$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c2600bf-06b4-4e7e-988f-213d3f1bd67f.roa File: 3c2600bf-06b4-4e7e-988f-213d3f1bd67f.roa (raw, json) Hash identifier: q8xAJx6Npb1aTxIg2RYTx0uzmHfAeUFuI1tmIeFwXqo= Subject key identifier: 55:07:5C:53:40:6D:AC:35:E6:96:E5:44:B6:8C:DA:65:A7:2F:85:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5FCFF67A05DEF6ECEC704E23F9F3077CBC76408E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c2600bf-06b4-4e7e-988f-213d3f1bd67f.roa Signing time: Mon 23 Feb 2026 01:11:25 +0000 ROA not before: Mon 23 Feb 2026 01:11:25 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cf:f6:7a:05:de:f6:ec:ec:70:4e:23:f9:f3:07:7c:bc:76:40:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:11:25 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=9210c047fae7923b9ac60b89133be03a21825d57d15f78a1876a0d291c65c681, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:3b:8d:95:f4:02:80:1e:67:fa:94:af:28: 9f:a1:0e:b1:1e:32:aa:60:71:11:94:25:38:e7:81: fc:5b:0b:a8:e7:48:8b:97:28:4b:8a:c8:e2:a4:c6: d0:31:53:a3:69:4a:c8:f6:6c:4b:1c:8a:53:5e:45: 5a:f0:47:3c:52:ee:d1:9c:c7:20:09:8e:ec:10:e6: cb:d4:23:42:67:5f:7e:08:1f:8b:86:24:12:a2:8d: 25:9b:ae:cb:2f:7d:d6:b5:37:04:18:cb:97:58:45: a8:a3:a8:86:a4:de:6b:e4:69:19:53:69:53:8b:5e: fe:75:4c:fb:c8:50:04:c3:41:6e:f5:31:2f:46:af: d8:1b:e8:90:f4:61:2e:96:91:67:60:9b:a5:cd:44: 56:aa:6e:e9:12:4f:2a:4b:f5:ae:1c:52:a1:dd:55: 34:8f:46:cf:45:49:f0:0b:42:d0:02:f0:c0:4f:cf: 79:ea:46:9c:be:f2:35:a6:e9:ee:5f:80:45:ff:ea: 7f:37:a2:20:1e:69:0d:5c:76:8f:8d:6d:36:6d:3c: 20:55:5d:44:83:33:c7:33:75:58:8b:e0:a4:9a:af: df:2c:9e:79:3a:bf:2d:14:fb:55:71:ec:1c:30:69: db:2d:19:f0:5c:d1:b6:d6:07:82:81:e1:e2:87:b4: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:07:5C:53:40:6D:AC:35:E6:96:E5:44:B6:8C:DA:65:A7:2F:85:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c2600bf-06b4-4e7e-988f-213d3f1bd67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.248.0/22 Signature Algorithm: sha256WithRSAEncryption 09:9b:e9:17:0f:91:84:61:95:53:7d:9d:76:bf:b8:66:cf:83: fa:f6:fe:bd:73:b5:92:58:4b:85:b8:be:d5:64:00:93:dc:41: 91:96:39:cf:d5:0e:38:a8:cf:dd:31:5f:ce:20:d8:00:e3:71: 39:83:de:33:43:3a:62:be:1c:38:78:1e:aa:c9:1f:52:94:a6: 87:2f:f0:ad:8a:f7:73:a9:08:5f:72:f9:9e:dc:07:63:2e:68: ba:52:20:bb:b5:09:9c:f7:62:93:71:47:af:d9:17:56:10:c1: a3:af:02:82:cd:49:20:aa:a8:0c:31:45:70:0d:28:47:0e:25: f8:c8:8b:cc:1c:b2:20:b7:ef:97:8c:41:70:f5:e1:50:13:4c: d5:2d:34:22:27:dc:f9:14:5b:3b:20:2d:c4:ca:4e:db:da:15: 73:c4:e2:b8:34:ab:e0:a3:d9:16:d4:a9:ec:38:63:a4:91:ad: eb:57:b7:b8:86:85:9e:21:9b:d9:11:23:41:27:ff:ef:7d:c0: 7c:ff:33:e3:2f:7d:62:e7:8a:ed:13:40:d5:4d:6f:0f:66:95: c1:2d:58:8c:8d:ad:74:f4:7e:a3:f4:43:66:ad:38:b5:74:ab: a7:85:c7:79:96:78:7f:2a:db:7d:9d:ca:38:82:d1:e2:cc:6c: f6:fc:c6:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX8/2egXe9uzscE4j+fMHfLx2QI4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDExMTI1WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjEwYzA0N2ZhZTc5MjNiOWFjNjBiODkxMzNiZTAzYTIx ODI1ZDU3ZDE1Zjc4YTE4NzZhMGQyOTFjNjVjNjgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj6DuNlfQCgB5n+pSvKJ+hDrEeMqpgcRGUJTjngfxbC6jn SIuXKEuKyOKkxtAxU6NpSsj2bEscilNeRVrwRzxS7tGcxyAJjuwQ5svUI0JnX34I H4uGJBKijSWbrssvfda1NwQYy5dYRaijqIak3mvkaRlTaVOLXv51TPvIUATDQW71 MS9Gr9gb6JD0YS6WkWdgm6XNRFaqbukSTypL9a4cUqHdVTSPRs9FSfALQtAC8MBP z3nqRpy+8jWm6e5fgEX/6n83oiAeaQ1cdo+NbTZtPCBVXUSDM8czdViL4KSar98s nnk6vy0U+1Vx7BwwadstGfBc0bbWB4KB4eKHtLPPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVQdcU0BtrDXmluVEtozaZacvhcgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjMjYwMGJmLTA2YjQtNGU3ZS05ODhmLTIxM2QzZjFiZDY3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2tvgwDQYJKoZIhvcNAQELBQADggEBAAmb6RcPkYRhlVN9nXa/uGbPg/r2 /r1ztZJYS4W4vtVkAJPcQZGWOc/VDjioz90xX84g2ADjcTmD3jNDOmK+HDh4HqrJ H1KUpocv8K2K93OpCF9y+Z7cB2MuaLpSILu1CZz3YpNxR6/ZF1YQwaOvAoLNSSCq qAwxRXANKEcOJfjIi8wcsiC375eMQXD14VATTNUtNCIn3PkUWzsgLcTKTtvaFXPE 4rg0q+Cj2RbUqew4Y6SRretXt7iGhZ4hm9kRI0En/+99wHz/M+MvfWLniu0TQNVN bw9mlcEtWIyNrXT0fqP0Q2atOLV0q6eFx3mWeH8q232dyjiC0eLMbPb8xuA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:20:02 2026 by rpki-client