$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa File: cf8998d8-99d4-4b0b-9648-f902779332fe.roa (raw, json) Hash identifier: YhooAdeEIdQ72y1jR/Hx4eP2zVFxdec+n8Z4OAWuRFk= Subject key identifier: 1F:C2:CE:76:47:EC:A6:89:43:7F:E2:F2:F3:C0:B6:C6:95:3F:25:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 625F6E644E969C126F6C79255BA24CE02F213846 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa Signing time: Sat 28 Feb 2026 03:21:09 +0000 ROA not before: Sat 28 Feb 2026 03:21:09 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5f:6e:64:4e:96:9c:12:6f:6c:79:25:5b:a2:4c:e0:2f:21:38:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 03:21:09 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=1b4892ecca6e8bee48552a3d521b498ea2a1f5b725be89a331108b0de6d2694f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:a6:7a:42:6d:fd:08:d5:04:50:20:df:da: be:15:c3:f8:27:6b:b3:54:97:a5:ac:26:5f:ed:1f: 9a:45:6b:3f:dd:69:ad:d0:35:71:1a:2e:85:97:ee: cc:cb:15:4e:30:fc:b2:7e:4a:4b:2b:c2:f0:66:be: f2:ac:d8:1a:fc:85:f9:12:0f:44:d0:a3:08:57:af: 41:45:3b:a7:94:b4:61:d3:cd:26:f3:4e:13:e0:2b: 60:15:b8:2e:fa:31:32:47:b8:45:e9:d1:cc:6a:91: e1:5a:c7:36:de:c0:c7:07:e0:f1:10:90:cb:2e:e9: 92:3f:05:0f:9f:69:4f:e6:84:72:f6:63:c0:cd:99: 4b:fd:65:45:29:d5:a9:0b:f9:be:ba:9a:31:0a:98: d9:bb:11:5b:b9:11:7d:15:67:5f:fd:ca:42:d8:a0: ee:d5:88:b8:28:5d:e4:15:54:48:a6:6e:84:24:62: 56:88:fb:03:c9:f7:54:3f:17:86:3d:24:51:a4:ff: 27:27:77:da:c4:5b:df:02:e2:9c:bc:5c:a0:58:26: 0c:94:f5:80:7d:61:3b:d4:3f:40:20:52:d9:16:d0: 66:ef:c4:58:9f:59:2f:41:51:06:7b:a0:be:70:7f: a9:8d:64:93:3b:f8:d0:7d:4f:65:c4:ee:d8:8e:ec: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:CE:76:47:EC:A6:89:43:7F:E2:F2:F3:C0:B6:C6:95:3F:25:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.232.0/24 Signature Algorithm: sha256WithRSAEncryption 23:66:0f:dc:d9:3d:6b:54:97:c4:f5:88:04:64:d0:50:66:38: 86:de:64:bf:0b:9f:c2:ba:df:37:32:96:d2:06:a1:b8:40:23: 51:3b:ba:ea:49:cb:84:cc:6c:f6:de:54:36:b0:ce:d9:18:96: fd:58:0c:e6:a1:06:f6:40:42:a6:f5:09:f0:f3:69:4a:d0:3e: e0:87:03:86:68:8d:91:79:19:af:b0:3f:f7:9c:2b:b2:c5:b6: 8b:2e:a9:77:a6:be:a0:ee:3f:61:50:87:20:18:bd:a0:00:5f: da:d5:22:62:49:ef:36:f6:6e:3a:e1:29:25:07:51:0a:42:24: d5:21:42:17:8c:c3:90:35:e0:30:af:0b:d2:3b:5d:eb:8e:88: 36:3f:62:c7:dc:93:f8:d3:f3:99:c2:6e:e4:b6:f3:64:af:db: fd:11:da:45:97:c3:1e:cc:4c:5f:32:35:11:69:da:94:2c:60: cb:ea:43:4c:d7:28:d7:60:e2:c7:f9:f9:fa:6f:4a:48:81:5d: de:35:02:09:ff:2f:65:7b:e7:99:03:e8:f4:a1:0b:c9:93:d2: e9:0d:d8:de:9e:e9:cf:f1:08:f3:c2:0c:a8:b6:e1:af:a6:51: 60:39:01:51:9e:3e:4a:e8:19:8f:9c:25:fa:da:db:02:97:59: 36:a8:4f:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYl9uZE6WnBJvbHklW6JM4C8hOEYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDMyMTA5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjQ4OTJlY2NhNmU4YmVlNDg1NTJhM2Q1MjFiNDk4ZWEy YTFmNWI3MjViZTg5YTMzMTEwOGIwZGU2ZDI2OTRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYx6Z6Qm39CNUEUCDf2r4Vw/gna7NUl6WsJl/tH5pFaz/d aa3QNXEaLoWX7szLFU4w/LJ+SksrwvBmvvKs2Br8hfkSD0TQowhXr0FFO6eUtGHT zSbzThPgK2AVuC76MTJHuEXp0cxqkeFaxzbewMcH4PEQkMsu6ZI/BQ+faU/mhHL2 Y8DNmUv9ZUUp1akL+b66mjEKmNm7EVu5EX0VZ1/9ykLYoO7ViLgoXeQVVEimboQk YlaI+wPJ91Q/F4Y9JFGk/ycnd9rEW98C4py8XKBYJgyU9YB9YTvUP0AgUtkW0Gbv xFifWS9BUQZ7oL5wf6mNZJM7+NB9T2XE7tiO7JmBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH8LOdkfspolDf+Ly88C2xpU/JcAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmODk5OGQ4LTk5ZDQtNGIwYi05NjQ4LWY5MDI3NzkzMzJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP3OgwDQYJKoZIhvcNAQELBQADggEBACNmD9zZPWtUl8T1iARk0FBmOIbe ZL8Ln8K63zcyltIGobhAI1E7uupJy4TMbPbeVDawztkYlv1YDOahBvZAQqb1CfDz aUrQPuCHA4ZojZF5Ga+wP/ecK7LFtosuqXemvqDuP2FQhyAYvaAAX9rVImJJ7zb2 bjrhKSUHUQpCJNUhQheMw5A14DCvC9I7XeuOiDY/Ysfck/jT85nCbuS282Sv2/0R 2kWXwx7MTF8yNRFp2pQsYMvqQ0zXKNdg4sf5+fpvSkiBXd41Agn/L2V755kD6PSh C8mT0ukN2N6e6c/xCPPCDKi24a+mUWA5AVGePkroGY+cJfra2wKXWTaoT2c= -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:16 2026 by rpki-client