$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae4dc80-d854-4299-a65d-85af70662c24.roa File: 1ae4dc80-d854-4299-a65d-85af70662c24.roa (raw, json) Hash identifier: QjNhsOKErnFxy8QAwNiQo1QcRL7lrSz7DAMEOcDonp0= Subject key identifier: 7F:E7:C7:87:81:D9:21:32:F5:21:CA:C5:D9:4B:4F:72:45:3E:7A:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23D730FCAC4E5CDD9B1F50EC055A41F6AF00CD38 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae4dc80-d854-4299-a65d-85af70662c24.roa Signing time: Mon 11 May 2026 01:01:03 +0000 ROA not before: Mon 11 May 2026 01:01:03 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d7:30:fc:ac:4e:5c:dd:9b:1f:50:ec:05:5a:41:f6:af:00:cd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 11 01:01:03 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=52da1d9300b261e13dbc4c0bc1f37a294428873cdd2a7f62b93898fec0c0675d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:ad:95:19:ba:ed:83:76:a5:34:98:ff:bb: 09:e8:32:ac:ba:ab:eb:50:52:47:49:2c:c7:1d:e7: a6:da:88:0d:70:64:a7:e7:13:ba:08:fe:62:3f:ef: d3:d3:6f:ab:d9:c9:6f:3f:5e:8c:07:92:9f:18:99: 6a:54:33:f8:59:ba:74:2c:1f:c2:3a:33:0a:66:54: f0:3e:8b:84:73:19:98:b2:2f:c8:a3:06:bf:67:1e: d2:38:9b:86:c9:30:39:70:3e:80:7a:16:54:c6:55: ed:a4:a3:d4:a0:ac:c1:3e:43:68:fe:11:37:6d:ba: ff:ed:af:0d:47:8b:db:c2:4a:c7:8e:19:71:b3:73: 64:8e:02:16:c2:19:fe:15:62:49:b2:62:0d:9f:de: 8b:e2:5e:ec:c8:4c:b2:a3:da:34:24:2f:f5:86:2b: 93:50:28:97:a6:18:ec:87:e1:51:34:e4:21:ed:3f: 0f:b3:8b:9c:db:b9:d0:cc:a7:14:b0:2c:df:43:bf: aa:e6:c6:0d:5f:2d:16:06:bf:33:e1:60:2d:b7:87: 30:c8:c4:22:32:62:15:36:76:a8:70:2c:25:1b:98: 62:d4:3d:ee:e3:5d:52:1c:43:da:d3:78:f2:1f:a3: 78:d2:50:b5:a4:d2:e0:43:8f:17:4a:b6:52:3d:0a: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E7:C7:87:81:D9:21:32:F5:21:CA:C5:D9:4B:4F:72:45:3E:7A:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae4dc80-d854-4299-a65d-85af70662c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.217.0/24 Signature Algorithm: sha256WithRSAEncryption 20:d1:ab:38:71:bc:63:86:7b:62:da:ce:58:ab:f8:cc:54:79: 19:13:03:98:d3:17:e5:6d:f3:90:73:d5:d4:ed:6b:42:48:a1: 32:61:3f:1e:e5:93:1b:35:a6:94:e0:7b:31:08:6a:61:f7:74: cd:17:ea:38:81:84:30:d5:e2:2b:1a:79:83:79:f4:9c:3c:52: d9:be:1a:da:ec:c6:67:f0:4c:be:97:6e:01:b9:85:dc:7d:7a: 2c:36:73:23:a5:aa:b1:fa:a2:55:1d:0c:c0:c6:44:b1:4a:4b: 1d:c3:a5:82:26:8a:13:5d:12:7f:dd:14:14:4f:a3:fe:21:8b: a1:b7:d9:3f:92:8c:23:90:b0:63:f3:e2:8b:02:5f:c1:ea:c2: ef:0f:ed:7f:4f:cc:2d:9c:63:f3:ef:66:d1:e0:ca:7d:a4:8b: 44:8a:72:f2:15:d8:12:bc:2e:85:83:42:fe:56:7e:1b:18:dc: fc:5d:a2:7a:b7:14:79:fe:47:75:17:89:4b:5e:96:24:b3:d7: 07:ce:55:22:54:83:b1:28:be:ea:36:24:52:da:00:e8:fd:d3: ea:3e:e1:34:cf:8e:91:8d:ba:f2:b3:6f:ca:2c:4b:35:34:78: 75:f5:df:38:6b:86:50:17:e4:43:8a:cf:b6:38:f1:a3:2a:61: fa:98:7b:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI9cw/KxOXN2bH1DsBVpB9q8AzTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDEwMTAzWhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmRhMWQ5MzAwYjI2MWUxM2RiYzRjMGJjMWYzN2EyOTQ0 Mjg4NzNjZGQyYTdmNjJiOTM4OThmZWMwYzA2NzVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiW62VGbrtg3alNJj/uwnoMqy6q+tQUkdJLMcd56baiA1w ZKfnE7oI/mI/79PTb6vZyW8/XowHkp8YmWpUM/hZunQsH8I6MwpmVPA+i4RzGZiy L8ijBr9nHtI4m4bJMDlwPoB6FlTGVe2ko9SgrME+Q2j+ETdtuv/trw1Hi9vCSseO GXGzc2SOAhbCGf4VYkmyYg2f3oviXuzITLKj2jQkL/WGK5NQKJemGOyH4VE05CHt Pw+zi5zbudDMpxSwLN9Dv6rmxg1fLRYGvzPhYC23hzDIxCIyYhU2dqhwLCUbmGLU Pe7jXVIcQ9rTePIfo3jSULWk0uBDjxdKtlI9CqkPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf+fHh4HZITL1IcrF2UtPckU+ej0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhZTRkYzgwLWQ4NTQtNDI5OS1hNjVkLTg1YWY3MDY2MmMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPntkwDQYJKoZIhvcNAQELBQADggEBACDRqzhxvGOGe2Lazlir+MxUeRkT A5jTF+Vt85Bz1dTta0JIoTJhPx7lkxs1ppTgezEIamH3dM0X6jiBhDDV4isaeYN5 9Jw8Utm+GtrsxmfwTL6XbgG5hdx9eiw2cyOlqrH6olUdDMDGRLFKSx3DpYImihNd En/dFBRPo/4hi6G32T+SjCOQsGPz4osCX8Hqwu8P7X9PzC2cY/PvZtHgyn2ki0SK cvIV2BK8LoWDQv5WfhsY3Pxdonq3FHn+R3UXiUteliSz1wfOVSJUg7Eovuo2JFLa AOj90+o+4TTPjpGNuvKzb8osSzU0eHX13zhrhlAX5EOKz7Y48aMqYfqYe7k= -----END CERTIFICATE-----Generated at Tue May 12 22:37:46 2026 by rpki-client