$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa File: cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa (raw, json) Hash identifier: LFj/a84ELhMJruYlkzvZDGHOQw/JPLWpB39bCcpJOIs= Subject key identifier: 5E:A7:5C:6C:79:31:9B:AD:2C:0D:AF:88:95:02:A7:56:D2:C5:83:86 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 309DABEC1990EC3C5E722B4429A84E226D1EB3AB Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa Signing time: Sat 28 Feb 2026 00:30:10 +0000 ROA not before: Sat 28 Feb 2026 00:30:10 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9d:ab:ec:19:90:ec:3c:5e:72:2b:44:29:a8:4e:22:6d:1e:b3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Feb 28 00:30:10 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=4e2ba20bcef3be0835348ecff223a8dbb371de2fa3cdba80530142773b0a4482, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:ac:c9:e9:31:16:70:ff:40:be:cd:d9:88: eb:52:3a:68:60:94:18:cc:01:cf:ad:58:70:42:e5: e8:62:6f:a3:8d:14:22:7e:f1:26:48:dd:85:f9:d7: 5d:05:bf:77:5f:56:c8:a1:f8:82:d6:97:bb:6f:12: 86:14:d4:94:d4:31:df:99:02:c1:de:05:21:24:c7: 8c:bc:bf:62:24:64:f4:79:79:72:d7:c7:54:f5:36: ec:fb:86:28:2c:8e:05:8a:0f:25:01:0a:e8:37:e2: f7:ba:6a:3f:80:03:09:f2:22:c2:50:41:ea:c7:de: f4:82:de:01:b8:97:c7:da:9c:37:0b:a3:a9:11:a3: a6:c3:a5:f1:53:28:72:b6:9b:19:ee:03:d4:39:f0: 65:cd:44:4e:69:e0:a7:1f:15:27:9a:19:34:1a:3d: 31:f9:f6:27:6d:ab:db:cd:ad:08:39:e3:b9:67:1f: 27:ca:3b:94:c7:25:62:bc:16:20:58:4f:e5:81:84: 88:5d:78:aa:4f:22:fe:7d:9c:4e:d6:72:f3:26:72: 16:e7:b3:78:ed:30:66:6e:d6:59:76:91:a6:89:76: c8:e3:8a:5a:6a:7e:a2:39:11:73:3e:7b:c0:d7:85: 4a:e3:ef:4a:5b:46:90:2e:b3:74:7a:fd:c8:24:ac: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A7:5C:6C:79:31:9B:AD:2C:0D:AF:88:95:02:A7:56:D2:C5:83:86 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.192.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:bc:5e:59:1b:db:9a:01:54:c7:46:c4:ce:c1:20:dc:25:99: 49:a2:10:07:3b:d0:97:4b:9d:50:3b:b3:2d:a9:58:ba:f8:17: 1f:c8:f6:44:d0:91:9f:71:53:4b:38:f3:36:78:0c:89:b5:41: f2:13:86:61:82:12:8e:78:da:c1:3c:c3:b8:d6:d2:69:22:53: 77:9d:9b:f0:69:f9:3a:c7:95:96:05:26:21:c8:ce:ff:de:a4: cc:51:4b:90:b6:50:ac:22:b7:ea:a7:a8:e1:9b:65:1d:08:9e: af:ac:24:85:3e:76:ef:8a:9b:28:3b:45:86:6c:0b:93:63:c5: 0c:96:29:f9:bc:e4:fb:e5:ca:f1:5c:17:99:13:68:47:a5:5c: b8:fd:9e:42:c5:e2:00:d1:3d:32:37:81:37:dc:d6:d9:7a:57: 47:6a:1f:f8:74:82:31:d9:fc:11:50:38:1f:96:f0:41:0f:91: da:6b:e9:f2:95:ae:73:14:49:93:73:a1:ef:f8:31:7c:2f:d6: 4f:9d:93:b4:28:93:7d:b1:16:d0:e5:99:4c:e3:28:b9:43:a3: 45:cc:09:64:c3:19:84:11:a7:83:40:1b:ff:65:84:ce:93:35: 7b:0c:8f:bb:30:c1:08:31:ed:a9:ea:e9:78:d4:fa:41:2c:f1: eb:4c:5d:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMJ2r7BmQ7DxecitEKahOIm0es6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwMjI4MDAzMDEwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTJiYTIwYmNlZjNiZTA4MzUzNDhlY2ZmMjIzYThkYmIz NzFkZTJmYTNjZGJhODA1MzAxNDI3NzNiMGE0NDgyMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9C6zJ6TEWcP9Avs3ZiOtSOmhglBjMAc+tWHBC5ehib6ON FCJ+8SZI3YX5110Fv3dfVsih+ILWl7tvEoYU1JTUMd+ZAsHeBSEkx4y8v2IkZPR5 eXLXx1T1Nuz7higsjgWKDyUBCug34ve6aj+AAwnyIsJQQerH3vSC3gG4l8fanDcL o6kRo6bDpfFTKHK2mxnuA9Q58GXNRE5p4KcfFSeaGTQaPTH59idtq9vNrQg547ln HyfKO5THJWK8FiBYT+WBhIhdeKpPIv59nE7WcvMmchbns3jtMGZu1ll2kaaJdsjj ilpqfqI5EXM+e8DXhUrj70pbRpAus3R6/cgkrP69AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXqdcbHkxm60sDa+IlQKnVtLFg4YwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2NmYTlmYmFmLWQ2NzctNGJmYS05ZDEzLTgwMmRhZmM4YzMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycMAwDQYJKoZIhvcNAQELBQADggEBAC28Xlkb25oBVMdGxM7BINwlmUmi EAc70JdLnVA7sy2pWLr4Fx/I9kTQkZ9xU0s48zZ4DIm1QfIThmGCEo542sE8w7jW 0mkiU3edm/Bp+TrHlZYFJiHIzv/epMxRS5C2UKwit+qnqOGbZR0Inq+sJIU+du+K myg7RYZsC5NjxQyWKfm85PvlyvFcF5kTaEelXLj9nkLF4gDRPTI3gTfc1tl6V0dq H/h0gjHZ/BFQOB+W8EEPkdpr6fKVrnMUSZNzoe/4MXwv1k+dk7Qok32xFtDlmUzj KLlDo0XMCWTDGYQRp4NAG/9lhM6TNXsMj7swwQgx7anq6XjU+kEs8etMXYI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:20:42 2026 by rpki-client