$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d92564f-44e3-4e86-813b-e2a3a38519f3.roa File: 7d92564f-44e3-4e86-813b-e2a3a38519f3.roa (raw, json) Hash identifier: K5EOnK8MUnd33wIOQSnE77kXIgKqL1Lpqln8JVbAs0w= Subject key identifier: B5:9B:76:0A:5D:1C:DE:96:53:DC:91:C5:2B:B0:9D:C1:89:56:A1:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C60A8B1AB7DCCC493271FC79498E30020435FB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d92564f-44e3-4e86-813b-e2a3a38519f3.roa Signing time: Mon 23 Feb 2026 00:50:56 +0000 ROA not before: Mon 23 Feb 2026 00:50:56 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:60:a8:b1:ab:7d:cc:c4:93:27:1f:c7:94:98:e3:00:20:43:5f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:50:56 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=64d8ccc001043a0a6705f22fb295a8d9a148fad18029921eec327fd927d0b3a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:52:74:91:b8:9f:27:cc:bb:27:26:95:d9: 47:d5:b8:5a:3c:94:e5:90:4f:e3:79:c0:24:61:6d: 0b:6c:0e:64:f8:b1:e1:8f:42:45:52:6a:44:1f:9a: 1e:06:ac:e3:3f:c2:ec:e1:b4:00:02:29:d8:89:2a: ec:a7:d7:c1:e8:e6:5f:df:92:56:9d:49:01:32:97: a4:5e:e8:d5:6c:27:ab:74:cb:8e:36:1c:ce:dd:e7: f9:d1:0d:a8:2d:87:cc:38:d2:f8:9f:7a:f9:71:bd: 05:47:24:19:45:88:c5:14:d8:42:ba:8a:9a:90:f0: 2d:d7:6f:4a:ab:d5:c5:ae:8c:d4:59:2b:83:a2:64: 34:e5:c6:f7:ff:4a:bf:c7:24:ca:7a:a5:b6:8d:0e: 57:c5:02:36:de:24:7e:b1:1f:b3:eb:14:96:44:ac: 28:5c:68:c6:d8:4c:05:e4:b6:20:fd:0a:cf:59:8d: bc:03:69:df:9d:29:19:e5:5c:e7:54:84:a4:62:cf: b8:5b:3e:24:8f:a8:3c:60:85:e5:17:59:20:ed:58: d6:4c:db:a9:f5:29:ff:d8:32:84:cb:42:4f:3e:67: 05:1f:d2:21:d0:98:af:9e:a5:27:d2:3a:b5:7a:87: 4c:a1:3d:4f:33:6a:01:42:27:6c:eb:0f:ef:e0:d0: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9B:76:0A:5D:1C:DE:96:53:DC:91:C5:2B:B0:9D:C1:89:56:A1:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d92564f-44e3-4e86-813b-e2a3a38519f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.167.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1d:ac:a6:0d:5a:76:60:98:86:09:b4:e9:88:b6:48:ca:f1: 4f:08:05:af:31:b4:93:79:3b:6c:3b:6d:16:95:3b:ca:60:8d: 2c:c7:fd:e7:ca:e0:d5:1c:64:2e:3d:5a:c8:e6:54:da:ff:61: 06:1e:63:9f:73:c1:d3:fd:70:0c:88:8c:21:86:76:01:c8:17: 4b:22:3d:45:b7:83:b4:22:64:f3:32:aa:c8:dc:f6:cf:14:dc: 09:f9:02:54:3a:b4:f6:ac:a2:c1:83:db:c0:44:a0:8e:6b:0f: 87:8c:a3:a7:5a:b6:3a:4f:7b:77:ad:05:33:c6:ba:49:2b:37: c4:09:71:36:fc:16:87:cb:f4:67:88:c8:96:44:d1:a1:00:1b: ab:7d:05:33:b9:b0:d1:81:e5:6f:01:0e:13:3a:be:ac:2b:cd: c4:3d:e1:c0:63:82:4e:4d:c2:60:78:01:e9:f6:f9:c8:69:fa: 00:62:3c:a8:4a:73:7c:68:ce:cf:19:0f:2f:09:3d:93:7a:9e: cc:9c:40:8c:3b:ca:d6:34:20:41:ba:30:9f:3c:9f:b3:b6:ca: b0:7f:e6:8b:d7:4a:75:91:a8:a7:ba:ec:5e:a6:c2:92:af:3f: ab:ee:cf:07:1b:f6:28:d3:e5:61:05:1c:25:31:c1:14:1f:41: dd:01:1b:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHGCosat9zMSTJx/HlJjjACBDX7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDA1MDU2WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGQ4Y2NjMDAxMDQzYTBhNjcwNWYyMmZiMjk1YThkOWEx NDhmYWQxODAyOTkyMWVlYzMyN2ZkOTI3ZDBiM2EwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhwFJ0kbifJ8y7JyaV2UfVuFo8lOWQT+N5wCRhbQtsDmT4 seGPQkVSakQfmh4GrOM/wuzhtAACKdiJKuyn18Ho5l/fkladSQEyl6Re6NVsJ6t0 y442HM7d5/nRDagth8w40vifevlxvQVHJBlFiMUU2EK6ipqQ8C3Xb0qr1cWujNRZ K4OiZDTlxvf/Sr/HJMp6pbaNDlfFAjbeJH6xH7PrFJZErChcaMbYTAXktiD9Cs9Z jbwDad+dKRnlXOdUhKRiz7hbPiSPqDxgheUXWSDtWNZM26n1Kf/YMoTLQk8+ZwUf 0iHQmK+epSfSOrV6h0yhPU8zagFCJ2zrD+/g0Cf7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtZt2Cl0c3pZT3JHFK7CdwYlWoXAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkOTI1NjRmLTQ0ZTMtNGU4Ni04MTNiLWUyYTNhMzg1MTlmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRKcwDQYJKoZIhvcNAQELBQADggEBAF8drKYNWnZgmIYJtOmItkjK8U8I Ba8xtJN5O2w7bRaVO8pgjSzH/efK4NUcZC49WsjmVNr/YQYeY59zwdP9cAyIjCGG dgHIF0siPUW3g7QiZPMyqsjc9s8U3An5AlQ6tPasosGD28BEoI5rD4eMo6datjpP e3etBTPGukkrN8QJcTb8FofL9GeIyJZE0aEAG6t9BTO5sNGB5W8BDhM6vqwrzcQ9 4cBjgk5NwmB4Aen2+chp+gBiPKhKc3xozs8ZDy8JPZN6nsycQIw7ytY0IEG6MJ88 n7O2yrB/5ovXSnWRqKe67F6mwpKvP6vuzwcb9ijT5WEFHCUxwRQfQd0BG5Q= -----END CERTIFICATE-----Generated at Sun Mar 1 21:41:00 2026 by rpki-client