$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8cf8b9e-9080-4490-bed7-2a623b006892.roa File: c8cf8b9e-9080-4490-bed7-2a623b006892.roa (raw, json) Hash identifier: ry/v65uesEKXi2ZSliHLl9ZnTFeB2LRwGJ+vYr1ZHJ0= Subject key identifier: BA:8C:AE:11:37:1C:7E:79:87:F9:F9:62:53:08:5F:75:D8:D0:91:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61433F45FD9DC3FB3F0A5E34FA6478C572D76142 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8cf8b9e-9080-4490-bed7-2a623b006892.roa Signing time: Sat 28 Feb 2026 02:50:34 +0000 ROA not before: Sat 28 Feb 2026 02:50:34 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:43:3f:45:fd:9d:c3:fb:3f:0a:5e:34:fa:64:78:c5:72:d7:61:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:50:34 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=943e6842f0ce3b6a0eaaf0bd32150a5f8c984021e8ea80b8605c0ee7f28eeb60, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:15:e2:82:59:c5:ba:56:64:04:38:89:26: a5:ad:37:f2:01:19:00:df:47:e7:17:c9:84:67:59: 7d:f5:7a:c7:d1:ac:16:50:7f:57:f3:2c:f3:a2:e2: 05:a9:8e:b0:3f:bd:24:30:18:98:04:d5:4c:57:c9: ee:be:75:ed:9b:46:7a:95:42:a8:4d:1b:03:a3:1f: 71:b9:83:d7:9b:ea:95:b5:c1:7f:bf:74:5d:71:74: 02:c8:f3:66:07:9c:70:6f:78:83:54:16:4b:bd:55: 7d:be:b9:ce:ab:f7:43:f4:95:e7:a8:f6:94:2f:43: 07:6e:ec:d2:cc:4f:fb:64:8a:8c:d1:73:cc:bc:43: 94:c8:c7:93:7b:94:55:60:8f:56:cb:f1:26:05:51: 06:40:5e:63:c3:e7:08:cf:bd:b1:2a:4f:3f:0a:e5: bc:17:ba:0e:09:84:51:ab:25:33:c1:5a:18:a3:60: 4c:61:63:05:cd:cb:45:66:40:2b:fd:3c:64:fe:1a: 8a:bc:1f:2a:7e:5d:4e:f3:5a:b8:67:23:79:b1:1b: 25:86:60:f9:f1:3d:b6:b1:89:bd:ab:90:ee:a6:78: 70:73:ff:d7:a5:ed:c0:7b:52:85:a9:f1:c8:9d:10: 5b:a5:42:1d:a9:ca:e6:c4:f6:8a:32:5c:d2:2d:74: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8C:AE:11:37:1C:7E:79:87:F9:F9:62:53:08:5F:75:D8:D0:91:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8cf8b9e-9080-4490-bed7-2a623b006892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.224.0/19 Signature Algorithm: sha256WithRSAEncryption 00:ee:22:dc:34:3d:3b:04:1b:95:c5:10:aa:8f:b9:65:eb:c0: cb:b9:4e:93:a7:13:ce:26:74:47:5f:9c:8a:69:35:08:95:64: ea:ba:bb:a1:fa:b3:f9:9b:2a:93:2b:c4:11:91:32:a1:74:e0: 63:dd:e6:a0:30:58:f7:52:fa:1d:f2:8f:9d:07:b9:be:bf:ee: 7b:47:80:19:a9:5f:43:d7:69:37:a5:6b:f4:8a:db:d6:6f:9d: 45:d8:12:47:4f:7e:89:5d:65:1d:c6:b5:a4:08:c0:98:ec:3f: 54:dc:11:be:a7:48:ff:ef:41:40:7c:a6:0c:9a:bd:27:82:71: 89:87:65:c1:d5:94:98:aa:b4:1d:62:69:5e:37:c7:a6:f8:1f: a4:2a:60:5b:66:d7:ba:3c:88:b4:ec:dc:c2:6e:cb:40:4a:9b: 97:ee:fe:b2:67:02:56:43:45:5e:6e:9f:fb:49:42:95:b8:7b: cb:5f:82:e4:1b:f7:2d:85:a5:3a:b4:86:cf:54:34:b7:a6:fb: cd:ca:6a:4f:8a:58:47:b8:03:e7:10:c8:d5:7f:94:39:09:68: 6e:3c:25:ef:23:b5:d4:ac:99:ea:bc:83:57:41:3d:f8:56:19: a3:3d:ce:d0:15:5f:18:1e:e0:2c:15:02:1e:01:c4:7f:10:a7: 6b:2c:48:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYUM/Rf2dw/s/Cl40+mR4xXLXYUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDI1MDM0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDNlNjg0MmYwY2UzYjZhMGVhYWYwYmQzMjE1MGE1Zjhj OTg0MDIxZThlYTgwYjg2MDVjMGVlN2YyOGVlYjYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3ShXiglnFulZkBDiJJqWtN/IBGQDfR+cXyYRnWX31esfR rBZQf1fzLPOi4gWpjrA/vSQwGJgE1UxXye6+de2bRnqVQqhNGwOjH3G5g9eb6pW1 wX+/dF1xdALI82YHnHBveINUFku9VX2+uc6r90P0leeo9pQvQwdu7NLMT/tkiozR c8y8Q5TIx5N7lFVgj1bL8SYFUQZAXmPD5wjPvbEqTz8K5bwXug4JhFGrJTPBWhij YExhYwXNy0VmQCv9PGT+Goq8Hyp+XU7zWrhnI3mxGyWGYPnxPbaxib2rkO6meHBz /9el7cB7UoWp8cidEFulQh2pyubE9ooyXNItdKPJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuoyuETccfnmH+fliUwhfddjQkcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M4Y2Y4YjllLTkwODAtNDQ5MC1iZWQ3LTJhNjIzYjAwNjg5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUDreAwDQYJKoZIhvcNAQELBQADggEBAADuItw0PTsEG5XFEKqPuWXrwMu5 TpOnE84mdEdfnIppNQiVZOq6u6H6s/mbKpMrxBGRMqF04GPd5qAwWPdS+h3yj50H ub6/7ntHgBmpX0PXaTela/SK29ZvnUXYEkdPfoldZR3GtaQIwJjsP1TcEb6nSP/v QUB8pgyavSeCcYmHZcHVlJiqtB1iaV43x6b4H6QqYFtm17o8iLTs3MJuy0BKm5fu /rJnAlZDRV5un/tJQpW4e8tfguQb9y2FpTq0hs9UNLem+83Kak+KWEe4A+cQyNV/ lDkJaG48Je8jtdSsmeq8g1dBPfhWGaM9ztAVXxge4CwVAh4BxH8Qp2ssSKQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:28 2026 by rpki-client