$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4c7f5f0-2671-465e-bc93-6808b8282f1e.roa File: e4c7f5f0-2671-465e-bc93-6808b8282f1e.roa (raw, json) Hash identifier: UVfykYR9mBM343QvBM9KhJCw3V/u6A5GhTD+UaMDO8M= Subject key identifier: 12:E1:8E:CE:8E:9A:E2:7C:F6:52:0A:B1:99:3F:AA:47:BF:85:1B:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 326ECBE7FA822487B7C60BFE1454B3625ED7C3B7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4c7f5f0-2671-465e-bc93-6808b8282f1e.roa Signing time: Mon 23 Feb 2026 01:21:22 +0000 ROA not before: Mon 23 Feb 2026 01:21:22 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6e:cb:e7:fa:82:24:87:b7:c6:0b:fe:14:54:b3:62:5e:d7:c3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:21:22 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=4bfe4c0c47e3c8800141064abcdd330776fee134a4304b6223f6beb17caa9e53, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:a7:25:c2:fc:83:90:e0:3f:38:ca:c9:d9: c4:25:87:45:9a:21:6e:63:e3:e3:31:8d:70:2a:1e: 1d:3e:56:d0:b2:d8:94:c5:9e:ef:31:f0:47:b5:15: ef:32:b7:65:56:27:bc:b0:79:ae:1f:6f:dc:a3:71: 34:b5:f1:e2:88:bc:15:76:c8:00:eb:72:9b:bd:74: 36:f3:03:2b:07:79:83:29:24:2f:d8:e5:70:e8:25: 80:10:65:20:16:fc:f3:ec:b9:49:48:b6:f0:9c:7e: 21:f1:da:cd:3a:bd:00:46:d0:a8:32:75:ec:e2:58: 17:a2:36:75:72:3c:a0:11:d5:b0:69:3d:93:dc:69: 99:a0:42:40:d7:79:21:04:89:2b:43:ad:6c:85:55: cd:7d:d2:33:01:26:9e:7f:d6:92:41:80:99:f3:f4: a6:7d:39:9f:3f:dc:6c:df:75:41:2b:df:a3:79:7e: 72:6a:36:a6:29:6d:46:a9:a7:79:59:d8:ff:b3:0e: 4f:c6:4b:f2:88:f7:6e:aa:f4:74:0e:e1:8a:05:ee: 03:29:cb:a0:d3:17:2a:54:06:86:19:d7:82:00:ad: 63:30:72:d8:c8:f1:e6:e7:27:36:c2:ae:37:0c:2d: 52:7a:75:b8:29:61:e6:1c:10:20:33:49:cc:49:37: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E1:8E:CE:8E:9A:E2:7C:F6:52:0A:B1:99:3F:AA:47:BF:85:1B:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4c7f5f0-2671-465e-bc93-6808b8282f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.162.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:83:00:10:e4:cc:8e:03:b4:e9:92:44:08:02:23:4b:07:e5: c3:e1:88:e2:c1:8c:98:e4:59:2e:f0:86:1c:c3:2d:d2:ff:06: e8:e1:f2:94:17:a1:aa:19:c7:bd:33:88:8a:b0:bc:4a:0a:d1: 13:aa:63:79:b0:96:e3:b0:78:4f:a1:ca:cf:6d:65:93:92:71: e4:d2:cd:c3:8e:06:a9:e9:34:20:9f:90:f4:71:e0:0f:c0:fd: c6:27:67:8b:18:5a:32:03:d3:ae:5f:c6:14:e5:b7:0a:30:e6: 58:bf:ae:0a:56:c0:f6:3c:48:2d:11:5a:35:e8:11:a7:91:ac: be:ea:09:1d:a9:d7:80:58:1e:a8:94:70:e1:75:e5:e2:fb:c6: 36:16:99:d8:fa:81:53:f4:67:6c:d4:9a:02:3a:88:75:3f:35: 99:54:57:3d:70:cd:a2:d1:ed:1f:54:5a:e2:9c:3d:84:3a:f4: 0c:56:f9:59:7f:20:46:50:18:fa:0c:42:28:52:ad:57:ea:3c: 0d:63:09:98:a6:0f:44:1f:38:81:bb:35:d7:31:4e:5b:59:2a: e9:d4:c1:92:ca:29:cf:90:1f:28:56:23:27:06:07:83:9a:99: 01:55:d3:97:53:a0:f0:94:7d:91:df:9f:d9:5f:74:c9:c5:bc: 74:8d:42:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMm7L5/qCJIe3xgv+FFSzYl7Xw7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDEyMTIyWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmZlNGMwYzQ3ZTNjODgwMDE0MTA2NGFiY2RkMzMwNzc2 ZmVlMTM0YTQzMDRiNjIyM2Y2YmViMTdjYWE5ZTUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVZqclwvyDkOA/OMrJ2cQlh0WaIW5j4+MxjXAqHh0+VtCy 2JTFnu8x8Ee1Fe8yt2VWJ7ywea4fb9yjcTS18eKIvBV2yADrcpu9dDbzAysHeYMp JC/Y5XDoJYAQZSAW/PPsuUlItvCcfiHx2s06vQBG0KgydeziWBeiNnVyPKAR1bBp PZPcaZmgQkDXeSEEiStDrWyFVc190jMBJp5/1pJBgJnz9KZ9OZ8/3GzfdUEr36N5 fnJqNqYpbUapp3lZ2P+zDk/GS/KI926q9HQO4YoF7gMpy6DTFypUBoYZ14IArWMw ctjI8ebnJzbCrjcMLVJ6dbgpYeYcECAzScxJN1dNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEuGOzo6a4nz2UgqxmT+qR7+FG7owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0YzdmNWYwLTI2NzEtNDY1ZS1iYzkzLTY4MDhiODI4MmYxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRKIwDQYJKoZIhvcNAQELBQADggEBADqDABDkzI4DtOmSRAgCI0sH5cPh iOLBjJjkWS7whhzDLdL/Bujh8pQXoaoZx70ziIqwvEoK0ROqY3mwluOweE+hys9t ZZOSceTSzcOOBqnpNCCfkPRx4A/A/cYnZ4sYWjID065fxhTltwow5li/rgpWwPY8 SC0RWjXoEaeRrL7qCR2p14BYHqiUcOF15eL7xjYWmdj6gVP0Z2zUmgI6iHU/NZlU Vz1wzaLR7R9UWuKcPYQ69AxW+Vl/IEZQGPoMQihSrVfqPA1jCZimD0QfOIG7Ndcx TltZKunUwZLKKc+QHyhWIycGB4OamQFV05dToPCUfZHfn9lfdMnFvHSNQm0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:46:28 2026 by rpki-client