$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95082d38-fbd3-4ec1-be01-efba8f21d944.roa File: 95082d38-fbd3-4ec1-be01-efba8f21d944.roa (raw, json) Hash identifier: RDgul7Zm7A/i82mxeQsMK7FCAcco32Y/6rXTsmFO51M= Subject key identifier: CE:8B:37:BA:4B:F5:59:67:42:43:74:22:2E:C8:AC:30:7C:6C:1B:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08E7488D888BB553315FE8E707F7BE34C39BA505 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95082d38-fbd3-4ec1-be01-efba8f21d944.roa Signing time: Mon 11 May 2026 01:21:49 +0000 ROA not before: Mon 11 May 2026 01:21:49 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e7:48:8d:88:8b:b5:53:31:5f:e8:e7:07:f7:be:34:c3:9b:a5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 11 01:21:49 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=9cee65af4adaadae9dd6b3e6a14eabed13f6432fe14200f0005ae6513ba03b44, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:76:45:e6:44:a7:bf:aa:f9:66:57:10:55:05: b8:50:ca:44:bc:93:58:88:00:c3:4c:0c:25:da:ed: bf:3f:c5:6c:9d:ca:24:16:c8:91:78:0b:80:5f:2b: 36:ff:a8:18:58:13:ea:71:e9:a2:d1:6e:a4:cb:91: 11:9c:39:76:44:10:f8:83:19:c0:57:ed:80:89:a4: c8:ef:f2:9a:62:ec:84:d4:50:5b:55:5c:1a:97:4f: cd:04:2f:e0:06:d4:c9:59:e8:87:88:7d:a9:17:63: ca:76:df:f2:c5:d4:4b:36:5f:84:27:2b:5c:ba:e6: d6:9b:53:92:21:7c:ed:55:03:da:d7:85:37:0a:75: 10:95:13:35:81:f5:ef:b2:03:a1:24:46:78:1e:6e: 60:3f:dd:aa:94:66:ba:9d:f3:6f:2f:26:19:0e:de: 6e:55:ce:52:29:2b:6b:8e:e3:82:94:89:42:cf:f5: 30:14:58:95:04:d0:62:7b:13:52:80:2c:80:a9:dc: 42:c3:db:37:4a:63:9b:03:b0:fd:51:7a:de:1b:a9: 2e:a1:18:ac:0e:e8:ba:58:26:96:2f:23:77:fc:c2: d7:d4:cc:07:f9:f8:82:3f:49:b5:2e:f1:92:8c:35: 57:f9:6f:3d:9c:00:4b:d5:8f:9c:bb:00:19:b5:a0: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8B:37:BA:4B:F5:59:67:42:43:74:22:2E:C8:AC:30:7C:6C:1B:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95082d38-fbd3-4ec1-be01-efba8f21d944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.214.0/24 Signature Algorithm: sha256WithRSAEncryption 17:46:8b:80:93:1b:28:03:3e:7a:e0:49:df:06:1c:11:3f:e0: f2:c1:2e:4e:b9:d9:16:47:f2:a5:ba:40:4c:64:f8:65:33:30: d1:29:fe:6f:23:b4:94:84:0d:37:34:28:6e:a2:8a:c5:f8:fa: 9a:96:b6:a2:b1:fe:62:c5:bd:05:48:60:62:82:24:86:03:1e: 2b:54:b4:87:72:30:d1:40:dc:c7:68:7d:59:3f:31:d1:b0:f4: 63:2e:ab:75:6c:2a:fc:82:2e:8a:1e:a1:b8:70:29:51:17:5b: 18:24:52:dc:9b:92:f7:79:29:b3:7e:be:03:cb:58:04:01:1c: 15:aa:88:c0:56:5d:a8:d1:ec:c9:96:85:a9:91:b1:36:22:e5: f8:15:03:97:3e:0a:58:26:77:f2:b5:53:95:46:b0:d2:a9:a7: d3:b5:83:53:df:02:85:00:d7:ee:83:61:1a:cf:95:4c:85:df: a6:ba:78:9c:3b:24:f3:34:41:d6:04:45:2e:99:72:61:84:73: 29:4c:c4:f3:a7:17:7d:5c:3b:44:0e:88:d9:90:11:94:b2:95: 5e:bb:13:14:37:9a:27:c8:96:2b:d1:a6:86:8a:3c:44:58:76: a1:59:65:24:6e:d7:b5:ec:ec:a0:d0:b7:ba:df:e2:1a:88:e7: bd:96:55:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCOdIjYiLtVMxX+jnB/e+NMObpQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDEyMTQ5WhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2VlNjVhZjRhZGFhZGFlOWRkNmIzZTZhMTRlYWJlZDEz ZjY0MzJmZTE0MjAwZjAwMDVhZTY1MTNiYTAzYjQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzdkXmRKe/qvlmVxBVBbhQykS8k1iIAMNMDCXa7b8/xWyd yiQWyJF4C4BfKzb/qBhYE+px6aLRbqTLkRGcOXZEEPiDGcBX7YCJpMjv8ppi7ITU UFtVXBqXT80EL+AG1MlZ6IeIfakXY8p23/LF1Es2X4QnK1y65tabU5IhfO1VA9rX hTcKdRCVEzWB9e+yA6EkRngebmA/3aqUZrqd828vJhkO3m5VzlIpK2uO44KUiULP 9TAUWJUE0GJ7E1KALICp3ELD2zdKY5sDsP1Ret4bqS6hGKwO6LpYJpYvI3f8wtfU zAf5+II/SbUu8ZKMNVf5bz2cAEvVj5y7ABm1oM9ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzos3ukv1WWdCQ3QiLsisMHxsG6wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1MDgyZDM4LWZiZDMtNGVjMS1iZTAxLWVmYmE4ZjIxZDk0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPntYwDQYJKoZIhvcNAQELBQADggEBABdGi4CTGygDPnrgSd8GHBE/4PLB Lk652RZH8qW6QExk+GUzMNEp/m8jtJSEDTc0KG6iisX4+pqWtqKx/mLFvQVIYGKC JIYDHitUtIdyMNFA3MdofVk/MdGw9GMuq3VsKvyCLooeobhwKVEXWxgkUtybkvd5 KbN+vgPLWAQBHBWqiMBWXajR7MmWhamRsTYi5fgVA5c+Clgmd/K1U5VGsNKpp9O1 g1PfAoUA1+6DYRrPlUyF36a6eJw7JPM0QdYERS6ZcmGEcylMxPOnF31cO0QOiNmQ EZSylV67ExQ3mifIlivRpoaKPERYdqFZZSRu17Xs7KDQt7rf4hqI572WVVo= -----END CERTIFICATE-----Generated at Tue May 12 22:38:30 2026 by rpki-client