$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66c556f-40f2-4038-89a6-31351adccea5.roa File: c66c556f-40f2-4038-89a6-31351adccea5.roa (raw, json) Hash identifier: DMFzHa5e0BM9yBEw8E4bVl+Y2k06C29wAkpHaJzaqlY= Subject key identifier: B7:05:A5:1D:EB:BF:37:AB:2D:1A:CF:B0:A4:56:05:40:E2:1F:0C:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7ABA8038FFF0AB0E54CF40017897647A389778A4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66c556f-40f2-4038-89a6-31351adccea5.roa Signing time: Thu 26 Feb 2026 01:10:36 +0000 ROA not before: Thu 26 Feb 2026 01:10:36 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 3.5.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ba:80:38:ff:f0:ab:0e:54:cf:40:01:78:97:64:7a:38:97:78:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:10:36 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=9a0a04e3abf1e2cbdb91d0d368a1dc1be538cae630cc92b7345b6d6e7ebafec6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:f2:12:f0:5c:99:b8:c4:b7:2b:3d:f9:0c: 2d:d5:13:22:18:c1:a4:3e:aa:ba:59:e5:54:21:35: 91:80:d7:e3:31:04:06:8f:2e:8c:ae:49:71:1d:8c: 3a:d0:bd:19:66:13:ff:45:0b:c7:75:78:48:2f:ba: 3d:fa:3f:49:d0:69:0d:b0:17:d3:89:9a:00:c0:de: bd:d9:f7:51:e4:d9:43:95:a2:8a:f3:73:d0:96:82: 66:3d:f4:ae:67:c3:44:a6:d7:3e:00:24:ab:74:af: 0d:c0:ef:c0:74:2e:7e:d9:58:9d:71:a7:72:3b:9a: f9:84:45:eb:30:fc:18:de:83:34:59:d0:cf:b6:d8: a7:c9:a6:d4:01:9b:93:6f:ab:85:44:f4:0d:d2:db: 3f:6d:d3:b7:e1:ca:ee:48:c4:10:21:78:99:1e:b9: 4a:46:46:5b:a8:8f:6f:f2:f7:73:42:20:cd:f9:c3: 54:d8:5f:34:75:df:26:a2:db:f8:99:5e:df:be:9e: b9:18:50:ad:6a:07:d4:70:5b:9b:d5:d2:49:15:f7: 50:84:e2:3d:6d:c8:22:b7:e6:6c:af:bf:4e:33:7b: 1e:93:1d:79:8b:6b:52:21:02:63:3b:73:f7:94:e7: 68:11:cd:f0:22:61:6a:15:23:f3:92:0d:2f:36:98: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:05:A5:1D:EB:BF:37:AB:2D:1A:CF:B0:A4:56:05:40:E2:1F:0C:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66c556f-40f2-4038-89a6-31351adccea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.5.0.0/19 Signature Algorithm: sha256WithRSAEncryption a2:4c:e3:0b:aa:de:31:b5:27:d7:ba:a8:60:14:77:1b:4b:18: 1c:48:78:7a:b4:03:5f:42:78:0d:eb:f3:e9:74:1c:df:5f:fa: 8a:de:9a:d9:4b:60:b0:cd:0e:34:e7:a0:33:ed:ab:3e:2d:30: 92:52:fd:96:a5:d7:b1:a6:1b:36:86:7b:89:86:54:57:70:72: 28:6a:bd:f4:9e:c8:a8:68:f9:c8:10:4d:aa:4d:a2:60:e4:14: ff:cd:96:eb:d1:4a:0a:50:1a:a4:bb:8d:c6:c5:2c:13:58:b7: 36:bc:5b:ec:ba:f0:f3:d8:ac:6f:4d:d4:08:a1:f8:aa:f1:97: a9:29:ce:f7:42:f8:05:03:83:af:56:dd:bd:7b:c2:35:67:32: d1:e0:11:b6:bb:93:84:e8:78:88:bb:1d:5a:2b:c9:7f:d3:ea: 84:50:77:36:32:ff:10:14:9e:21:1f:dc:cc:ce:0f:d4:f6:b8: 1c:ff:b8:ec:15:d4:bf:21:04:b7:1e:45:d3:17:54:ce:f0:0d: f6:f6:e5:03:94:d7:c3:99:a9:5b:a8:13:13:3f:85:31:50:29: f0:3b:9d:9e:70:0f:e0:4c:f8:9a:0f:0e:8e:dd:93:db:14:1e: e7:28:2d:2a:71:67:49:f9:d2:6c:2c:be:84:4d:0e:be:2f:e8: 29:76:01:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUerqAOP/wqw5Uz0ABeJdkejiXeKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDExMDM2WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTBhMDRlM2FiZjFlMmNiZGI5MWQwZDM2OGExZGMxYmU1 MzhjYWU2MzBjYzkyYjczNDViNmQ2ZTdlYmFmZWM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCopvIS8FyZuMS3Kz35DC3VEyIYwaQ+qrpZ5VQhNZGA1+Mx BAaPLoyuSXEdjDrQvRlmE/9FC8d1eEgvuj36P0nQaQ2wF9OJmgDA3r3Z91Hk2UOV oorzc9CWgmY99K5nw0Sm1z4AJKt0rw3A78B0Ln7ZWJ1xp3I7mvmEResw/BjegzRZ 0M+22KfJptQBm5Nvq4VE9A3S2z9t07fhyu5IxBAheJkeuUpGRluoj2/y93NCIM35 w1TYXzR13yai2/iZXt++nrkYUK1qB9RwW5vV0kkV91CE4j1tyCK35myvv04zex6T HXmLa1IhAmM7c/eU52gRzfAiYWoVI/OSDS82mKi/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtwWlHeu/N6stGs+wpFYFQOIfDMcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2NmM1NTZmLTQwZjItNDAzOC04OWE2LTMxMzUxYWRjY2VhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUDBQAwDQYJKoZIhvcNAQELBQADggEBAKJM4wuq3jG1J9e6qGAUdxtLGBxI eHq0A19CeA3r8+l0HN9f+oremtlLYLDNDjTnoDPtqz4tMJJS/Zal17GmGzaGe4mG VFdwcihqvfSeyKho+cgQTapNomDkFP/NluvRSgpQGqS7jcbFLBNYtza8W+y68PPY rG9N1Aih+Krxl6kpzvdC+AUDg69W3b17wjVnMtHgEba7k4ToeIi7HVoryX/T6oRQ dzYy/xAUniEf3MzOD9T2uBz/uOwV1L8hBLceRdMXVM7wDfb25QOU18OZqVuoExM/ hTFQKfA7nZ5wD+BM+JoPDo7dk9sUHucoLSpxZ0n50mwsvoRNDr4v6Cl2ARs= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:47 2026 by rpki-client