$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa File: d91e1290-8903-43b0-9ff5-cf18f7e06923.roa (raw, json) Hash identifier: Tfbl0EgZF6/7/dSnk4m0UY2FpoPQ5LIjRYyslgkGvMw= Subject key identifier: 43:7F:F8:2E:0A:8C:C9:EC:75:91:7A:3A:7C:8F:F0:9F:F5:34:A4:EB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0849FD16837CB6D60E43BCADD0BA902C4612D025 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa Signing time: Sun 01 Mar 2026 00:40:45 +0000 ROA not before: Sun 01 Mar 2026 00:40:45 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.246.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:49:fd:16:83:7c:b6:d6:0e:43:bc:ad:d0:ba:90:2c:46:12:d0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Mar 1 00:40:45 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=39460e8a8e66a42e9668dd87c3b882d292465a197213e5a6c28a42fdc4f273fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:ee:24:b5:a7:aa:9b:6c:4a:91:8d:39:01: d9:fe:fd:a4:44:e2:27:1e:19:c8:84:3d:db:f2:19: 73:70:40:a4:35:d3:04:ad:aa:d8:e6:9b:bf:98:25: 20:eb:a0:fb:c6:06:f7:59:7c:a1:b9:7a:35:94:d4: 9d:79:c9:87:03:ef:04:2d:99:78:b7:6b:f5:1d:7a: aa:cf:d7:9a:4b:d1:6a:76:07:6d:cc:d0:78:26:e4: 5f:5e:78:c0:fd:9f:d6:3b:75:b5:b6:8b:73:f4:bd: ba:6d:62:2c:f5:68:13:96:4c:66:36:63:13:9e:a4: 1c:86:9d:b5:50:cb:43:ed:61:d5:b3:29:f1:80:43: 4b:d2:6f:3d:55:9e:17:b9:b1:0c:4e:4c:f7:48:3e: 8f:a4:ff:70:00:70:54:be:13:90:71:88:97:97:17: 98:ee:04:69:34:83:68:af:c3:26:af:ee:42:cb:52: 37:f8:e4:63:0c:95:db:38:67:d6:4a:92:a7:32:37: 53:f2:de:db:18:78:07:49:1d:24:b3:b9:21:57:76: 4e:a5:ba:ab:17:81:83:d1:67:46:06:ca:b4:20:0a: dd:e5:f6:ec:d6:bd:76:33:c8:74:8e:78:a7:e8:73: 5e:b1:51:a4:8a:07:1b:6f:0e:85:65:aa:bf:a8:6c: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7F:F8:2E:0A:8C:C9:EC:75:91:7A:3A:7C:8F:F0:9F:F5:34:A4:EB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d91e1290-8903-43b0-9ff5-cf18f7e06923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.246.176.0/23 Signature Algorithm: sha256WithRSAEncryption 49:d3:ab:ea:df:20:2f:2b:b9:eb:44:e1:2b:86:60:e1:ce:91: fd:9d:ba:42:b7:c4:3f:14:06:b2:fc:36:a7:6d:38:ef:c5:d4: 9d:8d:e5:4c:56:be:85:a9:fa:a6:cf:1e:63:49:93:dd:4c:cf: 37:6b:ca:26:83:19:3a:3d:3d:d2:ff:04:fb:56:da:4c:ab:42: b9:a3:9a:40:03:42:92:4e:82:f7:29:88:2a:62:b2:98:41:f0: a5:42:3c:c1:4b:e2:b5:10:49:06:e8:75:c6:94:75:ec:98:0f: 3f:1c:36:3d:ac:2b:6b:17:a9:76:8e:36:dc:14:27:35:65:c9: 40:b7:8c:d9:ef:74:6a:65:34:66:de:cf:91:77:df:22:45:2a: 79:5e:5e:fe:1f:c1:2c:87:3d:c0:03:a7:87:76:90:df:f4:50: 06:a8:80:53:93:0f:3a:fa:7c:71:35:fb:f3:0a:41:34:44:6c: 0b:5d:a4:83:8d:22:fd:63:11:0b:ac:6b:fe:58:e6:f0:0b:dd: a6:b8:33:a3:b8:61:f5:8b:24:16:fe:b8:fe:f7:ff:c0:1e:e2: dd:cb:67:58:ef:3e:22:31:55:94:0d:46:2e:3d:86:ee:6b:57: 0c:7b:88:de:90:7b:d3:e6:8b:3d:6a:f3:05:73:4c:30:3e:0d: 38:aa:d0:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCEn9FoN8ttYOQ7yt0LqQLEYS0CUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMzAxMDA0MDQ1WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTQ2MGU4YThlNjZhNDJlOTY2OGRkODdjM2I4ODJkMjky NDY1YTE5NzIxM2U1YTZjMjhhNDJmZGM0ZjI3M2ZlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV4O4ktaeqm2xKkY05Adn+/aRE4iceGciEPdvyGXNwQKQ1 0wStqtjmm7+YJSDroPvGBvdZfKG5ejWU1J15yYcD7wQtmXi3a/UdeqrP15pL0Wp2 B23M0Hgm5F9eeMD9n9Y7dbW2i3P0vbptYiz1aBOWTGY2YxOepByGnbVQy0PtYdWz KfGAQ0vSbz1Vnhe5sQxOTPdIPo+k/3AAcFS+E5BxiJeXF5juBGk0g2ivwyav7kLL Ujf45GMMlds4Z9ZKkqcyN1Py3tsYeAdJHSSzuSFXdk6luqsXgYPRZ0YGyrQgCt3l 9uzWvXYzyHSOeKfoc16xUaSKBxtvDoVlqr+obGSvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ3/4LgqMyex1kXo6fI/wn/U0pOswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q5MWUxMjkwLTg5MDMtNDNiMC05ZmY1LWNmMThmN2UwNjkyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM9rAwDQYJKoZIhvcNAQELBQADggEBAEnTq+rfIC8ruetE4SuGYOHOkf2d ukK3xD8UBrL8NqdtOO/F1J2N5UxWvoWp+qbPHmNJk91MzzdryiaDGTo9PdL/BPtW 2kyrQrmjmkADQpJOgvcpiCpisphB8KVCPMFL4rUQSQbodcaUdeyYDz8cNj2sK2sX qXaONtwUJzVlyUC3jNnvdGplNGbez5F33yJFKnleXv4fwSyHPcADp4d2kN/0UAao gFOTDzr6fHE1+/MKQTREbAtdpIONIv1jEQusa/5Y5vAL3aa4M6O4YfWLJBb+uP73 /8Ae4t3LZ1jvPiIxVZQNRi49hu5rVwx7iN6Qe9Pmiz1q8wVzTDA+DTiq0M0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:45 2026 by rpki-client