$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1b4442-6b70-422b-86b6-b5fcd3d26365.roa File: 8c1b4442-6b70-422b-86b6-b5fcd3d26365.roa (raw, json) Hash identifier: DJWYQQ4U45CyQgTplvtNpili40+sE2HVlBW7eb7rLeU= Subject key identifier: 86:D9:CD:7A:A2:DF:97:8C:43:89:59:D7:04:DE:CB:FE:3D:49:C1:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 442BDDFE88D6BF39E1E02ABE3FDC7E1C539CD3C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1b4442-6b70-422b-86b6-b5fcd3d26365.roa Signing time: Thu 26 Feb 2026 01:00:09 +0000 ROA not before: Thu 26 Feb 2026 01:00:09 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.114.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2b:dd:fe:88:d6:bf:39:e1:e0:2a:be:3f:dc:7e:1c:53:9c:d3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:00:09 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=c44af0610c36f721d9c4ffe62226690009ff4d23819dac6c790497c7f9ce9aed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:a9:eb:b7:a4:ff:ed:88:95:38:00:67:0f: bb:38:fa:8a:1e:0a:bd:0c:0c:ed:fd:ac:80:39:69: 5b:d7:14:c4:08:98:e9:f5:bc:85:fd:b9:02:39:84: 8e:2f:34:47:ca:b4:16:66:22:97:2f:f4:82:19:d5: c2:d6:61:4c:38:b2:d4:5f:c1:a3:18:0a:01:30:ee: 11:9f:73:9e:91:20:95:66:ce:d6:87:e3:89:8c:8b: ce:ee:25:ec:06:ed:07:56:b7:c0:db:3f:c6:e9:7e: c3:86:89:1a:2b:63:0a:56:22:1c:85:3a:fe:2f:f5: 38:93:48:12:a1:4c:9e:29:0a:3b:a5:3a:d8:be:8a: 06:7d:ce:00:18:bb:90:f4:4d:80:a1:93:72:36:c5: d3:db:43:29:61:37:d4:6a:a0:38:08:d8:d8:4a:78: 83:76:93:84:e5:24:ef:7f:d1:17:ef:56:c3:e0:b5: 52:e3:70:3e:23:f1:e4:b7:b3:37:28:9c:61:37:e2: d1:bb:a6:77:a9:04:b2:a8:d5:ea:ac:54:72:83:9c: 79:68:8f:ff:bd:eb:48:dc:f9:a8:a7:f3:28:f1:d2: 2f:bd:aa:89:5b:6b:21:46:dc:76:d7:ab:c5:1c:48: 85:19:57:9e:8e:c8:8e:9a:e0:d4:16:81:09:a0:4a: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:CD:7A:A2:DF:97:8C:43:89:59:D7:04:DE:CB:FE:3D:49:C1:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1b4442-6b70-422b-86b6-b5fcd3d26365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.114.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9c:82:04:da:7f:55:72:6e:0c:63:81:e5:ca:65:fc:34:d8:30: f1:c6:56:db:cb:d3:90:9f:0e:3e:fe:ea:0c:2b:45:53:94:6b: 0b:35:64:7a:32:74:b4:17:cf:2f:73:03:82:8f:7c:cd:bd:6e: 53:db:5d:14:55:27:92:77:04:8a:d0:ea:5a:27:eb:8d:69:85: d0:f3:22:17:1e:f6:59:c2:c0:31:ec:2b:cf:b9:e6:f2:3c:35: 81:41:25:29:1f:04:cb:c1:68:03:94:69:2c:51:5d:f4:1b:bd: b0:15:03:c4:3d:c5:c4:85:7c:00:14:55:6a:9d:dd:59:6d:83: 54:55:99:18:fe:cd:1b:3b:9d:f0:cc:3c:e8:6b:2f:72:f6:a9: 9c:2b:34:ab:96:98:34:ee:51:ee:73:05:9f:f0:2b:34:bd:71: 22:0b:b8:79:82:bb:67:35:6f:43:db:fc:71:fc:5e:bf:fe:2b: c2:73:20:87:91:26:b5:90:78:e6:bd:0f:dc:25:8f:97:c5:e7: 8e:1e:fe:3f:03:a1:ab:4e:92:e0:3b:da:49:64:f6:54:85:34: 84:28:c5:8d:c4:97:08:e7:e2:e6:a8:74:a2:3d:56:f4:58:1c: 8b:99:e5:c5:c8:d1:d5:8e:e5:a2:c5:e7:f5:10:65:f0:3e:4a: b5:0d:c0:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURCvd/ojWvznh4Cq+P9x+HFOc08QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDEwMDA5WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDRhZjA2MTBjMzZmNzIxZDljNGZmZTYyMjI2NjkwMDA5 ZmY0ZDIzODE5ZGFjNmM3OTA0OTdjN2Y5Y2U5YWVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN3Knrt6T/7YiVOABnD7s4+ooeCr0MDO39rIA5aVvXFMQI mOn1vIX9uQI5hI4vNEfKtBZmIpcv9IIZ1cLWYUw4stRfwaMYCgEw7hGfc56RIJVm ztaH44mMi87uJewG7QdWt8DbP8bpfsOGiRorYwpWIhyFOv4v9TiTSBKhTJ4pCjul Oti+igZ9zgAYu5D0TYChk3I2xdPbQylhN9RqoDgI2NhKeIN2k4TlJO9/0RfvVsPg tVLjcD4j8eS3szconGE34tG7pnepBLKo1eqsVHKDnHloj/+960jc+ain8yjx0i+9 qolbayFG3HbXq8UcSIUZV56OyI6a4NQWgQmgSixfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhtnNeqLfl4xDiVnXBN7L/j1JwVYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjMWI0NDQyLTZiNzAtNDIyYi04NmI2LWI1ZmNkM2QyNjM2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEScjANBgkqhkiG9w0BAQsFAAOCAQEAnIIE2n9Vcm4MY4HlymX8NNgw8cZW 28vTkJ8OPv7qDCtFU5RrCzVkejJ0tBfPL3MDgo98zb1uU9tdFFUnkncEitDqWifr jWmF0PMiFx72WcLAMewrz7nm8jw1gUElKR8Ey8FoA5RpLFFd9Bu9sBUDxD3FxIV8 ABRVap3dWW2DVFWZGP7NGzud8Mw86GsvcvapnCs0q5aYNO5R7nMFn/ArNL1xIgu4 eYK7ZzVvQ9v8cfxev/4rwnMgh5EmtZB45r0P3CWPl8Xnjh7+PwOhq06S4DvaSWT2 VIU0hCjFjcSXCOfi5qh0oj1W9Fgci5nlxcjR1Y7losXn9RBl8D5KtQ3ApA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:27:35 2026 by rpki-client