$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa File: 025bca09-86b7-48bd-a586-a44ce744234f.roa (raw, json) Hash identifier: qO25usAnzcInNeKMrZpfeHGh/zQG+e7MN3w2LT3mdq4= Subject key identifier: D4:73:E6:ED:A2:AA:90:81:56:C5:23:1E:2E:FC:10:58:B6:10:19:88 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D98FDC4BC42E98728A2048E0ACE9DB4252E9F56 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa Signing time: Fri 08 May 2026 01:51:33 +0000 ROA not before: Fri 08 May 2026 01:51:33 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:98:fd:c4:bc:42:e9:87:28:a2:04:8e:0a:ce:9d:b4:25:2e:9f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 01:51:33 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=11459f70614acf429415e938dedca3a4132ed718462c5add6df01d5baae36688, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:d5:b4:47:9c:28:be:99:bf:e3:6c:c5:3f: 58:7a:51:c7:40:52:8b:76:ec:4c:59:bb:11:8e:df: d2:90:c3:90:44:b6:d8:db:e4:b7:4d:bb:59:03:c6: e4:92:b0:a5:b3:36:cb:18:cf:fb:75:07:ad:c6:82: 7a:e8:73:ab:9d:f3:f3:b8:44:91:58:6e:49:ad:e6: f5:0b:e9:cc:01:d8:03:06:93:a4:b1:2b:fd:9e:60: 70:fc:c7:a3:49:fa:a2:68:a4:b5:d5:44:14:6d:dd: 4b:cb:cd:85:64:3d:63:4f:cb:5a:4f:23:51:b8:4c: 04:83:fe:22:75:c1:bd:78:65:ac:dd:fb:c2:f6:e3: 08:f1:ad:33:4f:0c:6c:b6:15:0f:72:25:22:0d:ba: 59:80:9c:e3:3a:9c:3d:e2:0b:68:f8:df:35:d3:b6: bb:1c:69:3f:dd:55:92:a8:96:84:f4:f8:71:af:7b: 64:b7:f2:09:f6:c0:e1:7a:21:6c:b5:38:4e:fd:79: 06:7e:75:cf:18:6f:5a:3e:9d:29:79:2c:72:56:6f: 92:4f:9c:e6:4e:60:a1:55:44:4e:97:6c:8d:ee:b9: 39:60:97:de:7f:e9:d0:4f:22:7e:f1:98:9c:a6:27: a0:f0:d9:27:08:1c:9d:03:43:71:ed:a4:16:90:91: ae:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:E6:ED:A2:AA:90:81:56:C5:23:1E:2E:FC:10:58:B6:10:19:88 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.168.0/21 Signature Algorithm: sha256WithRSAEncryption 43:fd:8e:4c:08:28:73:ac:75:ef:1d:2c:4e:d8:ee:92:43:4b: fe:b0:0d:fa:90:e8:1a:0f:3d:22:ee:6c:0d:be:a3:96:1c:38: e1:16:63:96:be:58:57:97:bf:94:71:0b:61:08:32:8a:d2:85: 2c:2d:d1:6d:9b:0d:54:34:e6:15:68:c9:b1:98:27:9a:8a:0d: 29:d3:88:1f:ef:35:55:45:f1:79:da:9a:7e:db:e6:3c:0a:de: 23:29:7a:c9:7d:02:63:55:ca:ad:48:a4:44:a2:11:43:11:9c: a3:68:4f:d4:27:60:a0:35:e0:f1:92:3a:1d:f6:4c:dd:90:68: 24:6d:cd:47:b8:19:3f:b3:a2:74:5b:85:b9:5d:de:f6:8a:c2: c4:35:d9:9f:4f:75:b3:2e:82:d1:5f:64:8a:d9:39:07:0e:e3: c2:17:02:06:53:ce:25:5d:15:f9:4a:a0:02:d2:83:32:0d:b5: ae:9d:f7:43:9a:35:f1:4e:35:46:41:d1:21:aa:7d:a4:10:be: ab:7f:7d:5b:92:a2:6d:2a:f3:32:46:82:25:33:81:4d:3f:a2: 89:60:fe:16:97:c2:b0:c9:b2:71:62:99:67:e2:cb:68:ec:8f: 43:e5:7d:20:ef:91:09:1d:41:40:7e:1c:8a:1b:66:35:92:60: e2:4c:33:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbZj9xLxC6YcoogSOCs6dtCUun1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDE1MTMzWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTQ1OWY3MDYxNGFjZjQyOTQxNWU5MzhkZWRjYTNhNDEz MmVkNzE4NDYyYzVhZGQ2ZGYwMWQ1YmFhZTM2Njg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFu9W0R5wovpm/42zFP1h6UcdAUot27ExZuxGO39KQw5BE ttjb5LdNu1kDxuSSsKWzNssYz/t1B63Ggnroc6ud8/O4RJFYbkmt5vUL6cwB2AMG k6SxK/2eYHD8x6NJ+qJopLXVRBRt3UvLzYVkPWNPy1pPI1G4TASD/iJ1wb14Zazd +8L24wjxrTNPDGy2FQ9yJSINulmAnOM6nD3iC2j43zXTtrscaT/dVZKoloT0+HGv e2S38gn2wOF6IWy1OE79eQZ+dc8Yb1o+nSl5LHJWb5JPnOZOYKFVRE6XbI3uuTlg l95/6dBPIn7xmJymJ6Dw2ScIHJ0DQ3HtpBaQka65AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1HPm7aKqkIFWxSMeLvwQWLYQGYgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyNWJjYTA5LTg2YjctNDhiZC1hNTg2LWE0NGNlNzQ0MjM0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3KgwDQYJKoZIhvcNAQELBQADggEBAEP9jkwIKHOsde8dLE7Y7pJDS/6w DfqQ6BoPPSLubA2+o5YcOOEWY5a+WFeXv5RxC2EIMorShSwt0W2bDVQ05hVoybGY J5qKDSnTiB/vNVVF8Xnamn7b5jwK3iMpesl9AmNVyq1IpESiEUMRnKNoT9QnYKA1 4PGSOh32TN2QaCRtzUe4GT+zonRbhbld3vaKwsQ12Z9PdbMugtFfZIrZOQcO48IX AgZTziVdFflKoALSgzINta6d90OaNfFONUZB0SGqfaQQvqt/fVuSom0q8zJGgiUz gU0/oolg/haXwrDJsnFimWfiy2jsj0PlfSDvkQkdQUB+HIobZjWSYOJMM/g= -----END CERTIFICATE-----Generated at Tue May 12 22:19:17 2026 by rpki-client