$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a582f37-cff6-4ac5-8427-47b7a3406ce8.roa File: 3a582f37-cff6-4ac5-8427-47b7a3406ce8.roa (raw, json) Hash identifier: RmqkY0OCTnKc9D4bwgLfUHGCkj1NksqLdBCPuK6NoFY= Subject key identifier: 57:B2:4F:E8:46:58:9D:7B:88:47:D2:CF:44:93:E1:04:38:C1:E8:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32555B3A5D697E254B4F53B8EF9B9071BD580937 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a582f37-cff6-4ac5-8427-47b7a3406ce8.roa Signing time: Thu 26 Feb 2026 01:40:04 +0000 ROA not before: Thu 26 Feb 2026 01:40:04 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:55:5b:3a:5d:69:7e:25:4b:4f:53:b8:ef:9b:90:71:bd:58:09:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:40:04 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=3ec03ccc6b5f1067d86685395151bc8319159c79862579a174eed57e399cf581, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:e5:7d:1b:2d:89:e6:d3:38:bf:4a:58:8b: 89:c8:0d:c1:c6:7b:cb:cf:56:e2:7f:07:d1:a4:c9: b4:d6:a0:25:31:a2:e4:f4:e0:61:dc:4c:ee:bd:c1: fa:85:b8:89:aa:69:43:6f:cd:29:21:12:0c:33:1c: e1:93:24:57:81:7f:17:2c:03:a3:5f:01:d5:e1:1c: 1e:ad:6f:a5:b9:53:b9:37:bc:1c:a3:3a:d5:a5:87: d6:20:ab:1d:48:da:bf:8d:4b:d9:1b:a4:fb:1a:9d: e6:8b:64:46:ad:dd:c1:14:12:f5:3b:11:c5:64:18: 10:7c:bb:b9:c4:40:9d:c6:b7:3a:8a:61:c4:13:50: a8:8d:72:c5:57:54:d7:bb:75:73:12:be:4b:75:42: 50:14:55:ad:5d:ea:b1:cb:78:e2:0b:15:54:a7:ec: 14:df:03:b2:5b:98:f9:ef:4b:63:30:21:ac:62:e8: 0c:6c:72:77:b0:ad:51:05:2c:02:65:9f:ec:4a:db: f2:7b:87:c1:6d:48:66:1b:d6:28:62:5a:a6:a6:5e: ec:d7:f1:ad:0f:50:66:13:db:b1:0f:56:7e:59:1e: 6d:39:c7:33:5a:2f:2d:ae:6b:f1:e1:d4:cd:09:a3: b0:9d:09:4f:9a:8f:ca:b2:60:f7:41:ee:80:78:e6: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:4F:E8:46:58:9D:7B:88:47:D2:CF:44:93:E1:04:38:C1:E8:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a582f37-cff6-4ac5-8427-47b7a3406ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:88:c6:3b:95:09:c5:d0:18:9a:4e:c1:47:6b:bf:9a:45:cb: b0:e3:18:93:c3:92:9c:b4:1c:bb:d4:3b:77:9c:34:0c:ec:ad: f6:1d:49:3f:2d:64:66:54:36:40:da:de:ba:f8:d4:02:9a:36: 3e:e7:85:8b:22:ab:1b:ef:12:19:f6:27:c5:ac:51:48:ad:4c: 61:71:6f:19:34:4d:8c:ba:81:e2:ec:fc:94:f5:8a:a9:24:49: f0:a4:70:de:1b:47:69:52:2f:f5:0a:4e:96:76:3e:dc:ca:03: e5:ee:6d:39:56:33:f8:d5:50:97:c6:97:ca:45:1f:c3:d1:df: c4:9b:16:5a:5c:e4:89:06:a8:be:2a:4a:ac:71:9e:3f:dd:66: b7:74:ee:e9:9b:88:4e:63:3b:fd:a8:9d:fd:f7:06:56:a8:8a: 3d:2c:1c:94:6b:f3:af:e0:4f:2e:4a:53:19:d9:ed:3d:68:c2: dd:5a:44:9b:61:f2:2b:90:11:e9:af:9f:a6:c7:63:d3:47:b1: f7:a4:f2:d1:fe:af:c3:46:7b:ee:7e:bb:22:75:9d:3b:d9:56: 11:02:36:dc:f4:97:3d:65:3c:79:4b:9d:60:b7:0e:d7:da:87: 9f:4a:1d:f7:11:7f:83:a3:f8:5f:86:8d:b1:2f:e8:07:c5:d2: e6:cb:e2:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMlVbOl1pfiVLT1O475uQcb1YCTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDE0MDA0WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWMwM2NjYzZiNWYxMDY3ZDg2Njg1Mzk1MTUxYmM4MzE5 MTU5Yzc5ODYyNTc5YTE3NGVlZDU3ZTM5OWNmNTgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAJeV9Gy2J5tM4v0pYi4nIDcHGe8vPVuJ/B9GkybTWoCUx ouT04GHcTO69wfqFuImqaUNvzSkhEgwzHOGTJFeBfxcsA6NfAdXhHB6tb6W5U7k3 vByjOtWlh9Ygqx1I2r+NS9kbpPsaneaLZEat3cEUEvU7EcVkGBB8u7nEQJ3GtzqK YcQTUKiNcsVXVNe7dXMSvkt1QlAUVa1d6rHLeOILFVSn7BTfA7JbmPnvS2MwIaxi 6AxscnewrVEFLAJln+xK2/J7h8FtSGYb1ihiWqamXuzX8a0PUGYT27EPVn5ZHm05 xzNaLy2ua/Hh1M0Jo7CdCU+aj8qyYPdB7oB45jnNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV7JP6EZYnXuIR9LPRJPhBDjB6MwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhNTgyZjM3LWNmZjYtNGFjNS04NDI3LTQ3YjdhMzQwNmNlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0VAAwDQYJKoZIhvcNAQELBQADggEBAD+IxjuVCcXQGJpOwUdrv5pFy7Dj GJPDkpy0HLvUO3ecNAzsrfYdST8tZGZUNkDa3rr41AKaNj7nhYsiqxvvEhn2J8Ws UUitTGFxbxk0TYy6geLs/JT1iqkkSfCkcN4bR2lSL/UKTpZ2PtzKA+XubTlWM/jV UJfGl8pFH8PR38SbFlpc5IkGqL4qSqxxnj/dZrd07umbiE5jO/2onf33Blaoij0s HJRr86/gTy5KUxnZ7T1owt1aRJth8iuQEemvn6bHY9NHsfek8tH+r8NGe+5+uyJ1 nTvZVhECNtz0lz1lPHlLnWC3Dtfah59KHfcRf4Oj+F+GjbEv6AfF0ubL4nE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:51:16 2026 by rpki-client