$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68a1376f-7302-47e4-821d-ea0c47086edd.roa File: 68a1376f-7302-47e4-821d-ea0c47086edd.roa (raw, json) Hash identifier: 5nr4mSMeGEuODzIMgCyzUTw3ROmYMrFtN+dStDGooKg= Subject key identifier: 6A:8C:6A:E5:90:88:04:5F:25:48:76:14:71:48:03:F9:4E:5C:96:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 15DCE895BE06E872CCC052CB15EC520367CE5FC0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68a1376f-7302-47e4-821d-ea0c47086edd.roa Signing time: Tue 17 Feb 2026 01:30:12 +0000 ROA not before: Tue 17 Feb 2026 01:30:12 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.248.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dc:e8:95:be:06:e8:72:cc:c0:52:cb:15:ec:52:03:67:ce:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:30:12 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=a476b0bac6d04b97dd7a072e82bc2b2502fcd5739c66a9986ca63fb833cf6024, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:17:6f:40:17:31:fc:b1:52:dc:22:65:89: bc:82:7c:35:b7:f9:41:02:80:ab:c2:2b:82:35:3d: 9d:e0:da:44:68:06:a0:a3:c8:e3:7f:90:c8:90:7c: 8a:a2:02:d7:dd:b4:c0:e8:b7:36:72:d1:a4:f8:94: bb:0a:36:13:9c:ef:0c:a8:9c:34:39:98:7d:d4:d2: 60:50:7f:30:8f:77:d1:bd:35:d7:03:bb:58:97:47: 43:fb:be:b3:f9:dd:c1:34:55:b4:c3:f1:d0:77:c1: d0:bb:4e:10:11:01:6e:bd:2f:cb:0c:55:12:f5:81: 2a:3b:87:b9:29:6c:4f:e3:02:34:02:c1:31:82:fa: b4:ab:23:b7:0e:21:99:36:50:9b:82:ae:82:f4:46: 99:23:0c:33:9a:95:2a:4b:5b:38:00:c6:65:22:26: c4:f6:22:5a:40:c3:8d:07:53:93:a1:68:b5:2d:8d: 0b:7e:ed:26:ef:a2:d5:a2:f9:0a:6a:e7:ea:5c:52: 3f:d0:42:6a:8b:84:71:3a:69:2b:9c:49:63:b6:81: 77:21:44:de:3e:9f:28:5d:a3:c1:39:08:91:18:7c: 8d:86:e0:c8:97:52:2f:60:ae:4c:d5:52:d5:9d:e2: c0:a5:e5:c6:3f:03:6b:6b:58:69:80:d7:64:74:7c: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8C:6A:E5:90:88:04:5F:25:48:76:14:71:48:03:F9:4E:5C:96:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68a1376f-7302-47e4-821d-ea0c47086edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.248.248.0/21 Signature Algorithm: sha256WithRSAEncryption 31:75:08:91:fa:a9:26:e6:58:81:72:43:3c:5a:7f:4a:ac:7b: 0f:24:a8:9a:5f:cb:80:19:7d:f3:0a:66:03:10:4d:7f:01:8e: 91:43:28:02:f0:12:f4:95:01:c1:5b:82:71:7f:1b:3c:07:cc: 92:1e:c9:2b:bd:e0:e8:5d:55:d3:a8:15:93:65:af:d3:09:0f: 8d:c8:29:6d:36:74:ce:4c:97:cf:64:ba:27:a5:94:d9:80:cd: d5:55:c4:6e:4b:4a:09:e6:44:99:dd:d9:08:7e:8f:1b:56:1f: 8a:d3:90:41:84:e0:e2:1a:39:f9:38:9c:a2:0f:e7:4a:ae:4a: ed:c4:86:18:5f:1c:8b:2e:fe:cc:41:f6:92:80:4d:4c:98:39: 17:5f:c4:03:65:19:30:4d:a9:5a:31:0d:98:a6:57:f0:c7:6d: 71:a3:d1:08:31:52:a1:27:83:34:3e:e3:b7:30:d5:88:ea:8e: 66:a0:36:13:20:f2:23:e7:3a:27:e4:a9:26:9a:9b:22:73:60: 50:2b:47:43:f6:6c:b3:ef:22:fe:21:8e:bc:7f:15:8c:b4:8b: 0e:a3:a6:0b:71:fb:b1:89:10:06:c4:dd:21:4f:9d:0d:b8:3b: 1f:c5:29:1b:83:e8:70:48:0e:63:37:a0:1b:f5:67:78:0d:55: da:ba:2b:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFdzolb4G6HLMwFLLFexSA2fOX8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDEzMDEyWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDc2YjBiYWM2ZDA0Yjk3ZGQ3YTA3MmU4MmJjMmIyNTAy ZmNkNTczOWM2NmE5OTg2Y2E2M2ZiODMzY2Y2MDI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUzBdvQBcx/LFS3CJlibyCfDW3+UECgKvCK4I1PZ3g2kRo BqCjyON/kMiQfIqiAtfdtMDotzZy0aT4lLsKNhOc7wyonDQ5mH3U0mBQfzCPd9G9 NdcDu1iXR0P7vrP53cE0VbTD8dB3wdC7ThARAW69L8sMVRL1gSo7h7kpbE/jAjQC wTGC+rSrI7cOIZk2UJuCroL0RpkjDDOalSpLWzgAxmUiJsT2IlpAw40HU5OhaLUt jQt+7SbvotWi+Qpq5+pcUj/QQmqLhHE6aSucSWO2gXchRN4+nyhdo8E5CJEYfI2G 4MiXUi9grkzVUtWd4sCl5cY/A2trWGmA12R0fBs7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaoxq5ZCIBF8lSHYUcUgD+U5cllIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4YTEzNzZmLTczMDItNDdlNC04MjFkLWVhMGM0NzA4NmVkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMD+PgwDQYJKoZIhvcNAQELBQADggEBADF1CJH6qSbmWIFyQzxaf0qsew8k qJpfy4AZffMKZgMQTX8BjpFDKALwEvSVAcFbgnF/GzwHzJIeySu94OhdVdOoFZNl r9MJD43IKW02dM5Ml89kuiellNmAzdVVxG5LSgnmRJnd2Qh+jxtWH4rTkEGE4OIa Ofk4nKIP50quSu3EhhhfHIsu/sxB9pKATUyYORdfxANlGTBNqVoxDZimV/DHbXGj 0QgxUqEngzQ+47cw1YjqjmagNhMg8iPnOifkqSaamyJzYFArR0P2bLPvIv4hjrx/ FYy0iw6jpgtx+7GJEAbE3SFPnQ24Ox/FKRuD6HBIDmM3oBv1Z3gNVdq6K/4= -----END CERTIFICATE-----Generated at Mon Mar 2 01:24:35 2026 by rpki-client