$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f07aaa7-8942-4579-a485-c14de17e54cd.roa File: 1f07aaa7-8942-4579-a485-c14de17e54cd.roa (raw, json) Hash identifier: mrEHqruUuvR45RBN30LV4XrbcBorzyYHihBoosR3j4o= Subject key identifier: C1:3F:2A:B2:DA:A4:2A:15:A4:96:E6:30:76:D9:A0:6C:80:B1:5D:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E5EB1F94A27770B704B55E3253E92C2B7C1AF2C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f07aaa7-8942-4579-a485-c14de17e54cd.roa Signing time: Fri 20 Feb 2026 00:50:09 +0000 ROA not before: Fri 20 Feb 2026 00:50:09 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5e:b1:f9:4a:27:77:0b:70:4b:55:e3:25:3e:92:c2:b7:c1:af:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 20 00:50:09 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=846130b3beab4544e479b3fcaf0121b7fe6e5871cef3bf10a0c68b91ac78a90b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:99:36:f7:be:a5:ea:92:06:f0:9c:bb:24: 54:61:60:eb:e7:61:01:23:92:f0:e9:a5:47:ea:ee: c5:9c:a4:cf:bf:bd:90:55:b4:6b:8c:52:92:90:d7: 26:28:bd:65:c4:fc:d0:6e:2e:91:a5:c4:67:6f:07: 3d:05:f7:fd:c2:f1:49:a9:1b:ce:e0:7a:6f:95:fa: 13:56:29:f8:25:94:28:7e:5c:ac:d0:4a:16:f2:f8: 12:b3:55:4a:65:6f:51:38:db:27:68:cb:54:e7:65: 42:cd:88:2f:b3:00:b5:57:fd:2f:bb:e5:f6:14:9a: f5:b7:61:8b:86:5c:8b:47:c7:72:c2:32:27:75:88: 45:ce:62:77:b9:97:66:8a:e8:8e:ff:d1:55:cd:e8: 44:d1:28:1a:0f:2e:81:40:74:f8:41:04:26:a3:33: e8:2a:e9:c0:fa:ff:6c:0a:a0:8a:fe:5c:6d:7a:52: 10:6a:ee:1c:19:5a:2a:7c:49:a2:89:1c:60:9b:a6: 4c:7d:1c:c8:6d:b4:54:91:92:d3:b3:7b:28:67:94: f4:f8:99:9a:93:6f:0f:29:83:12:3b:09:96:d5:ad: 7f:c2:2c:76:50:a0:8f:bb:51:d6:ae:65:05:54:33: 32:6b:ef:1e:3d:d7:8d:3c:8c:41:1c:b9:a0:56:94: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:2A:B2:DA:A4:2A:15:A4:96:E6:30:76:D9:A0:6C:80:B1:5D:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f07aaa7-8942-4579-a485-c14de17e54cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.189.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:c4:17:42:2f:e7:97:98:a6:bf:67:03:6e:5f:f8:07:75:2d: 45:5c:ee:a6:2c:dc:8e:f0:83:97:45:b2:2e:4c:65:a3:d6:1c: 56:2e:71:f2:e2:26:e4:41:31:6e:22:79:ed:29:5c:a2:71:17: 33:26:b3:a5:50:61:74:81:4c:2f:53:17:30:69:23:ae:e8:d3: 50:7d:a3:ac:63:80:a8:bd:f9:55:8b:37:e1:95:a2:09:c5:ea: 46:90:19:c5:f1:34:ad:5c:d5:f4:f5:17:9d:ef:76:17:e4:f0: 8f:06:2d:fa:58:26:07:3c:00:0d:58:d7:e7:09:72:ca:bf:c7: 53:48:1f:c7:ba:4a:a9:c5:f9:70:8f:75:30:0a:28:d9:66:fe: c6:7e:63:8a:94:c3:bd:59:bb:ef:29:a1:13:ae:5c:e6:9c:e6: 67:5d:d7:1b:1f:87:c9:4e:40:39:1f:a3:e0:19:61:9a:3f:eb: 71:6e:2a:bf:95:67:3c:11:09:78:05:12:e8:6b:d9:67:ae:a8: b9:76:4e:28:28:e7:99:37:1e:c2:fd:95:27:16:41:1f:6f:52: 7b:be:70:76:6f:5b:40:cb:b4:83:21:b5:47:36:9f:88:d8:c2: 18:97:59:73:bf:e0:4b:1f:18:90:78:08:5f:c5:c6:d3:af:f2: 48:4f:4b:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHl6x+UondwtwS1XjJT6SwrfBrywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIwMDA1MDA5WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDYxMzBiM2JlYWI0NTQ0ZTQ3OWIzZmNhZjAxMjFiN2Zl NmU1ODcxY2VmM2JmMTBhMGM2OGI5MWFjNzhhOTBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdN5k2976l6pIG8Jy7JFRhYOvnYQEjkvDppUfq7sWcpM+/ vZBVtGuMUpKQ1yYovWXE/NBuLpGlxGdvBz0F9/3C8UmpG87gem+V+hNWKfgllCh+ XKzQShby+BKzVUplb1E42ydoy1TnZULNiC+zALVX/S+75fYUmvW3YYuGXItHx3LC Mid1iEXOYne5l2aK6I7/0VXN6ETRKBoPLoFAdPhBBCajM+gq6cD6/2wKoIr+XG16 UhBq7hwZWip8SaKJHGCbpkx9HMhttFSRktOzeyhnlPT4mZqTbw8pgxI7CZbVrX/C LHZQoI+7UdauZQVUMzJr7x491408jEEcuaBWlBxpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwT8qstqkKhWkluYwdtmgbICxXXwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmMDdhYWE3LTg5NDItNDU3OS1hNDg1LWMxNGRlMTdlNTRjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnr0wDQYJKoZIhvcNAQELBQADggEBAA/EF0Iv55eYpr9nA25f+Ad1LUVc 7qYs3I7wg5dFsi5MZaPWHFYucfLiJuRBMW4iee0pXKJxFzMms6VQYXSBTC9TFzBp I67o01B9o6xjgKi9+VWLN+GVognF6kaQGcXxNK1c1fT1F53vdhfk8I8GLfpYJgc8 AA1Y1+cJcsq/x1NIH8e6SqnF+XCPdTAKKNlm/sZ+Y4qUw71Zu+8poROuXOac5mdd 1xsfh8lOQDkfo+AZYZo/63FuKr+VZzwRCXgFEuhr2WeuqLl2Tigo55k3HsL9lScW QR9vUnu+cHZvW0DLtIMhtUc2n4jYwhiXWXO/4EsfGJB4CF/FxtOv8khPS1Y= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:25 2026 by rpki-client