$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa File: ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa (raw, json) Hash identifier: NtDacAuolfv30SPsx26L74xY/o5E5kS7+OygaU/mMcc= Subject key identifier: FD:6C:C6:23:E2:7A:74:0E:43:03:1D:30:41:89:30:AF:6C:01:FA:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BAEF02A66569653892DC648A379EE5A18BEE58D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa Signing time: Sat 28 Feb 2026 02:00:09 +0000 ROA not before: Sat 28 Feb 2026 02:00:09 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.108.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ae:f0:2a:66:56:96:53:89:2d:c6:48:a3:79:ee:5a:18:be:e5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:00:09 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=d753f4719d1356a03afeae24c07618b28e10b5a62212ffa58d724814d328069c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:5a:0c:b4:72:14:e1:26:5a:6a:94:90:0d: 05:99:56:67:53:e0:91:df:d9:71:bb:41:1a:16:78: c3:38:15:3e:69:c9:0e:33:9a:e4:f5:b0:f1:36:84: 70:ae:9c:6a:51:04:09:d9:62:0c:d2:b7:0c:28:d0: 6c:5c:82:32:d6:b1:8c:60:e8:fb:1f:12:6c:c5:74: c4:53:ca:42:c9:cf:6b:07:54:27:66:6f:4d:38:a9: 6e:c5:56:af:d6:bf:cd:e0:6e:52:45:ef:59:8c:67: 71:02:12:83:db:0a:9c:f0:66:25:eb:78:40:9e:5e: f3:dc:8c:7b:b1:0f:0a:3c:bb:b9:c0:cb:28:83:9e: 7d:f7:6e:90:e8:c3:74:37:1d:ac:20:45:90:97:0c: f2:8c:36:15:14:07:0c:5d:03:7f:0f:93:c2:d5:41: 16:16:f5:f4:24:e7:85:77:c7:0a:72:03:8f:7c:bb: ee:26:09:3c:79:22:a5:58:e5:27:fb:34:4e:1d:7b: 7b:64:88:a7:57:1a:fb:ae:49:a8:ec:cc:e4:d3:5a: 47:70:18:47:4a:5c:44:3c:f2:0c:7a:0f:ef:07:5b: bd:af:20:0b:a4:0e:7a:6d:b5:86:c9:97:a6:95:e8: 28:7e:bb:45:39:97:b4:28:84:a5:4a:8e:9e:82:3b: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6C:C6:23:E2:7A:74:0E:43:03:1D:30:41:89:30:AF:6C:01:FA:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.108.0.0/15 Signature Algorithm: sha256WithRSAEncryption 17:bf:97:04:f6:eb:68:4c:68:2a:a4:5d:43:56:6a:8a:3b:6b: 47:c9:e1:f4:81:74:8b:db:23:ab:89:8b:89:45:5b:e7:b2:94: 10:c2:10:c0:16:22:1b:fb:1b:2b:2f:f0:b2:72:84:89:7c:6c: 61:6e:28:04:83:24:5a:b0:b0:d3:53:43:c5:d9:e2:35:28:f9: da:3b:7a:3e:8d:1a:e2:23:46:6c:0a:5f:7f:a8:e9:24:0c:7e: e5:e0:c3:ae:9c:d7:af:25:34:b9:37:03:8f:73:fc:c1:8b:5d: 0d:af:2b:49:90:79:11:55:40:8a:db:aa:44:83:cd:ea:9e:52: 26:91:0b:75:d1:67:1e:41:09:f6:91:77:51:2d:e7:82:53:07: fe:f8:c7:8a:eb:59:db:a0:b3:8d:f7:30:f3:76:13:34:a1:f8: 59:90:d6:0b:17:2e:8d:24:7c:e0:c9:f7:4a:65:d4:84:64:2e: 67:d0:3a:3a:fc:94:5b:94:7e:30:2a:6f:69:2f:4c:e3:a2:07: 4b:0c:a1:98:86:41:f1:00:cc:a0:a9:8a:e4:9f:8f:f6:48:04: 25:58:cf:03:15:1c:58:c5:79:c1:63:da:70:e3:e1:eb:9d:39: 61:98:53:ad:15:68:0e:61:6b:29:cb:82:f6:be:ab:53:7a:5e: 11:57:66:26 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK67wKmZWllOJLcZIo3nuWhi+5Y0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDIwMDA5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzUzZjQ3MTlkMTM1NmEwM2FmZWFlMjRjMDc2MThiMjhl MTBiNWE2MjIxMmZmYTU4ZDcyNDgxNGQzMjgwNjljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRmFoMtHIU4SZaapSQDQWZVmdT4JHf2XG7QRoWeMM4FT5p yQ4zmuT1sPE2hHCunGpRBAnZYgzStwwo0GxcgjLWsYxg6PsfEmzFdMRTykLJz2sH VCdmb004qW7FVq/Wv83gblJF71mMZ3ECEoPbCpzwZiXreECeXvPcjHuxDwo8u7nA yyiDnn33bpDow3Q3HawgRZCXDPKMNhUUBwxdA38Pk8LVQRYW9fQk54V3xwpyA498 u+4mCTx5IqVY5Sf7NE4de3tkiKdXGvuuSajszOTTWkdwGEdKXEQ88gx6D+8HW72v IAukDnpttYbJl6aV6Ch+u0U5l7QohKVKjp6COwbJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/WzGI+J6dA5DAx0wQYkwr2wB+vkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjNjFjOTBiLWM2MmQtNDdmNS05ODQzLTVjMjk3ZjA2YmQxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESbDANBgkqhkiG9w0BAQsFAAOCAQEAF7+XBPbraExoKqRdQ1ZqijtrR8nh 9IF0i9sjq4mLiUVb57KUEMIQwBYiG/sbKy/wsnKEiXxsYW4oBIMkWrCw01NDxdni NSj52jt6Po0a4iNGbApff6jpJAx+5eDDrpzXryU0uTcDj3P8wYtdDa8rSZB5EVVA ituqRIPN6p5SJpELddFnHkEJ9pF3US3nglMH/vjHiutZ26Czjfcw83YTNKH4WZDW CxcujSR84Mn3SmXUhGQuZ9A6OvyUW5R+MCpvaS9M46IHSwyhmIZB8QDMoKmK5J+P 9kgEJVjPAxUcWMV5wWPacOPh6505YZhTrRVoDmFrKcuC9r6rU3peEVdmJg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:50:34 2026 by rpki-client