$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f1da5f4-2f4a-489f-a3aa-a0b746185d1d.roa File: 9f1da5f4-2f4a-489f-a3aa-a0b746185d1d.roa (raw, json) Hash identifier: b7O9/KOWJmPK3X0+oKHHS0Hl8L2ZsRMA1nz8Dha0xO8= Subject key identifier: 2A:96:60:41:8E:DD:71:42:D9:F5:6C:EA:82:A1:7C:87:C7:FD:3A:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11A105CAFC62E6A1EFCC374911397B278E3D8721 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f1da5f4-2f4a-489f-a3aa-a0b746185d1d.roa Signing time: Sat 28 Feb 2026 02:01:03 +0000 ROA not before: Sat 28 Feb 2026 02:01:03 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.56.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a1:05:ca:fc:62:e6:a1:ef:cc:37:49:11:39:7b:27:8e:3d:87:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:01:03 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=e200261d44c6673378e20707ba539729ca93b36a9bc300cc19d29f130cdae181, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:24:6e:ef:9c:a4:ed:0f:52:98:f3:ad:b4: ce:0a:50:3e:f6:c8:ce:a5:87:02:7f:e6:41:a9:d7: bb:c5:b7:4a:f0:54:8d:da:09:ab:82:c1:4b:51:75: c6:25:46:82:e6:f7:d5:73:b7:b8:b7:37:fd:42:17: ca:0b:24:c9:2a:28:98:23:93:4d:df:5f:e5:42:35: ab:5e:2a:e3:1f:7e:3e:95:cc:d8:de:68:b0:8d:af: d9:f0:94:20:63:8f:f9:0f:65:79:c8:80:80:87:a2: a5:73:61:31:f9:28:bc:66:c9:89:3c:90:54:d0:cf: 55:b5:e8:ca:13:8c:47:1f:b8:fa:fb:1e:b6:cf:5e: 69:0b:40:cd:e1:97:6e:ad:f1:4e:c3:c8:67:75:ca: fa:11:64:42:b4:e9:a5:20:dc:1e:eb:2d:ba:7f:16: bb:a2:96:06:09:02:e2:ab:1d:ee:e4:61:18:9d:50: a0:fd:20:bf:13:f1:51:54:d8:0b:74:4b:b2:92:c5: 19:54:a1:fd:4c:4d:0f:17:f1:2f:81:74:87:ee:cb: 9b:7c:2a:7b:34:40:fc:a8:d9:ea:47:6d:89:bc:23: bd:45:91:1d:eb:06:54:2a:04:73:d4:d5:08:d5:d4: de:89:8a:1b:f8:a6:5c:af:a1:41:4a:f3:11:0b:b4: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:60:41:8E:DD:71:42:D9:F5:6C:EA:82:A1:7C:87:C7:FD:3A:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f1da5f4-2f4a-489f-a3aa-a0b746185d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:e2:70:64:e3:f7:99:c6:f2:52:3d:74:b1:4a:4c:d6:07:69: 59:60:80:6e:e0:85:9e:b9:00:d6:8a:4e:81:76:84:02:5c:70: 11:44:da:a6:6b:c5:8a:23:44:bf:32:86:e2:84:44:f9:b3:33: 89:ff:54:67:d1:d3:90:8e:3e:21:bb:a3:18:5d:7f:c8:9a:2f: 66:37:cc:55:f1:95:e7:72:a0:03:2f:c4:1b:15:1f:7f:b7:2a: 1e:57:02:8e:27:32:ef:3a:1c:4b:c4:ab:16:81:30:b8:0a:9d: a1:ea:55:d0:ce:0a:b9:dc:75:25:f9:94:34:75:3a:62:2b:b0: 8d:3d:c9:06:1b:07:56:db:83:0f:da:61:89:8b:5e:60:97:51: c6:2a:5c:43:fa:93:21:f7:fc:f2:37:a0:1d:4e:a1:cf:7f:27: 0a:7b:62:d3:4b:c3:e5:eb:6f:09:df:eb:18:fe:b3:ca:08:43: 76:9a:b0:86:d3:ae:23:9b:7d:06:b3:10:42:98:bc:52:9d:5a: c2:68:62:91:58:75:65:e0:1d:c2:69:34:e2:9a:3f:6a:b9:14: ea:cd:e9:cd:2c:42:84:0a:27:7e:e7:73:b0:80:fe:9f:04:e7: 3f:eb:42:12:b4:79:67:17:3b:0c:3b:65:39:9e:0f:22:f6:1d: b9:28:f6:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEaEFyvxi5qHvzDdJETl7J449hyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDIwMTAzWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjAwMjYxZDQ0YzY2NzMzNzhlMjA3MDdiYTUzOTcyOWNh OTNiMzZhOWJjMzAwY2MxOWQyOWYxMzBjZGFlMTgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXMiRu75yk7Q9SmPOttM4KUD72yM6lhwJ/5kGp17vFt0rw VI3aCauCwUtRdcYlRoLm99Vzt7i3N/1CF8oLJMkqKJgjk03fX+VCNateKuMffj6V zNjeaLCNr9nwlCBjj/kPZXnIgICHoqVzYTH5KLxmyYk8kFTQz1W16MoTjEcfuPr7 HrbPXmkLQM3hl26t8U7DyGd1yvoRZEK06aUg3B7rLbp/FruilgYJAuKrHe7kYRid UKD9IL8T8VFU2At0S7KSxRlUof1MTQ8X8S+BdIfuy5t8Kns0QPyo2epHbYm8I71F kR3rBlQqBHPU1QjV1N6Jihv4plyvoUFK8xELtC5FAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKpZgQY7dcULZ9WzqgqF8h8f9Ok4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmMWRhNWY0LTJmNGEtNDg5Zi1hM2FhLWEwYjc0NjE4NWQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASODANBgkqhkiG9w0BAQsFAAOCAQEAdOJwZOP3mcbyUj10sUpM1gdpWWCA buCFnrkA1opOgXaEAlxwEUTapmvFiiNEvzKG4oRE+bMzif9UZ9HTkI4+IbujGF1/ yJovZjfMVfGV53KgAy/EGxUff7cqHlcCjicy7zocS8SrFoEwuAqdoepV0M4Kudx1 JfmUNHU6YiuwjT3JBhsHVtuDD9phiYteYJdRxipcQ/qTIff88jegHU6hz38nCnti 00vD5etvCd/rGP6zyghDdpqwhtOuI5t9BrMQQpi8Up1awmhikVh1ZeAdwmk04po/ arkU6s3pzSxChAonfudzsID+nwTnP+tCErR5Zxc7DDtlOZ4PIvYduSj2Ag== -----END CERTIFICATE-----Generated at Sun Mar 1 21:42:05 2026 by rpki-client