$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4aa74435-ab6a-45e9-bc4c-013e7f004c9a.roa File: 4aa74435-ab6a-45e9-bc4c-013e7f004c9a.roa (raw, json) Hash identifier: wntCWk8iKYnLZphYWAwEOz68zrvcX6wVwrC1yQy20M4= Subject key identifier: 46:86:EE:AC:59:27:D0:7B:05:E6:C9:12:39:82:31:C5:C4:1E:31:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54A3C86AC3F596331EF3776E03D1B26027F0AE7A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4aa74435-ab6a-45e9-bc4c-013e7f004c9a.roa Signing time: Mon 23 Feb 2026 01:00:38 +0000 ROA not before: Mon 23 Feb 2026 01:00:38 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a3:c8:6a:c3:f5:96:33:1e:f3:77:6e:03:d1:b2:60:27:f0:ae:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:00:38 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=67f90be8d491286562cfa644da1959af1c674d51313b85fc17e03052287b59a8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:b1:ef:7c:ac:8f:d0:4a:7f:73:85:61:67: 20:71:7f:3d:fb:8a:65:b0:b7:1c:f4:26:fe:cc:c9: 84:3e:26:a2:c2:bd:62:ca:51:a4:35:df:ee:d7:d8: f8:3d:f9:72:32:55:6d:1c:f9:8d:30:59:b0:7c:06: cd:31:11:d3:c9:19:96:e1:91:79:78:d6:84:b1:d8: b4:8a:7b:c4:13:5d:45:b2:6c:d3:ce:4d:a5:96:83: e8:c1:be:13:ed:04:ff:f6:4e:82:55:47:40:39:4a: f2:6a:82:9f:e0:b4:70:1a:33:d2:aa:d4:d2:09:80: 70:27:3c:6e:ed:40:99:ca:3d:f1:d2:11:3f:88:cb: 69:4f:c6:8d:05:45:20:52:7f:cb:5c:ff:5f:6c:a6: de:a0:6f:09:2d:4b:69:45:45:cd:b3:d4:c2:eb:7c: cb:97:a6:8b:3f:fd:a8:0c:50:85:ef:ca:f7:a4:11: 7f:f9:a4:16:54:4c:c2:83:15:89:83:2f:40:3f:f6: 6a:f4:23:3b:ba:da:af:64:dc:29:3f:ed:99:44:5e: 16:40:be:09:96:4a:eb:9c:32:59:db:13:84:db:25: 90:25:83:e7:73:39:62:ef:dd:2f:3e:50:26:26:91: b0:94:a8:e4:91:d2:53:97:f2:d9:f3:27:f1:01:22: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:EE:AC:59:27:D0:7B:05:E6:C9:12:39:82:31:C5:C4:1E:31:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4aa74435-ab6a-45e9-bc4c-013e7f004c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.97.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:3b:67:4c:32:1e:7e:22:98:c4:3a:36:30:7f:38:9a:1b:4d: 20:36:48:34:71:c3:6c:bf:19:f0:54:a9:13:56:cc:02:c6:af: 30:c2:e4:08:a7:4b:08:f0:d4:79:b7:94:49:2b:9a:58:31:eb: 13:f5:f5:ce:8f:f6:73:a9:b2:b7:8d:76:35:9d:86:f2:af:68: a9:07:70:6e:de:13:36:53:c0:b6:50:3b:0e:c7:9a:29:af:00: a6:52:da:1a:be:25:99:f5:a8:63:44:53:de:60:66:bb:22:41: 0e:96:c3:6d:ca:63:94:0c:82:93:83:6c:06:88:aa:16:d5:ae: 8d:67:f5:11:9e:c1:3f:02:34:14:db:d6:99:03:e7:aa:ff:6e: 6e:5c:7f:8e:d4:09:11:69:6a:79:03:cd:15:a9:da:ab:3f:3b: 4f:a4:bf:b4:a5:2d:18:ee:5d:45:c9:d4:38:44:82:68:84:16: 27:81:96:d7:7a:4a:30:2d:ef:f9:63:bc:7a:6a:21:89:ad:8a: ee:e9:d2:dc:43:64:a9:b9:1c:4a:c6:9b:cb:f5:11:76:cc:45: b4:44:3a:9b:d9:3a:f8:b7:13:88:df:d0:ba:23:2c:07:54:0c: d9:32:f9:b2:fb:ca:e8:a0:c0:55:60:41:7c:64:6f:62:3c:35: 2a:6b:25:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVKPIasP1ljMe83duA9GyYCfwrnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDEwMDM4WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2Y5MGJlOGQ0OTEyODY1NjJjZmE2NDRkYTE5NTlhZjFj Njc0ZDUxMzEzYjg1ZmMxN2UwMzA1MjI4N2I1OWE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjGrHvfKyP0Ep/c4VhZyBxfz37imWwtxz0Jv7MyYQ+JqLC vWLKUaQ13+7X2Pg9+XIyVW0c+Y0wWbB8Bs0xEdPJGZbhkXl41oSx2LSKe8QTXUWy bNPOTaWWg+jBvhPtBP/2ToJVR0A5SvJqgp/gtHAaM9Kq1NIJgHAnPG7tQJnKPfHS ET+Iy2lPxo0FRSBSf8tc/19spt6gbwktS2lFRc2z1MLrfMuXpos//agMUIXvyvek EX/5pBZUTMKDFYmDL0A/9mr0Izu62q9k3Ck/7ZlEXhZAvgmWSuucMlnbE4TbJZAl g+dzOWLv3S8+UCYmkbCUqOSR0lOX8tnzJ/EBIok/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURoburFkn0HsF5skSOYIxxcQeMeUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhYTc0NDM1LWFiNmEtNDVlOS1iYzRjLTAxM2U3ZjAwNGM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRGEwDQYJKoZIhvcNAQELBQADggEBAF07Z0wyHn4imMQ6NjB/OJobTSA2 SDRxw2y/GfBUqRNWzALGrzDC5AinSwjw1Hm3lEkrmlgx6xP19c6P9nOpsreNdjWd hvKvaKkHcG7eEzZTwLZQOw7HmimvAKZS2hq+JZn1qGNEU95gZrsiQQ6Ww23KY5QM gpODbAaIqhbVro1n9RGewT8CNBTb1pkD56r/bm5cf47UCRFpankDzRWp2qs/O0+k v7SlLRjuXUXJ1DhEgmiEFieBltd6SjAt7/ljvHpqIYmtiu7p0txDZKm5HErGm8v1 EXbMRbREOpvZOvi3E4jf0LojLAdUDNky+bL7yuigwFVgQXxkb2I8NSprJQ8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:48:37 2026 by rpki-client