$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39da7fea-8581-4a7e-8baa-57094f8d3832.roa File: 39da7fea-8581-4a7e-8baa-57094f8d3832.roa (raw, json) Hash identifier: XJRWZ7wB0TL40Mn4EDiGD5V0wZXhZF4vOe5epcDqFe4= Subject key identifier: 7E:EC:EB:44:1E:0A:61:21:EC:27:E3:3B:84:C3:C7:A3:DF:58:EA:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 386A757553BE8DB5821A3A4DF4235CA0A09C4967 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39da7fea-8581-4a7e-8baa-57094f8d3832.roa Signing time: Fri 27 Feb 2026 00:01:06 +0000 ROA not before: Fri 27 Feb 2026 00:01:06 +0000 ROA not after: Thu 28 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6a:75:75:53:be:8d:b5:82:1a:3a:4d:f4:23:5c:a0:a0:9c:49:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 27 00:01:06 2026 GMT Not After : May 28 23:59:59 2026 GMT Subject: serialNumber=7e142712beb011465fbe988331bd70e81a5529800e1df586276c0341618d7c97, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:87:82:de:b3:70:ef:aa:b1:5c:fe:30:6c: 33:1b:d3:38:6b:16:09:32:a4:23:a6:b4:46:3d:7e: 47:2d:05:ff:9c:b8:be:c7:8a:8a:dc:13:47:49:93: 67:00:5d:a2:75:40:41:d3:8f:4d:bd:0f:5e:b7:55: 85:77:25:dd:29:77:94:06:1a:f9:5f:06:9b:f9:13: 99:7f:ab:f1:b8:f1:56:d6:91:89:32:06:88:32:ba: 37:dc:32:d4:4f:df:fa:7f:2a:e0:4c:24:d5:79:3d: e4:ff:95:01:c7:3a:e6:ea:0c:66:28:0d:df:3d:45: 25:34:03:f8:d9:43:90:51:9c:2f:60:b9:e5:a4:b6: d1:d1:da:43:5c:9e:80:27:f7:78:3d:47:03:ac:e6: 6a:f5:85:1c:34:53:45:1f:99:17:f5:1f:16:61:a9: 13:9e:f4:60:00:c8:06:b4:fc:1b:4a:22:64:60:a3: ab:b6:00:14:a9:af:19:ee:2b:dc:a5:1f:db:19:1b: 08:4a:84:63:32:11:eb:86:1b:d0:c4:27:1a:69:12: 10:14:7a:d5:5b:d0:c9:9a:3c:31:01:20:fe:18:30: 65:91:3b:6c:90:1a:10:b9:19:70:15:d7:b7:b0:fe: 4f:b0:5e:40:b1:0d:47:77:d5:8a:f0:23:2f:a2:95: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:EB:44:1E:0A:61:21:EC:27:E3:3B:84:C3:C7:A3:DF:58:EA:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39da7fea-8581-4a7e-8baa-57094f8d3832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.150.0/24 Signature Algorithm: sha256WithRSAEncryption 23:78:ac:f6:22:ba:e3:20:fb:2c:aa:51:e8:e3:24:2b:d3:55: 8e:30:18:26:17:7d:df:7c:19:ec:36:dc:04:46:d1:4f:07:39: 73:f9:25:7b:6b:20:e7:38:8b:7f:09:97:cf:28:a5:68:ab:c1: e3:24:5a:14:2d:c9:f4:5d:60:e6:42:32:92:43:dc:0f:91:c7: e3:ab:b5:b3:0b:58:e0:75:8f:6e:4e:6c:e7:fa:98:d7:d4:49: 32:76:9b:ef:aa:43:cf:0c:ad:f2:ea:c9:5b:67:0d:1f:67:cf: de:92:58:82:29:75:f3:d4:e1:4b:f2:d0:14:0c:25:3c:a5:84: f7:80:d2:d8:88:9d:61:94:f9:3f:9c:3e:d5:66:d2:64:74:87: 9b:be:32:b7:4c:32:33:55:8f:e7:8c:58:0d:10:75:8c:2a:27: 73:f3:37:6e:0c:31:56:9a:17:88:80:87:10:de:f3:7c:b9:74: da:60:c7:66:98:14:24:93:c8:99:8e:30:e2:b2:7a:5b:5a:98: a5:06:3a:bf:14:0f:f2:d3:03:30:d2:71:a3:25:88:57:ed:0f: 83:82:a1:52:76:2b:00:07:47:4e:5b:5f:95:97:3b:74:e4:52: 67:28:f9:55:3d:4b:26:da:25:ca:78:d0:06:1d:d4:0a:4c:31: 28:f4:8b:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOGp1dVO+jbWCGjpN9CNcoKCcSWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI3MDAwMTA2WhcNMjYwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTE0MjcxMmJlYjAxMTQ2NWZiZTk4ODMzMWJkNzBlODFh NTUyOTgwMGUxZGY1ODYyNzZjMDM0MTYxOGQ3Yzk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCktYeC3rNw76qxXP4wbDMb0zhrFgkypCOmtEY9fkctBf+c uL7HiorcE0dJk2cAXaJ1QEHTj029D163VYV3Jd0pd5QGGvlfBpv5E5l/q/G48VbW kYkyBogyujfcMtRP3/p/KuBMJNV5PeT/lQHHOubqDGYoDd89RSU0A/jZQ5BRnC9g ueWkttHR2kNcnoAn93g9RwOs5mr1hRw0U0UfmRf1HxZhqROe9GAAyAa0/BtKImRg o6u2ABSprxnuK9ylH9sZGwhKhGMyEeuGG9DEJxppEhAUetVb0MmaPDEBIP4YMGWR O2yQGhC5GXAV17ew/k+wXkCxDUd31YrwIy+ildLnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfuzrRB4KYSHsJ+M7hMPHo99Y6rQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5ZGE3ZmVhLTg1ODEtNGE3ZS04YmFhLTU3MDk0ZjhkMzgzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrZYwDQYJKoZIhvcNAQELBQADggEBACN4rPYiuuMg+yyqUejjJCvTVY4w GCYXfd98Gew23ARG0U8HOXP5JXtrIOc4i38Jl88opWirweMkWhQtyfRdYOZCMpJD 3A+Rx+OrtbMLWOB1j25ObOf6mNfUSTJ2m++qQ88MrfLqyVtnDR9nz96SWIIpdfPU 4Uvy0BQMJTylhPeA0tiInWGU+T+cPtVm0mR0h5u+MrdMMjNVj+eMWA0QdYwqJ3Pz N24MMVaaF4iAhxDe83y5dNpgx2aYFCSTyJmOMOKyeltamKUGOr8UD/LTAzDScaMl iFftD4OCoVJ2KwAHR05bX5WXO3TkUmco+VU9SybaJcp40AYd1ApMMSj0izw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:25 2026 by rpki-client