$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dfc3efa-af33-4519-bd1f-766f0553538b.roa File: 8dfc3efa-af33-4519-bd1f-766f0553538b.roa (raw, json) Hash identifier: BrmLV9vuTClDLwf1+VGlvZR+G/w461QrzHT3VRc2J9Y= Subject key identifier: 31:8F:8D:3D:94:1D:8A:AF:E0:22:F0:6C:35:77:18:7D:F2:E2:7A:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48F5EC929F41D9468A21F5828552AC5D96BCECCA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dfc3efa-af33-4519-bd1f-766f0553538b.roa Signing time: Fri 08 May 2026 01:01:39 +0000 ROA not before: Fri 08 May 2026 01:01:39 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.181.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f5:ec:92:9f:41:d9:46:8a:21:f5:82:85:52:ac:5d:96:bc:ec:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 8 01:01:39 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=8d706bf9ab7b83d2bd5392c9135b46929a71db480b1fb4dfc63733daef00de9a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:15:0c:0d:63:7b:8c:83:b3:57:76:70:5d: b7:aa:52:e4:24:f0:9b:a8:25:e1:a3:42:77:21:b2: 5d:d4:e9:5d:0d:39:8a:34:f5:dd:be:3e:1a:d6:ae: 1b:1a:cb:e4:ef:99:ca:05:89:28:f3:9d:c6:59:59: 3d:b8:c6:9f:38:38:81:7d:60:f0:a9:95:dd:d1:63: 8e:51:c1:25:2e:6a:df:e2:1b:bc:71:59:b9:ac:f1: c8:05:e9:80:90:7a:a5:76:31:5c:6a:2f:17:4b:2a: cf:8b:67:62:fc:0b:aa:e4:e1:19:f6:c6:e9:fc:a6: 9e:ba:71:f0:77:17:ea:ba:98:48:7a:02:41:0c:3e: b2:e6:4c:1a:44:4b:13:24:ee:69:c2:cd:ba:d6:d4: 8e:c7:c8:5b:55:80:88:99:01:68:86:1b:88:4b:ca: 12:b8:6f:c5:54:b1:86:29:96:cf:d5:93:23:7d:cb: c9:22:80:d9:f2:22:77:e4:40:b3:74:40:ac:86:56: 41:b6:66:b2:12:5a:44:67:d6:38:01:a6:46:35:31: 74:57:ee:ae:aa:14:5c:ca:1e:e9:07:bc:3b:1c:fa: e5:25:33:77:27:96:71:b2:a0:fe:dc:1d:07:51:1b: 49:96:e0:a2:d1:4b:d1:2a:ce:a6:b0:c9:0c:b5:62: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8F:8D:3D:94:1D:8A:AF:E0:22:F0:6C:35:77:18:7D:F2:E2:7A:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dfc3efa-af33-4519-bd1f-766f0553538b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.246.0/24 Signature Algorithm: sha256WithRSAEncryption 13:7f:29:ce:77:d2:3f:91:96:25:bb:a1:58:88:ec:b9:55:67: 4f:88:87:8d:8e:16:11:94:4e:1f:a6:4e:9c:7e:f6:e7:57:f7: d8:74:34:2f:14:9c:71:1d:b0:3f:16:21:12:c1:a9:a2:34:08: 4c:bf:50:38:24:0d:fb:f8:b8:18:ab:d6:f4:27:a3:3d:90:09: fa:e6:9b:d2:76:0c:6a:6d:80:36:0c:8f:b5:0d:7a:11:b1:b3: d4:f4:2c:ca:38:fc:c8:a3:1c:b3:a3:25:a4:2d:4a:29:64:3b: f4:d2:0a:e9:7f:49:9d:84:5b:66:4a:28:93:9f:ae:b3:72:ab: 28:6c:33:9a:5f:b2:2e:c5:68:95:11:6e:ff:b3:cb:37:ef:60: 96:86:1a:30:4b:6c:63:25:14:95:96:b5:5a:e1:92:c2:c1:bb: 52:9b:8e:f6:48:bc:29:d5:99:13:68:ce:59:ce:1e:ea:91:be: 43:8e:bf:9a:27:69:8c:0a:3b:e9:65:d1:1b:10:2f:09:ab:7a: 62:e9:60:a4:6f:97:2d:7a:b5:1f:f9:12:7a:7d:80:d3:33:d7: 62:7c:80:b7:26:b3:45:95:66:56:79:2f:6a:12:0c:8a:d4:bf: 2c:96:5f:14:a7:e1:08:45:8b:37:1c:91:41:a0:0f:5b:f1:38: ce:d8:c7:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSPXskp9B2UaKIfWChVKsXZa87MowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDEwMTM5WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDcwNmJmOWFiN2I4M2QyYmQ1MzkyYzkxMzViNDY5Mjlh NzFkYjQ4MGIxZmI0ZGZjNjM3MzNkYWVmMDBkZTlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5WBUMDWN7jIOzV3ZwXbeqUuQk8JuoJeGjQnchsl3U6V0N OYo09d2+PhrWrhsay+TvmcoFiSjzncZZWT24xp84OIF9YPCpld3RY45RwSUuat/i G7xxWbms8cgF6YCQeqV2MVxqLxdLKs+LZ2L8C6rk4Rn2xun8pp66cfB3F+q6mEh6 AkEMPrLmTBpESxMk7mnCzbrW1I7HyFtVgIiZAWiGG4hLyhK4b8VUsYYpls/VkyN9 y8kigNnyInfkQLN0QKyGVkG2ZrISWkRn1jgBpkY1MXRX7q6qFFzKHukHvDsc+uUl M3cnlnGyoP7cHQdRG0mW4KLRS9EqzqawyQy1Yuc1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMY+NPZQdiq/gIvBsNXcYffLiepcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkZmMzZWZhLWFmMzMtNDUxOS1iZDFmLTc2NmYwNTUzNTM4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPtfYwDQYJKoZIhvcNAQELBQADggEBABN/Kc530j+RliW7oViI7LlVZ0+I h42OFhGUTh+mTpx+9udX99h0NC8UnHEdsD8WIRLBqaI0CEy/UDgkDfv4uBir1vQn oz2QCfrmm9J2DGptgDYMj7UNehGxs9T0LMo4/MijHLOjJaQtSilkO/TSCul/SZ2E W2ZKKJOfrrNyqyhsM5pfsi7FaJURbv+zyzfvYJaGGjBLbGMlFJWWtVrhksLBu1Kb jvZIvCnVmRNozlnOHuqRvkOOv5onaYwKO+ll0RsQLwmremLpYKRvly16tR/5Enp9 gNMz12J8gLcms0WVZlZ5L2oSDIrUvyyWXxSn4QhFizcckUGgD1vxOM7Yx6M= -----END CERTIFICATE-----Generated at Tue May 12 22:25:06 2026 by rpki-client