$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc2cad77-ae22-457b-85e7-faeebab57ed0.roa File: cc2cad77-ae22-457b-85e7-faeebab57ed0.roa (raw, json) Hash identifier: PiOjg39ipHkqdrxKRZU7YX9oMZBXTRB0LgpY7XRKI6c= Subject key identifier: 83:5B:95:69:CE:09:D0:4D:C4:C8:51:7D:94:DF:64:FF:8F:8A:03:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A90DD68C61E391A0F140F141C285C7D66EC9905 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc2cad77-ae22-457b-85e7-faeebab57ed0.roa Signing time: Mon 23 Feb 2026 01:51:14 +0000 ROA not before: Mon 23 Feb 2026 01:51:14 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:90:dd:68:c6:1e:39:1a:0f:14:0f:14:1c:28:5c:7d:66:ec:99:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:51:14 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=4481320b756f65421b207f4f9ea7df1e0bbfda4b58e02142181e886707c05bd9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:18:7b:b5:f5:fc:48:e5:67:fd:6a:ad:a1: 01:93:a5:56:f2:13:44:f6:f8:62:0b:92:a2:a4:d5: 9d:00:22:75:d2:0c:85:28:0a:ff:70:3a:a7:1d:76: 83:5a:e4:a0:26:99:4f:47:27:5c:76:b6:50:9b:27: db:44:1b:6e:fb:3d:98:ab:ac:b0:87:15:76:d7:3a: 6f:27:03:59:3a:b0:40:92:b5:b0:3c:3a:18:f0:f6: 66:74:36:04:4f:e1:0a:af:5b:49:95:c5:ff:32:68: 86:98:bf:32:de:89:ba:83:41:6c:db:9b:a0:cd:a7: 8c:d3:02:5c:a4:ab:d2:bb:8e:01:2e:53:df:5f:4e: b3:92:59:3d:15:64:a2:56:06:d8:4e:e9:41:21:eb: d0:b7:c1:35:17:c8:08:51:02:bb:16:4c:5f:ee:8e: 3b:47:58:76:ee:d2:f9:9f:f3:ac:ac:2e:1e:98:f7: 67:cc:d0:5f:0f:af:dc:95:4f:46:46:43:e6:e2:c1: 89:03:73:24:0f:0a:7b:4b:eb:c6:34:fd:86:1b:00: 50:e6:8d:91:d3:bd:11:33:9c:1d:47:f6:89:88:2e: 94:ba:86:49:5f:67:e4:a3:b7:74:ba:57:c4:5d:10: ad:42:06:03:f8:a2:e2:69:20:7c:cd:9d:5a:08:f6: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5B:95:69:CE:09:D0:4D:C4:C8:51:7D:94:DF:64:FF:8F:8A:03:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc2cad77-ae22-457b-85e7-faeebab57ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.65.0/24 Signature Algorithm: sha256WithRSAEncryption 16:2e:5b:54:17:e7:4f:cc:2b:c3:f0:60:78:f2:6d:60:88:f8: 3c:dd:f3:32:e4:35:07:c2:8d:58:a5:85:4e:3e:4b:d2:5d:ca: f5:c1:16:6f:d0:51:be:5b:36:7a:fd:15:01:c8:a2:8e:f2:f5: bb:d1:a7:ec:05:74:b0:29:7c:b0:d0:c3:20:85:f5:7b:f6:98: 65:aa:a0:b4:1e:8b:4c:02:13:1a:28:0d:06:a0:93:dd:08:f9: 3c:8c:a6:ad:d8:63:88:12:b1:2f:f4:1d:7e:30:46:8a:6d:f3: 5e:d7:af:30:aa:9b:48:3c:dd:02:31:0b:fc:39:a0:10:64:52: 0d:fc:fd:dc:ee:0b:2f:e8:1a:70:98:64:49:1f:cc:2c:0f:5e: 88:b5:6b:42:14:77:c8:ca:80:21:31:c0:6d:2a:6a:59:b1:35: 57:25:ef:e3:20:2e:ad:e7:e4:99:19:24:fd:59:15:ee:e5:76: 97:a8:0d:57:48:a5:b6:05:c0:f3:73:0c:0d:5b:ea:30:f2:f3: 15:56:64:d0:32:44:9c:6b:18:a5:9c:4f:5f:67:ee:a2:41:ab: 59:96:63:c0:5b:4f:91:2e:82:de:54:8a:cb:6c:10:7f:7f:41: e3:1b:0c:47:ea:16:f8:14:d2:ec:38:d8:7b:4b:a4:6d:b7:4c: 64:84:a4:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSpDdaMYeORoPFA8UHChcfWbsmQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDE1MTE0WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDgxMzIwYjc1NmY2NTQyMWIyMDdmNGY5ZWE3ZGYxZTBi YmZkYTRiNThlMDIxNDIxODFlODg2NzA3YzA1YmQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiRBh7tfX8SOVn/WqtoQGTpVbyE0T2+GILkqKk1Z0AInXS DIUoCv9wOqcddoNa5KAmmU9HJ1x2tlCbJ9tEG277PZirrLCHFXbXOm8nA1k6sECS tbA8Ohjw9mZ0NgRP4QqvW0mVxf8yaIaYvzLeibqDQWzbm6DNp4zTAlykq9K7jgEu U99fTrOSWT0VZKJWBthO6UEh69C3wTUXyAhRArsWTF/ujjtHWHbu0vmf86ysLh6Y 92fM0F8Pr9yVT0ZGQ+biwYkDcyQPCntL68Y0/YYbAFDmjZHTvREznB1H9omILpS6 hklfZ+Sjt3S6V8RdEK1CBgP4ouJpIHzNnVoI9uVxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg1uVac4J0E3EyFF9lN9k/4+KA9UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjMmNhZDc3LWFlMjItNDU3Yi04NWU3LWZhZWViYWI1N2VkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnkEwDQYJKoZIhvcNAQELBQADggEBABYuW1QX50/MK8PwYHjybWCI+Dzd 8zLkNQfCjVilhU4+S9JdyvXBFm/QUb5bNnr9FQHIoo7y9bvRp+wFdLApfLDQwyCF 9Xv2mGWqoLQei0wCExooDQagk90I+TyMpq3YY4gSsS/0HX4wRopt817XrzCqm0g8 3QIxC/w5oBBkUg38/dzuCy/oGnCYZEkfzCwPXoi1a0IUd8jKgCExwG0qalmxNVcl 7+MgLq3n5JkZJP1ZFe7ldpeoDVdIpbYFwPNzDA1b6jDy8xVWZNAyRJxrGKWcT19n 7qJBq1mWY8BbT5Eugt5UistsEH9/QeMbDEfqFvgU0uw42HtLpG23TGSEpEE= -----END CERTIFICATE-----Generated at Sun Mar 1 21:43:35 2026 by rpki-client