$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77124592-550d-462f-9816-9b3bfb15286c.roa File: 77124592-550d-462f-9816-9b3bfb15286c.roa (raw, json) Hash identifier: +ye8Bgr+1DnPJgq4fRHfLsVFfjMdlueDG1FZP+KWSwA= Subject key identifier: 09:D2:16:88:50:93:BB:82:90:05:4D:C8:9C:23:6C:1C:78:FB:D3:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5AADE45630A5DAE32738049B38DB6DDB9149EBDE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77124592-550d-462f-9816-9b3bfb15286c.roa Signing time: Fri 27 Feb 2026 00:10:06 +0000 ROA not before: Fri 27 Feb 2026 00:10:06 +0000 ROA not after: Thu 28 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ad:e4:56:30:a5:da:e3:27:38:04:9b:38:db:6d:db:91:49:eb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 27 00:10:06 2026 GMT Not After : May 28 23:59:59 2026 GMT Subject: serialNumber=ab8c3252e5667527e33a7b21c75e8f7b22acfb9272bf26c060f7210afd0fff32, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:01:47:61:af:16:48:6d:b8:df:a1:07:2f: e7:69:74:c4:2a:a5:27:5d:d8:e1:fd:0d:6b:d3:cc: d8:db:55:ff:bd:d6:b3:01:15:87:0c:80:55:c5:18: 40:67:a6:ab:99:fc:3d:1e:f0:9e:89:8e:18:6f:d9: 60:10:02:07:2c:c3:83:d0:b8:81:f5:a9:be:b0:b8: aa:38:57:27:f4:32:6a:ca:57:ab:29:70:4e:ed:b2: 89:d5:e2:0a:de:a9:9f:7a:0b:c5:9d:33:ba:05:45: 8d:c5:95:d1:a3:78:fa:cf:26:d2:89:ce:eb:63:c6: c1:71:94:63:ab:ba:73:f7:15:c9:a7:dd:d7:69:d0: f6:ba:a1:a5:8e:82:2c:84:d9:e8:27:b6:c2:34:31: 97:63:1c:c9:ae:6a:3b:44:f3:ba:87:f0:33:61:16: 81:5f:9a:c6:b4:2b:f3:4f:83:fb:10:1f:a0:fa:75: 6b:94:00:d3:c6:4d:23:2c:07:a1:fc:42:a4:d3:7d: b5:df:65:78:a6:f7:b5:ba:d2:9c:22:47:d7:a6:84: 70:ae:4d:1e:ff:67:a5:8b:eb:b7:63:a1:a5:68:98: 4e:d8:93:0b:64:79:71:55:a8:d1:3c:74:c6:15:a5: c7:19:d3:d4:9b:d3:0c:26:e6:6e:30:f9:a9:6c:ca: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D2:16:88:50:93:BB:82:90:05:4D:C8:9C:23:6C:1C:78:FB:D3:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77124592-550d-462f-9816-9b3bfb15286c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.152.0/23 Signature Algorithm: sha256WithRSAEncryption 89:0f:b7:bc:0a:5c:cb:a5:b2:9e:86:eb:e3:ff:e9:a3:c2:2d: a0:be:3b:d7:79:a8:80:56:ff:6b:ab:d8:94:2b:dd:63:50:e8: 2b:60:dc:05:44:e8:ac:7b:99:c4:cb:91:44:85:cb:2f:3d:3a: f6:2c:68:39:1b:84:aa:25:1f:c1:72:ad:5c:89:21:38:36:bb: 63:08:ed:2f:a4:84:94:e1:87:6d:40:e4:8a:46:5e:2c:94:99: 8a:49:37:ed:04:1a:8e:3f:b2:70:5b:71:b6:a0:ed:14:17:2f: c5:bc:2e:25:ca:d8:5f:9b:79:23:92:97:1c:4c:0a:59:07:27: c0:ef:d7:77:d6:44:1a:b7:32:6f:ee:ac:2e:1a:52:25:38:e4: 7a:87:24:32:60:65:4d:21:57:7e:dc:05:4a:cd:7a:9a:52:12: 81:91:00:5e:9d:38:0c:06:e7:a4:c6:f4:09:30:d4:71:f1:e4: a5:79:d1:3a:5f:0e:bb:65:e9:df:a7:36:18:30:e8:e7:3b:25: 6d:f3:b9:95:1d:2c:6e:7b:8e:46:16:4e:93:69:68:ae:b6:a1: fb:5c:2b:6e:75:82:d9:36:f0:6f:6b:66:45:73:cd:bc:3d:02: 09:04:42:35:19:8d:da:64:ba:1a:f4:5d:6f:c3:7a:e5:82:a2: 56:fe:33:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWq3kVjCl2uMnOASbONtt25FJ694wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI3MDAxMDA2WhcNMjYwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjhjMzI1MmU1NjY3NTI3ZTMzYTdiMjFjNzVlOGY3YjIy YWNmYjkyNzJiZjI2YzA2MGY3MjEwYWZkMGZmZjMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQCAFHYa8WSG2436EHL+dpdMQqpSdd2OH9DWvTzNjbVf+9 1rMBFYcMgFXFGEBnpquZ/D0e8J6Jjhhv2WAQAgcsw4PQuIH1qb6wuKo4Vyf0MmrK V6spcE7tsonV4greqZ96C8WdM7oFRY3FldGjePrPJtKJzutjxsFxlGOrunP3Fcmn 3ddp0Pa6oaWOgiyE2egntsI0MZdjHMmuajtE87qH8DNhFoFfmsa0K/NPg/sQH6D6 dWuUANPGTSMsB6H8QqTTfbXfZXim97W60pwiR9emhHCuTR7/Z6WL67djoaVomE7Y kwtkeXFVqNE8dMYVpccZ09Sb0wwm5m4w+alsysbPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCdIWiFCTu4KQBU3InCNsHHj709kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc3MTI0NTkyLTU1MGQtNDYyZi05ODE2LTliM2JmYjE1Mjg2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrZgwDQYJKoZIhvcNAQELBQADggEBAIkPt7wKXMulsp6G6+P/6aPCLaC+ O9d5qIBW/2ur2JQr3WNQ6Ctg3AVE6Kx7mcTLkUSFyy89OvYsaDkbhKolH8FyrVyJ ITg2u2MI7S+khJThh21A5IpGXiyUmYpJN+0EGo4/snBbcbag7RQXL8W8LiXK2F+b eSOSlxxMClkHJ8Dv13fWRBq3Mm/urC4aUiU45HqHJDJgZU0hV37cBUrNeppSEoGR AF6dOAwG56TG9Akw1HHx5KV50TpfDrtl6d+nNhgw6Oc7JW3zuZUdLG57jkYWTpNp aK62oftcK251gtk28G9rZkVzzbw9AgkEQjUZjdpkuhr0XW/DeuWColb+M3w= -----END CERTIFICATE-----Generated at Sun Mar 1 21:49:19 2026 by rpki-client