ06Q9Pnzvy0CWAclS9D qT3HLOOkdM6HxAPGpSoRziCvTzawfbm3wuw7Cg8EeppY/l6BSjg2XoanF40WHKEv 8ZuKIzcix9w6S/lppfEaew6O+y/LVimLTuqzkga3UylWcwjFqZclQD+d99+GSzAU bLdY9MUEVE3UHtJEC+dsR2XqTKHtQC2BThL7oZCtMj1wcjPHadE9w1Y4DAdaTrQJ zmVpHyv7hTGjn8wz5CRZFYW3Beh/q3dpaC3GwWLhslSp6jPtvKc4to+p95yBHAfn HJqEKwJlWtJE+lLsnk38XtArb42N1VPlxlWArvH8y2XY+RfM0QiOtVF/Le8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:41:13 2026 by rpki-client