$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b6210cc-c835-41d1-95da-a39fe25666e2.roa File: 4b6210cc-c835-41d1-95da-a39fe25666e2.roa (raw, json) Hash identifier: dM2h300aRcMN74x3UzsXyrREBOQhT6coXW6d9SqxUVw= Subject key identifier: 68:4B:36:B2:12:7F:AD:54:14:35:39:05:73:6D:E5:AE:9A:1A:B3:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4279E5FDC7B64D1C133724B9BCB763E4AEFD2BE2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b6210cc-c835-41d1-95da-a39fe25666e2.roa Signing time: Fri 20 Feb 2026 01:00:06 +0000 ROA not before: Fri 20 Feb 2026 01:00:06 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:79:e5:fd:c7:b6:4d:1c:13:37:24:b9:bc:b7:63:e4:ae:fd:2b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 20 01:00:06 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=291925024d72198237c85cbc6118107feda97cc1e4b2cc5b54772bfc84d2f0e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:b1:ac:14:01:5b:92:84:36:7c:32:48:ad: 00:18:3d:b9:36:94:35:56:74:c4:2b:61:28:3d:d6: b5:66:10:53:f2:a1:0b:97:80:aa:95:fb:22:6b:dd: 8b:47:73:11:90:df:e8:98:0d:b5:bc:73:90:09:06: 21:fd:20:0d:d6:a5:20:6e:41:44:09:b7:ad:2d:7f: d8:39:ab:ab:ad:da:e8:8f:cb:1f:43:d7:38:f4:f0: 54:7b:3a:18:ee:3d:f3:15:47:a6:78:2d:30:a3:ca: a9:1f:88:f7:43:83:c0:b7:3d:00:48:3b:34:f6:18: 92:2a:d0:ce:59:d4:94:23:6c:5a:34:5a:6a:62:a2: 31:eb:39:86:7b:b2:24:44:1f:b2:de:48:7b:be:e4: f3:28:13:80:7d:dd:1e:37:b5:01:d6:f5:cd:05:57: b9:a0:d0:aa:be:fe:96:05:b4:48:f6:f3:d3:18:6a: a0:ae:63:ff:7e:8e:a8:37:86:b2:77:73:65:72:cb: 0c:16:b5:04:bd:2b:61:d5:dd:1b:61:9f:47:fc:da: 8c:c6:66:3d:42:17:9a:3e:b8:29:70:39:05:05:90: a3:4d:84:ec:86:1a:a6:86:fc:34:ce:97:c0:33:1d: ea:97:fc:78:3d:cb:0b:df:11:0f:e4:8d:28:0c:c2: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:36:B2:12:7F:AD:54:14:35:39:05:73:6D:E5:AE:9A:1A:B3:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b6210cc-c835-41d1-95da-a39fe25666e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:02:10:91:9c:98:c2:ca:0b:1c:aa:12:35:58:fc:c0:61:cf: cd:b9:cb:c1:96:54:25:c9:cc:63:6a:ec:78:f5:74:c5:15:0f: 56:b3:65:6d:ae:ba:72:21:78:fc:fb:a2:61:35:ec:4b:70:79: a1:73:9a:3e:01:cb:82:fc:37:7a:27:0f:75:3b:9c:d1:2d:04: 2f:95:f9:cb:fb:dd:c7:5a:93:78:d8:9a:70:5a:c4:9d:f0:39: a6:3c:e5:a2:78:29:83:05:3c:f6:69:49:87:bb:b6:04:f9:e7: ae:7b:03:97:12:ff:cb:e5:99:1f:3e:49:cf:6f:ca:9c:76:42: 2b:ea:41:18:b0:1a:5e:bf:37:0e:3b:29:2d:0d:9c:28:f4:59: b5:77:8f:86:8b:9f:2f:e3:40:9f:af:aa:f7:c7:db:9e:93:ff: 47:14:1a:e8:b3:cd:54:b2:83:db:78:f0:a5:09:ba:8d:da:fd: c4:28:c8:e9:64:93:25:f7:72:b0:ee:29:4b:d1:aa:bc:b4:e5: d5:56:8f:db:63:a8:49:a1:a5:78:8c:ae:12:dc:28:54:b0:8f: 2c:59:e0:98:12:24:6c:a3:b6:af:8d:cb:f6:d2:1b:8b:d9:eb: 3e:41:d3:be:03:11:f2:8d:e7:17:a9:dd:d8:25:65:d0:02:47: d4:b6:b3:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQnnl/ce2TRwTNyS5vLdj5K79K+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIwMDEwMDA2WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTE5MjUwMjRkNzIxOTgyMzdjODVjYmM2MTE4MTA3ZmVk YTk3Y2MxZTRiMmNjNWI1NDc3MmJmYzg0ZDJmMGUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF1LGsFAFbkoQ2fDJIrQAYPbk2lDVWdMQrYSg91rVmEFPy oQuXgKqV+yJr3YtHcxGQ3+iYDbW8c5AJBiH9IA3WpSBuQUQJt60tf9g5q6ut2uiP yx9D1zj08FR7OhjuPfMVR6Z4LTCjyqkfiPdDg8C3PQBIOzT2GJIq0M5Z1JQjbFo0 WmpiojHrOYZ7siREH7LeSHu+5PMoE4B93R43tQHW9c0FV7mg0Kq+/pYFtEj289MY aqCuY/9+jqg3hrJ3c2VyywwWtQS9K2HV3Rthn0f82ozGZj1CF5o+uClwOQUFkKNN hOyGGqaG/DTOl8AzHeqX/Hg9ywvfEQ/kjSgMwn5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaEs2shJ/rVQUNTkFc23lrpoas5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiNjIxMGNjLWM4MzUtNDFkMS05NWRhLWEzOWZlMjU2NjZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnncwDQYJKoZIhvcNAQELBQADggEBAB8CEJGcmMLKCxyqEjVY/MBhz825 y8GWVCXJzGNq7Hj1dMUVD1azZW2uunIhePz7omE17EtweaFzmj4By4L8N3onD3U7 nNEtBC+V+cv73cdak3jYmnBaxJ3wOaY85aJ4KYMFPPZpSYe7tgT55657A5cS/8vl mR8+Sc9vypx2QivqQRiwGl6/Nw47KS0NnCj0WbV3j4aLny/jQJ+vqvfH256T/0cU GuizzVSyg9t48KUJuo3a/cQoyOlkkyX3crDuKUvRqry05dVWj9tjqEmhpXiMrhLc KFSwjyxZ4JgSJGyjtq+Ny/bSG4vZ6z5B074DEfKN5xep3dglZdACR9S2s2o= -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:40 2026 by rpki-client