$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870d5594-4ea8-4dfd-8f6a-739ef953a13c.roa File: 870d5594-4ea8-4dfd-8f6a-739ef953a13c.roa (raw, json) Hash identifier: M220JyfAq3/htnLQBiPrgGfQEInOJw48JYJgpg54KGU= Subject key identifier: B8:32:D1:E9:40:E5:8F:C9:AF:CE:6A:24:AA:55:35:6B:25:48:1B:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1491BC0935252A8349D26B16FC91FD262198AFAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870d5594-4ea8-4dfd-8f6a-739ef953a13c.roa Signing time: Mon 11 May 2026 00:50:40 +0000 ROA not before: Mon 11 May 2026 00:50:40 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:91:bc:09:35:25:2a:83:49:d2:6b:16:fc:91:fd:26:21:98:af:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 11 00:50:40 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=5b75e07d4b99e7c8409454a5432bc62a89ebe074f2e2efc18de0566824ebcccd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:06:95:e7:a1:98:ed:80:82:b8:d6:2e:45: 0a:8c:5f:85:e0:df:77:e8:ba:ab:52:ee:44:73:dc: 9a:be:62:4c:89:1f:de:80:0c:f4:78:a9:21:10:bf: fb:3c:34:5f:94:ad:b9:7a:3c:27:8c:aa:e9:ac:3e: 2b:4c:f0:c9:a6:1f:9e:6b:81:e4:1c:ef:09:4d:60: 85:ac:f0:b6:8c:41:09:18:6d:1f:35:7f:29:f9:bc: 55:35:25:cf:02:d0:97:f2:c7:a8:51:27:50:78:c8: 2a:a0:56:ff:96:20:38:5e:81:06:2f:22:ec:3f:38: 26:a6:41:34:9f:08:ab:5b:ac:09:b4:5c:1f:4a:c2: b6:a3:16:ef:3b:f0:5e:b0:7b:23:f2:0b:57:7a:40: 05:9d:4d:43:9f:ca:27:3a:87:8e:54:b2:59:83:c7: 86:0b:39:a3:47:85:05:ba:29:60:78:6b:75:16:4f: be:91:7b:b7:8f:48:ae:0d:79:64:98:55:e5:5e:9b: 1e:8b:e2:db:7b:e2:ae:39:2d:fa:b9:50:09:63:19: 25:ca:01:aa:62:a6:05:f3:b1:43:f5:e8:0d:e1:c4: f3:fc:87:98:7e:a7:49:2c:58:7f:5b:d7:a2:51:f6: 18:36:c6:f4:98:5d:54:20:ff:83:d8:fd:2b:17:9f: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:32:D1:E9:40:E5:8F:C9:AF:CE:6A:24:AA:55:35:6B:25:48:1B:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870d5594-4ea8-4dfd-8f6a-739ef953a13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.111.0/24 Signature Algorithm: sha256WithRSAEncryption 28:c4:d2:cc:ca:1d:48:ed:c3:aa:6c:a6:b4:3c:d2:aa:29:9d: 4f:13:3e:bd:44:dd:05:3e:5d:f9:a4:0e:03:85:d4:77:80:a2: 74:3f:c0:d9:c6:14:6d:e8:5c:03:79:5b:8e:1a:98:64:25:ba: f1:b8:30:26:be:82:40:bb:f0:8f:10:71:fb:b6:a8:29:b8:36: 03:4d:23:1a:09:21:eb:9f:83:3a:37:ff:23:4e:05:0e:ca:63: d9:2d:f8:ae:61:4f:07:ab:28:4c:ca:4b:ec:1c:a4:2e:69:22: 9b:b6:2a:3f:4b:9b:88:d3:98:99:38:b6:c9:83:57:e7:f9:5a: c6:13:64:b5:30:06:c3:0c:6c:34:51:4a:09:d1:78:bb:33:df: b2:94:2f:98:a8:bb:38:44:9c:76:ab:91:47:03:70:4b:1d:ed: 3a:f8:fc:6b:4b:15:dd:a0:8a:6a:8d:72:e4:8b:4a:b4:a2:ab: 04:f4:0b:f5:17:01:7b:fc:63:4d:a8:e0:2b:86:4c:b1:c3:67: e7:52:10:bc:c2:36:13:de:09:8e:61:fc:23:61:6c:5e:40:38: 2b:55:5b:ea:76:65:f0:b2:4e:d0:95:7f:a8:f4:4f:ef:22:a0: 1a:3f:36:93:6d:39:86:b7:0f:73:e7:24:fa:0b:a2:76:a6:7d: 0d:dc:6c:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFJG8CTUlKoNJ0msW/JH9JiGYr60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDA1MDQwWhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yjc1ZTA3ZDRiOTllN2M4NDA5NDU0YTU0MzJiYzYyYTg5 ZWJlMDc0ZjJlMmVmYzE4ZGUwNTY2ODI0ZWJjY2NkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxAgaV56GY7YCCuNYuRQqMX4Xg33fouqtS7kRz3Jq+YkyJ H96ADPR4qSEQv/s8NF+Urbl6PCeMqumsPitM8MmmH55rgeQc7wlNYIWs8LaMQQkY bR81fyn5vFU1Jc8C0Jfyx6hRJ1B4yCqgVv+WIDhegQYvIuw/OCamQTSfCKtbrAm0 XB9KwrajFu878F6weyPyC1d6QAWdTUOfyic6h45UslmDx4YLOaNHhQW6KWB4a3UW T76Re7ePSK4NeWSYVeVemx6L4tt74q45Lfq5UAljGSXKAapipgXzsUP16A3hxPP8 h5h+p0ksWH9b16JR9hg2xvSYXVQg/4PY/SsXn4R5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuDLR6UDlj8mvzmokqlU1ayVIG2cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3MGQ1NTk0LTRlYTgtNGRmZC04ZjZhLTczOWVmOTUzYTEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnm8wDQYJKoZIhvcNAQELBQADggEBACjE0szKHUjtw6psprQ80qopnU8T Pr1E3QU+XfmkDgOF1HeAonQ/wNnGFG3oXAN5W44amGQluvG4MCa+gkC78I8Qcfu2 qCm4NgNNIxoJIeufgzo3/yNOBQ7KY9kt+K5hTwerKEzKS+wcpC5pIpu2Kj9Lm4jT mJk4tsmDV+f5WsYTZLUwBsMMbDRRSgnReLsz37KUL5iouzhEnHarkUcDcEsd7Tr4 /GtLFd2gimqNcuSLSrSiqwT0C/UXAXv8Y02o4CuGTLHDZ+dSELzCNhPeCY5h/CNh bF5AOCtVW+p2ZfCyTtCVf6j0T+8ioBo/NpNtOYa3D3PnJPoLonamfQ3cbGk= -----END CERTIFICATE-----Generated at Tue May 12 22:26:45 2026 by rpki-client