$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b3545c8-58ad-4385-b26c-1ec69f778bb1.roa File: 4b3545c8-58ad-4385-b26c-1ec69f778bb1.roa (raw, json) Hash identifier: oQ43Y3hOoeHBF2tLbamwZm6WzHMvrJa1wi/14Lm8+3Q= Subject key identifier: AA:F5:DD:BC:52:7E:79:D4:54:CB:52:BC:E2:4B:E1:8F:97:25:99:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12DD364790D26C74AC5117959C21773F279395A9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b3545c8-58ad-4385-b26c-1ec69f778bb1.roa Signing time: Tue 17 Feb 2026 02:20:55 +0000 ROA not before: Tue 17 Feb 2026 02:20:55 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 34.249.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:dd:36:47:90:d2:6c:74:ac:51:17:95:9c:21:77:3f:27:93:95:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 02:20:55 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=9d5ee533ec93132dd5cc164a1d20b6cd218457efe8bf85fb31d4a7f9af6e5d3d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:79:cf:cf:44:a9:e0:ea:91:3b:e0:3c:2d: 42:36:6e:d6:74:fd:66:89:2c:68:09:12:b3:72:c9: 78:9b:4d:a1:80:c6:39:7d:46:3e:0d:d4:bc:bc:0c: 50:ea:09:fc:1c:c0:a3:7a:44:c5:99:2f:4f:c9:cd: f4:b8:18:cd:c6:10:1f:a9:5f:31:72:fa:58:64:e6: 13:de:bc:0b:1b:a0:9c:2f:b8:70:f4:db:70:4d:8d: 49:41:40:71:e9:8a:de:f1:22:44:a2:92:ef:6a:79: 15:9f:a5:16:c9:89:b8:a0:85:b9:8e:f6:47:a4:2c: a5:e0:56:db:6a:f4:25:08:ec:a7:1d:6f:a2:49:87: a9:a2:39:c0:bc:d4:5a:6a:c7:41:2b:cc:c4:62:aa: 0d:34:04:ed:73:5c:2c:af:66:fc:81:03:ad:82:6c: 69:59:c5:e3:51:d2:c1:f9:98:4d:89:0c:4b:68:03: d4:a6:d6:c6:44:fc:c2:dd:21:48:ce:c1:3b:36:a2: aa:b6:58:29:5e:a1:bb:2d:eb:db:f4:4f:4f:f3:2e: e1:71:04:58:a4:19:35:c7:06:39:52:fe:33:77:29: a8:0b:ac:27:65:8e:a8:b9:0b:80:06:f1:64:45:1c: 5a:9a:29:74:78:17:ae:4c:3f:cb:f9:ff:2d:ed:53: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F5:DD:BC:52:7E:79:D4:54:CB:52:BC:E2:4B:E1:8F:97:25:99:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b3545c8-58ad-4385-b26c-1ec69f778bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.249.192.0/18 Signature Algorithm: sha256WithRSAEncryption 11:57:97:e7:2e:be:47:6c:54:9f:e3:e8:0e:b3:3f:89:77:1c: 50:a2:49:5e:8b:cc:fa:a1:6f:a4:08:a7:d3:46:4f:58:d7:50: 45:ff:9a:36:61:fd:a7:21:e8:71:e6:f0:65:c8:8c:05:22:59: 4d:6a:9a:22:7a:ab:19:35:44:c3:95:c0:bd:91:50:e8:e2:64: c7:20:e3:42:10:d3:22:d4:25:ed:92:17:12:29:c3:b4:82:bf: 35:cf:b1:31:dd:5f:09:54:4c:00:31:7a:ec:e4:5f:62:d7:2e: 8a:78:cd:ff:59:bb:19:57:35:5c:ad:5c:ac:a7:b7:f2:77:14: b8:b2:4b:e4:8c:0d:13:99:61:0d:d2:d5:98:fd:a4:55:45:00: 60:78:67:e0:16:e6:18:93:7a:e2:10:52:58:e8:24:55:5f:02: c0:e2:b3:91:5f:84:bf:45:90:c6:07:74:36:44:f9:d9:2b:99: c0:e9:2b:04:d6:b0:ac:3f:88:d3:40:a5:86:90:a7:06:32:a8: ac:e4:74:cf:69:38:ab:8a:d8:84:b5:13:2c:78:77:a9:68:d1: 8c:8d:5a:a9:f1:dc:1d:03:7b:85:2c:55:6f:a7:5f:e8:f4:f2: a5:92:31:1e:ff:f6:3e:ee:4e:ea:f7:8c:5a:b5:00:90:d2:eb: ff:4c:a6:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEt02R5DSbHSsUReVnCF3PyeTlakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDIyMDU1WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDVlZTUzM2VjOTMxMzJkZDVjYzE2NGExZDIwYjZjZDIx ODQ1N2VmZThiZjg1ZmIzMWQ0YTdmOWFmNmU1ZDNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLhXnPz0Sp4OqRO+A8LUI2btZ0/WaJLGgJErNyyXibTaGA xjl9Rj4N1Ly8DFDqCfwcwKN6RMWZL0/JzfS4GM3GEB+pXzFy+lhk5hPevAsboJwv uHD023BNjUlBQHHpit7xIkSiku9qeRWfpRbJibighbmO9kekLKXgVttq9CUI7Kcd b6JJh6miOcC81Fpqx0ErzMRiqg00BO1zXCyvZvyBA62CbGlZxeNR0sH5mE2JDEto A9Sm1sZE/MLdIUjOwTs2oqq2WCleobst69v0T0/zLuFxBFikGTXHBjlS/jN3KagL rCdljqi5C4AG8WRFHFqaKXR4F65MP8v5/y3tUzRZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqvXdvFJ+edRUy1K84kvhj5clmc0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiMzU0NWM4LTU4YWQtNDM4NS1iMjZjLTFlYzY5Zjc3OGJiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi+cAwDQYJKoZIhvcNAQELBQADggEBABFXl+cuvkdsVJ/j6A6zP4l3HFCi SV6LzPqhb6QIp9NGT1jXUEX/mjZh/ach6HHm8GXIjAUiWU1qmiJ6qxk1RMOVwL2R UOjiZMcg40IQ0yLUJe2SFxIpw7SCvzXPsTHdXwlUTAAxeuzkX2LXLop4zf9ZuxlX NVytXKynt/J3FLiyS+SMDROZYQ3S1Zj9pFVFAGB4Z+AW5hiTeuIQUljoJFVfAsDi s5FfhL9FkMYHdDZE+dkrmcDpKwTWsKw/iNNApYaQpwYyqKzkdM9pOKuK2IS1Eyx4 d6lo0YyNWqnx3B0De4UsVW+nX+j08qWSMR7/9j7uTur3jFq1AJDS6/9Mpn4= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:35 2026 by rpki-client