$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08a5f40f-78ab-488f-ade7-8d355327093b.roa File: 08a5f40f-78ab-488f-ade7-8d355327093b.roa (raw, json) Hash identifier: v0Jmog0sXth+2to5FATNESGViCtLiSuFIyT1EqHtfQM= Subject key identifier: E9:BF:A6:88:A3:3E:5B:9B:A2:3B:EF:C3:4D:40:89:8D:69:DF:F3:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72D82C4329F02148AA05EA59EF3E508F11735440 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08a5f40f-78ab-488f-ade7-8d355327093b.roa Signing time: Wed 13 May 2026 01:00:51 +0000 ROA not before: Wed 13 May 2026 01:00:51 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d8:2c:43:29:f0:21:48:aa:05:ea:59:ef:3e:50:8f:11:73:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 13 01:00:51 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=68ed3f5e84bffbee1c11e7196e039c77ea682b52de7250b4788371010b659cfa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:98:41:d3:f1:c4:8b:fa:68:2f:29:e1:a0: b0:49:5e:df:50:f6:4e:55:dc:0a:c1:fe:69:00:b8: 5b:5c:30:a4:00:dd:89:7b:41:51:b8:e7:0a:0e:e9: 18:a7:79:a0:e6:5f:1b:9a:1f:b1:a9:92:b6:a6:68: 6b:a6:e5:a9:47:88:99:25:15:67:a0:33:c0:ee:12: 40:21:c0:0e:81:ad:e2:ae:ec:c9:25:2a:9e:f1:41: 89:93:e4:56:6b:76:a0:3e:77:5e:6d:09:01:3d:b1: 45:8b:c3:3d:b4:9b:15:3b:71:25:93:6a:7e:75:a9: 3d:55:cd:e9:73:ec:01:68:56:a4:7f:0b:e1:f8:9f: eb:9e:43:46:8f:53:61:54:96:ed:9f:46:21:0a:ee: 77:00:73:26:18:4f:ee:1a:d9:e3:3b:87:75:77:dd: 7d:19:41:4a:95:eb:2a:cf:0b:77:88:ef:5c:cc:c1: 92:ab:e9:13:bb:e2:88:88:62:a9:68:95:75:04:25: 5b:a4:0e:46:d8:33:06:31:9b:00:7a:d2:80:ff:9e: f7:be:db:e1:a4:19:70:f4:34:99:2e:f2:d9:ae:13: 3e:d0:72:5a:71:c4:d6:23:68:54:02:94:2a:e5:cc: 5d:65:f7:0a:cd:29:8a:76:d2:3f:f5:e2:ef:80:b1: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BF:A6:88:A3:3E:5B:9B:A2:3B:EF:C3:4D:40:89:8D:69:DF:F3:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08a5f40f-78ab-488f-ade7-8d355327093b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.125.0/24 Signature Algorithm: sha256WithRSAEncryption 22:87:3e:76:aa:3d:75:09:00:b7:f8:16:fd:92:b6:e4:fd:64: 76:e6:4a:f6:7e:d0:89:e5:6c:d2:3f:17:98:04:fc:8d:df:3d: 30:08:42:8e:89:99:83:85:8a:24:73:f8:a2:8d:0a:eb:8d:e2: ad:54:3a:b9:34:ea:a8:90:dd:73:b9:26:b0:22:5d:1a:5b:e5: b4:03:a7:76:2d:c4:2b:e2:de:5c:9c:89:41:f2:c9:a5:b0:8e: 91:5d:c1:2b:85:b9:c1:c8:87:e7:8a:a6:f7:3d:dc:a1:87:33: e4:ab:bf:80:6d:63:05:7f:f7:8a:81:12:a6:1b:04:9b:68:97: 15:ad:aa:cb:8e:69:17:16:92:9a:bf:8f:80:cf:b9:57:39:ec: ed:cf:94:33:8d:14:ba:a6:2f:ee:d9:62:e0:9b:82:c3:41:2f: c5:54:26:c9:7f:b0:c8:2e:57:c3:de:f7:e9:c0:4e:88:7b:42: 4d:27:e8:4a:e7:e4:23:09:2a:b1:16:ce:2d:a9:ce:23:12:96: 96:72:ec:d2:b4:06:c0:1a:c6:8f:d3:4d:a7:9d:f6:b9:9f:64: bd:df:5d:45:de:5c:3f:1d:88:b3:dd:8e:1a:e1:4b:2a:a5:9f: 37:4a:dd:ec:cd:93:eb:93:35:d0:08:44:2b:8f:96:d8:9c:8f: d0:2a:ed:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUctgsQynwIUiqBepZ7z5QjxFzVEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTEzMDEwMDUxWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGVkM2Y1ZTg0YmZmYmVlMWMxMWU3MTk2ZTAzOWM3N2Vh NjgyYjUyZGU3MjUwYjQ3ODgzNzEwMTBiNjU5Y2ZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwD5hB0/HEi/poLynhoLBJXt9Q9k5V3ArB/mkAuFtcMKQA 3Yl7QVG45woO6RineaDmXxuaH7GpkramaGum5alHiJklFWegM8DuEkAhwA6BreKu 7MklKp7xQYmT5FZrdqA+d15tCQE9sUWLwz20mxU7cSWTan51qT1Vzelz7AFoVqR/ C+H4n+ueQ0aPU2FUlu2fRiEK7ncAcyYYT+4a2eM7h3V33X0ZQUqV6yrPC3eI71zM wZKr6RO74oiIYqlolXUEJVukDkbYMwYxmwB60oD/nve+2+GkGXD0NJku8tmuEz7Q clpxxNYjaFQClCrlzF1l9wrNKYp20j/14u+AsVMhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6b+miKM+W5uiO+/DTUCJjWnf81cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4YTVmNDBmLTc4YWItNDg4Zi1hZGU3LThkMzU1MzI3MDkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3H0wDQYJKoZIhvcNAQELBQADggEBACKHPnaqPXUJALf4Fv2StuT9ZHbm SvZ+0InlbNI/F5gE/I3fPTAIQo6JmYOFiiRz+KKNCuuN4q1UOrk06qiQ3XO5JrAi XRpb5bQDp3YtxCvi3lyciUHyyaWwjpFdwSuFucHIh+eKpvc93KGHM+Srv4BtYwV/ 94qBEqYbBJtolxWtqsuOaRcWkpq/j4DPuVc57O3PlDONFLqmL+7ZYuCbgsNBL8VU Jsl/sMguV8Pe9+nAToh7Qk0n6Ern5CMJKrEWzi2pziMSlpZy7NK0BsAaxo/TTaed 9rmfZL3fXUXeXD8diLPdjhrhSyqlnzdK3ezNk+uTNdAIRCuPlticj9Aq7YQ= -----END CERTIFICATE-----Generated at Sat Jun 13 10:24:01 2026 by rpki-client