$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41d9f68a-cf23-4d18-9f91-148f9afb9e16.roa File: 41d9f68a-cf23-4d18-9f91-148f9afb9e16.roa (raw, json) Hash identifier: eTyHUNeW+wnlbpfJxo4nh7TyL+HVXZEEeAsYVTwY5Es= Subject key identifier: 6E:4A:C0:A8:69:B3:4F:B4:7A:33:D8:97:A6:F5:DA:E8:7D:A8:B1:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C8FBC6CCAAC03FE6EE8D27EB91CD2D459F8355F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41d9f68a-cf23-4d18-9f91-148f9afb9e16.roa Signing time: Mon 23 Feb 2026 00:10:11 +0000 ROA not before: Mon 23 Feb 2026 00:10:11 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8f:bc:6c:ca:ac:03:fe:6e:e8:d2:7e:b9:1c:d2:d4:59:f8:35:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:10:11 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=6f74c6019bba52a91a353dc01004f19cc66423c78a51e2e69233cdb63fadadd0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:85:9f:48:ce:ca:17:70:0b:18:33:df:29: a9:bc:33:3a:b0:f6:db:af:35:02:33:2d:eb:42:23: 14:60:c7:a8:2d:1b:28:63:f7:59:9f:f6:87:76:d9: 5b:f7:49:12:ae:18:d2:ee:35:aa:ea:77:7b:9c:ac: 1c:8f:cb:8f:f7:35:05:bc:39:51:cb:4c:6a:15:ef: 0f:cd:0f:23:a6:64:f0:67:82:65:e5:48:74:87:a5: 00:b5:52:bd:dd:9c:5c:6f:02:ac:3f:28:64:e8:6b: 8d:08:1c:b6:3e:9a:63:39:60:82:11:0a:79:54:cd: ba:43:b4:84:ef:08:41:c8:f0:bb:73:6c:0e:8d:6d: 2d:8a:da:2f:ee:05:fe:12:1c:d3:47:32:b8:2e:88: c9:e5:fd:7b:bb:be:4c:4f:3d:9d:5f:71:4c:6f:85: 9d:8c:aa:ba:c6:da:93:0f:9c:d0:60:cf:f4:2f:70: 11:d2:3d:0d:b8:77:bd:ce:a6:67:28:83:38:9a:a2: 4f:e3:7d:2a:dc:32:73:9e:b0:7f:af:5e:ea:e9:e9: 09:33:77:28:a0:c4:f9:66:30:a3:a1:d9:91:b8:7a: 88:7e:5f:d1:6a:e4:e2:30:e5:ee:d3:55:7d:e8:07: ae:c4:60:f8:b4:59:f9:10:03:80:c3:5a:c6:1b:96: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4A:C0:A8:69:B3:4F:B4:7A:33:D8:97:A6:F5:DA:E8:7D:A8:B1:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41d9f68a-cf23-4d18-9f91-148f9afb9e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.255.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:0a:46:c3:62:69:e5:70:6f:bf:40:ca:13:83:f1:5f:e2:47: ff:2b:45:02:60:19:40:96:95:97:e9:17:86:c2:f7:a1:53:c5: 44:45:61:0c:0b:e8:9d:5f:21:2a:6e:a2:fe:e2:59:08:8d:8c: b1:01:91:6a:79:e4:a5:bc:68:78:2a:2a:c5:09:8f:6f:70:85: 28:3c:f7:f0:77:1a:7f:ca:a5:e4:c0:e6:cf:78:94:6d:90:a0: 5c:74:7a:b2:1d:c2:c3:c6:c1:c8:4c:7d:1e:e9:af:6d:08:d0: f8:2f:8a:6c:e0:51:51:52:38:9f:67:01:ce:44:1c:0e:46:69: c7:2c:c9:32:00:7d:5a:9f:6c:bb:c0:6c:e5:ad:50:19:74:d8: 88:52:28:50:50:f7:49:17:0a:e7:f9:62:51:58:d3:56:53:6e: 8a:6f:a8:87:d7:6a:08:94:c5:53:88:66:28:cb:10:a2:9e:12: 80:34:41:f7:81:df:4f:5c:03:83:58:9b:76:f2:a5:0f:a3:39: d1:94:dd:88:5b:e2:2a:9c:ed:a2:d2:a9:bc:7f:c8:f8:ac:da: 7b:ea:60:71:65:e3:05:48:6a:58:ad:44:7a:f5:13:02:6e:ed: a7:9f:5b:47:7a:23:b5:36:09:71:19:08:b3:47:6e:28:c1:21: 98:01:2d:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfI+8bMqsA/5u6NJ+uRzS1Fn4NV8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAxMDExWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Zjc0YzYwMTliYmE1MmE5MWEzNTNkYzAxMDA0ZjE5Y2M2 NjQyM2M3OGE1MWUyZTY5MjMzY2RiNjNmYWRhZGQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCzoWfSM7KF3ALGDPfKam8Mzqw9tuvNQIzLetCIxRgx6gt Gyhj91mf9od22Vv3SRKuGNLuNarqd3ucrByPy4/3NQW8OVHLTGoV7w/NDyOmZPBn gmXlSHSHpQC1Ur3dnFxvAqw/KGToa40IHLY+mmM5YIIRCnlUzbpDtITvCEHI8Ltz bA6NbS2K2i/uBf4SHNNHMrguiMnl/Xu7vkxPPZ1fcUxvhZ2MqrrG2pMPnNBgz/Qv cBHSPQ24d73Opmcogziaok/jfSrcMnOesH+vXurp6QkzdyigxPlmMKOh2ZG4eoh+ X9Fq5OIw5e7TVX3oB67EYPi0WfkQA4DDWsYbll3zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbkrAqGmzT7R6M9iXpvXa6H2osXUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxZDlmNjhhLWNmMjMtNGQxOC05ZjkxLTE0OGY5YWZiOWUxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnv8wDQYJKoZIhvcNAQELBQADggEBAD0KRsNiaeVwb79AyhOD8V/iR/8r RQJgGUCWlZfpF4bC96FTxURFYQwL6J1fISpuov7iWQiNjLEBkWp55KW8aHgqKsUJ j29whSg89/B3Gn/KpeTA5s94lG2QoFx0erIdwsPGwchMfR7pr20I0PgvimzgUVFS OJ9nAc5EHA5GaccsyTIAfVqfbLvAbOWtUBl02IhSKFBQ90kXCuf5YlFY01ZTbopv qIfXagiUxVOIZijLEKKeEoA0QfeB309cA4NYm3bypQ+jOdGU3Yhb4iqc7aLSqbx/ yPis2nvqYHFl4wVIalitRHr1EwJu7aefW0d6I7U2CXEZCLNHbijBIZgBLdw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:24:56 2026 by rpki-client