$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/892ae50d-c045-4187-ab27-2692064604e7.roa File: 892ae50d-c045-4187-ab27-2692064604e7.roa (raw, json) Hash identifier: 85VKD31WjGeaVPi8mAuw0ymIELGwVgQIj+6DbwpYQdo= Subject key identifier: 54:E2:47:F4:E5:A4:42:78:03:D4:7A:A1:DA:2B:CC:31:99:F5:5E:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D16A2C5FE51AB43F0A26E15C4ED44E19FF62D4D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/892ae50d-c045-4187-ab27-2692064604e7.roa Signing time: Tue 05 May 2026 01:11:33 +0000 ROA not before: Tue 05 May 2026 01:11:33 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.177.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:16:a2:c5:fe:51:ab:43:f0:a2:6e:15:c4:ed:44:e1:9f:f6:2d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 5 01:11:33 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=4f60f0349b75dbacd8c852cb13a06d61445f5dff9ee6450e9e50be62e3a29146, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:1e:f3:ae:51:08:a7:e6:5a:12:fd:de:30: 54:e9:bc:6a:11:7b:5a:db:69:0d:2b:21:79:79:0c: 06:24:f3:4e:df:c2:55:c9:b5:52:1b:1c:da:b8:d0: 03:40:df:2c:12:12:13:cf:8b:e9:9a:bb:32:0f:ee: 79:60:af:b2:62:69:af:2c:ed:c9:a5:94:e8:a7:b2: 21:af:9b:96:ab:90:b7:3d:b7:36:b9:93:37:f4:0f: c8:e3:9a:fc:33:80:be:21:95:59:ed:68:ae:50:67: 30:1a:47:fd:fe:55:00:87:a9:b3:37:77:f5:c4:8e: af:6e:d1:d2:04:9d:3a:ed:23:8f:05:57:64:88:07: 5b:70:e1:69:c3:4a:3b:5f:cd:b4:18:3b:55:b6:e5: d7:33:cd:1b:8f:d8:35:9f:45:7f:cc:70:70:24:a4: 7b:e5:52:29:f5:34:37:3f:a9:bf:94:8f:6c:ec:7b: 91:01:09:51:bd:d6:ec:28:7f:77:97:cc:ba:85:71: 2c:e1:fe:48:5f:fc:80:ef:a2:e8:0d:d2:17:85:a6: 36:7a:2a:82:a9:3a:32:5e:e6:b4:03:6e:49:05:53: 7a:68:80:28:ac:3d:84:cb:08:42:d8:ab:5b:1b:8b: 88:5d:55:d3:7e:fe:91:a7:84:5a:77:45:92:73:e4: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E2:47:F4:E5:A4:42:78:03:D4:7A:A1:DA:2B:CC:31:99:F5:5E:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/892ae50d-c045-4187-ab27-2692064604e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.0.0/21 Signature Algorithm: sha256WithRSAEncryption 37:bc:8c:e0:c7:a7:4e:60:4e:92:c7:fd:d7:24:31:54:78:f1: 3d:85:61:91:37:f8:72:37:89:07:01:a4:dc:09:cf:36:22:0e: 1b:a4:5a:92:9c:86:2d:10:00:e4:bf:cd:fe:86:cc:80:86:50: 01:3e:1e:87:92:3c:fc:9d:dc:00:43:24:50:d9:43:61:69:f7: 02:7e:d8:a9:4f:08:52:f7:7f:38:e2:cf:38:7f:26:8a:83:8a: e2:92:31:16:2d:a0:74:f8:5c:be:08:86:bb:bc:a5:35:fe:b9: 12:60:27:52:2a:9b:ec:e8:a4:4b:fb:4b:b0:6d:0b:74:bd:b3: 15:27:3e:08:20:82:34:f8:18:31:4f:42:14:e6:7a:8a:c8:5c: 23:25:3b:75:1f:a7:73:22:af:1c:01:7a:f2:61:aa:d6:c8:00: c4:54:5a:42:84:75:10:21:42:b2:aa:23:af:86:ec:7e:6b:35: 67:1e:ee:35:0e:f6:3b:8b:e7:4a:48:7b:f4:ec:6a:3d:63:5a: e0:bf:74:67:e6:8f:4f:de:8c:ef:ab:e4:8b:4b:41:6d:f2:e0: 6a:1f:96:7d:0e:9d:2d:7f:de:b9:31:f9:ad:a7:d4:98:15:12: 72:4e:10:f8:5f:c8:cc:2b:f1:63:7a:76:03:f2:6c:1a:aa:59: c5:2a:13:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTRaixf5Rq0Pwom4VxO1E4Z/2LU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA1MDExMTMzWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjYwZjAzNDliNzVkYmFjZDhjODUyY2IxM2EwNmQ2MTQ0 NWY1ZGZmOWVlNjQ1MGU5ZTUwYmU2MmUzYTI5MTQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIth7zrlEIp+ZaEv3eMFTpvGoRe1rbaQ0rIXl5DAYk807f wlXJtVIbHNq40ANA3ywSEhPPi+mauzIP7nlgr7Jiaa8s7cmllOinsiGvm5arkLc9 tza5kzf0D8jjmvwzgL4hlVntaK5QZzAaR/3+VQCHqbM3d/XEjq9u0dIEnTrtI48F V2SIB1tw4WnDSjtfzbQYO1W25dczzRuP2DWfRX/McHAkpHvlUin1NDc/qb+Uj2zs e5EBCVG91uwof3eXzLqFcSzh/khf/IDvougN0heFpjZ6KoKpOjJe5rQDbkkFU3po gCisPYTLCELYq1sbi4hdVdN+/pGnhFp3RZJz5ColAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVOJH9OWkQngD1Hqh2ivMMZn1XuAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5MmFlNTBkLWMwNDUtNDE4Ny1hYjI3LTI2OTIwNjQ2MDRlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPsQAwDQYJKoZIhvcNAQELBQADggEBADe8jODHp05gTpLH/dckMVR48T2F YZE3+HI3iQcBpNwJzzYiDhukWpKchi0QAOS/zf6GzICGUAE+HoeSPPyd3ABDJFDZ Q2Fp9wJ+2KlPCFL3fzjizzh/JoqDiuKSMRYtoHT4XL4Ihru8pTX+uRJgJ1Iqm+zo pEv7S7BtC3S9sxUnPggggjT4GDFPQhTmeorIXCMlO3Ufp3MirxwBevJhqtbIAMRU WkKEdRAhQrKqI6+G7H5rNWce7jUO9juL50pIe/Tsaj1jWuC/dGfmj0/ejO+r5ItL QW3y4Gofln0OnS1/3rkx+a2n1JgVEnJOEPhfyMwr8WN6dgPybBqqWcUqE+E= -----END CERTIFICATE-----Generated at Tue May 12 22:00:52 2026 by rpki-client