$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8262b40-9f98-4ff8-95a9-681adaa84f4d.roa File: b8262b40-9f98-4ff8-95a9-681adaa84f4d.roa (raw, json) Hash identifier: aQfPX6HUV7xLMylfNXmfFIPJahV3jR7aXkBtceFVKoA= Subject key identifier: BD:7D:6D:D3:66:10:4E:C2:4F:2B:05:B8:69:F5:32:F1:F6:A9:FF:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74D8211A1F4A9BEF39AF33A2951CF4B298E5DBF1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8262b40-9f98-4ff8-95a9-681adaa84f4d.roa Signing time: Sun 22 Feb 2026 01:01:21 +0000 ROA not before: Sun 22 Feb 2026 01:01:21 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:21:1a:1f:4a:9b:ef:39:af:33:a2:95:1c:f4:b2:98:e5:db:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 22 01:01:21 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=71afe0699e5e8e18e49c7aed5c4cb9a226ff3dae5210f73fdeb241bf60150120, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:77:30:f6:ab:db:64:21:bc:b8:54:a0:8d: 42:5f:d9:db:aa:e5:25:a6:e2:f4:f5:20:d4:9e:61: a2:68:87:cc:11:29:ab:cd:25:02:5a:94:16:19:fa: 8a:c3:11:a9:23:9e:3f:e8:17:34:35:99:36:44:fe: e8:34:03:0f:9d:e6:b5:39:43:36:c9:29:0a:f9:5d: 31:5e:63:21:f2:91:f6:c3:cb:52:71:e4:b6:a7:7d: 4f:c8:18:1b:d9:56:06:79:1e:8d:a4:1c:4e:fc:49: b5:bf:31:2e:eb:bc:02:67:89:e7:41:ae:1b:e6:11: 8d:0c:d5:e2:4b:cf:51:c5:96:52:92:a8:53:a3:ed: 68:e9:b1:5a:ba:35:9d:d9:95:69:c2:cf:df:ab:04: 0b:8b:be:44:57:12:64:57:19:51:96:a7:fc:6c:13: 95:56:5d:2e:7a:82:29:18:f6:1a:e0:a0:78:33:aa: f6:a5:09:b2:84:db:8a:30:c0:1e:66:15:06:ee:ba: d7:d9:3e:c5:c9:bd:21:83:99:0f:00:aa:2b:cf:bb: 23:0c:40:e8:c4:76:af:4b:91:23:bc:83:83:8b:f7: 69:ba:fb:6f:6a:e9:72:3a:41:9f:30:16:81:1a:8c: dd:7a:c3:2e:a8:52:82:5e:68:ae:9e:e2:cb:ec:eb: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:6D:D3:66:10:4E:C2:4F:2B:05:B8:69:F5:32:F1:F6:A9:FF:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8262b40-9f98-4ff8-95a9-681adaa84f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.10.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:c3:3c:0f:67:45:24:40:7d:18:96:20:a1:03:62:18:8c:a4: 99:89:d6:9f:20:27:0b:ca:9f:71:5a:b8:5b:d0:73:25:1c:56: dc:b7:76:18:ce:a4:40:f5:71:68:59:39:20:16:9e:6b:53:4b: 3c:99:3a:0b:a2:cc:91:0c:00:e4:e4:da:7c:f9:75:20:e0:20: 7a:38:5c:bd:6d:fb:2f:fe:3c:dd:69:8c:be:13:c2:50:5e:bc: c0:e0:5e:32:d5:27:60:1c:c3:a0:dc:ed:51:73:76:4a:3f:a4: f4:55:c8:23:5b:ee:ee:8e:94:e2:c0:fa:68:ed:5a:b5:bd:5f: 1a:02:3e:45:28:6e:7b:34:9d:b4:70:b4:df:47:b8:8e:75:a6: 96:54:d7:5d:3f:21:af:10:78:9b:14:ee:19:60:60:39:4a:66: 24:a7:7c:19:6f:85:02:c4:79:3f:86:01:58:65:85:9a:0f:ff: ce:e5:0b:09:99:c5:00:94:cf:36:a1:3e:c5:bf:b5:67:08:b9: fc:8b:54:0e:a4:df:f8:cb:9d:4d:1d:b2:ba:c3:22:57:ac:36: f9:2c:cd:37:6c:ce:4e:ed:c2:a6:74:9e:25:1b:75:f3:ab:4f: c3:c4:d7:21:08:94:a4:67:84:89:0c:18:5b:9b:99:f6:0c:11: 5a:ca:43:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdNghGh9Km+85rzOilRz0spjl2/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIyMDEwMTIxWhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWFmZTA2OTllNWU4ZTE4ZTQ5YzdhZWQ1YzRjYjlhMjI2 ZmYzZGFlNTIxMGY3M2ZkZWIyNDFiZjYwMTUwMTIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt/ncw9qvbZCG8uFSgjUJf2duq5SWm4vT1INSeYaJoh8wR KavNJQJalBYZ+orDEakjnj/oFzQ1mTZE/ug0Aw+d5rU5QzbJKQr5XTFeYyHykfbD y1Jx5LanfU/IGBvZVgZ5Ho2kHE78SbW/MS7rvAJniedBrhvmEY0M1eJLz1HFllKS qFOj7WjpsVq6NZ3ZlWnCz9+rBAuLvkRXEmRXGVGWp/xsE5VWXS56gikY9hrgoHgz qvalCbKE24owwB5mFQbuutfZPsXJvSGDmQ8AqivPuyMMQOjEdq9LkSO8g4OL92m6 +29q6XI6QZ8wFoEajN16wy6oUoJeaK6e4svs66xZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvX1t02YQTsJPKwW4afUy8fap/wIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4MjYyYjQwLTlmOTgtNGZmOC05NWE5LTY4MWFkYWE4NGY0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3AowDQYJKoZIhvcNAQELBQADggEBAHvDPA9nRSRAfRiWIKEDYhiMpJmJ 1p8gJwvKn3FauFvQcyUcVty3dhjOpED1cWhZOSAWnmtTSzyZOguizJEMAOTk2nz5 dSDgIHo4XL1t+y/+PN1pjL4TwlBevMDgXjLVJ2Acw6Dc7VFzdko/pPRVyCNb7u6O lOLA+mjtWrW9XxoCPkUobns0nbRwtN9HuI51ppZU110/Ia8QeJsU7hlgYDlKZiSn fBlvhQLEeT+GAVhlhZoP/87lCwmZxQCUzzahPsW/tWcIufyLVA6k3/jLnU0dsrrD IlesNvkszTdszk7twqZ0niUbdfOrT8PE1yEIlKRnhIkMGFubmfYMEVrKQ5U= -----END CERTIFICATE-----Generated at Mon Mar 2 01:07:27 2026 by rpki-client