$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c37f9757-32c1-412c-8645-82c4f7d4096f.roa File: c37f9757-32c1-412c-8645-82c4f7d4096f.roa (raw, json) Hash identifier: VkKWsIx2drt1LB9hEBkWEXWZs3Q8iHmMpGZVpVZ0iZ8= Subject key identifier: 2A:D5:77:EF:B9:76:EA:51:FA:11:A5:F3:3A:87:9D:55:38:42:BD:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E1492BD8C161388B5F79E88B315A2A76563C0A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c37f9757-32c1-412c-8645-82c4f7d4096f.roa Signing time: Mon 23 Feb 2026 00:20:07 +0000 ROA not before: Mon 23 Feb 2026 00:20:07 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:14:92:bd:8c:16:13:88:b5:f7:9e:88:b3:15:a2:a7:65:63:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:20:07 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=4ef0e3000a1c293b8636ad76a73dd01f3bf6614c3b7f2496071e126f4ec45d41, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:d7:7e:ba:be:ee:71:f4:d0:35:3a:01:75: f4:cc:ac:89:aa:78:6b:23:2c:34:b6:2f:f8:9c:ce: cb:6d:ca:94:e1:cc:d8:65:a9:c4:37:5c:ec:f1:b7: 07:14:10:9e:33:36:79:5f:8f:fa:c6:4d:f1:05:a4: b9:f5:50:fe:db:df:41:ce:10:d8:a5:15:fe:74:a2: 0d:6a:c6:e7:ab:94:f1:92:e0:31:37:d2:16:0c:6b: 48:46:6f:9c:cb:6e:c0:a8:9d:ef:8d:66:2e:e6:63: ad:d4:f9:d1:09:58:3f:a2:f8:7a:b0:73:ad:2b:9e: de:36:88:6c:0a:3c:06:84:79:87:65:1c:09:72:d5: 88:7d:12:10:7f:fc:95:fa:20:f0:2d:44:79:6f:a9: 05:20:68:83:6d:3e:37:7d:c9:4e:f7:ef:36:23:89: 09:8a:00:c6:dc:de:42:7c:ea:08:de:aa:77:dd:ef: aa:3f:ee:05:db:13:1e:c6:67:08:aa:92:79:96:62: 89:5b:42:be:93:8c:aa:df:79:88:3d:80:b3:c2:6f: 97:18:af:12:02:4f:26:c9:18:6d:c7:85:f3:44:14: e4:71:a3:f0:95:bb:e9:25:fe:2f:63:43:e1:be:3f: a9:c7:8f:33:64:40:8d:4f:cf:bd:d0:e5:bb:3a:83: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D5:77:EF:B9:76:EA:51:FA:11:A5:F3:3A:87:9D:55:38:42:BD:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c37f9757-32c1-412c-8645-82c4f7d4096f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.197.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:4a:e5:13:b6:2d:c5:2e:cc:f1:a7:86:0a:d0:5e:19:31:cd: d2:10:16:b0:d5:3b:09:56:78:f9:d8:4f:ed:e6:8b:40:85:a0: 50:68:ca:8e:55:bf:bd:62:fb:84:3f:fd:0d:95:f9:87:14:1d: f7:17:2a:40:32:9d:7b:f9:a3:ec:f7:5a:f4:a6:7f:84:e6:9f: e3:7d:23:a3:d9:c1:f1:07:e4:dc:25:a7:a9:b0:e8:65:63:6c: 17:17:d6:63:43:f3:f6:72:9d:08:2b:08:75:da:bc:9d:79:10: 21:4c:cd:8d:57:9b:2d:29:bd:de:e2:f1:4d:32:15:ed:68:f9: 83:f0:be:14:85:80:26:88:8d:28:cc:f9:6f:06:de:c4:4f:69: 5a:99:33:54:9a:ac:8f:b4:b3:63:e1:4f:5d:13:16:9a:d0:d9: 71:0a:4a:84:35:f5:a3:1b:9c:f3:c9:7e:a5:68:18:08:4f:47: de:f1:59:ba:9d:7f:c6:53:d1:5b:d7:65:67:70:ad:79:37:14: ae:08:47:9a:53:9a:06:c7:27:f4:e1:2d:6e:7b:e5:8c:a8:6e: a2:cc:b2:2f:4c:3d:4d:93:83:e7:a7:42:ad:86:db:9d:64:f4: 27:05:53:9f:b5:cc:3a:d7:d1:d2:de:8c:49:c7:51:04:a8:22: 87:f1:75:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULhSSvYwWE4i1956IsxWip2VjwKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAyMDA3WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWYwZTMwMDBhMWMyOTNiODYzNmFkNzZhNzNkZDAxZjNi ZjY2MTRjM2I3ZjI0OTYwNzFlMTI2ZjRlYzQ1ZDQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVQdd+ur7ucfTQNToBdfTMrImqeGsjLDS2L/iczsttypTh zNhlqcQ3XOzxtwcUEJ4zNnlfj/rGTfEFpLn1UP7b30HOENilFf50og1qxuerlPGS 4DE30hYMa0hGb5zLbsCone+NZi7mY63U+dEJWD+i+Hqwc60rnt42iGwKPAaEeYdl HAly1Yh9EhB//JX6IPAtRHlvqQUgaINtPjd9yU737zYjiQmKAMbc3kJ86gjeqnfd 76o/7gXbEx7GZwiqknmWYolbQr6TjKrfeYg9gLPCb5cYrxICTybJGG3HhfNEFORx o/CVu+kl/i9jQ+G+P6nHjzNkQI1Pz73Q5bs6gyTPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKtV377l26lH6EaXzOoedVThCvckwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzN2Y5NzU3LTMyYzEtNDEyYy04NjQ1LTgyYzRmN2Q0MDk2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRMUwDQYJKoZIhvcNAQELBQADggEBAF5K5RO2LcUuzPGnhgrQXhkxzdIQ FrDVOwlWePnYT+3mi0CFoFBoyo5Vv71i+4Q//Q2V+YcUHfcXKkAynXv5o+z3WvSm f4Tmn+N9I6PZwfEH5Nwlp6mw6GVjbBcX1mND8/ZynQgrCHXavJ15ECFMzY1Xmy0p vd7i8U0yFe1o+YPwvhSFgCaIjSjM+W8G3sRPaVqZM1SarI+0s2PhT10TFprQ2XEK SoQ19aMbnPPJfqVoGAhPR97xWbqdf8ZT0VvXZWdwrXk3FK4IR5pTmgbHJ/ThLW57 5YyobqLMsi9MPU2Tg+enQq2G251k9CcFU5+1zDrX0dLejEnHUQSoIofxdUk= -----END CERTIFICATE-----Generated at Sun Mar 1 21:52:37 2026 by rpki-client