$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89590367-1256-4fcd-9c0b-68d0fded0119.roa File: 89590367-1256-4fcd-9c0b-68d0fded0119.roa (raw, json) Hash identifier: YmmyFbhT+jZS/hXHjH0xbBjRwXIZiW4YcEIgWHNDxN8= Subject key identifier: 38:38:F7:8E:A2:02:8F:3F:CC:59:41:A0:FE:BF:91:1C:84:C9:AE:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A85F78B069C447F4CD50E413F70352B831292E3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89590367-1256-4fcd-9c0b-68d0fded0119.roa Signing time: Sun 22 Feb 2026 01:11:19 +0000 ROA not before: Sun 22 Feb 2026 01:11:19 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:85:f7:8b:06:9c:44:7f:4c:d5:0e:41:3f:70:35:2b:83:12:92:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 22 01:11:19 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=4e17d930862e6cfd2d1ec11c1c227bf14edb6b282bf3f433db9872b68c2d78e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:f7:e5:f9:48:50:20:85:06:11:d7:52:65: 89:26:88:98:da:16:98:16:de:84:14:66:e4:1d:2b: 9c:ef:0f:74:50:a0:09:d6:db:91:84:25:4f:b0:e5: 56:db:83:3f:00:a1:ad:56:50:29:a1:c8:45:17:03: 5b:00:e8:6c:3e:3f:cd:4d:34:e0:27:5b:48:a7:eb: ce:79:da:59:16:9f:c4:5f:d5:85:0e:65:fd:08:3a: 4d:09:32:aa:0d:de:96:5e:35:20:7c:6b:4b:50:d8: 02:85:9e:b7:1e:24:5a:a2:c6:5a:9f:f1:29:df:2c: a5:45:11:55:e1:e1:0e:52:32:0e:be:a5:11:fc:9d: 50:0b:2a:3e:93:03:74:e7:65:c0:b7:75:9b:a4:66: 41:04:f1:6c:44:47:64:ba:fb:fa:01:86:e3:e8:bb: 6b:90:27:9d:ed:13:56:30:95:99:0c:9c:60:74:fd: 0e:f9:89:df:6e:b6:bd:9b:c2:bb:d1:dd:c3:e2:f0: cf:70:05:48:a2:a3:03:1b:6d:ea:10:ed:e8:67:27: 43:33:ba:06:47:96:47:d2:4e:b7:3c:ed:f8:cf:14: b3:eb:32:97:91:cd:4d:13:0c:29:72:47:cb:2a:ba: d5:7e:dc:2e:a8:f9:14:27:30:fb:c8:08:d8:f4:d4: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:38:F7:8E:A2:02:8F:3F:CC:59:41:A0:FE:BF:91:1C:84:C9:AE:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89590367-1256-4fcd-9c0b-68d0fded0119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.72.0/24 Signature Algorithm: sha256WithRSAEncryption 00:bc:b6:1d:e0:13:bd:04:07:03:32:27:86:91:fc:01:0e:7d: 68:0f:a4:5a:b7:2b:d8:43:2d:c2:e2:bb:61:de:fd:16:b2:12: 63:59:0a:67:c6:80:10:f5:64:b8:77:d2:67:db:2e:4a:08:b6: 6a:84:8f:e8:23:3d:a7:f3:73:d6:cd:14:8b:22:24:4d:fc:1f: 05:44:b3:7f:1e:55:8b:3c:ae:70:b6:05:77:e3:af:1a:d1:e9: 67:0a:93:71:43:f2:ee:6f:a1:39:2c:83:85:fd:50:e5:c6:87: 21:1f:84:7a:a9:08:aa:30:8c:05:5c:aa:77:cb:88:c6:66:23: 60:46:a0:5b:e2:75:22:4a:ab:ff:72:48:6a:1d:e3:d4:94:a4: f6:bb:4e:e9:83:31:e3:0a:27:c1:b9:82:f7:a7:6f:5c:69:28: c0:53:ed:59:19:f2:8e:0a:4f:26:f7:bb:a6:86:7c:5d:f6:f4: ad:b4:58:c0:f4:1f:c8:7b:46:3c:db:7f:20:dc:28:4d:8b:e8: 42:e4:8c:7e:bc:8b:38:7d:0c:6a:27:d7:e9:f8:88:49:12:35: 11:d0:61:41:f6:f9:21:76:1b:ba:b4:3e:4f:4a:16:4b:21:42: cc:06:81:81:a3:0b:a5:78:ce:5a:a8:96:61:88:34:62:42:0b: 85:bb:e5:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWoX3iwacRH9M1Q5BP3A1K4MSkuMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIyMDExMTE5WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTE3ZDkzMDg2MmU2Y2ZkMmQxZWMxMWMxYzIyN2JmMTRl ZGI2YjI4MmJmM2Y0MzNkYjk4NzJiNjhjMmQ3OGUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFJffl+UhQIIUGEddSZYkmiJjaFpgW3oQUZuQdK5zvD3RQ oAnW25GEJU+w5Vbbgz8Aoa1WUCmhyEUXA1sA6Gw+P81NNOAnW0in68552lkWn8Rf 1YUOZf0IOk0JMqoN3pZeNSB8a0tQ2AKFnrceJFqixlqf8SnfLKVFEVXh4Q5SMg6+ pRH8nVALKj6TA3TnZcC3dZukZkEE8WxER2S6+/oBhuPou2uQJ53tE1YwlZkMnGB0 /Q75id9utr2bwrvR3cPi8M9wBUiiowMbbeoQ7ehnJ0MzugZHlkfSTrc87fjPFLPr MpeRzU0TDClyR8squtV+3C6o+RQnMPvICNj01PeNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUODj3jqICjz/MWUGg/r+RHITJrnYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5NTkwMzY3LTEyNTYtNGZjZC05YzBiLTY4ZDBmZGVkMDExOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3EgwDQYJKoZIhvcNAQELBQADggEBAAC8th3gE70EBwMyJ4aR/AEOfWgP pFq3K9hDLcLiu2He/RayEmNZCmfGgBD1ZLh30mfbLkoItmqEj+gjPafzc9bNFIsi JE38HwVEs38eVYs8rnC2BXfjrxrR6WcKk3FD8u5voTksg4X9UOXGhyEfhHqpCKow jAVcqnfLiMZmI2BGoFvidSJKq/9ySGod49SUpPa7TumDMeMKJ8G5gvenb1xpKMBT 7VkZ8o4KTyb3u6aGfF329K20WMD0H8h7RjzbfyDcKE2L6ELkjH68izh9DGon1+n4 iEkSNRHQYUH2+SF2G7q0Pk9KFkshQswGgYGjC6V4zlqolmGINGJCC4W75bo= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:32 2026 by rpki-client