$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c04c652b-ed2d-4549-9631-f3dd07a80ce5.roa File: c04c652b-ed2d-4549-9631-f3dd07a80ce5.roa (raw, json) Hash identifier: GJFd9hoOaP5IVV+4z1n4wLZUdX3p9bKZEZpebtv4YWc= Subject key identifier: A1:8E:B0:00:76:7C:4A:47:BD:5F:73:38:AA:32:12:3D:0C:63:D5:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C6615C93E7F4CFD1035677497C82E309B52D12C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c04c652b-ed2d-4549-9631-f3dd07a80ce5.roa Signing time: Sat 28 Feb 2026 03:01:11 +0000 ROA not before: Sat 28 Feb 2026 03:01:11 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.246.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:66:15:c9:3e:7f:4c:fd:10:35:67:74:97:c8:2e:30:9b:52:d1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 03:01:11 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=bb7a93d9c8fa3b9797cf60a688400ef2aa1cb5cf8a97bbb14525bd14644d65fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f0:eb:96:3f:64:6a:02:1f:5d:4a:91:51:d8: 1d:a0:41:22:46:3c:58:f2:ec:ba:de:d0:d5:d8:b6: 87:14:3a:71:12:51:10:c5:60:ab:b1:db:cb:01:e1: 7f:07:a8:15:62:da:f0:ae:47:1c:a7:e3:bc:52:fe: b0:12:9e:0e:ea:72:19:01:7f:e1:eb:5f:bb:a8:57: 2b:7e:bf:96:dc:bc:ce:bb:75:f2:89:f1:a4:e8:08: 69:ad:64:1e:73:ca:c3:cb:da:3a:d9:29:63:2f:fe: 5e:12:89:5a:68:21:b4:c8:cc:61:a5:3c:75:7a:0d: 10:db:48:e0:6c:64:12:59:aa:ff:b4:ea:1b:d2:03: e0:19:56:5b:a9:2b:41:7a:c4:01:53:3f:1e:ca:0a: da:78:c2:b1:96:c4:52:ba:75:59:f6:8c:f9:9d:43: b2:37:9b:ad:ab:83:a2:6c:c0:c2:7d:40:32:6a:b9: 4d:aa:f5:99:ca:28:6c:00:ff:99:7f:c8:39:d9:43: 5e:a0:d1:cf:dc:d8:4d:4c:f2:93:6c:e9:6c:d2:26: 6d:48:c7:8d:9e:f0:30:fb:59:da:fe:a8:ae:b0:71: 42:6c:4d:e5:e0:33:67:1e:fb:2f:16:03:d6:d0:40: be:e5:8d:b5:4a:55:32:d2:8b:29:a2:53:b9:c0:14: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8E:B0:00:76:7C:4A:47:BD:5F:73:38:AA:32:12:3D:0C:63:D5:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c04c652b-ed2d-4549-9631-f3dd07a80ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.246.112.0/22 Signature Algorithm: sha256WithRSAEncryption 50:13:44:d1:b0:8a:44:7b:e1:36:92:35:08:b6:76:84:61:6e: 13:f8:be:be:10:d2:b8:2c:e4:7a:1d:95:6d:07:12:31:5f:92: 2d:87:a5:46:d3:4f:63:e2:ab:e8:74:2a:20:ba:a5:7f:e3:40: e9:e4:f0:36:89:24:e1:38:89:31:7d:d4:14:79:b8:9d:d6:bb: 6f:5a:dc:89:e8:3e:55:bb:55:0d:55:aa:55:31:b7:4c:fe:f3: 0e:90:cb:b7:0e:73:16:97:92:3e:43:09:5b:9f:7d:0e:1e:a2: b9:b6:a2:b1:29:3b:c6:84:3a:7c:7b:a1:9d:d2:8e:a9:4c:08: c9:32:c2:64:d9:f2:ff:23:9a:e6:a0:30:22:d0:77:d5:40:47: c3:87:fa:e3:f0:72:c2:40:fa:ed:d7:bd:fa:58:41:21:d2:d3: 3c:7c:d7:73:c9:d0:a9:f8:70:b2:97:a5:48:33:b1:f5:f2:eb: d8:09:32:c8:ef:e1:a5:0e:6e:d0:0c:fa:33:21:4f:b3:7e:0d: dc:ff:e4:3f:b2:08:4a:62:31:0b:12:95:e4:aa:0b:d8:7c:f8: d0:fe:95:40:57:bc:59:f2:74:88:8b:f2:05:ed:1d:fc:ee:8e: 46:e4:c0:eb:27:99:6d:59:72:46:25:a8:bf:f5:90:ef:d2:01: 5b:bb:b2:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXGYVyT5/TP0QNWd0l8guMJtS0SwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDMwMTExWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjdhOTNkOWM4ZmEzYjk3OTdjZjYwYTY4ODQwMGVmMmFh MWNiNWNmOGE5N2JiYjE0NTI1YmQxNDY0NGQ2NWZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDl8OuWP2RqAh9dSpFR2B2gQSJGPFjy7Lre0NXYtocUOnES URDFYKux28sB4X8HqBVi2vCuRxyn47xS/rASng7qchkBf+HrX7uoVyt+v5bcvM67 dfKJ8aToCGmtZB5zysPL2jrZKWMv/l4SiVpoIbTIzGGlPHV6DRDbSOBsZBJZqv+0 6hvSA+AZVlupK0F6xAFTPx7KCtp4wrGWxFK6dVn2jPmdQ7I3m62rg6JswMJ9QDJq uU2q9ZnKKGwA/5l/yDnZQ16g0c/c2E1M8pNs6WzSJm1Ix42e8DD7Wdr+qK6wcUJs TeXgM2ce+y8WA9bQQL7ljbVKVTLSiymiU7nAFHH1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoY6wAHZ8Ske9X3M4qjISPQxj1Q0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwNGM2NTJiLWVkMmQtNDU0OS05NjMxLWYzZGQwN2E4MGNlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9nAwDQYJKoZIhvcNAQELBQADggEBAFATRNGwikR74TaSNQi2doRhbhP4 vr4Q0rgs5HodlW0HEjFfki2HpUbTT2Piq+h0KiC6pX/jQOnk8DaJJOE4iTF91BR5 uJ3Wu29a3InoPlW7VQ1VqlUxt0z+8w6Qy7cOcxaXkj5DCVuffQ4eorm2orEpO8aE Onx7oZ3SjqlMCMkywmTZ8v8jmuagMCLQd9VAR8OH+uPwcsJA+u3XvfpYQSHS0zx8 13PJ0Kn4cLKXpUgzsfXy69gJMsjv4aUObtAM+jMhT7N+Ddz/5D+yCEpiMQsSleSq C9h8+ND+lUBXvFnydIiL8gXtHfzujkbkwOsnmW1ZckYlqL/1kO/SAVu7ssY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:22 2026 by rpki-client