$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f19189dd-1795-43c0-95cc-15f84f8e4083.roa File: f19189dd-1795-43c0-95cc-15f84f8e4083.roa (raw, json) Hash identifier: DdWXtmuD45bsNyvcidmcT3PYJD+0tvWsKJktcVYIh6o= Subject key identifier: FD:E3:2E:22:6F:D3:BF:1E:A2:3A:95:7A:54:61:21:2A:B9:02:67:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E9C0DCF779BAA0C02EDFBB7CB39DDB4A4F08F32 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f19189dd-1795-43c0-95cc-15f84f8e4083.roa Signing time: Thu 26 Feb 2026 01:40:33 +0000 ROA not before: Thu 26 Feb 2026 01:40:33 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.193.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9c:0d:cf:77:9b:aa:0c:02:ed:fb:b7:cb:39:dd:b4:a4:f0:8f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 26 01:40:33 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=1156c011e8c26ea4baa72dac12e7be6c244484cc5fed0977ed5da00c98c6c4df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:d6:36:a6:ba:2b:5d:e4:6c:4d:ab:c5:dd: d6:a8:2d:bf:d5:0c:dd:2f:ac:b5:ac:7a:42:a2:2c: cc:26:d9:01:68:9b:13:7e:5c:f3:09:75:6c:11:33: aa:76:66:0b:a0:d5:85:d5:e6:ae:ed:b1:3b:24:3e: 39:0e:38:4e:25:b2:ad:25:04:74:a4:8d:2e:a9:2f: 74:f5:c4:5e:34:a7:4f:cc:7d:95:d0:a3:33:bf:95: a9:13:01:0e:d4:70:47:3f:bf:80:3d:d2:d0:9a:9e: 42:03:c8:de:86:12:41:01:42:14:8f:c5:f0:2b:fd: c2:ba:41:c6:c9:83:af:bf:00:e6:2a:11:ad:8b:b5: 87:59:f9:6a:d5:cd:73:bb:64:fb:a3:e3:57:2d:da: 87:fc:45:50:8f:44:10:8d:5d:9e:32:ff:a1:3b:5e: 3f:cc:b2:19:60:4d:14:15:2f:a6:58:3a:d3:03:66: 39:a9:a5:ee:87:8d:6f:ca:b4:ca:aa:c4:8b:cf:02: 78:22:e8:bd:42:58:7a:ec:28:72:a2:f4:d4:f7:dc: 9b:9f:e3:df:4f:2a:69:d4:e2:fd:58:31:10:2b:3e: 0d:dc:91:3d:22:8b:b8:0a:5d:fe:1c:e3:d9:e0:3e: 0c:6e:d1:9c:16:05:72:82:f7:d9:51:62:3d:3d:50: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E3:2E:22:6F:D3:BF:1E:A2:3A:95:7A:54:61:21:2A:B9:02:67:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f19189dd-1795-43c0-95cc-15f84f8e4083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.193.2.0/24 Signature Algorithm: sha256WithRSAEncryption 71:e5:48:8b:b2:5a:63:3c:76:16:e4:10:33:b7:b4:27:ed:f8: c2:6d:c5:32:a8:7c:8b:7b:71:61:8c:d8:d9:d4:eb:c4:3e:ad: 76:fb:cf:de:54:a0:31:fe:e7:e1:29:f8:ef:0f:c0:56:f4:ca: 20:67:35:67:be:1d:7d:2b:a0:01:ab:0b:d0:7e:43:73:61:10: 2d:91:d1:ed:71:86:69:80:da:b7:eb:51:18:b3:94:e5:c6:0b: fd:56:60:a6:b0:23:ad:db:8c:71:b6:83:11:15:41:2f:d9:9d: c0:79:d4:eb:ad:67:07:8d:42:e9:61:0d:48:0c:1f:d3:f3:58: 1b:d1:d4:df:e2:58:72:4a:b4:4a:46:56:5f:2a:02:cc:00:9a: 6e:4e:6b:d3:a6:4a:c3:cc:b3:02:43:c6:f3:92:43:d8:2f:63: 3e:77:fa:d4:c5:17:d7:38:09:f5:1f:0f:06:72:20:e8:25:2d: 19:c3:b2:03:33:98:95:ee:8f:19:0f:05:4d:53:92:ea:2a:e3: de:de:ed:4f:83:2d:cd:ca:cd:f7:7c:76:17:4f:4d:d6:e8:74: 52:84:b5:57:44:a1:6e:16:a2:dc:d5:be:8e:f5:5e:05:58:b0: 32:75:4f:4f:14:ee:fc:fd:e2:c5:61:a7:33:93:03:74:97:fa: b7:89:d5:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDpwNz3ebqgwC7fu3yzndtKTwjzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI2MDE0MDMzWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTU2YzAxMWU4YzI2ZWE0YmFhNzJkYWMxMmU3YmU2YzI0 NDQ4NGNjNWZlZDA5NzdlZDVkYTAwYzk4YzZjNGRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeQ9Y2prorXeRsTavF3daoLb/VDN0vrLWsekKiLMwm2QFo mxN+XPMJdWwRM6p2Zgug1YXV5q7tsTskPjkOOE4lsq0lBHSkjS6pL3T1xF40p0/M fZXQozO/lakTAQ7UcEc/v4A90tCankIDyN6GEkEBQhSPxfAr/cK6QcbJg6+/AOYq Ea2LtYdZ+WrVzXO7ZPuj41ct2of8RVCPRBCNXZ4y/6E7Xj/MshlgTRQVL6ZYOtMD Zjmppe6HjW/KtMqqxIvPAngi6L1CWHrsKHKi9NT33Juf499PKmnU4v1YMRArPg3c kT0ii7gKXf4c49ngPgxu0ZwWBXKC99lRYj09UBX7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/eMuIm/Tvx6iOpV6VGEhKrkCZ0QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxOTE4OWRkLTE3OTUtNDNjMC05NWNjLTE1Zjg0ZjhlNDA4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPwQIwDQYJKoZIhvcNAQELBQADggEBAHHlSIuyWmM8dhbkEDO3tCft+MJt xTKofIt7cWGM2NnU68Q+rXb7z95UoDH+5+Ep+O8PwFb0yiBnNWe+HX0roAGrC9B+ Q3NhEC2R0e1xhmmA2rfrURizlOXGC/1WYKawI63bjHG2gxEVQS/ZncB51OutZweN QulhDUgMH9PzWBvR1N/iWHJKtEpGVl8qAswAmm5Oa9OmSsPMswJDxvOSQ9gvYz53 +tTFF9c4CfUfDwZyIOglLRnDsgMzmJXujxkPBU1Tkuoq497e7U+DLc3Kzfd8dhdP TdbodFKEtVdEoW4WotzVvo71XgVYsDJ1T08U7vz94sVhpzOTA3SX+reJ1SU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:04 2026 by rpki-client