$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b0eebde-d878-4e52-8785-a0916c7ab306.roa File: 7b0eebde-d878-4e52-8785-a0916c7ab306.roa (raw, json) Hash identifier: FJ8y31PE8sgtCDhGJI9FmbfhQo/1TrtU1t1mAuRjhQE= Subject key identifier: 21:86:F0:BF:24:52:D9:C5:3D:C7:6A:9F:EE:24:20:D3:1E:22:EE:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CC68CBEE902BB95AECD77F1A47A31696EE24167 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b0eebde-d878-4e52-8785-a0916c7ab306.roa Signing time: Thu 26 Feb 2026 01:31:30 +0000 ROA not before: Thu 26 Feb 2026 01:31:30 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.181.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c6:8c:be:e9:02:bb:95:ae:cd:77:f1:a4:7a:31:69:6e:e2:41:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:31:30 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=b2d1d0ccbddb66eb9ef3cedaa405f4b25a19c99558f2759ab81e0fc5f9f5dd21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:cd:32:d6:cf:0b:15:ba:8e:86:7c:44:31: e6:f9:30:32:84:25:0a:87:3b:1b:dc:18:ac:f2:38: d4:aa:eb:5b:1e:3d:e2:06:7a:f3:48:c3:8b:bf:95: 8b:b8:ae:ab:ec:82:6c:b8:7a:56:81:f8:85:b5:0c: dc:3a:4c:ea:f0:1b:11:ae:03:cb:8a:33:44:9c:a1: d6:74:a8:85:e2:5d:33:7e:1c:9b:02:21:bd:d0:73: 32:40:39:9f:f9:7e:64:5d:5b:1e:cd:71:89:6b:e0: 92:f6:41:16:1a:44:2d:87:31:a3:91:83:c9:55:4e: 5e:1d:6a:9d:5f:3c:b1:52:3d:08:a9:07:79:35:9f: 6d:e9:cc:13:1a:df:06:8c:6c:4b:dc:99:50:11:55: 2b:ee:44:aa:70:13:f8:52:51:f5:31:fe:6a:8b:45: e3:e0:d1:87:0c:00:5a:d9:68:19:68:fd:a5:f4:3b: 71:ca:e6:43:ec:53:6c:92:70:78:97:58:33:b9:0f: 75:24:43:dd:45:c6:f9:1d:d5:e2:f6:cf:c1:5d:40: 24:4b:76:24:9b:7e:c9:26:f7:88:41:9f:2c:00:9b: 5b:83:a1:fb:cd:53:a4:bb:8e:3e:49:ff:ef:ea:e1: 8b:44:45:d0:f2:a3:02:33:b7:71:37:38:b0:99:be: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:F0:BF:24:52:D9:C5:3D:C7:6A:9F:EE:24:20:D3:1E:22:EE:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b0eebde-d878-4e52-8785-a0916c7ab306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.244.0/24 Signature Algorithm: sha256WithRSAEncryption 18:cb:d4:9d:72:9f:06:7b:9a:0a:7e:ca:0f:1e:40:52:db:5f: 10:12:3d:a5:18:d0:43:09:8a:fa:a0:fb:b8:bc:e2:1a:02:81: 7c:2e:41:aa:27:47:b3:d9:35:9a:6c:fb:6b:34:14:9a:dc:1b: 7f:22:ef:23:b6:e9:a8:a5:c0:c4:f3:00:c2:f4:96:ee:48:f4: 1b:c8:c9:42:7e:66:da:70:de:42:88:52:d4:52:ff:5b:96:8a: fa:80:e4:ee:99:c4:18:3b:93:fe:5b:69:d5:28:c5:f7:db:25: 2a:46:92:6b:a4:03:a6:04:f2:1a:ac:3a:ff:e7:ad:47:55:9c: 1c:d9:a1:09:ee:c6:0c:85:1d:ff:46:b7:0b:fe:ba:b3:d4:da: a0:c3:62:2f:0e:cd:ad:83:65:84:5c:f2:b3:41:43:21:69:95: e0:80:82:e2:08:f3:d6:03:31:00:8d:9e:fd:e9:62:95:27:b1: 5a:6f:b1:ed:58:4b:97:03:52:60:27:7d:b1:14:eb:e7:fc:39: e8:4b:37:03:6a:34:5a:23:cc:fc:9f:a7:53:09:8e:a2:e6:f9: b0:2c:63:87:cd:dd:6f:56:8e:5e:5a:1c:4b:35:2c:9f:a8:b6: 9d:79:07:2e:4e:94:13:d9:8c:cc:a8:9c:fd:3d:31:7e:49:b8: ff:53:1a:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULMaMvukCu5WuzXfxpHoxaW7iQWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDEzMTMwWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmQxZDBjY2JkZGI2NmViOWVmM2NlZGFhNDA1ZjRiMjVh MTljOTk1NThmMjc1OWFiODFlMGZjNWY5ZjVkZDIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtKs0y1s8LFbqOhnxEMeb5MDKEJQqHOxvcGKzyONSq61se PeIGevNIw4u/lYu4rqvsgmy4elaB+IW1DNw6TOrwGxGuA8uKM0ScodZ0qIXiXTN+ HJsCIb3QczJAOZ/5fmRdWx7NcYlr4JL2QRYaRC2HMaORg8lVTl4dap1fPLFSPQip B3k1n23pzBMa3waMbEvcmVARVSvuRKpwE/hSUfUx/mqLRePg0YcMAFrZaBlo/aX0 O3HK5kPsU2yScHiXWDO5D3UkQ91Fxvkd1eL2z8FdQCRLdiSbfskm94hBnywAm1uD ofvNU6S7jj5J/+/q4YtERdDyowIzt3E3OLCZvgb9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIYbwvyRS2cU9x2qf7iQg0x4i7kIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiMGVlYmRlLWQ4NzgtNGU1Mi04Nzg1LWEwOTE2YzdhYjMwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPtfQwDQYJKoZIhvcNAQELBQADggEBABjL1J1ynwZ7mgp+yg8eQFLbXxAS PaUY0EMJivqg+7i84hoCgXwuQaonR7PZNZps+2s0FJrcG38i7yO26ailwMTzAML0 lu5I9BvIyUJ+Ztpw3kKIUtRS/1uWivqA5O6ZxBg7k/5badUoxffbJSpGkmukA6YE 8hqsOv/nrUdVnBzZoQnuxgyFHf9Gtwv+urPU2qDDYi8Oza2DZYRc8rNBQyFpleCA guII89YDMQCNnv3pYpUnsVpvse1YS5cDUmAnfbEU6+f8OehLNwNqNFojzPyfp1MJ jqLm+bAsY4fN3W9Wjl5aHEs1LJ+otp15By5OlBPZjMyonP09MX5JuP9TGi0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:37:50 2026 by rpki-client