$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d81b441-90fe-484d-9d3f-af4330902e58.roa File: 5d81b441-90fe-484d-9d3f-af4330902e58.roa (raw, json) Hash identifier: +l8OfzlYGiK+/LmGxSMHaeGtD6ipW9hXnzODYDaUezU= Subject key identifier: 70:FD:87:80:13:49:00:39:DF:93:73:3B:49:1B:91:FA:6E:2A:A9:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DB2EB85A8F6B6D461829F30ECD9720BB019E4A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d81b441-90fe-484d-9d3f-af4330902e58.roa Signing time: Sat 28 Feb 2026 01:40:33 +0000 ROA not before: Sat 28 Feb 2026 01:40:33 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b2:eb:85:a8:f6:b6:d4:61:82:9f:30:ec:d9:72:0b:b0:19:e4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 01:40:33 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=74dc93d930899cf876e9869fd636f1a1485b615d7cf09c79ebc857b40a213aef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:bc:5b:e4:3c:83:d0:6a:60:b2:65:28:81: ba:7e:65:98:b7:03:ff:50:bd:d1:92:67:8a:50:c1: f1:fa:75:63:2d:8e:5e:96:94:50:be:4f:f4:d3:c1: a1:18:0b:04:b4:15:85:e6:eb:9b:f6:d5:29:9f:01: 2c:2c:4d:f6:ec:23:9c:43:9c:80:4e:d4:24:b2:7e: d8:08:18:3a:74:dc:1f:c0:a8:e8:91:92:6f:9d:d2: 7d:0e:5a:34:ff:01:0c:f1:69:1b:b6:02:f8:ed:f9: 29:26:9a:03:53:7e:92:57:32:07:1a:64:41:12:cc: 57:f9:68:93:ea:12:2e:01:39:cd:43:71:a2:6e:19: 42:32:80:2a:fd:1c:32:26:00:31:9a:7b:d6:30:7a: 50:43:c2:c1:50:5a:4b:61:12:ae:e9:75:14:66:cf: 5b:db:37:b4:66:df:d0:ab:d5:86:c8:c3:48:c8:55: 4d:68:fd:3c:f3:17:e5:21:0e:d9:63:62:51:28:ce: 2f:71:b9:af:69:b6:df:63:c7:6e:ec:94:0b:38:fa: 2b:67:60:94:1e:d8:14:ec:77:3f:bf:55:76:37:1c: 11:49:a5:af:e4:55:34:f3:e3:a4:37:ae:45:5b:5f: ee:98:10:e5:82:5c:86:1e:4d:09:fd:ef:aa:66:d6: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:87:80:13:49:00:39:DF:93:73:3B:49:1B:91:FA:6E:2A:A9:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d81b441-90fe-484d-9d3f-af4330902e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.249.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c9:3c:1e:5f:a1:7a:69:cc:28:90:79:4a:e2:58:f2:2e:45: 29:91:f4:9b:4f:3a:24:44:58:59:68:6f:be:ae:c5:6c:78:57: 6b:7d:93:c8:02:71:9e:17:a8:e9:5b:cf:71:d2:c2:ee:3b:8a: c7:71:a5:e6:be:d3:2e:f6:02:fb:0a:40:ac:ca:cd:f1:64:e8: 34:36:8b:87:71:1b:ec:97:93:29:c6:21:87:d0:de:28:19:e4: 57:51:ae:39:3a:70:e2:08:80:61:8e:a0:e9:0f:5c:0c:37:5d: 1d:57:0c:e0:1a:a2:ce:ac:37:db:e7:e2:35:68:3f:49:97:51: 41:d9:7e:20:ce:9e:af:0d:1c:b2:5c:d7:ad:2e:23:74:60:a1: 64:c8:d8:4e:c6:f5:31:9d:5b:44:94:3d:df:fd:33:bb:88:2c: 72:09:0f:5b:b2:6c:76:68:82:45:4a:6d:72:83:46:a7:c2:ca: a8:ee:06:2f:d3:b5:c8:11:49:4b:73:d4:3d:17:07:45:76:6c: 3c:51:1a:45:fd:01:51:29:de:9e:04:e1:1b:a9:95:5c:7d:ac: 98:2f:ed:6e:a3:ea:ae:da:bc:c0:74:fe:9e:1c:ce:2d:74:ad: 51:33:b1:2e:6f:b5:b4:5e:22:38:4b:cd:4b:db:1f:df:3e:f7: d9:12:0f:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULbLrhaj2ttRhgp8w7NlyC7AZ5KIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDE0MDMzWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGRjOTNkOTMwODk5Y2Y4NzZlOTg2OWZkNjM2ZjFhMTQ4 NWI2MTVkN2NmMDljNzllYmM4NTdiNDBhMjEzYWVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXjLxb5DyD0GpgsmUogbp+ZZi3A/9QvdGSZ4pQwfH6dWMt jl6WlFC+T/TTwaEYCwS0FYXm65v21SmfASwsTfbsI5xDnIBO1CSyftgIGDp03B/A qOiRkm+d0n0OWjT/AQzxaRu2Avjt+SkmmgNTfpJXMgcaZEESzFf5aJPqEi4BOc1D caJuGUIygCr9HDImADGae9YwelBDwsFQWkthEq7pdRRmz1vbN7Rm39Cr1YbIw0jI VU1o/TzzF+UhDtljYlEozi9xua9ptt9jx27slAs4+itnYJQe2BTsdz+/VXY3HBFJ pa/kVTTz46Q3rkVbX+6YEOWCXIYeTQn976pm1v1VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcP2HgBNJADnfk3M7SRuR+m4qqVowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkODFiNDQxLTkwZmUtNDg0ZC05ZDNmLWFmNDMzMDkwMmU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPtfkwDQYJKoZIhvcNAQELBQADggEBAHLJPB5foXppzCiQeUriWPIuRSmR 9JtPOiREWFlob76uxWx4V2t9k8gCcZ4XqOlbz3HSwu47isdxpea+0y72AvsKQKzK zfFk6DQ2i4dxG+yXkynGIYfQ3igZ5FdRrjk6cOIIgGGOoOkPXAw3XR1XDOAaos6s N9vn4jVoP0mXUUHZfiDOnq8NHLJc160uI3RgoWTI2E7G9TGdW0SUPd/9M7uILHIJ D1uybHZogkVKbXKDRqfCyqjuBi/TtcgRSUtz1D0XB0V2bDxRGkX9AVEp3p4E4Rup lVx9rJgv7W6j6q7avMB0/p4czi10rVEzsS5vtbReIjhLzUvbH98+99kSD5E= -----END CERTIFICATE-----Generated at Mon Mar 2 08:26:34 2026 by rpki-client