$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e81900de-e011-4afb-9f87-20661b2c5d8a.roa File: e81900de-e011-4afb-9f87-20661b2c5d8a.roa (raw, json) Hash identifier: //QV6pzVFvzjnR0J3099Yga2GV279VLEimxoI2oJci4= Subject key identifier: 83:0F:FA:90:54:E8:7A:AB:C3:90:14:19:38:7F:1C:3C:C6:0D:13:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CCA30A13CE31BF521061F617599778442D9D94B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e81900de-e011-4afb-9f87-20661b2c5d8a.roa Signing time: Tue 17 Feb 2026 01:41:41 +0000 ROA not before: Tue 17 Feb 2026 01:41:41 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 7224 IP address blocks: 3.2.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ca:30:a1:3c:e3:1b:f5:21:06:1f:61:75:99:77:84:42:d9:d9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 17 01:41:41 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=9300446cd507c8019711cb7396ee548969bff116b8b3b885b57f2b6742d78f08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:db:15:76:cb:9c:6b:f8:e5:70:70:f1:8a:49: 81:75:2c:f4:12:e5:39:e7:bc:df:12:54:41:e8:5f: 12:7f:d0:36:52:ae:57:bb:c7:39:07:8d:d6:f5:20: b4:dc:4d:5b:ab:2b:6d:af:91:c7:cb:4d:af:7f:32: ee:eb:f3:5a:6a:c8:26:60:61:a4:90:3e:50:a2:1b: bb:95:31:cf:63:b8:f1:1b:52:b5:fe:e5:20:ca:6a: ed:1b:74:21:88:f5:a5:73:6d:99:94:79:d5:3e:a4: 3d:ae:08:7a:44:9a:aa:5f:84:39:e2:8b:86:18:c7: 1b:d6:9a:28:b9:9d:64:51:d2:f4:43:7d:95:4f:2f: 18:19:2f:46:9b:15:e7:e9:97:b4:07:b0:c3:4c:f9: 08:22:0c:63:4f:5b:fa:e9:c4:10:40:e6:2f:9a:5a: 00:38:63:fa:c4:bd:a0:67:92:2b:e2:0e:80:6b:dd: 92:df:bc:1c:9c:41:b6:2d:42:46:3b:61:20:10:b4: c3:4b:85:8b:e5:f9:f7:20:05:f8:5e:13:9d:50:b7: 64:d1:c3:92:7a:9a:a2:a6:1e:97:63:4b:a0:cb:28: 80:f6:60:a6:10:27:ac:f2:c0:d0:41:cd:1b:ed:7c: 75:48:5c:99:2c:1c:46:24:71:c7:1b:7c:db:78:11: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:FA:90:54:E8:7A:AB:C3:90:14:19:38:7F:1C:3C:C6:0D:13:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e81900de-e011-4afb-9f87-20661b2c5d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:b3:52:04:43:c8:ec:06:d7:9e:6a:1f:d6:36:5b:ae:ff:da: 9e:ee:a8:22:80:2e:fe:3d:1a:80:23:30:ad:7f:d5:45:05:aa: 6d:36:4c:bc:9b:5e:50:bd:39:34:6e:07:54:fa:98:39:78:96: c4:13:6c:ae:17:8c:4d:70:be:03:1b:fb:e7:05:0f:cc:7b:58: a5:1b:43:14:70:4e:06:81:b8:8c:51:65:f5:7e:7a:94:eb:ac: 8f:0c:3f:a8:ee:33:30:ed:36:c5:3f:d5:01:58:d8:c9:3b:dc: 3e:95:7d:17:11:78:cd:47:02:0f:5b:82:5c:e5:3a:6f:ff:b6: a9:5e:b2:92:34:86:d6:f7:97:93:7b:31:29:26:f2:4f:87:52: bc:07:af:71:87:83:07:85:29:7f:91:dd:33:d3:50:83:e6:22: 51:bf:5c:dd:e7:c7:c2:f6:fc:5e:f7:d4:89:0d:a2:d4:6e:c5: 30:27:86:9d:72:b0:a7:81:b0:3e:c1:90:01:cc:25:98:6e:e0: 32:70:7f:54:c8:de:94:36:04:02:de:93:ac:08:b5:8e:29:d5: 24:f7:41:26:76:81:5f:db:3e:f7:f1:13:28:c0:23:94:35:70: 49:c0:11:41:c1:90:1f:e7:b8:ba:f7:66:c0:68:77:76:08:40: a4:98:3b:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPMowoTzjG/UhBh9hdZl3hELZ2UswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDE0MTQxWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzAwNDQ2Y2Q1MDdjODAxOTcxMWNiNzM5NmVlNTQ4OTY5 YmZmMTE2YjhiM2I4ODViNTdmMmI2NzQyZDc4ZjA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD22xV2y5xr+OVwcPGKSYF1LPQS5TnnvN8SVEHoXxJ/0DZS rle7xzkHjdb1ILTcTVurK22vkcfLTa9/Mu7r81pqyCZgYaSQPlCiG7uVMc9juPEb UrX+5SDKau0bdCGI9aVzbZmUedU+pD2uCHpEmqpfhDnii4YYxxvWmii5nWRR0vRD fZVPLxgZL0abFefpl7QHsMNM+QgiDGNPW/rpxBBA5i+aWgA4Y/rEvaBnkiviDoBr 3ZLfvBycQbYtQkY7YSAQtMNLhYvl+fcgBfheE51Qt2TRw5J6mqKmHpdjS6DLKID2 YKYQJ6zywNBBzRvtfHVIXJksHEYkcccbfNt4ER87AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgw/6kFToeqvDkBQZOH8cPMYNE/AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4MTkwMGRlLWUwMTEtNGFmYi05Zjg3LTIwNjYxYjJjNWQ4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAhUwDQYJKoZIhvcNAQELBQADggEBAH+zUgRDyOwG155qH9Y2W67/2p7u qCKALv49GoAjMK1/1UUFqm02TLybXlC9OTRuB1T6mDl4lsQTbK4XjE1wvgMb++cF D8x7WKUbQxRwTgaBuIxRZfV+epTrrI8MP6juMzDtNsU/1QFY2Mk73D6VfRcReM1H Ag9bglzlOm//tqlespI0htb3l5N7MSkm8k+HUrwHr3GHgweFKX+R3TPTUIPmIlG/ XN3nx8L2/F731IkNotRuxTAnhp1ysKeBsD7BkAHMJZhu4DJwf1TI3pQ2BALek6wI tY4p1ST3QSZ2gV/bPvfxEyjAI5Q1cEnAEUHBkB/nuLr3ZsBod3YIQKSYOwA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:46:30 2026 by rpki-client