$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de68d067-d201-4cf3-99c7-7b1f4f01c496.roa File: de68d067-d201-4cf3-99c7-7b1f4f01c496.roa (raw, json) Hash identifier: D1Odt9DRj2ZhWbtILmAei+ZGRqTBM3PyO0dASkoSlk8= Subject key identifier: 7B:1A:1B:5B:E8:B5:0B:E6:C2:B0:FC:54:86:64:2E:73:F3:FA:95:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78387EFCFD17A336B16A748397FF910960313D20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de68d067-d201-4cf3-99c7-7b1f4f01c496.roa Signing time: Fri 27 Feb 2026 00:20:07 +0000 ROA not before: Fri 27 Feb 2026 00:20:07 +0000 ROA not after: Thu 28 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:38:7e:fc:fd:17:a3:36:b1:6a:74:83:97:ff:91:09:60:31:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 27 00:20:07 2026 GMT Not After : May 28 23:59:59 2026 GMT Subject: serialNumber=65905305c13a3f1250232afd34113ab6d70f6be6d188560657600b08308fd05e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:33:16:99:ec:20:bc:84:48:a2:a7:96:cb: 71:8e:4c:90:36:72:08:f9:e8:1b:e7:9f:20:da:51: 83:40:0d:29:13:32:f0:92:a7:4b:d7:b9:94:d5:99: 47:02:d4:0a:b4:31:7c:22:46:b8:c9:b2:ac:0b:80: a4:45:3d:07:af:1c:da:58:8d:97:30:b4:a2:b8:9d: f3:fc:5c:fb:a0:c6:74:64:6f:0c:d2:f8:e1:e8:0d: 83:fc:b4:48:ee:37:e9:48:c3:e9:45:99:53:33:6e: ac:4d:8a:5d:ed:3c:bc:3c:4d:ed:b8:43:1d:ac:bb: 85:5f:2e:f1:b3:d9:db:fd:99:46:ed:01:f5:59:07: ce:23:4c:72:0a:d0:c0:34:1a:35:6b:ef:08:67:b8: bc:ac:00:bf:95:16:58:ac:96:22:fc:e8:f1:78:de: 1b:89:34:e6:a3:50:6e:d6:97:a2:cf:11:b7:6e:49: 7c:55:9f:27:44:0a:bb:7b:81:40:17:b2:a4:1c:49: 9b:cb:80:29:f4:6a:66:1c:08:b1:4c:79:e6:60:aa: be:aa:07:5e:e4:63:66:04:4f:59:f0:e6:a3:a1:9f: 65:18:4a:28:a9:06:e0:e7:d0:7e:04:af:60:54:03: 89:f6:ab:15:51:89:23:0c:2c:ec:e4:8e:30:a4:5a: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:1B:5B:E8:B5:0B:E6:C2:B0:FC:54:86:64:2E:73:F3:FA:95:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de68d067-d201-4cf3-99c7-7b1f4f01c496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.46.0/24 Signature Algorithm: sha256WithRSAEncryption 59:c1:67:49:53:b4:1f:a7:1b:05:87:ae:3f:89:f4:4e:c1:c1: 1c:f2:02:d4:9a:7e:16:12:c8:06:c2:af:37:e6:7e:3c:84:6a: af:32:9a:bf:d3:c6:ed:aa:e9:77:45:63:34:ed:b6:69:60:40: 8a:38:88:b7:71:58:8d:08:74:d5:e8:33:7a:5a:d2:3d:5a:a2: 2a:07:a5:d7:c5:ca:28:d4:b2:f4:4d:af:2e:5d:ea:61:32:da: b7:15:7e:9e:9e:8e:4d:5e:3c:ad:92:2b:58:94:f7:c1:b5:af: 99:90:78:62:b3:31:aa:d1:c3:d8:e1:23:b0:9c:f9:9f:79:83: 77:d8:e7:16:15:d2:90:d8:58:f1:e6:62:f3:35:40:be:4e:13: 99:84:a7:f0:f2:d1:8f:bd:a9:01:7a:e5:c3:40:eb:49:3f:1f: 55:51:d9:1d:71:67:ef:3d:de:ab:c7:62:66:e8:fb:03:41:98: d4:d3:3c:62:c5:f6:a3:79:ba:c6:a3:dd:b8:e5:fc:55:ac:53: 39:19:af:49:22:34:67:ad:91:79:e8:0e:a8:98:78:7c:ab:c9: 2c:15:53:6d:0b:bf:62:51:5d:df:11:12:6f:f1:a2:53:d3:bc: 6c:c2:e1:ed:d8:53:fa:ea:97:15:96:0a:f5:e9:71:e5:1e:29: d2:6d:33:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeDh+/P0XozaxanSDl/+RCWAxPSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI3MDAyMDA3WhcNMjYwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTkwNTMwNWMxM2EzZjEyNTAyMzJhZmQzNDExM2FiNmQ3 MGY2YmU2ZDE4ODU2MDY1NzYwMGIwODMwOGZkMDVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGQDMWmewgvIRIoqeWy3GOTJA2cgj56BvnnyDaUYNADSkT MvCSp0vXuZTVmUcC1Aq0MXwiRrjJsqwLgKRFPQevHNpYjZcwtKK4nfP8XPugxnRk bwzS+OHoDYP8tEjuN+lIw+lFmVMzbqxNil3tPLw8Te24Qx2su4VfLvGz2dv9mUbt AfVZB84jTHIK0MA0GjVr7whnuLysAL+VFlisliL86PF43huJNOajUG7Wl6LPEbdu SXxVnydECrt7gUAXsqQcSZvLgCn0amYcCLFMeeZgqr6qB17kY2YET1nw5qOhn2UY SiipBuDn0H4Er2BUA4n2qxVRiSMMLOzkjjCkWmahAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUexobW+i1C+bCsPxUhmQuc/P6lbkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlNjhkMDY3LWQyMDEtNGNmMy05OWM3LTdiMWY0ZjAxYzQ5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqi4wDQYJKoZIhvcNAQELBQADggEBAFnBZ0lTtB+nGwWHrj+J9E7BwRzy AtSafhYSyAbCrzfmfjyEaq8ymr/Txu2q6XdFYzTttmlgQIo4iLdxWI0IdNXoM3pa 0j1aoioHpdfFyijUsvRNry5d6mEy2rcVfp6ejk1ePK2SK1iU98G1r5mQeGKzMarR w9jhI7Cc+Z95g3fY5xYV0pDYWPHmYvM1QL5OE5mEp/Dy0Y+9qQF65cNA60k/H1VR 2R1xZ+893qvHYmbo+wNBmNTTPGLF9qN5usaj3bjl/FWsUzkZr0kiNGetkXnoDqiY eHyrySwVU20Lv2JRXd8REm/xolPTvGzC4e3YU/rqlxWWCvXpceUeKdJtM/4= -----END CERTIFICATE-----Generated at Mon Mar 2 03:01:34 2026 by rpki-client