$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4a44fe4-1c31-4bea-9b57-387433306083.roa File: b4a44fe4-1c31-4bea-9b57-387433306083.roa (raw, json) Hash identifier: gYMtJ2AM6P7QaocqtvMKuppSI6DZNsGeV4O1tmzoirg= Subject key identifier: 04:AE:B6:F7:28:F9:BA:B2:64:F3:2D:AE:78:83:A1:9F:55:B1:7D:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70C9E2B58493C5BC1C2FDA777B6061011C1EEB2A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4a44fe4-1c31-4bea-9b57-387433306083.roa Signing time: Fri 01 May 2026 01:10:49 +0000 ROA not before: Fri 01 May 2026 01:10:49 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.221.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c9:e2:b5:84:93:c5:bc:1c:2f:da:77:7b:60:61:01:1c:1e:eb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 1 01:10:49 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=679be46044d41ce875b4acf1756b13b4a96f54269e4e1b331eb244bd0ea94997, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:f4:0f:c3:d3:ac:d2:a0:69:ca:e2:7d:e8: a1:25:cf:f5:dc:51:3b:d4:1f:1f:c3:71:55:b1:27: 4e:35:f5:c9:44:03:48:45:5a:23:e7:63:91:33:ed: 69:1b:28:24:b3:02:05:bf:4b:76:a2:2b:02:95:35: d9:e5:7e:d7:6b:f7:5a:9d:25:39:8e:42:82:69:04: 3e:9e:bb:9f:82:bc:7e:c0:74:10:95:18:3d:85:21: f2:72:31:b5:85:73:6f:b9:44:17:27:8c:1a:41:6b: d1:7b:f2:15:c2:28:91:90:c4:c2:3f:0a:30:e4:31: 6c:88:d2:67:65:f8:23:42:e3:30:d4:c1:a2:a9:53: 2f:6d:c3:6c:5b:15:1d:a7:06:e5:fa:f7:95:de:42: 2d:fe:6c:5f:71:e2:93:80:46:83:85:44:90:37:74: 99:4b:3e:05:8f:e7:5f:ce:2a:c4:0c:32:c6:0f:96: c3:5b:7b:90:cc:45:44:f7:51:f1:62:65:4e:5d:37: 60:5c:1c:bc:01:27:a9:78:26:0b:81:fb:11:49:2a: a2:1a:ec:59:3e:ce:09:21:97:8f:1d:ce:6c:0f:40: ef:ce:78:0d:88:7d:ad:a7:1b:37:5c:80:3f:15:e8: 09:ae:c9:bd:fb:b2:b0:e6:1e:eb:f2:20:0d:03:ca: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AE:B6:F7:28:F9:BA:B2:64:F3:2D:AE:78:83:A1:9F:55:B1:7D:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4a44fe4-1c31-4bea-9b57-387433306083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0e:b2:a0:ca:69:7b:31:6d:29:72:e5:d1:94:76:1f:81:8d:60: fd:c0:cc:ac:55:b7:19:0f:42:62:bd:95:47:c3:24:7f:8d:f2: ed:b6:73:38:d8:8b:c3:54:5c:d7:cd:69:0a:93:cd:60:95:3e: 0a:e3:d9:cd:a6:32:8c:13:67:1d:c1:3a:f0:5c:0f:78:22:81: 21:ef:53:44:f6:8c:8e:c8:c5:9b:f4:e6:ed:27:56:a1:e0:9c: b5:da:a0:b3:ba:cc:40:ca:c7:60:7c:9f:3f:fc:e1:78:b7:1a: c6:c4:8e:1c:5d:f6:4b:c8:09:85:e8:d7:bd:b1:9f:03:81:ec: 5d:38:30:92:34:76:1a:fd:e5:4a:a2:e9:8f:36:47:49:f3:a7: 61:26:dd:80:f4:5b:8e:39:b1:d4:df:46:b8:54:33:36:07:59: ff:6f:7c:41:87:19:c6:6e:55:39:5f:60:1b:83:19:94:9b:5c: 46:0b:0d:14:78:c7:5c:5a:26:ce:9c:df:56:a6:e3:8f:ea:62: d1:fc:0d:be:c9:db:11:b1:49:98:53:11:ec:f7:9b:9b:6c:79: c7:ee:c3:55:31:df:a8:e2:3b:11:fa:ce:9c:c6:43:90:d4:d5: 7b:9c:d6:f5:14:8f:38:74:20:37:6e:ef:31:a2:5b:f2:2c:6f: a5:4a:66:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcMnitYSTxbwcL9p3e2BhARwe6yowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTAxMDExMDQ5WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzliZTQ2MDQ0ZDQxY2U4NzViNGFjZjE3NTZiMTNiNGE5 NmY1NDI2OWU0ZTFiMzMxZWIyNDRiZDBlYTk0OTk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC71PQPw9Os0qBpyuJ96KElz/XcUTvUHx/DcVWxJ0419clE A0hFWiPnY5Ez7WkbKCSzAgW/S3aiKwKVNdnlftdr91qdJTmOQoJpBD6eu5+CvH7A dBCVGD2FIfJyMbWFc2+5RBcnjBpBa9F78hXCKJGQxMI/CjDkMWyI0mdl+CNC4zDU waKpUy9tw2xbFR2nBuX695XeQi3+bF9x4pOARoOFRJA3dJlLPgWP51/OKsQMMsYP lsNbe5DMRUT3UfFiZU5dN2BcHLwBJ6l4JguB+xFJKqIa7Fk+zgkhl48dzmwPQO/O eA2Ifa2nGzdcgD8V6Amuyb37srDmHuvyIA0DylQ1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBK629yj5urJk8y2ueIOhn1WxfWMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0YTQ0ZmU0LTFjMzEtNGJlYS05YjU3LTM4NzQzMzMwNjA4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQP3bAwDQYJKoZIhvcNAQELBQADggEBAA6yoMppezFtKXLl0ZR2H4GNYP3A zKxVtxkPQmK9lUfDJH+N8u22czjYi8NUXNfNaQqTzWCVPgrj2c2mMowTZx3BOvBc D3gigSHvU0T2jI7IxZv05u0nVqHgnLXaoLO6zEDKx2B8nz/84Xi3GsbEjhxd9kvI CYXo172xnwOB7F04MJI0dhr95Uqi6Y82R0nzp2Em3YD0W445sdTfRrhUMzYHWf9v fEGHGcZuVTlfYBuDGZSbXEYLDRR4x1xaJs6c31am44/qYtH8Db7J2xGxSZhTEez3 m5tsecfuw1Ux36jiOxH6zpzGQ5DU1Xuc1vUUjzh0IDdu7zGiW/Isb6VKZh8= -----END CERTIFICATE-----Generated at Tue May 12 21:59:50 2026 by rpki-client