$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa File: 5a885b28-9bb7-4be5-a945-f90048046452.roa (raw, json) Hash identifier: kTdtLnJ8Z+bXRvNHK68YBuoUg4DLLddtTU98DgvlQFU= Subject key identifier: 43:C5:B6:9E:BD:54:CC:86:9E:73:F6:33:40:E3:18:C2:EA:3E:BA:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C25EA561E73616474B4A1BE0F090DD8ECDEF2C3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa Signing time: Fri 08 May 2026 02:00:58 +0000 ROA not before: Fri 08 May 2026 02:00:58 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:25:ea:56:1e:73:61:64:74:b4:a1:be:0f:09:0d:d8:ec:de:f2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 02:00:58 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=8d8f71e49ba227dbdd965dff99eb84f272fa69095fd32a1796c6818587aab38f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:7d:f7:de:be:86:a1:f0:d7:bd:2a:af:fe: 7f:87:ff:71:a0:26:4b:b2:a2:e4:35:28:9e:53:a4: a8:d8:ed:da:6f:c5:de:ae:f6:70:64:f9:f1:b1:8d: b5:04:5c:75:aa:55:9c:42:53:2a:d2:92:d4:96:91: d0:74:5d:ac:08:a9:5e:40:05:3f:7d:eb:5b:09:4b: e3:49:61:44:6e:64:4d:fe:ff:12:07:99:e7:1b:1a: 98:6e:0a:9c:48:7e:eb:58:39:6e:4c:e5:86:60:5b: 31:07:68:54:67:cd:cb:06:32:6b:ed:33:35:ac:29: 52:49:fe:a3:76:28:44:f4:a9:b5:ec:5d:2e:b4:7b: bc:09:56:ed:ca:33:28:ba:ee:a7:4d:c5:37:3e:5f: c2:bb:95:ab:45:94:72:5d:91:e5:aa:05:a5:53:a4: 5e:d2:8a:1e:70:14:15:50:2d:93:84:2a:f3:1a:c6: 18:5a:35:e3:8c:3a:1a:22:4f:e7:fc:dd:a8:92:4b: 42:0f:d3:b3:70:9a:e0:bd:54:1d:0c:3f:5c:e0:c1: c8:ef:ad:8d:9a:64:69:ee:52:2b:d0:ad:38:c4:39: 1b:27:2d:fd:6c:99:e6:6d:f0:fc:bc:a1:4b:59:2a: 7d:60:4b:5b:c5:95:44:35:a8:73:7a:36:7e:f0:38: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C5:B6:9E:BD:54:CC:86:9E:73:F6:33:40:E3:18:C2:EA:3E:BA:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.176.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:14:2c:6c:f1:6c:c3:eb:02:ad:d8:d6:29:62:84:d3:2e:41: 33:aa:05:f3:57:6f:b9:49:64:c2:69:a7:99:54:46:b4:67:08: 8d:fb:74:cb:43:30:7d:4f:85:ab:3e:90:e8:04:27:1d:79:d8: 80:67:90:25:02:e8:f2:ff:63:2a:de:bf:02:b3:36:db:3d:6c: ba:a6:ca:63:a0:ff:d8:d0:77:b5:f7:c5:fd:4d:e6:aa:eb:8f: 1d:49:82:3b:30:fc:9c:8d:3c:47:b3:f4:ed:ef:b3:b4:d5:81: 29:af:dd:ad:21:cc:f7:db:f1:c2:3d:09:66:ee:ed:21:93:0c: af:a8:24:e4:3d:75:f9:55:4e:44:84:2f:e6:80:13:7d:e2:b3: 9b:0d:3a:bb:fd:bf:59:65:b6:a5:59:84:8b:1b:9b:7b:58:18: 9e:c7:cc:50:00:19:31:7e:d8:31:3f:75:12:a9:93:33:42:09: ef:d7:6e:39:37:0d:2b:51:23:81:21:40:53:47:5f:12:c4:35: 86:e4:4a:20:71:91:22:b1:5c:7c:a7:8f:4f:83:56:17:71:1d: 49:b2:cd:04:7b:77:e1:5e:0a:b3:8a:97:d3:4e:a1:80:ef:f8: d9:38:df:71:fa:4b:a3:37:f3:08:20:2d:0e:b5:79:76:f5:cd: 00:0d:0f:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHCXqVh5zYWR0tKG+DwkN2Oze8sMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIwMDU4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDhmNzFlNDliYTIyN2RiZGQ5NjVkZmY5OWViODRmMjcy ZmE2OTA5NWZkMzJhMTc5NmM2ODE4NTg3YWFiMzhmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIcn333r6GofDXvSqv/n+H/3GgJkuyouQ1KJ5TpKjY7dpv xd6u9nBk+fGxjbUEXHWqVZxCUyrSktSWkdB0XawIqV5ABT9961sJS+NJYURuZE3+ /xIHmecbGphuCpxIfutYOW5M5YZgWzEHaFRnzcsGMmvtMzWsKVJJ/qN2KET0qbXs XS60e7wJVu3KMyi67qdNxTc+X8K7latFlHJdkeWqBaVTpF7Sih5wFBVQLZOEKvMa xhhaNeOMOhoiT+f83aiSS0IP07NwmuC9VB0MP1zgwcjvrY2aZGnuUivQrTjEORsn Lf1smeZt8Py8oUtZKn1gS1vFlUQ1qHN6Nn7wODSRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ8W2nr1UzIaec/YzQOMYwuo+ug8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhODg1YjI4LTliYjctNGJlNS1hOTQ1LWY5MDA0ODA0NjQ1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3LAwDQYJKoZIhvcNAQELBQADggEBAA0ULGzxbMPrAq3Y1ilihNMuQTOq BfNXb7lJZMJpp5lURrRnCI37dMtDMH1Phas+kOgEJx152IBnkCUC6PL/YyrevwKz Nts9bLqmymOg/9jQd7X3xf1N5qrrjx1Jgjsw/JyNPEez9O3vs7TVgSmv3a0hzPfb 8cI9CWbu7SGTDK+oJOQ9dflVTkSEL+aAE33is5sNOrv9v1lltqVZhIsbm3tYGJ7H zFAAGTF+2DE/dRKpkzNCCe/Xbjk3DStRI4EhQFNHXxLENYbkSiBxkSKxXHynj0+D VhdxHUmyzQR7d+FeCrOKl9NOoYDv+Nk433H6S6M38wggLQ61eXb1zQAND9c= -----END CERTIFICATE-----Generated at Tue May 12 22:01:25 2026 by rpki-client