$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c9d8f83-e035-438f-aaa4-0d65c3fc7a87.roa File: 5c9d8f83-e035-438f-aaa4-0d65c3fc7a87.roa (raw, json) Hash identifier: QC3CbUQxlRr5IjWQSVh/aegOZk1ckcUCgvv6ZAzFSRc= Subject key identifier: 21:09:B2:7C:E4:C9:D1:9C:2D:15:80:06:01:97:6B:78:0A:5D:58:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CB86474B5948030E4C960D200F207E0C864A534 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c9d8f83-e035-438f-aaa4-0d65c3fc7a87.roa Signing time: Sat 28 Feb 2026 02:40:11 +0000 ROA not before: Sat 28 Feb 2026 02:40:11 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b8:64:74:b5:94:80:30:e4:c9:60:d2:00:f2:07:e0:c8:64:a5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:40:11 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=eee78fcafbe81b95848e0ee57371f785fe6aaca87118ca4cc49568354e9414ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:8a:96:28:98:6f:0d:1f:ae:86:00:1c:9f: f2:13:64:94:78:2e:ac:af:5a:ba:e3:6c:0e:cf:9b: 98:4e:e4:79:d2:90:42:0b:35:0f:6a:db:c8:d9:8e: b0:32:87:e5:b3:67:d0:4f:2d:81:50:37:a9:3a:82: 91:b0:1d:14:4d:fd:ac:23:f0:92:01:07:da:17:41: c6:a7:7a:a4:2b:74:dc:ec:a2:e7:fa:cd:82:2d:84: e0:48:77:af:0c:be:06:25:f9:13:e2:20:24:16:fb: 2c:3b:bf:c4:e2:d6:ce:77:1e:dc:f2:f3:a6:d7:53: d6:4f:35:de:d5:cd:d3:a8:07:ee:da:b2:96:e1:3d: 41:5d:7e:a1:bd:ef:41:ed:09:c1:57:c9:36:8c:9c: 86:5b:0d:66:ff:4c:75:f6:7b:f2:90:8f:f8:62:8a: 81:f9:16:71:1e:6e:65:2a:48:ac:a9:8e:f7:ae:bf: 8e:bd:40:b9:fd:9f:0d:fd:2d:db:7b:61:a4:ac:7d: cd:ac:a6:d6:af:e9:70:48:4e:a7:51:22:a8:52:c6: 44:55:58:ca:dd:89:b7:7b:81:2d:a8:b1:ec:82:1a: d4:d6:7e:64:16:8e:2b:bd:74:de:b2:98:ec:cb:23: 18:e6:f3:47:f0:a5:21:bc:fc:ba:89:7f:77:7b:df: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:B2:7C:E4:C9:D1:9C:2D:15:80:06:01:97:6B:78:0A:5D:58:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c9d8f83-e035-438f-aaa4-0d65c3fc7a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.0.0/18 Signature Algorithm: sha256WithRSAEncryption a1:75:a4:13:20:4c:d0:91:49:d2:c4:07:0a:d4:df:b4:b8:a6: 51:08:29:34:5b:67:bd:09:4d:d4:8e:e8:28:68:f1:80:e2:b4: 9f:ab:fa:41:0d:c2:0a:aa:16:08:74:d1:4f:b4:02:4d:79:b1: 14:a0:d0:21:90:7a:e9:97:dc:e5:47:b1:1d:fc:1d:20:ab:84: 7e:c7:06:f6:83:67:16:2c:93:6b:18:96:6a:f9:57:d7:da:ea: f8:e6:05:e7:2b:1a:4e:e5:11:9f:dd:11:c5:0c:f8:1f:3d:0c: 08:d6:3b:55:d5:da:70:39:ff:5c:79:16:9c:df:d5:fd:30:9d: b6:bd:a4:97:78:dc:45:ee:a5:3a:de:39:a0:04:54:fd:c5:96: 71:2c:09:30:bb:68:ac:b9:73:1d:dc:c2:7a:ee:51:f5:d9:1e: 8f:b6:c8:d4:6d:bb:c0:e2:ca:1a:c6:cb:9e:e1:c0:7e:e9:ba: c7:31:7d:5e:0a:80:f9:45:e5:c3:af:63:f2:0d:e9:51:83:a0: 89:0c:2f:da:8f:e5:ea:39:21:7b:d5:d6:89:7c:a1:eb:35:24: 41:6b:cd:a2:94:d0:d3:c2:91:00:89:91:99:d9:1a:0d:a0:a2: 81:0c:5f:7d:24:b9:4b:b6:85:8c:4a:21:46:a1:d1:21:dc:45: a6:c5:c8:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHLhkdLWUgDDkyWDSAPIH4MhkpTQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDI0MDExWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWU3OGZjYWZiZTgxYjk1ODQ4ZTBlZTU3MzcxZjc4NWZl NmFhY2E4NzExOGNhNGNjNDk1NjgzNTRlOTQxNGVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6iYqWKJhvDR+uhgAcn/ITZJR4LqyvWrrjbA7Pm5hO5HnS kEILNQ9q28jZjrAyh+WzZ9BPLYFQN6k6gpGwHRRN/awj8JIBB9oXQcaneqQrdNzs ouf6zYIthOBId68MvgYl+RPiICQW+yw7v8Ti1s53Htzy86bXU9ZPNd7VzdOoB+7a spbhPUFdfqG970HtCcFXyTaMnIZbDWb/THX2e/KQj/hiioH5FnEebmUqSKypjveu v469QLn9nw39Ldt7YaSsfc2sptav6XBITqdRIqhSxkRVWMrdibd7gS2oseyCGtTW fmQWjiu9dN6ymOzLIxjm80fwpSG8/LqJf3d73yETAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIQmyfOTJ0ZwtFYAGAZdreApdWIkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjOWQ4ZjgzLWUwMzUtNDM4Zi1hYWE0LTBkNjVjM2ZjN2E4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYDrgAwDQYJKoZIhvcNAQELBQADggEBAKF1pBMgTNCRSdLEBwrU37S4plEI KTRbZ70JTdSO6Cho8YDitJ+r+kENwgqqFgh00U+0Ak15sRSg0CGQeumX3OVHsR38 HSCrhH7HBvaDZxYsk2sYlmr5V9fa6vjmBecrGk7lEZ/dEcUM+B89DAjWO1XV2nA5 /1x5Fpzf1f0wnba9pJd43EXupTreOaAEVP3FlnEsCTC7aKy5cx3cwnruUfXZHo+2 yNRtu8DiyhrGy57hwH7puscxfV4KgPlF5cOvY/IN6VGDoIkML9qP5eo5IXvV1ol8 oes1JEFrzaKU0NPCkQCJkZnZGg2gooEMX30kuUu2hYxKIUah0SHcRabFyNY= -----END CERTIFICATE-----Generated at Sun Mar 1 21:41:08 2026 by rpki-client