$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dafcb40c-a011-4930-9311-8a485259a588.roa File: dafcb40c-a011-4930-9311-8a485259a588.roa (raw, json) Hash identifier: DwPr0MiW8BtfFIH+PH1ZuyZ9m/ScHaJSJe0WxBdLks0= Subject key identifier: FD:C7:77:41:18:B6:4C:C1:33:9F:A9:13:C1:8E:A5:F4:38:51:88:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37E5AC13FB627E58600F12AE81C7B531E8C4D27D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dafcb40c-a011-4930-9311-8a485259a588.roa Signing time: Fri 20 Feb 2026 01:10:14 +0000 ROA not before: Fri 20 Feb 2026 01:10:14 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.193.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e5:ac:13:fb:62:7e:58:60:0f:12:ae:81:c7:b5:31:e8:c4:d2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 20 01:10:14 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=3a23d5d3984207311a7b28bfc6b583dcfe072f76503d075a707cdf83914aeca5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:5e:f8:f9:13:06:79:64:8e:50:dd:d5:7f: 9f:80:db:eb:d5:1d:80:1f:a9:c8:97:64:03:d7:26: 8d:58:c9:04:1e:65:88:01:f0:b1:1a:33:71:e7:a3: dd:ec:9b:23:86:49:d1:8e:47:57:d0:32:b3:c6:59: 01:9c:26:8b:34:25:e6:ed:ed:ab:6a:09:b6:eb:b5: 8c:ea:00:9b:42:35:47:b9:2c:9b:86:df:44:7d:54: 7e:aa:79:96:ce:69:5a:85:41:67:79:a1:92:4c:e9: 9b:2d:ed:5b:0d:3f:1d:12:12:7c:d4:51:df:e7:33: 13:78:50:19:0f:02:0f:37:ab:3b:d9:0f:cb:02:ea: 5b:de:c4:10:d9:c4:2d:34:8e:84:7c:10:21:ef:9b: f0:ea:b6:3f:d7:8a:c7:bd:b7:9b:4e:18:ef:90:75: 1e:36:29:09:96:33:3e:81:07:96:8b:ed:c9:da:95: 1f:20:43:fe:da:46:48:99:02:f4:1d:12:17:98:68: 4e:ef:24:ab:b4:93:a5:b5:70:1f:6d:ac:7f:2d:50: 7d:cf:28:c2:b5:65:7b:75:5b:8c:35:d5:49:f4:53: 39:8f:25:01:17:32:c3:16:7a:b8:a8:e8:04:c2:12: a5:e7:74:d3:52:3a:96:0c:ab:69:ef:35:70:8e:2b: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C7:77:41:18:B6:4C:C1:33:9F:A9:13:C1:8E:A5:F4:38:51:88:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dafcb40c-a011-4930-9311-8a485259a588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.193.0.0/19 Signature Algorithm: sha256WithRSAEncryption 8d:73:35:8d:e4:bb:46:26:d5:12:6a:d2:b5:8e:64:54:03:aa: 55:33:77:de:83:63:9e:a2:d7:c1:95:51:c8:df:ef:19:77:87: 88:fd:1f:ba:66:cd:b3:c6:da:40:a0:ce:26:5e:36:cd:a0:8c: a8:4c:79:92:f8:31:4f:da:a0:e7:22:d2:f9:4f:69:58:24:d1: c3:8a:c4:c5:00:2e:b1:4d:f8:6d:4f:4a:e3:32:84:83:14:85: 91:a9:f3:77:a4:e1:5d:74:75:f7:26:e5:c3:31:33:ff:cc:59: 66:f0:d9:95:ec:d2:ac:92:90:21:7b:34:69:38:83:43:26:72: 9e:ca:7d:d3:5c:d5:a6:6a:02:c3:23:80:00:b9:4a:e3:ad:0f: fe:21:bd:f2:f1:42:94:36:81:16:c8:02:d2:10:98:86:63:7f: d7:ce:25:31:8b:71:dd:51:2f:22:a3:6d:80:32:df:0e:c9:26: 8c:a1:e8:eb:02:4a:f7:fd:c2:92:e6:8f:45:74:40:08:0a:63: 62:c0:7a:a9:fe:47:69:ca:3e:3f:db:54:15:1b:60:84:3a:3f: 1c:ab:5f:e3:f0:5a:5c:e5:00:2e:b6:16:91:49:01:11:4a:76: e8:ed:20:4a:8e:15:e5:bc:2e:36:2f:b3:47:d0:75:1d:a0:48: 83:89:20:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN+WsE/tiflhgDxKugce1MejE0n0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIwMDExMDE0WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTIzZDVkMzk4NDIwNzMxMWE3YjI4YmZjNmI1ODNkY2Zl MDcyZjc2NTAzZDA3NWE3MDdjZGY4MzkxNGFlY2E1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAOV74+RMGeWSOUN3Vf5+A2+vVHYAfqciXZAPXJo1YyQQe ZYgB8LEaM3Hno93smyOGSdGOR1fQMrPGWQGcJos0Jebt7atqCbbrtYzqAJtCNUe5 LJuG30R9VH6qeZbOaVqFQWd5oZJM6Zst7VsNPx0SEnzUUd/nMxN4UBkPAg83qzvZ D8sC6lvexBDZxC00joR8ECHvm/Dqtj/Xise9t5tOGO+QdR42KQmWMz6BB5aL7cna lR8gQ/7aRkiZAvQdEheYaE7vJKu0k6W1cB9trH8tUH3PKMK1ZXt1W4w11Un0UzmP JQEXMsMWerio6ATCEqXndNNSOpYMq2nvNXCOK00/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/cd3QRi2TMEzn6kTwY6l9DhRiHEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhZmNiNDBjLWEwMTEtNDkzMC05MzExLThhNDg1MjU5YTU4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUPwQAwDQYJKoZIhvcNAQELBQADggEBAI1zNY3ku0Ym1RJq0rWOZFQDqlUz d96DY56i18GVUcjf7xl3h4j9H7pmzbPG2kCgziZeNs2gjKhMeZL4MU/aoOci0vlP aVgk0cOKxMUALrFN+G1PSuMyhIMUhZGp83ek4V10dfcm5cMxM//MWWbw2ZXs0qyS kCF7NGk4g0Mmcp7KfdNc1aZqAsMjgAC5SuOtD/4hvfLxQpQ2gRbIAtIQmIZjf9fO JTGLcd1RLyKjbYAy3w7JJoyh6OsCSvf9wpLmj0V0QAgKY2LAeqn+R2nKPj/bVBUb YIQ6PxyrX+PwWlzlAC62FpFJARFKdujtIEqOFeW8LjYvs0fQdR2gSIOJIJ4= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:50 2026 by rpki-client