$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a40471e2-3637-4ea5-abe1-c56419621870.roa File: a40471e2-3637-4ea5-abe1-c56419621870.roa (raw, json) Hash identifier: dyI5cM6kETeX1QrcKYM42rZA6z9fpLWRPT3C/kl5wx8= Subject key identifier: 97:94:80:D5:95:3E:A7:35:77:1B:E3:1E:DA:1C:72:D5:A7:CD:48:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 309CD2A257B70DD8A3E643ABF2B69670F16FFD59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a40471e2-3637-4ea5-abe1-c56419621870.roa Signing time: Thu 26 Feb 2026 01:20:53 +0000 ROA not before: Thu 26 Feb 2026 01:20:53 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9c:d2:a2:57:b7:0d:d8:a3:e6:43:ab:f2:b6:96:70:f1:6f:fd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:20:53 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=cb2add3b3a5467a8a5925729002b42b12a6c4862d0c245178001c41f28f12b29, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:cd:e6:43:b7:76:aa:f0:bf:90:3c:92:38: f5:51:23:2b:6c:6b:f0:03:fd:76:8f:cb:7f:25:1d: d7:f6:da:6f:a1:d5:09:5b:a6:33:60:ab:4c:03:cc: 61:7b:5c:2a:a6:df:4d:95:3e:89:66:71:6f:3d:49: b1:27:b0:ef:57:1c:8e:74:2a:54:1e:e3:5b:42:13: c1:51:53:a9:28:51:d5:6b:57:14:1b:f1:7e:32:4b: b8:f9:1d:95:2e:1d:ce:c7:91:50:70:43:fa:d8:3f: 82:22:2d:c1:0f:bf:f2:ac:52:00:dc:56:3e:e2:64: e4:93:d3:3d:fa:0f:7d:f1:91:06:12:6f:40:65:a9: 2b:96:c5:e7:4d:20:02:93:1a:81:89:fc:d1:37:62: 5b:b0:55:bc:79:2c:11:86:f4:ac:81:00:4b:ef:a1: 62:75:a0:e3:7b:4b:dc:79:2a:ad:4c:fa:93:31:0c: a0:7b:86:6c:00:78:6e:3c:9a:10:32:57:fe:15:6e: a3:26:60:35:3c:04:67:a4:1c:b6:f8:ba:c1:58:69: 99:d8:b3:ab:00:ce:5b:d6:73:15:cf:55:c0:f4:b0: 9d:eb:c0:4b:ca:40:fc:75:4c:f0:3e:ff:38:b5:fd: be:4f:28:d1:09:49:04:2e:94:8b:8b:91:e7:1c:0e: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:80:D5:95:3E:A7:35:77:1B:E3:1E:DA:1C:72:D5:A7:CD:48:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a40471e2-3637-4ea5-abe1-c56419621870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.216.0/24 Signature Algorithm: sha256WithRSAEncryption 05:b5:b0:3e:8a:5c:68:7f:b6:75:6a:a5:5c:ab:19:d0:09:1a: 9f:91:c3:54:de:3e:ca:26:55:b9:0c:88:00:9e:b4:33:50:fb: cb:75:ce:c8:64:87:42:3a:88:ca:ac:a0:b4:e6:0f:57:18:50: 58:c7:c6:5a:c3:16:df:a4:0f:fa:a5:91:aa:e7:92:86:0c:28: d8:2d:5c:05:02:e9:af:69:55:23:ca:f1:25:c5:88:e6:2a:12: 7c:15:04:c5:31:af:47:7c:05:36:fb:c4:e6:25:04:dc:85:74: 81:b3:34:5a:bf:1b:29:aa:81:b3:15:32:7b:8f:84:23:52:40: e1:a5:43:3b:f9:29:84:3a:14:b8:a2:a3:8b:f0:5a:80:b5:07: c8:83:b5:2d:a3:86:56:6a:db:03:66:ba:6d:89:94:21:2b:fb: 32:cf:1e:34:cb:2b:87:b6:24:3f:97:b5:8d:a5:2f:55:10:4c: 35:3b:83:05:3f:30:c5:1a:09:79:7d:67:a1:1b:f7:56:fb:e9: 96:32:39:69:d9:a7:6e:71:42:dd:06:57:81:a0:50:bd:d8:2f: c5:35:02:0b:8f:95:7b:3d:ad:1a:45:6a:81:0e:9e:dc:c4:28: 34:10:07:41:a8:f0:bf:1a:20:8c:80:d1:56:de:87:cb:30:22: 15:62:dc:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMJzSole3Ddij5kOr8raWcPFv/VkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDEyMDUzWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjJhZGQzYjNhNTQ2N2E4YTU5MjU3MjkwMDJiNDJiMTJh NmM0ODYyZDBjMjQ1MTc4MDAxYzQxZjI4ZjEyYjI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4fc3mQ7d2qvC/kDySOPVRIytsa/AD/XaPy38lHdf22m+h 1QlbpjNgq0wDzGF7XCqm302VPolmcW89SbEnsO9XHI50KlQe41tCE8FRU6koUdVr VxQb8X4yS7j5HZUuHc7HkVBwQ/rYP4IiLcEPv/KsUgDcVj7iZOST0z36D33xkQYS b0BlqSuWxedNIAKTGoGJ/NE3YluwVbx5LBGG9KyBAEvvoWJ1oON7S9x5Kq1M+pMx DKB7hmwAeG48mhAyV/4VbqMmYDU8BGekHLb4usFYaZnYs6sAzlvWcxXPVcD0sJ3r wEvKQPx1TPA+/zi1/b5PKNEJSQQulIuLkeccDu/zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl5SA1ZU+pzV3G+Me2hxy1afNSGMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0MDQ3MWUyLTM2MzctNGVhNS1hYmUxLWM1NjQxOTYyMTg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3tgwDQYJKoZIhvcNAQELBQADggEBAAW1sD6KXGh/tnVqpVyrGdAJGp+R w1TePsomVbkMiACetDNQ+8t1zshkh0I6iMqsoLTmD1cYUFjHxlrDFt+kD/qlkarn koYMKNgtXAUC6a9pVSPK8SXFiOYqEnwVBMUxr0d8BTb7xOYlBNyFdIGzNFq/Gymq gbMVMnuPhCNSQOGlQzv5KYQ6FLiio4vwWoC1B8iDtS2jhlZq2wNmum2JlCEr+zLP HjTLK4e2JD+XtY2lL1UQTDU7gwU/MMUaCXl9Z6Eb91b76ZYyOWnZp25xQt0GV4Gg UL3YL8U1AguPlXs9rRpFaoEOntzEKDQQB0Go8L8aIIyA0Vbeh8swIhVi3L8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:03 2026 by rpki-client