$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba560077-066d-4634-9588-2b9a448e2afc.roa File: ba560077-066d-4634-9588-2b9a448e2afc.roa (raw, json) Hash identifier: gAwxzPFXjz2It6Y2x3WdrtWu1o1q4j1eazjSenfGm2s= Subject key identifier: F2:DB:5D:1F:07:EC:52:4F:11:F2:9A:0E:02:05:D8:27:C7:DA:1F:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 495A68F671C1AA0FAE592ACF6AD6F68828C1FA6E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba560077-066d-4634-9588-2b9a448e2afc.roa Signing time: Sat 28 Feb 2026 03:20:10 +0000 ROA not before: Sat 28 Feb 2026 03:20:10 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5a:68:f6:71:c1:aa:0f:ae:59:2a:cf:6a:d6:f6:88:28:c1:fa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 03:20:10 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=86e87227011385110a7e3aa5b027c22a94148e3e996aa1a8a07cd4cb1a5baeb7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:7f:2a:16:cd:3b:f1:c4:9c:a3:82:ef:63: 4e:e7:98:74:4f:94:47:96:10:cc:a6:ce:16:6e:4a: ba:71:42:04:46:88:78:b5:d4:77:26:72:cf:b1:08: d1:66:7e:2f:b1:c6:70:ed:fe:f3:8b:36:a0:86:b1: 36:eb:df:77:10:46:8c:8b:27:00:90:8b:24:85:a2: dc:96:c6:44:9c:4e:77:1c:e8:90:bc:2a:31:6a:d9: 77:92:92:00:81:d2:e3:ec:5f:52:f6:1e:74:8c:f9: 4d:39:94:8f:f5:61:3c:98:ba:8a:56:57:a4:97:5a: f6:e9:5f:a4:e9:05:85:ed:5b:f0:ea:ef:fb:7e:de: f0:53:2e:b8:3c:aa:45:f9:04:96:a9:75:36:73:a0: 60:fb:d3:d5:af:db:3c:4b:8b:6f:87:1d:8f:25:03: 6c:38:0b:21:28:cf:83:c9:92:36:c3:09:d5:f4:d5: cd:37:70:53:09:6d:71:a3:2a:e3:61:2d:50:de:54: bb:2a:9d:9e:25:9b:c6:b0:b7:95:bd:af:92:f0:6c: 80:58:a0:cf:24:2b:f6:f3:82:25:d0:a6:6d:e7:7b: 42:34:44:a9:d1:36:c3:16:35:37:56:43:e1:a2:10: bd:0d:db:a6:9b:e5:9d:06:e9:1d:8d:3e:e6:dd:be: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DB:5D:1F:07:EC:52:4F:11:F2:9A:0E:02:05:D8:27:C7:DA:1F:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba560077-066d-4634-9588-2b9a448e2afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:21:f1:1f:82:66:e0:72:8b:2a:f2:84:55:af:50:96:11:73: 11:d2:32:6e:cf:53:ec:61:7c:9c:67:b2:f6:5e:18:6f:77:0a: 7e:fc:19:f3:a4:93:58:58:23:39:82:f7:a8:6f:2d:f0:d9:e9: 15:ed:48:60:b6:2b:1c:51:39:00:a8:90:e4:44:46:a8:ed:63: 00:65:5f:bc:90:65:8b:7f:dc:31:3e:31:df:d7:b2:70:bd:00: b7:1c:b0:37:25:c3:6a:c2:32:fa:14:5b:bd:92:4f:da:a3:42: 7a:6e:b3:46:c1:71:16:ec:c6:83:bc:08:db:32:ee:2e:30:d3: 29:88:ca:54:e2:92:92:0e:9a:ba:79:c6:43:42:19:ce:56:b3: db:e9:33:61:32:c8:81:6e:97:9d:02:d1:8d:4e:2b:08:6d:84: 3d:d8:5b:8d:21:30:30:1e:d9:d9:f4:25:a9:e1:58:5d:97:df: a8:a5:d2:5b:75:ed:f7:33:14:19:d9:c3:0d:f0:a6:58:7a:e8: be:a0:ba:9e:d6:da:30:34:b7:3d:98:3f:67:77:3c:5d:88:ab: f4:55:c9:75:eb:5c:23:67:b0:7d:ff:35:00:73:75:89:e9:19: 5b:c0:8d:4c:b5:62:54:f8:df:0a:ad:86:55:a2:0b:26:ed:fc: cd:5f:a0:06 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSVpo9nHBqg+uWSrPatb2iCjB+m4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDMyMDEwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmU4NzIyNzAxMTM4NTExMGE3ZTNhYTViMDI3YzIyYTk0 MTQ4ZTNlOTk2YWExYThhMDdjZDRjYjFhNWJhZWI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7BX8qFs078cSco4LvY07nmHRPlEeWEMymzhZuSrpxQgRG iHi11Hcmcs+xCNFmfi+xxnDt/vOLNqCGsTbr33cQRoyLJwCQiySFotyWxkScTncc 6JC8KjFq2XeSkgCB0uPsX1L2HnSM+U05lI/1YTyYuopWV6SXWvbpX6TpBYXtW/Dq 7/t+3vBTLrg8qkX5BJapdTZzoGD709Wv2zxLi2+HHY8lA2w4CyEoz4PJkjbDCdX0 1c03cFMJbXGjKuNhLVDeVLsqnZ4lm8awt5W9r5LwbIBYoM8kK/bzgiXQpm3ne0I0 RKnRNsMWNTdWQ+GiEL0N26ab5Z0G6R2NPubdvnyNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8ttdHwfsUk8R8poOAgXYJ8faHxwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhNTYwMDc3LTA2NmQtNDYzNC05NTg4LTJiOWE0NDhlMmFmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASLzANBgkqhkiG9w0BAQsFAAOCAQEAIiHxH4Jm4HKLKvKEVa9QlhFzEdIy bs9T7GF8nGey9l4Yb3cKfvwZ86STWFgjOYL3qG8t8NnpFe1IYLYrHFE5AKiQ5ERG qO1jAGVfvJBli3/cMT4x39eycL0AtxywNyXDasIy+hRbvZJP2qNCem6zRsFxFuzG g7wI2zLuLjDTKYjKVOKSkg6aunnGQ0IZzlaz2+kzYTLIgW6XnQLRjU4rCG2EPdhb jSEwMB7Z2fQlqeFYXZffqKXSW3Xt9zMUGdnDDfCmWHrovqC6ntbaMDS3PZg/Z3c8 XYir9FXJdetcI2ewff81AHN1iekZW8CNTLViVPjfCq2GVaILJu38zV+gBg== -----END CERTIFICATE-----Generated at Mon Mar 2 01:07:34 2026 by rpki-client