$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fdb9353-cc0c-4f71-9210-b5e0c4186afa.roa File: 2fdb9353-cc0c-4f71-9210-b5e0c4186afa.roa (raw, json) Hash identifier: NNtGYYzu+lTywZgED7iBLCKpnaGkMDIdFKyhhqpH0sc= Subject key identifier: FD:B3:65:DE:40:FD:3E:04:AF:FC:F7:27:CE:AD:A6:6F:4B:C0:B8:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 707119A6052C54514CF79BE16A2BDCF3EB0E8811 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fdb9353-cc0c-4f71-9210-b5e0c4186afa.roa Signing time: Sun 22 Feb 2026 00:50:06 +0000 ROA not before: Sun 22 Feb 2026 00:50:06 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:71:19:a6:05:2c:54:51:4c:f7:9b:e1:6a:2b:dc:f3:eb:0e:88:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 22 00:50:06 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=e9441f728e41a5c6212408aac0e7b0e1e1770c72d27bb394185670dd14c7491a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:15:19:89:08:2f:ec:4a:d5:38:0f:6b:51: 46:4c:87:de:65:47:37:25:d0:16:6e:dc:fb:4d:e2: 76:7e:ad:bc:98:b0:7e:79:3f:a5:fa:ab:3c:80:b9: c7:2a:42:a3:fb:de:d3:cc:ed:cc:69:e6:28:48:16: f3:b5:59:30:ac:cf:55:33:e6:ba:4b:08:3b:e9:e8: 2b:82:5d:ab:8c:86:74:e2:c8:10:13:6c:97:7c:4e: 0f:36:96:f7:60:69:02:11:03:5f:2a:17:60:b3:f1: b1:49:3b:5a:f7:b7:4e:e2:b2:d1:b9:6e:1d:7a:4c: 51:87:22:05:47:c1:fb:94:ac:49:7b:ef:a1:9c:c7: 62:08:e2:b0:4f:4f:de:f5:5b:e1:a4:f6:7f:0b:4c: e7:1d:c2:a0:e5:7e:76:af:20:0a:a4:8d:21:02:ce: 91:e3:93:bd:45:3f:ea:00:14:ea:4d:70:83:c8:80: a5:7e:ee:c8:e6:e6:43:ba:72:27:81:b4:84:27:4e: 44:b7:44:47:bb:05:81:9e:36:84:3e:4f:56:91:07: 8b:7a:df:ab:39:25:88:ac:ec:44:d6:27:63:0d:10: 4f:d1:cf:e5:8c:02:e5:a4:a5:fc:c9:c4:e2:ff:03: 9e:90:78:7b:59:c3:b9:ad:f2:77:18:cf:27:a0:bc: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:65:DE:40:FD:3E:04:AF:FC:F7:27:CE:AD:A6:6F:4B:C0:B8:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fdb9353-cc0c-4f71-9210-b5e0c4186afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.15.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d3:5c:ff:4c:2b:e6:6d:69:62:d8:52:6d:02:5c:de:48:b2: 4e:ec:58:8e:ae:71:29:24:2a:fb:ea:6f:b1:e4:94:ba:29:25: 2f:71:2e:e3:ef:96:a8:45:db:92:5f:e8:3a:7d:b6:3d:fa:8f: d5:3c:31:c5:85:e6:93:d2:c9:83:ff:51:8e:10:a9:28:19:b6: 99:b1:70:1b:d4:75:67:78:9b:ca:6e:67:3b:47:ed:f0:a0:b8: b0:5f:e3:a1:c2:98:1d:a8:07:ae:ce:43:42:e0:e0:92:0c:8f: 8a:c4:53:25:3d:ab:6a:57:75:8a:33:10:a6:7e:ea:0c:8d:62: c6:34:ba:5c:99:49:6e:4d:5a:00:b1:26:4f:df:0c:08:89:af: 6e:22:8e:05:19:30:1c:e7:3e:62:52:d8:a7:a1:08:ea:1f:c3: 3f:97:58:10:af:15:9c:ac:f9:b4:be:9f:95:38:32:6d:cd:de: d4:d9:8e:e7:af:8a:e2:c9:57:37:1d:b1:41:89:a9:13:35:67: 99:6b:d4:0d:60:7a:ce:48:3d:1e:b4:8d:97:b4:dd:54:e0:65: 57:5c:cd:f9:cf:09:5d:76:c2:22:1d:db:90:5c:ad:76:9a:0f: 50:64:22:94:84:93:43:97:44:1b:b5:07:b7:05:ee:82:2a:f5: dc:c1:82:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcHEZpgUsVFFM95vhaivc8+sOiBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIyMDA1MDA2WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTQ0MWY3MjhlNDFhNWM2MjEyNDA4YWFjMGU3YjBlMWUx NzcwYzcyZDI3YmIzOTQxODU2NzBkZDE0Yzc0OTFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVyRUZiQgv7ErVOA9rUUZMh95lRzcl0BZu3PtN4nZ+rbyY sH55P6X6qzyAuccqQqP73tPM7cxp5ihIFvO1WTCsz1Uz5rpLCDvp6CuCXauMhnTi yBATbJd8Tg82lvdgaQIRA18qF2Cz8bFJO1r3t07istG5bh16TFGHIgVHwfuUrEl7 76Gcx2II4rBPT971W+Gk9n8LTOcdwqDlfnavIAqkjSECzpHjk71FP+oAFOpNcIPI gKV+7sjm5kO6cieBtIQnTkS3REe7BYGeNoQ+T1aRB4t636s5JYis7ETWJ2MNEE/R z+WMAuWkpfzJxOL/A56QeHtZw7mt8ncYzyegvCyFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/bNl3kD9PgSv/Pcnzq2mb0vAuOUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmZGI5MzUzLWNjMGMtNGY3MS05MjEwLWI1ZTBjNDE4NmFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3A8wDQYJKoZIhvcNAQELBQADggEBAKLTXP9MK+ZtaWLYUm0CXN5Isk7s WI6ucSkkKvvqb7HklLopJS9xLuPvlqhF25Jf6Dp9tj36j9U8McWF5pPSyYP/UY4Q qSgZtpmxcBvUdWd4m8puZztH7fCguLBf46HCmB2oB67OQ0Lg4JIMj4rEUyU9q2pX dYozEKZ+6gyNYsY0ulyZSW5NWgCxJk/fDAiJr24ijgUZMBznPmJS2KehCOofwz+X WBCvFZys+bS+n5U4Mm3N3tTZjueviuLJVzcdsUGJqRM1Z5lr1A1ges5IPR60jZe0 3VTgZVdczfnPCV12wiId25BcrXaaD1BkIpSEk0OXRBu1B7cF7oIq9dzBgr4= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:26 2026 by rpki-client