$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a0967a3-70e7-4d8f-8818-265a89f377f0.roa File: 1a0967a3-70e7-4d8f-8818-265a89f377f0.roa (raw, json) Hash identifier: olkfAXZ8/JdROHgcp+M2HWjM7kzEOWJAsvNF7IbkTt0= Subject key identifier: 18:FF:6A:F2:C3:1E:50:7C:4C:B7:6F:60:B0:F4:12:71:FB:C2:85:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54A0CD5DA5678205C8213A3D595DE4B861273668 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a0967a3-70e7-4d8f-8818-265a89f377f0.roa Signing time: Sun 22 Feb 2026 01:11:45 +0000 ROA not before: Sun 22 Feb 2026 01:11:45 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a0:cd:5d:a5:67:82:05:c8:21:3a:3d:59:5d:e4:b8:61:27:36:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 22 01:11:45 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=9312ac70751e82c5a75306d40a2345ba0226ec57e858842de0ecebba17daf4a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:b6:97:56:7f:55:18:b4:11:ad:1d:61:77: e3:40:82:21:35:8b:9b:b5:89:23:d7:27:53:41:bd: e5:80:56:89:28:33:f0:90:8a:b0:83:a6:42:55:42: e1:07:a0:c1:1a:ec:1d:7a:e0:61:59:36:d5:06:8b: 07:d1:72:c2:b2:94:07:16:cb:84:4d:dd:c7:60:7a: a4:52:e7:72:19:c9:8d:e8:c9:8a:1e:69:bf:bb:14: 7f:33:fa:09:c6:c7:22:a3:80:0f:6f:4a:89:a3:ba: fb:dd:c2:a5:c2:d1:7f:2a:c7:3e:7b:9f:ad:d8:a9: cc:ef:23:c7:84:7d:cc:ba:e5:ad:17:92:e3:e6:61: cb:98:e6:56:90:e8:cf:b7:7a:0a:6d:9b:37:06:b6: 6d:d7:6f:c4:5c:45:d5:64:0f:80:4d:44:f7:f3:ba: 8d:6c:5b:ba:d8:08:c0:08:01:16:a3:fb:f3:43:6a: 60:91:12:14:c4:96:1a:56:ae:d8:e0:d3:a3:f3:52: 59:12:44:bb:46:8c:54:d3:58:83:d8:f6:d3:7a:ec: c8:8d:1d:df:ed:46:01:de:e9:e1:7f:15:ad:7c:db: 15:16:c2:87:b2:87:24:bc:be:23:c8:64:74:98:e8: 57:d0:88:3a:1a:66:44:73:1f:54:7f:5c:a1:9d:00: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FF:6A:F2:C3:1E:50:7C:4C:B7:6F:60:B0:F4:12:71:FB:C2:85:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a0967a3-70e7-4d8f-8818-265a89f377f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.81.0/24 Signature Algorithm: sha256WithRSAEncryption 18:49:d9:f6:19:86:db:63:88:4e:85:4b:f9:71:66:83:32:05: de:dd:a4:d0:0a:22:e4:21:30:ba:78:ae:f6:f6:6e:1e:53:08: ff:cc:b1:ad:ac:48:84:9d:5c:90:fa:54:34:33:46:91:18:91: cd:ce:9e:b4:9b:0b:dc:27:a1:4a:ef:03:71:52:2d:03:37:44: 21:82:a6:38:92:87:e8:e9:64:22:02:a0:0b:2c:dd:55:6b:d7: 51:21:11:b0:93:01:fa:16:49:8d:6e:d6:d2:40:7d:4b:60:2e: a0:ca:88:60:a7:60:c6:3f:78:19:c5:58:94:5e:91:3c:83:69: 64:4d:27:65:67:56:f0:ea:dd:eb:10:09:d3:f3:47:2c:bd:84: 00:39:11:76:c7:12:6f:bb:46:91:e8:3c:ae:0c:b7:98:70:54: 47:14:eb:3f:8f:6a:eb:e6:40:69:7e:f9:bc:a9:47:63:88:3f: cb:5e:57:5a:78:c9:0b:f0:6f:76:64:a9:1f:5c:79:0f:bc:76: 1e:a8:d4:60:63:de:35:3c:0c:b5:c5:82:a3:1b:68:6d:82:e0: 9d:8b:1f:01:71:bb:40:df:58:c7:05:e5:57:ff:90:35:be:69: c3:91:2f:44:6a:7a:df:ac:48:5d:f8:d5:2d:5b:e4:49:c9:77: de:83:b1:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVKDNXaVnggXIITo9WV3kuGEnNmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIyMDExMTQ1WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzEyYWM3MDc1MWU4MmM1YTc1MzA2ZDQwYTIzNDViYTAy MjZlYzU3ZTg1ODg0MmRlMGVjZWJiYTE3ZGFmNGE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChzraXVn9VGLQRrR1hd+NAgiE1i5u1iSPXJ1NBveWAVoko M/CQirCDpkJVQuEHoMEa7B164GFZNtUGiwfRcsKylAcWy4RN3cdgeqRS53IZyY3o yYoeab+7FH8z+gnGxyKjgA9vSomjuvvdwqXC0X8qxz57n63YqczvI8eEfcy65a0X kuPmYcuY5laQ6M+3egptmzcGtm3Xb8RcRdVkD4BNRPfzuo1sW7rYCMAIARaj+/ND amCREhTElhpWrtjg06PzUlkSRLtGjFTTWIPY9tN67MiNHd/tRgHe6eF/Fa182xUW woeyhyS8viPIZHSY6FfQiDoaZkRzH1R/XKGdALpRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGP9q8sMeUHxMt29gsPQScfvChf4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhMDk2N2EzLTcwZTctNGQ4Zi04ODE4LTI2NWE4OWYzNzdmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3FEwDQYJKoZIhvcNAQELBQADggEBABhJ2fYZhttjiE6FS/lxZoMyBd7d pNAKIuQhMLp4rvb2bh5TCP/Msa2sSISdXJD6VDQzRpEYkc3OnrSbC9wnoUrvA3FS LQM3RCGCpjiSh+jpZCICoAss3VVr11EhEbCTAfoWSY1u1tJAfUtgLqDKiGCnYMY/ eBnFWJRekTyDaWRNJ2VnVvDq3esQCdPzRyy9hAA5EXbHEm+7RpHoPK4Mt5hwVEcU 6z+PauvmQGl++bypR2OIP8teV1p4yQvwb3ZkqR9ceQ+8dh6o1GBj3jU8DLXFgqMb aG2C4J2LHwFxu0DfWMcF5Vf/kDW+acORL0Rqet+sSF341S1b5EnJd96Dscs= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:44 2026 by rpki-client