$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9168a96d-316a-417d-a57f-7740a31062cd.roa File: 9168a96d-316a-417d-a57f-7740a31062cd.roa (raw, json) Hash identifier: dCVsgubv1rWTFQ/iyNeNKdxr5/3wyxjDUqy/PTyXndk= Subject key identifier: D6:21:5C:C2:DA:1D:D5:8D:D8:88:94:F7:6A:E8:60:0F:16:36:92:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F79816BAC4108D4AF234DC788FEDD961336E1AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9168a96d-316a-417d-a57f-7740a31062cd.roa Signing time: Mon 23 Feb 2026 00:10:12 +0000 ROA not before: Mon 23 Feb 2026 00:10:12 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:79:81:6b:ac:41:08:d4:af:23:4d:c7:88:fe:dd:96:13:36:e1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:10:12 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=b118cb1072aa74587593d7c74850c975f58f5e6a0e2ab9fe5f4f0fed3a90bd98, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:7f:7a:e0:38:b5:cf:b2:73:c4:f5:8e:00: 0e:ee:57:53:17:1c:6c:c9:64:06:01:a8:b5:67:9a: 4c:67:a6:32:03:9a:47:2b:28:e9:bc:90:f1:20:f2: 71:1a:26:8b:bd:91:0a:42:38:60:cf:39:9b:26:04: 64:f9:d5:08:ad:8c:32:9f:c5:54:5e:fe:0c:27:37: 2d:9a:a7:9a:5d:ca:7d:25:f7:4d:28:05:2e:fc:e5: d3:67:6e:08:40:84:2f:fa:1a:70:b2:9b:68:51:a3: 8c:68:d7:ea:66:b6:64:4d:ba:d8:ca:68:fa:f8:10: d6:45:3e:b4:a4:bc:21:8a:12:dd:f8:90:c9:a9:4c: d4:02:a4:6d:4d:94:1a:cf:ce:93:13:72:83:81:66: 65:3c:05:9c:b4:c5:f2:63:e6:cb:b0:f0:a8:f5:30: 42:91:03:bf:ad:3a:d9:bc:52:3e:dc:7a:c8:f5:18: 4d:84:72:b8:b5:05:4e:b4:fe:e8:5a:cf:45:df:71: f2:d8:01:1a:ba:cf:5c:57:f5:56:a3:ef:cc:1d:0b: fe:6e:4e:1e:50:05:57:23:b1:2a:41:21:15:37:88: 09:70:0f:e3:2e:6f:02:f7:39:b1:ce:ff:eb:f5:e4: 33:0a:5f:e2:b5:33:dc:8f:38:5a:d7:8a:c0:5c:b3: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:5C:C2:DA:1D:D5:8D:D8:88:94:F7:6A:E8:60:0F:16:36:92:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9168a96d-316a-417d-a57f-7740a31062cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.96.0/24 Signature Algorithm: sha256WithRSAEncryption 82:15:ac:53:0a:2a:ad:ae:c9:38:a7:9e:b2:8a:d9:2d:5d:89: 3b:b5:33:3b:1e:f2:d9:d4:a7:fb:1f:dd:67:a3:b9:45:32:ae: 58:61:fd:ac:23:1e:e0:49:47:da:a8:e1:f0:d7:f6:5d:92:8d: 37:6b:3b:36:f9:91:2c:da:0a:63:b6:c7:af:56:00:98:11:18: ea:35:2d:15:2b:dd:3d:ef:28:a8:56:fb:8e:1a:56:7a:3a:0b: c7:b8:b2:de:a2:2d:1e:7f:f9:24:52:e4:00:05:f5:dd:cd:6c: 2a:93:6d:06:5d:23:95:db:08:8e:7a:e7:47:c0:db:29:37:a4: 8d:a0:8d:9e:16:1d:e9:5f:e4:18:f9:f2:41:0a:83:d5:1d:dc: f9:d4:93:c2:ac:3a:54:5a:d3:52:15:90:10:f7:78:0c:b7:db: 8a:ac:11:e8:15:fc:71:aa:f2:82:6b:3d:53:68:a6:1d:7f:e4: 96:77:e4:c8:3a:77:bc:06:7e:ef:2b:95:1f:4b:1a:38:38:68: ee:f5:6f:09:23:d0:49:77:3b:10:cc:83:68:52:e8:2c:bd:16: 01:96:8b:d7:f1:51:a0:0e:69:f5:73:46:5a:65:9a:35:e4:83: 2d:0a:35:f1:2f:bf:37:55:2e:4e:2d:aa:5c:aa:f9:fe:c8:64: 1f:ea:83:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL3mBa6xBCNSvI03HiP7dlhM24aowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAxMDEyWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTE4Y2IxMDcyYWE3NDU4NzU5M2Q3Yzc0ODUwYzk3NWY1 OGY1ZTZhMGUyYWI5ZmU1ZjRmMGZlZDNhOTBiZDk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoFn964Di1z7JzxPWOAA7uV1MXHGzJZAYBqLVnmkxnpjID mkcrKOm8kPEg8nEaJou9kQpCOGDPOZsmBGT51QitjDKfxVRe/gwnNy2ap5pdyn0l 900oBS785dNnbghAhC/6GnCym2hRo4xo1+pmtmRNutjKaPr4ENZFPrSkvCGKEt34 kMmpTNQCpG1NlBrPzpMTcoOBZmU8BZy0xfJj5suw8Kj1MEKRA7+tOtm8Uj7cesj1 GE2Ecri1BU60/uhaz0XfcfLYARq6z1xX9Vaj78wdC/5uTh5QBVcjsSpBIRU3iAlw D+MubwL3ObHO/+v15DMKX+K1M9yPOFrXisBcs8ZjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1iFcwtod1Y3YiJT3auhgDxY2kp4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxNjhhOTZkLTMxNmEtNDE3ZC1hNTdmLTc3NDBhMzEwNjJjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRGAwDQYJKoZIhvcNAQELBQADggEBAIIVrFMKKq2uyTinnrKK2S1diTu1 Mzse8tnUp/sf3WejuUUyrlhh/awjHuBJR9qo4fDX9l2SjTdrOzb5kSzaCmO2x69W AJgRGOo1LRUr3T3vKKhW+44aVno6C8e4st6iLR5/+SRS5AAF9d3NbCqTbQZdI5Xb CI5650fA2yk3pI2gjZ4WHelf5Bj58kEKg9Ud3PnUk8KsOlRa01IVkBD3eAy324qs EegV/HGq8oJrPVNoph1/5JZ35Mg6d7wGfu8rlR9LGjg4aO71bwkj0El3OxDMg2hS 6Cy9FgGWi9fxUaAOafVzRlplmjXkgy0KNfEvvzdVLk4tqlyq+f7IZB/qg1I= -----END CERTIFICATE-----Generated at Mon Mar 2 01:26:43 2026 by rpki-client