$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/844564db-4676-49b8-b5a2-b6f66da4999a.roa File: 844564db-4676-49b8-b5a2-b6f66da4999a.roa (raw, json) Hash identifier: 3J2nVdKestKuUhRUwCQPIKn8KnpH+uaZ+BLSDgywOUE= Subject key identifier: AF:CA:70:8C:02:8C:4F:34:2E:56:56:40:3F:CC:0B:BD:1B:75:DE:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 748419B4C4D977E524F81EBBEC7274538E3358A0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/844564db-4676-49b8-b5a2-b6f66da4999a.roa Signing time: Sat 28 Feb 2026 01:00:47 +0000 ROA not before: Sat 28 Feb 2026 01:00:47 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:84:19:b4:c4:d9:77:e5:24:f8:1e:bb:ec:72:74:53:8e:33:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 01:00:47 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=02cf33659789ffa7cedb4b81e0dd9a624088fbbf64092575bdbafde223fdfdfc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:b5:53:3d:64:fe:1a:c6:b8:23:25:de:61: d3:46:32:6f:86:48:26:26:08:0a:23:02:42:3e:49: bd:35:66:93:51:c3:47:e9:ce:61:60:12:8e:ca:f7: c8:c1:33:0c:67:34:2b:bf:00:49:18:7e:77:f0:55: ba:ee:f4:51:7e:c5:ea:04:a2:29:3f:e0:17:84:f6: 68:f6:70:25:77:02:d6:66:48:f7:3b:7a:89:d1:d6: d2:8a:40:79:2c:47:c3:8b:dd:d5:f1:8d:83:4c:80: ab:44:3f:d0:44:36:79:5d:90:47:51:b9:3f:32:c2: 09:d9:9b:93:07:04:57:04:3e:21:c4:27:17:16:ad: a7:56:73:8d:17:78:c1:ad:7f:ec:31:d5:ad:96:6b: 1e:86:15:e2:4f:7e:1f:17:9e:3b:d5:6f:d2:72:b9: c8:c5:ba:75:cc:2f:a3:86:80:7b:d9:09:ae:5e:98: d3:5b:a8:7a:04:56:dc:8c:59:fe:92:72:99:41:05: ec:b6:b4:34:a5:3a:a8:b8:d6:93:ec:c7:d0:af:ab: 6b:1b:b9:ad:60:6a:35:08:1e:b8:44:cb:40:95:8e: b7:fd:35:b0:9e:a4:bc:8d:0d:1b:74:42:1d:43:fa: 79:83:fe:1f:ea:8e:a6:80:fc:f7:53:a4:5f:9b:6c: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CA:70:8C:02:8C:4F:34:2E:56:56:40:3F:CC:0B:BD:1B:75:DE:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/844564db-4676-49b8-b5a2-b6f66da4999a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.160.0/20 Signature Algorithm: sha256WithRSAEncryption 61:e2:5f:48:c9:84:42:6e:18:26:47:af:2a:05:97:d0:ae:73: b5:62:a1:d6:4b:bb:07:59:b0:a3:65:ce:25:db:de:ea:83:15: 1c:d5:07:e6:5e:47:f3:2f:2b:ed:c7:a6:79:f5:98:5f:b4:e1: 77:54:6a:5b:65:37:0a:43:38:92:11:03:e7:1a:a2:74:e3:08: bf:1e:6d:fd:10:00:ba:24:c4:c4:a1:39:6f:42:40:8d:7c:4e: db:2c:77:0b:04:79:13:c4:61:53:04:71:92:a5:80:45:ed:d4: 57:ff:13:65:9f:14:97:79:cc:cb:96:42:40:e8:c3:67:27:b8: 99:5e:ba:8a:26:aa:94:92:e7:58:a6:8f:56:18:4c:43:1c:71: 3f:4f:0e:ae:9d:ac:51:db:cc:99:ff:37:9f:1e:61:2c:ec:92: 7e:09:12:67:fa:ef:a7:9e:42:b4:d5:3b:27:0e:45:74:b8:21: da:94:1c:27:37:d6:73:01:4f:06:a7:70:24:d6:a1:10:2d:cf: 41:2a:e8:83:05:d0:f3:a3:c1:30:0d:f3:e0:9a:c8:aa:9e:68: 90:3d:b2:67:5d:96:f5:cc:e9:fe:99:da:d7:19:79:7f:8d:32: 4f:a6:ad:d1:42:d4:98:10:98:b6:dd:5c:d5:d6:07:5d:5c:f9: d7:f9:0e:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdIQZtMTZd+Uk+B677HJ0U44zWKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDEwMDQ3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmNmMzM2NTk3ODlmZmE3Y2VkYjRiODFlMGRkOWE2MjQw ODhmYmJmNjQwOTI1NzViZGJhZmRlMjIzZmRmZGZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLerVTPWT+Gsa4IyXeYdNGMm+GSCYmCAojAkI+Sb01ZpNR w0fpzmFgEo7K98jBMwxnNCu/AEkYfnfwVbru9FF+xeoEoik/4BeE9mj2cCV3AtZm SPc7eonR1tKKQHksR8OL3dXxjYNMgKtEP9BENnldkEdRuT8ywgnZm5MHBFcEPiHE JxcWradWc40XeMGtf+wx1a2Wax6GFeJPfh8XnjvVb9JyucjFunXML6OGgHvZCa5e mNNbqHoEVtyMWf6ScplBBey2tDSlOqi41pPsx9Cvq2sbua1gajUIHrhEy0CVjrf9 NbCepLyNDRt0Qh1D+nmD/h/qjqaA/PdTpF+bbN2/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr8pwjAKMTzQuVlZAP8wLvRt13okwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0NDU2NGRiLTQ2NzYtNDliOC1iNWEyLWI2ZjY2ZGE0OTk5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDrqAwDQYJKoZIhvcNAQELBQADggEBAGHiX0jJhEJuGCZHryoFl9Cuc7Vi odZLuwdZsKNlziXb3uqDFRzVB+ZeR/MvK+3Hpnn1mF+04XdUaltlNwpDOJIRA+ca onTjCL8ebf0QALokxMShOW9CQI18TtssdwsEeRPEYVMEcZKlgEXt1Ff/E2WfFJd5 zMuWQkDow2cnuJleuoomqpSS51imj1YYTEMccT9PDq6drFHbzJn/N58eYSzskn4J Emf676eeQrTVOycORXS4IdqUHCc31nMBTwancCTWoRAtz0Eq6IMF0POjwTAN8+Ca yKqeaJA9smddlvXM6f6Z2tcZeX+NMk+mrdFC1JgQmLbdXNXWB11c+df5DiY= -----END CERTIFICATE-----Generated at Mon Mar 2 01:25:39 2026 by rpki-client