$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58791097-4bec-4d20-bf0f-94d3e38952ea.roa File: 58791097-4bec-4d20-bf0f-94d3e38952ea.roa (raw, json) Hash identifier: SYiIDo0egRd9p27kMCRyWLjDK3bdJHOIQRJmaJrYvKE= Subject key identifier: 8B:11:22:D0:BE:17:A9:5F:67:5A:C1:F4:72:37:1A:2F:70:57:05:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04F7E177D9AD5A9822CD1F8508BCA7A2328F2EFA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58791097-4bec-4d20-bf0f-94d3e38952ea.roa Signing time: Thu 26 Feb 2026 01:41:01 +0000 ROA not before: Thu 26 Feb 2026 01:41:01 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.3.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f7:e1:77:d9:ad:5a:98:22:cd:1f:85:08:bc:a7:a2:32:8f:2e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:41:01 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=a530fd93d78582ec6845bd07ed8f2493ee16f0c587067c6ddb77427af1d92188, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:b4:3d:73:90:d2:fe:68:c0:8f:b3:02:ae: 41:59:61:d8:98:43:59:ca:f3:59:4b:c0:06:36:44: 34:62:48:87:db:0d:7b:d0:08:b5:e6:ad:33:88:66: 51:0e:b8:8a:79:f7:bc:08:03:55:06:da:74:07:7b: ec:35:d4:01:fb:0c:cb:de:f1:5c:85:fd:d4:7f:46: f3:5a:de:33:bf:48:4a:b5:c1:36:ae:f9:50:88:4c: 50:f5:94:a3:df:8f:4f:9e:e5:1e:83:54:78:66:47: df:73:78:bb:cb:2b:9d:73:d3:e9:15:df:67:99:76: c9:b4:42:ce:d0:9d:60:c8:92:d8:20:5b:96:13:d4: c7:f0:a8:f3:5b:1b:56:7f:27:22:59:a4:f3:fd:e1: df:6d:9b:78:29:b6:47:fb:c5:d1:79:d3:45:56:f9: 83:9d:72:89:ba:5e:90:9b:f5:21:1f:35:cd:18:b1: 9a:1c:31:8b:3b:68:c3:3a:8f:7f:ad:4a:35:80:0b: d0:ca:10:68:25:48:22:4c:11:06:bd:89:b5:f2:4b: 42:60:98:1a:48:c8:22:e3:6a:37:8a:ce:bf:a2:3e: 38:1b:51:b5:2d:2f:8d:cd:52:80:7c:42:f4:e0:bf: bd:fc:f1:73:66:f7:ae:07:38:e3:6e:df:69:64:cb: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:11:22:D0:BE:17:A9:5F:67:5A:C1:F4:72:37:1A:2F:70:57:05:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58791097-4bec-4d20-bf0f-94d3e38952ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.3.16.0/21 Signature Algorithm: sha256WithRSAEncryption 06:97:51:eb:df:78:7d:29:65:71:d7:68:a1:3b:b5:64:10:6c: 22:b8:f1:e6:a8:59:62:4b:dc:97:37:19:db:01:9d:08:1d:8d: 9f:75:6c:6d:a1:19:16:51:0b:45:81:32:be:04:0f:b0:0d:92: e5:9b:84:8e:e9:6b:dd:15:6f:e5:c4:a3:26:5f:c7:e4:42:32: 9a:bc:d6:27:28:ed:ce:e8:c9:e3:2b:27:a9:4f:8b:f7:d0:b2: a6:25:9e:98:61:1f:e1:bd:69:f0:00:27:ea:26:9f:65:89:5c: cc:d3:50:4c:10:46:a1:2e:72:c3:82:96:cf:10:d9:79:49:a2: 53:67:ac:05:5f:d4:59:75:28:3c:07:f5:1c:fd:f7:c8:8e:42: 5c:c5:76:b4:8d:ba:27:6d:18:b4:37:e5:ed:33:b8:a1:7f:6d: 25:ad:cb:68:39:0b:66:b7:ca:1a:d5:11:49:b5:34:01:a1:db: 17:63:a3:58:5c:63:32:4c:4f:1f:98:46:a5:26:88:54:7a:36: 58:45:d7:ef:11:e4:dc:70:6c:40:ce:6a:89:c2:c4:a4:ae:7c: db:90:be:87:d0:02:b4:ee:78:6c:0a:d2:47:b3:25:b6:0e:2a: 88:61:b1:bf:3f:7f:08:cd:b1:91:4c:ee:7f:ac:dc:84:5f:cb: 8e:a1:c0:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBPfhd9mtWpgizR+FCLynojKPLvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDE0MTAxWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTMwZmQ5M2Q3ODU4MmVjNjg0NWJkMDdlZDhmMjQ5M2Vl MTZmMGM1ODcwNjdjNmRkYjc3NDI3YWYxZDkyMTg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMsLQ9c5DS/mjAj7MCrkFZYdiYQ1nK81lLwAY2RDRiSIfb DXvQCLXmrTOIZlEOuIp597wIA1UG2nQHe+w11AH7DMve8VyF/dR/RvNa3jO/SEq1 wTau+VCITFD1lKPfj0+e5R6DVHhmR99zeLvLK51z0+kV32eZdsm0Qs7QnWDIktgg W5YT1MfwqPNbG1Z/JyJZpPP94d9tm3gptkf7xdF500VW+YOdcom6XpCb9SEfNc0Y sZocMYs7aMM6j3+tSjWAC9DKEGglSCJMEQa9ibXyS0JgmBpIyCLjajeKzr+iPjgb UbUtL43NUoB8QvTgv7388XNm964HOONu32lky5lvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUixEi0L4XqV9nWsH0cjcaL3BXBYYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4NzkxMDk3LTRiZWMtNGQyMC1iZjBmLTk0ZDNlMzg5NTJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDAxAwDQYJKoZIhvcNAQELBQADggEBAAaXUevfeH0pZXHXaKE7tWQQbCK4 8eaoWWJL3Jc3GdsBnQgdjZ91bG2hGRZRC0WBMr4ED7ANkuWbhI7pa90Vb+XEoyZf x+RCMpq81ico7c7oyeMrJ6lPi/fQsqYlnphhH+G9afAAJ+omn2WJXMzTUEwQRqEu csOCls8Q2XlJolNnrAVf1Fl1KDwH9Rz998iOQlzFdrSNuidtGLQ35e0zuKF/bSWt y2g5C2a3yhrVEUm1NAGh2xdjo1hcYzJMTx+YRqUmiFR6NlhF1+8R5NxwbEDOaonC xKSufNuQvofQArTueGwK0kezJbYOKohhsb8/fwjNsZFM7n+s3IRfy46hwDA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:45 2026 by rpki-client