$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e095e455-4e3d-4094-bd27-2ff71270ee75.roa File: e095e455-4e3d-4094-bd27-2ff71270ee75.roa (raw, json) Hash identifier: M82AU4wdhI/j7REGjDEAuider5IBNlZ1beJgDV6XFjg= Subject key identifier: F9:B8:FF:12:51:A9:F3:A5:B9:48:28:2C:30:A7:43:7E:57:89:18:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D199AB6642C39549E0E90DD1C4F6847927D5CF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e095e455-4e3d-4094-bd27-2ff71270ee75.roa Signing time: Sun 22 Feb 2026 00:50:04 +0000 ROA not before: Sun 22 Feb 2026 00:50:04 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:19:9a:b6:64:2c:39:54:9e:0e:90:dd:1c:4f:68:47:92:7d:5c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 22 00:50:04 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=9d32f4f16bb8a81e2c705a683d86acf744b4e3502aaad3b7c309243bd9518d36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:46:b4:e3:5b:15:1f:9f:bc:1d:5e:99:38: 9c:9c:0a:97:8d:e7:ac:c4:fd:71:95:41:c3:e6:0e: 6b:9f:31:a2:99:e4:1f:12:e4:d5:2b:b1:61:da:b0: 01:c1:7c:18:4f:8c:17:90:ee:b9:ec:df:17:89:60: cd:8d:d1:40:bd:ae:eb:63:fc:02:25:50:26:45:ec: 71:83:96:35:8b:f2:e6:3c:e8:67:7c:ec:8e:a2:be: a1:35:95:8a:dc:db:73:39:60:74:db:90:13:db:d6: bf:8b:3a:a0:b0:3c:b4:9b:dc:81:64:52:40:51:eb: 2a:6c:3c:eb:71:b9:8b:08:51:5a:ce:3f:2f:51:e9: 1f:74:f8:55:a2:7c:b7:5d:b5:c9:2f:85:ad:1b:a0: 86:6f:9c:30:b6:70:5c:6b:f6:6b:e7:91:49:96:2e: 60:c7:c4:6c:98:66:87:58:f4:15:cb:3f:b3:0c:31: 7a:c4:46:f1:5d:0b:cf:b7:01:92:63:4e:3b:0e:4e: 60:82:6f:16:50:c8:5d:07:ee:11:c9:b6:25:de:7f: f5:3a:58:82:54:e4:1e:70:0b:15:45:c7:ee:94:9c: 63:26:fd:b0:5a:c5:a2:dc:a4:ad:c8:b6:bd:3a:b2: b0:16:d7:ad:72:3b:2b:3f:51:35:56:36:9f:ea:ef: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B8:FF:12:51:A9:F3:A5:B9:48:28:2C:30:A7:43:7E:57:89:18:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e095e455-4e3d-4094-bd27-2ff71270ee75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.97.0/24 Signature Algorithm: sha256WithRSAEncryption 18:5b:98:8a:b9:ec:2f:82:6b:0b:9c:2b:fb:da:25:e0:5f:d4: 1c:1a:fd:1c:17:d4:2f:2c:14:8e:09:52:da:20:e9:a3:43:9f: 64:cc:8b:59:9b:b1:82:39:8b:ed:88:4d:7a:c3:35:8b:24:a0: 97:8c:b0:2b:81:83:6b:9c:31:69:87:5a:04:49:45:c1:15:a4: ae:a0:05:df:3d:82:5e:3a:33:b5:b5:69:f5:ab:17:0b:1f:96: 86:02:6c:a9:3e:29:11:fc:17:3c:da:55:e3:0b:b2:cc:f2:19: ea:b1:b8:b8:d3:22:ca:0f:14:f4:81:32:5c:f1:96:29:cd:7d: 52:ac:3d:a3:74:f9:e5:57:78:67:10:93:f3:67:6a:f1:f3:3a: a8:97:4f:c8:fb:8d:54:c7:ad:df:27:81:0e:15:93:ae:d2:a0: d1:e7:c4:6f:f7:20:5b:ef:0d:e3:00:37:ce:b9:42:b1:e0:dc: c5:43:7c:f4:bb:14:48:25:c7:41:69:0a:0a:5c:e2:01:68:6f: 6b:eb:36:8d:66:11:1b:f1:08:9a:32:3c:f0:10:a9:c0:2c:ab: 1e:e8:0f:93:34:d5:5c:c7:a9:be:28:de:73:1c:02:6f:12:7e: c7:e9:b9:df:08:b3:60:d8:95:a0:12:8e:f5:2a:f8:91:44:1b: 36:78:06:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTRmatmQsOVSeDpDdHE9oR5J9XPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIyMDA1MDA0WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDMyZjRmMTZiYjhhODFlMmM3MDVhNjgzZDg2YWNmNzQ0 YjRlMzUwMmFhYWQzYjdjMzA5MjQzYmQ5NTE4ZDM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGNUa041sVH5+8HV6ZOJycCpeN56zE/XGVQcPmDmufMaKZ 5B8S5NUrsWHasAHBfBhPjBeQ7rns3xeJYM2N0UC9rutj/AIlUCZF7HGDljWL8uY8 6Gd87I6ivqE1lYrc23M5YHTbkBPb1r+LOqCwPLSb3IFkUkBR6ypsPOtxuYsIUVrO Py9R6R90+FWifLddtckvha0boIZvnDC2cFxr9mvnkUmWLmDHxGyYZodY9BXLP7MM MXrERvFdC8+3AZJjTjsOTmCCbxZQyF0H7hHJtiXef/U6WIJU5B5wCxVFx+6UnGMm /bBaxaLcpK3Itr06srAW161yOys/UTVWNp/q74anAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+bj/ElGp86W5SCgsMKdDfleJGO0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UwOTVlNDU1LTRlM2QtNDA5NC1iZDI3LTJmZjcxMjcwZWU3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3GEwDQYJKoZIhvcNAQELBQADggEBABhbmIq57C+CawucK/vaJeBf1Bwa /RwX1C8sFI4JUtog6aNDn2TMi1mbsYI5i+2ITXrDNYskoJeMsCuBg2ucMWmHWgRJ RcEVpK6gBd89gl46M7W1afWrFwsfloYCbKk+KRH8FzzaVeMLsszyGeqxuLjTIsoP FPSBMlzxlinNfVKsPaN0+eVXeGcQk/NnavHzOqiXT8j7jVTHrd8ngQ4Vk67SoNHn xG/3IFvvDeMAN865QrHg3MVDfPS7FEglx0FpCgpc4gFob2vrNo1mERvxCJoyPPAQ qcAsqx7oD5M01VzHqb4o3nMcAm8Sfsfpud8Is2DYlaASjvUq+JFEGzZ4BvQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:41:30 2026 by rpki-client