$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/708a2b09-7f3c-46db-9c8c-059941f6c59d.roa File: 708a2b09-7f3c-46db-9c8c-059941f6c59d.roa (raw, json) Hash identifier: ZfPijV4jkV6bt/yAdIZ7Z16boxRSH/EUdb3PWBagPH0= Subject key identifier: B2:90:B8:71:96:49:4C:30:6E:25:51:84:A7:B2:BF:1D:BB:D7:29:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2579969420A9723BEB1551560B1FF32143CA31C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/708a2b09-7f3c-46db-9c8c-059941f6c59d.roa Signing time: Tue 17 Feb 2026 01:20:56 +0000 ROA not before: Tue 17 Feb 2026 01:20:56 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.252.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:79:96:94:20:a9:72:3b:eb:15:51:56:0b:1f:f3:21:43:ca:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:20:56 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=e8133d768c58ba97cab9b922fdd20fa07a5d698c86c5e60c9926e7ff063e45bd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:f2:7c:00:f2:40:a7:06:54:b2:c6:9b:dc: 7b:75:ce:64:1d:b6:fc:38:0e:f2:05:d0:d8:d3:15: 0f:d7:44:52:1c:42:c5:da:cd:23:6f:40:aa:53:4f: 02:ff:88:b9:3a:af:ea:b1:ac:fd:aa:ad:15:04:76: d1:05:b5:8d:e9:31:5f:bc:d3:3e:da:9b:cf:7c:ed: 5b:86:5b:07:50:8c:90:ee:a0:0e:17:f9:ad:29:98: 39:2b:bc:20:3b:dd:bf:55:3e:f1:14:a2:0a:43:f5: 16:2a:e7:4b:c7:84:aa:85:fd:40:69:97:01:cc:75: a9:5c:f7:cc:90:6b:a7:67:4e:3b:6d:78:29:5c:d7: a6:88:e0:0b:45:63:72:20:fa:e4:b5:fd:66:53:59: 15:8b:af:4f:d9:46:d4:48:11:65:16:2c:cd:98:fc: f5:5e:80:36:54:0f:c1:98:87:bf:81:d1:60:de:d9: f3:57:25:9a:cd:c7:58:38:29:25:4b:bc:cc:27:18: 03:cb:37:21:02:a4:ee:62:78:85:3b:a9:7b:bb:f1: bd:d2:14:bb:48:0e:a1:70:c4:fd:98:38:9b:d1:65: 61:0e:4b:55:eb:2c:91:62:30:f3:36:40:c5:1b:2a: 5f:46:6f:d2:af:d2:c8:2b:f2:f6:b7:4a:83:a8:41: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:90:B8:71:96:49:4C:30:6E:25:51:84:A7:B2:BF:1D:BB:D7:29:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/708a2b09-7f3c-46db-9c8c-059941f6c59d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.252.0.0/14 Signature Algorithm: sha256WithRSAEncryption ac:db:71:1e:e6:d0:2b:53:6f:7f:27:bc:52:24:0f:47:ec:49: d9:c6:e1:4f:de:12:8c:14:ad:0b:dc:8b:a0:97:bb:22:31:58: 98:8d:ba:de:c2:32:82:b0:13:62:99:a2:d8:9f:62:0f:7c:94: 7d:87:b0:7e:48:88:02:e6:65:4b:8e:27:f3:62:85:20:74:ee: b4:b9:15:ba:1b:86:0c:0d:7b:80:33:d4:51:80:f5:ca:4a:c5: a5:62:54:7b:9d:9f:f5:c3:b8:5e:4a:90:04:a6:10:f1:e1:72: a7:9b:50:38:fc:69:5e:68:cd:08:f4:af:b8:d7:0d:29:b8:e3: 0d:d3:c7:b4:c1:11:7a:f2:17:9d:ae:2b:2c:a0:76:0c:de:9b: 3f:6b:59:40:bf:59:23:78:17:b4:10:2c:d0:f2:67:86:b2:06: dd:04:f0:4a:50:c2:5c:33:2a:94:1c:c5:f3:94:0f:9e:a3:31: 4a:c4:33:6b:a4:07:97:68:a1:f9:15:3d:40:79:9a:1d:07:39: aa:5a:5a:97:59:9c:8f:ba:e3:70:26:4e:8f:de:f9:98:17:15: 7b:69:ad:4b:07:a1:e5:27:4e:9d:33:4a:72:ff:ca:1e:c7:13: 24:43:49:33:58:b6:cf:92:de:e4:c5:d0:2c:1e:0c:02:77:e1: d8:7c:8e:ae -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJXmWlCCpcjvrFVFWCx/zIUPKMcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDEyMDU2WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODEzM2Q3NjhjNThiYTk3Y2FiOWI5MjJmZGQyMGZhMDdh NWQ2OThjODZjNWU2MGM5OTI2ZTdmZjA2M2U0NWJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDy9fJ8APJApwZUssab3Ht1zmQdtvw4DvIF0NjTFQ/XRFIc QsXazSNvQKpTTwL/iLk6r+qxrP2qrRUEdtEFtY3pMV+80z7am8987VuGWwdQjJDu oA4X+a0pmDkrvCA73b9VPvEUogpD9RYq50vHhKqF/UBplwHMdalc98yQa6dnTjtt eClc16aI4AtFY3Ig+uS1/WZTWRWLr0/ZRtRIEWUWLM2Y/PVegDZUD8GYh7+B0WDe 2fNXJZrNx1g4KSVLvMwnGAPLNyECpO5ieIU7qXu78b3SFLtIDqFwxP2YOJvRZWEO S1XrLJFiMPM2QMUbKl9Gb9Kv0sgr8va3SoOoQc6XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUspC4cZZJTDBuJVGEp7K/HbvXKREwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwOGEyYjA5LTdmM2MtNDZkYi05YzhjLTA1OTk0MWY2YzU5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwID/DANBgkqhkiG9w0BAQsFAAOCAQEArNtxHubQK1Nvfye8UiQPR+xJ2cbh T94SjBStC9yLoJe7IjFYmI263sIygrATYpmi2J9iD3yUfYewfkiIAuZlS44n82KF IHTutLkVuhuGDA17gDPUUYD1ykrFpWJUe52f9cO4XkqQBKYQ8eFyp5tQOPxpXmjN CPSvuNcNKbjjDdPHtMERevIXna4rLKB2DN6bP2tZQL9ZI3gXtBAs0PJnhrIG3QTw SlDCXDMqlBzF85QPnqMxSsQza6QHl2ih+RU9QHmaHQc5qlpal1mcj7rjcCZOj975 mBcVe2mtSweh5SdOnTNKcv/KHscTJENJM1i2z5Le5MXQLB4MAnfh2HyOrg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:26 2026 by rpki-client