$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9738c491-d8f7-4dea-a00a-51cf82ed4340.roa File: 9738c491-d8f7-4dea-a00a-51cf82ed4340.roa (raw, json) Hash identifier: rkuiJtjrBPLl7JMoFwf3kDh2EcyXUYBj+a4/HX3a13o= Subject key identifier: F0:82:9D:93:9F:DA:22:D3:E1:85:5E:37:FF:6A:71:B3:8B:12:A2:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EF5A3CE722657A8D6023D90040BFE2767501231 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9738c491-d8f7-4dea-a00a-51cf82ed4340.roa Signing time: Mon 11 May 2026 01:01:01 +0000 ROA not before: Mon 11 May 2026 01:01:01 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f5:a3:ce:72:26:57:a8:d6:02:3d:90:04:0b:fe:27:67:50:12:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 11 01:01:01 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=f2e1d4c10aaf4e10cb83b23ea5c840f2d3228538e37bf68c7babe21f8b5b3166, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:8d:fe:19:cf:1f:53:03:96:0f:07:92:a7: ad:8e:aa:6b:c6:32:3d:48:8d:16:39:5a:31:88:33: 3d:c8:45:61:31:33:bc:6a:b8:c1:8d:f1:83:13:a8: 66:d1:57:b4:a0:94:97:34:ec:98:28:c5:ff:4b:00: c3:38:fc:52:8e:a4:5b:d4:81:88:8e:7a:68:08:ed: 76:80:72:05:f3:ec:4a:8e:bd:11:a7:dc:e5:52:da: a4:d8:3b:77:76:e5:95:da:a5:42:c5:22:05:59:25: 2b:1f:d6:b5:73:8a:c8:02:cb:be:14:dc:c9:02:c4: 49:ab:22:0f:20:2e:86:3f:c4:5b:99:87:5a:5f:18: a5:3a:fd:53:17:21:a8:fa:6e:90:69:8e:cb:dd:3a: 20:4d:18:fd:37:cf:99:b2:30:fb:c6:4b:4f:4f:a4: e7:73:94:b0:9f:79:c2:51:aa:07:5a:09:c5:a9:5c: 1d:67:3e:99:ee:22:83:9b:45:b0:af:63:24:29:2a: 4d:55:e6:59:63:33:ad:b5:25:61:16:e7:c2:60:46: 2e:1d:a3:e6:7a:03:7f:34:ce:a2:cb:34:1c:2c:cf: da:c6:3e:79:12:96:fb:de:f7:66:a0:40:8d:85:b9: 03:b3:06:43:5b:43:51:74:ca:d6:8e:91:66:16:0d: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:9D:93:9F:DA:22:D3:E1:85:5E:37:FF:6A:71:B3:8B:12:A2:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9738c491-d8f7-4dea-a00a-51cf82ed4340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.162.0/24 Signature Algorithm: sha256WithRSAEncryption 64:6e:c6:2a:20:28:ea:83:e3:24:e2:46:53:84:71:8f:7b:2b: 11:3f:a0:a3:7a:aa:14:bf:43:54:22:c9:cd:ec:bc:69:4d:91: 8a:a1:8f:b1:97:94:3b:66:d7:79:87:eb:3f:11:b4:8c:79:6b: 6c:ef:72:99:20:e3:00:fe:8c:44:34:a0:3d:45:ab:0b:b2:5a: 1f:c6:e5:f5:59:2c:4b:c8:41:4c:31:f2:c9:a3:45:3c:1c:93: da:40:5e:32:f9:5a:2a:10:24:0c:26:bc:9f:fe:2d:d0:27:f9: 38:40:e1:3e:29:72:9a:f2:c2:82:22:2e:89:f8:5a:e1:1a:29: 36:c3:ec:58:0c:2a:e0:43:3f:80:dd:65:d1:59:58:0a:53:e5: b0:2c:23:03:ac:92:44:88:b3:7f:b3:db:79:39:6f:63:3d:50: db:7a:f3:45:b1:9d:fb:c8:10:e0:b4:32:7d:c6:ec:15:29:00: 27:ae:07:35:68:5d:8d:5c:96:c2:3c:ae:ab:12:7c:a6:7f:dd: eb:ff:23:62:8a:33:c8:83:a3:30:dd:8f:6e:4e:ab:13:f3:d7: 2a:d2:c3:59:85:20:ce:59:f6:8b:fd:a9:24:a0:4d:65:34:50: ba:40:6f:89:67:f1:b0:35:c1:6e:83:fd:25:b8:44:1b:0c:4c: cf:d7:59:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTvWjznImV6jWAj2QBAv+J2dQEjEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDEwMTAxWhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmUxZDRjMTBhYWY0ZTEwY2I4M2IyM2VhNWM4NDBmMmQz MjI4NTM4ZTM3YmY2OGM3YmFiZTIxZjhiNWIzMTY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDo43+Gc8fUwOWDweSp62OqmvGMj1IjRY5WjGIMz3IRWEx M7xquMGN8YMTqGbRV7SglJc07Jgoxf9LAMM4/FKOpFvUgYiOemgI7XaAcgXz7EqO vRGn3OVS2qTYO3d25ZXapULFIgVZJSsf1rVzisgCy74U3MkCxEmrIg8gLoY/xFuZ h1pfGKU6/VMXIaj6bpBpjsvdOiBNGP03z5myMPvGS09PpOdzlLCfecJRqgdaCcWp XB1nPpnuIoObRbCvYyQpKk1V5lljM621JWEW58JgRi4do+Z6A380zqLLNBwsz9rG PnkSlvve92agQI2FuQOzBkNbQ1F0ytaOkWYWDcerAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8IKdk5/aItPhhV43/2pxs4sSos0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3MzhjNDkxLWQ4ZjctNGRlYS1hMDBhLTUxY2Y4MmVkNDM0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnqIwDQYJKoZIhvcNAQELBQADggEBAGRuxiogKOqD4yTiRlOEcY97KxE/ oKN6qhS/Q1Qiyc3svGlNkYqhj7GXlDtm13mH6z8RtIx5a2zvcpkg4wD+jEQ0oD1F qwuyWh/G5fVZLEvIQUwx8smjRTwck9pAXjL5WioQJAwmvJ/+LdAn+ThA4T4pcpry woIiLon4WuEaKTbD7FgMKuBDP4DdZdFZWApT5bAsIwOskkSIs3+z23k5b2M9UNt6 80WxnfvIEOC0Mn3G7BUpACeuBzVoXY1clsI8rqsSfKZ/3ev/I2KKM8iDozDdj25O qxPz1yrSw1mFIM5Z9ov9qSSgTWU0ULpAb4ln8bA1wW6D/SW4RBsMTM/XWQY= -----END CERTIFICATE-----Generated at Tue May 12 22:20:44 2026 by rpki-client