$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a2beaee-f31c-4246-9573-7f15b4bfbaca.roa File: 8a2beaee-f31c-4246-9573-7f15b4bfbaca.roa (raw, json) Hash identifier: fCzPv8pL13xougvud3bzbDFCvNIjTo5bajb908WTzes= Subject key identifier: DA:44:A1:58:60:F2:12:AE:44:42:14:B9:F8:24:EF:DB:6D:4B:51:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2509B82D38717A026AD81226705F00A541537756 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a2beaee-f31c-4246-9573-7f15b4bfbaca.roa Signing time: Mon 11 May 2026 01:10:05 +0000 ROA not before: Mon 11 May 2026 01:10:05 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:09:b8:2d:38:71:7a:02:6a:d8:12:26:70:5f:00:a5:41:53:77:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 11 01:10:05 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=3fcd053df17c5f8225a8b699c9524f56595250d89e8f1375c6d5c9c1cf8e84ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:bd:38:a6:ad:cb:07:30:be:66:dc:33:bd: 7d:d8:53:58:bc:3a:7b:85:44:ef:a7:68:31:85:1a: c0:0e:d2:e8:11:ee:9a:8b:75:e0:df:2a:7a:e9:18: d3:7d:b9:dc:ce:19:d3:96:a6:54:e2:da:e8:91:65: 96:e4:fa:88:2c:7d:0a:c8:d1:a8:2d:df:73:0b:98: 4f:2d:56:69:ba:21:9b:86:21:bd:50:28:d6:de:4f: 0d:f0:2c:3c:af:54:c4:f7:3f:2c:05:6d:a4:2e:0b: 3b:db:b7:38:aa:fd:44:b7:0c:38:0c:ee:35:91:36: aa:2c:72:02:27:80:14:9d:2d:51:37:cc:e0:bd:8c: 79:49:a8:96:c7:7c:69:16:f0:2f:dc:69:e5:5c:e5: 35:aa:80:e7:dc:bf:9a:e4:7c:83:39:4d:2c:8d:1f: b1:ca:55:f7:f9:aa:91:3d:00:9d:54:ac:e3:13:37: fc:e2:ae:45:10:25:d1:fb:16:5a:a2:1d:e8:00:35: 48:1f:aa:3c:d6:e3:f1:c5:ee:41:dc:ad:13:8b:11: 31:dd:06:70:77:61:be:49:b8:e8:2c:c2:75:5e:df: bc:80:5f:04:d9:c6:35:fa:44:27:4f:37:9c:e8:f3: 1e:0f:c8:28:0a:92:6f:2a:ec:a3:60:26:cc:65:9e: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:44:A1:58:60:F2:12:AE:44:42:14:B9:F8:24:EF:DB:6D:4B:51:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a2beaee-f31c-4246-9573-7f15b4bfbaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.228.0/24 Signature Algorithm: sha256WithRSAEncryption 54:6d:31:36:81:42:8c:cb:48:d4:19:67:15:c3:e8:c9:fc:1c: fb:48:5a:e5:42:11:59:72:7b:38:1d:95:d7:ea:0e:51:ea:a8: d2:e3:30:6a:66:29:21:c2:4c:73:f8:46:f7:b0:83:9c:85:c3: 65:5d:73:30:94:d5:85:9c:d8:db:7b:0e:2a:e7:71:79:e3:fb: aa:e7:8a:b8:28:c7:fe:dc:4c:b4:83:3d:a7:7e:51:bd:c1:8a: cf:b3:0c:c7:a1:ca:e1:a8:d5:86:40:b5:3d:4d:a7:c8:24:8f: 6a:66:2f:16:52:cb:87:90:e0:44:c5:2b:a1:30:e1:88:72:46: f7:82:1a:77:46:14:59:28:0e:d0:87:85:66:8d:b7:22:43:9b: a9:2d:1b:68:94:41:43:4a:eb:4f:04:29:6e:77:75:bc:42:a4: 35:ee:4f:44:5d:4b:08:60:99:67:97:e9:aa:93:b3:84:fe:62: 73:68:21:b8:85:76:06:8a:cc:8a:e8:0b:f0:a5:8f:2d:c8:a3: da:30:38:87:e9:d9:67:d9:7b:43:c8:4c:27:54:3a:36:57:3d: d5:2a:cd:92:3c:d8:25:b9:f4:47:b3:90:a7:d8:25:71:ab:e1: f4:a8:38:9d:ef:91:4a:0c:77:9d:1c:d2:a8:3d:3f:8b:15:ef: db:94:7f:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJQm4LThxegJq2BImcF8ApUFTd1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDExMDA1WhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmNkMDUzZGYxN2M1ZjgyMjVhOGI2OTljOTUyNGY1NjU5 NTI1MGQ4OWU4ZjEzNzVjNmQ1YzljMWNmOGU4NGVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9sb04pq3LBzC+ZtwzvX3YU1i8OnuFRO+naDGFGsAO0ugR 7pqLdeDfKnrpGNN9udzOGdOWplTi2uiRZZbk+ogsfQrI0agt33MLmE8tVmm6IZuG Ib1QKNbeTw3wLDyvVMT3PywFbaQuCzvbtziq/US3DDgM7jWRNqoscgIngBSdLVE3 zOC9jHlJqJbHfGkW8C/caeVc5TWqgOfcv5rkfIM5TSyNH7HKVff5qpE9AJ1UrOMT N/zirkUQJdH7FlqiHegANUgfqjzW4/HF7kHcrROLETHdBnB3Yb5JuOgswnVe37yA XwTZxjX6RCdPN5zo8x4PyCgKkm8q7KNgJsxlnvuFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2kShWGDyEq5EQhS5+CTv221LUVgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhMmJlYWVlLWYzMWMtNDI0Ni05NTczLTdmMTViNGJmYmFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnuQwDQYJKoZIhvcNAQELBQADggEBAFRtMTaBQozLSNQZZxXD6Mn8HPtI WuVCEVlyezgdldfqDlHqqNLjMGpmKSHCTHP4Rvewg5yFw2VdczCU1YWc2Nt7Dirn cXnj+6rnirgox/7cTLSDPad+Ub3Bis+zDMehyuGo1YZAtT1Np8gkj2pmLxZSy4eQ 4ETFK6Ew4YhyRveCGndGFFkoDtCHhWaNtyJDm6ktG2iUQUNK608EKW53dbxCpDXu T0RdSwhgmWeX6aqTs4T+YnNoIbiFdgaKzIroC/Cljy3Io9owOIfp2WfZe0PITCdU OjZXPdUqzZI82CW59EezkKfYJXGr4fSoOJ3vkUoMd50c0qg9P4sV79uUf2o= -----END CERTIFICATE-----Generated at Tue May 12 22:35:00 2026 by rpki-client