$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43d2c36f-b400-4506-994a-fb2d51e5e619.roa File: 43d2c36f-b400-4506-994a-fb2d51e5e619.roa (raw, json) Hash identifier: d+8Thmmxs5M+9BDJMejlQO9EZZ5cV+NJFXEFEHAnF7I= Subject key identifier: C8:6C:64:B3:4C:40:C0:59:94:95:99:18:66:5C:FA:FB:2C:03:26:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BA57794416B77F3EFDF2E10FE5F51605FA21DF8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43d2c36f-b400-4506-994a-fb2d51e5e619.roa Signing time: Mon 23 Feb 2026 02:00:06 +0000 ROA not before: Mon 23 Feb 2026 02:00:06 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a5:77:94:41:6b:77:f3:ef:df:2e:10:fe:5f:51:60:5f:a2:1d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 02:00:06 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=be908b59528e692dd6fa240655f8e2b7bb45096e0bc7f1fc885e926597a77c7e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:08:f6:0c:91:2a:25:6f:14:91:c5:95:a3: 60:de:cc:5f:0f:34:4d:e8:fc:6e:aa:a5:11:8c:5b: 19:64:13:3b:f2:14:05:fc:c1:a4:22:fc:7c:3d:86: bc:0a:c0:75:25:a2:62:42:44:3f:a8:6d:2f:86:ce: 22:25:4b:0b:22:f0:58:9e:34:65:1d:6a:ca:1d:a6: a8:b0:2c:fa:d1:b2:a0:45:fa:60:8b:d3:27:f2:2b: da:06:28:86:bf:83:c0:11:b0:6c:3d:0e:63:7a:02: d8:89:86:07:5f:f9:c9:c8:f8:16:03:95:9c:dc:bc: a0:1a:32:fa:4b:06:ff:30:22:f9:c8:23:15:94:62: 81:40:d0:72:8d:17:4d:69:24:22:12:ff:f6:f4:99: 4b:3c:7b:29:15:18:f7:dd:cd:db:45:b1:5c:bf:85: df:44:b1:62:7f:a1:d2:11:ee:dd:91:cd:c4:ed:6a: a3:6a:39:9a:a7:5f:69:8f:18:eb:1c:b2:1b:57:70: 4a:d5:0c:7b:cb:88:ec:0f:f8:69:e8:fd:23:e3:2f: dd:f3:bc:85:f0:8a:6d:ce:2a:ac:ee:8f:b6:a4:7c: 0c:dc:93:d1:1e:7a:62:8e:ec:b9:ab:a9:d6:06:d7: eb:67:6e:4b:97:84:95:d7:58:3e:63:45:01:a7:be: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:64:B3:4C:40:C0:59:94:95:99:18:66:5C:FA:FB:2C:03:26:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43d2c36f-b400-4506-994a-fb2d51e5e619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.251.0/24 Signature Algorithm: sha256WithRSAEncryption a8:9f:68:c0:28:c5:89:98:01:a9:18:79:59:ce:93:19:a5:84: 66:41:1d:16:23:9e:48:2c:d7:55:cd:85:50:10:ec:41:5f:2a: df:67:9f:cd:6d:ed:02:70:ea:ec:52:06:1a:5e:30:c4:37:56: 46:02:b5:9a:77:f0:b6:65:9a:c9:65:34:dd:8a:be:0a:a4:d9: c4:2f:e2:89:60:57:7d:1d:83:9d:8b:d3:b4:86:a7:ae:3f:e6: 74:dc:46:36:d3:17:80:0a:55:40:cf:a6:2f:51:1b:a4:c0:7d: cc:b8:16:1f:0e:00:39:8e:27:94:0e:da:92:9d:01:01:4e:79: d5:ed:55:5a:bb:b8:ac:7a:e7:79:c4:8a:e6:83:76:9b:1e:68: f1:62:21:69:8b:0a:77:4a:df:31:88:73:41:1a:c7:c2:55:8f: d2:a1:8a:67:2c:56:b0:1b:a3:13:4a:f2:6d:c3:3a:f7:02:9b: f8:d8:15:06:c8:21:0b:4a:98:a7:02:09:0f:b6:ba:5c:bb:7c: bf:91:6a:17:05:2a:b2:df:e6:77:1a:05:8c:d5:88:0f:4f:a6: 82:9d:5b:62:32:72:d0:39:b5:d5:17:de:1b:99:9e:b7:56:0f: 70:09:2e:35:74:86:7d:5e:f6:a0:cb:e8:d7:6b:7e:00:d0:bb: a0:a3:fc:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK6V3lEFrd/Pv3y4Q/l9RYF+iHfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDIwMDA2WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTkwOGI1OTUyOGU2OTJkZDZmYTI0MDY1NWY4ZTJiN2Ji NDUwOTZlMGJjN2YxZmM4ODVlOTI2NTk3YTc3YzdlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJigj2DJEqJW8UkcWVo2DezF8PNE3o/G6qpRGMWxlkEzvy FAX8waQi/Hw9hrwKwHUlomJCRD+obS+GziIlSwsi8FieNGUdasodpqiwLPrRsqBF +mCL0yfyK9oGKIa/g8ARsGw9DmN6AtiJhgdf+cnI+BYDlZzcvKAaMvpLBv8wIvnI IxWUYoFA0HKNF01pJCIS//b0mUs8eykVGPfdzdtFsVy/hd9EsWJ/odIR7t2RzcTt aqNqOZqnX2mPGOscshtXcErVDHvLiOwP+Gno/SPjL93zvIXwim3OKqzuj7akfAzc k9EeemKO7LmrqdYG1+tnbkuXhJXXWD5jRQGnvsJnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyGxks0xAwFmUlZkYZlz6+ywDJiQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQzZDJjMzZmLWI0MDAtNDUwNi05OTRhLWZiMmQ1MWU1ZTYxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnvswDQYJKoZIhvcNAQELBQADggEBAKifaMAoxYmYAakYeVnOkxmlhGZB HRYjnkgs11XNhVAQ7EFfKt9nn81t7QJw6uxSBhpeMMQ3VkYCtZp38LZlmsllNN2K vgqk2cQv4olgV30dg52L07SGp64/5nTcRjbTF4AKVUDPpi9RG6TAfcy4Fh8OADmO J5QO2pKdAQFOedXtVVq7uKx653nEiuaDdpseaPFiIWmLCndK3zGIc0Eax8JVj9Kh imcsVrAboxNK8m3DOvcCm/jYFQbIIQtKmKcCCQ+2uly7fL+RahcFKrLf5ncaBYzV iA9PpoKdW2IyctA5tdUX3huZnrdWD3AJLjV0hn1e9qDL6NdrfgDQu6Cj/F8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:14 2026 by rpki-client