$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6428c491-8027-418b-9003-740f16087c54.roa File: 6428c491-8027-418b-9003-740f16087c54.roa (raw, json) Hash identifier: 02dGgEDLZbmR+Gk/ltUkjEsGHgSS9z5fc7WBBRpBOls= Subject key identifier: 1C:35:C1:10:6B:CD:CB:B1:10:BB:98:23:0E:8A:FB:B0:8D:03:77:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D7378EE89C010D6780FD228C415BEFAFDCEC780 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6428c491-8027-418b-9003-740f16087c54.roa Signing time: Sat 14 Feb 2026 01:10:11 +0000 ROA not before: Sat 14 Feb 2026 01:10:11 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:73:78:ee:89:c0:10:d6:78:0f:d2:28:c4:15:be:fa:fd:ce:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 14 01:10:11 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=dece8bbe035704d67538f2d879a48eb2a6af717a08328099dd39ec232e201b12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:32:5d:30:21:6b:60:a6:4a:f2:b8:a9:67: ad:6c:3e:f5:86:ab:bb:6b:14:1b:25:cf:f9:f2:4e: 88:01:0b:69:d5:14:43:a0:e2:1e:e0:cf:aa:3b:36: f0:41:c9:d6:80:ae:3c:34:ea:51:d7:cf:61:07:44: a5:80:3e:e0:17:15:94:75:00:b0:0e:dd:cd:32:80: ac:1f:a5:93:87:09:3f:cd:91:ed:5d:07:31:9a:a4: 57:b8:ee:62:64:85:7e:b1:dc:1c:e3:de:d7:51:11: ed:6c:d2:ac:1d:92:9e:26:eb:92:bf:39:76:63:8c: 85:22:18:2f:34:18:17:22:8c:f2:16:52:3d:a6:b6: 25:7f:16:1a:7b:14:1b:11:c8:92:61:7e:01:fa:d0: 60:f8:24:11:7f:9e:79:7a:f6:17:38:9e:7d:6e:b9: 02:2a:fa:50:dc:cd:d4:1b:b6:4b:54:16:6d:51:c6: 36:35:0b:36:c4:50:a2:54:3d:33:2b:4c:0d:61:2f: c7:74:ab:e9:03:6e:22:7e:54:68:1c:db:a5:0b:16: 45:c8:a7:f9:e3:47:21:17:5e:db:96:f2:a5:b8:c6: 7d:88:7d:1b:29:21:3b:e4:9d:43:62:c3:b7:df:47: e0:0b:0c:66:c2:d1:b3:8a:d7:9b:3e:f1:58:f7:4d: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:35:C1:10:6B:CD:CB:B1:10:BB:98:23:0E:8A:FB:B0:8D:03:77:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6428c491-8027-418b-9003-740f16087c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.0.0/21 Signature Algorithm: sha256WithRSAEncryption 60:2c:33:61:a6:81:f7:9f:e2:a7:3a:6d:67:da:1d:b8:d4:77: 5f:76:e9:0f:a2:27:8e:c0:b5:a7:c4:2f:48:62:e2:72:50:2a: d3:13:3e:de:1a:c5:fe:66:85:d5:e4:a6:3b:cb:54:fc:ac:a7: b1:05:ca:c6:e8:53:ec:06:9a:a4:30:d1:ec:d3:e2:e6:9f:4b: 36:d8:67:9f:e0:17:5c:4e:34:73:fc:35:76:71:55:ff:c0:ce: af:87:4d:21:b3:7f:e2:80:f4:b6:4c:a2:df:cf:41:d4:1b:52: 50:28:ec:fd:58:2d:9e:cc:0f:5f:d2:60:bf:0a:ec:3e:64:3f: 9a:4a:8a:25:5b:04:e3:bf:98:8a:5c:53:25:73:a7:09:56:4b: b5:ba:df:fb:c5:35:6b:05:15:28:46:54:96:d9:3e:da:11:53: 8a:49:5c:9e:2f:52:c3:bf:e4:6d:f0:9c:a8:f5:d6:db:af:4b: 3b:f8:02:b1:c3:f6:56:10:85:8d:b8:cd:aa:7c:99:70:a1:4a: 9e:eb:67:57:72:04:ef:a8:be:fb:38:77:ed:29:7c:ea:68:a8: 2b:a9:28:3c:85:e1:db:92:f3:bf:50:0e:58:6d:ee:12:99:3b: 3e:b9:5c:73:b7:e8:f5:7f:82:48:04:60:10:37:05:68:83:f4: 72:f7:ac:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbXN47onAENZ4D9IoxBW++v3Ox4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE0MDExMDExWhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWNlOGJiZTAzNTcwNGQ2NzUzOGYyZDg3OWE0OGViMmE2 YWY3MTdhMDgzMjgwOTlkZDM5ZWMyMzJlMjAxYjEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChnDJdMCFrYKZK8ripZ61sPvWGq7trFBslz/nyTogBC2nV FEOg4h7gz6o7NvBBydaArjw06lHXz2EHRKWAPuAXFZR1ALAO3c0ygKwfpZOHCT/N ke1dBzGapFe47mJkhX6x3Bzj3tdREe1s0qwdkp4m65K/OXZjjIUiGC80GBcijPIW Uj2mtiV/Fhp7FBsRyJJhfgH60GD4JBF/nnl69hc4nn1uuQIq+lDczdQbtktUFm1R xjY1CzbEUKJUPTMrTA1hL8d0q+kDbiJ+VGgc26ULFkXIp/njRyEXXtuW8qW4xn2I fRspITvknUNiw7ffR+ALDGbC0bOK15s+8Vj3TS7NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHDXBEGvNy7EQu5gjDor7sI0Dd2UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0MjhjNDkxLTgwMjctNDE4Yi05MDAzLTc0MGYxNjA4N2M1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPsQAwDQYJKoZIhvcNAQELBQADggEBAGAsM2Gmgfef4qc6bWfaHbjUd192 6Q+iJ47AtafEL0hi4nJQKtMTPt4axf5mhdXkpjvLVPysp7EFysboU+wGmqQw0ezT 4uafSzbYZ5/gF1xONHP8NXZxVf/Azq+HTSGzf+KA9LZMot/PQdQbUlAo7P1YLZ7M D1/SYL8K7D5kP5pKiiVbBOO/mIpcUyVzpwlWS7W63/vFNWsFFShGVJbZPtoRU4pJ XJ4vUsO/5G3wnKj11tuvSzv4ArHD9lYQhY24zap8mXChSp7rZ1dyBO+ovvs4d+0p fOpoqCupKDyF4duS879QDlht7hKZOz65XHO36PV/gkgEYBA3BWiD9HL3rFk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:40:38 2026 by rpki-client