$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0659de0f-1c21-473e-9c33-b34da5f20385.roa File: 0659de0f-1c21-473e-9c33-b34da5f20385.roa (raw, json) Hash identifier: C6yP0/C2q6dHQknyXzauQNQ/aodObp7UIvk1KWhPux0= Subject key identifier: F7:8C:FA:06:D9:AF:71:F6:D4:1D:6B:B2:BD:B3:9C:2A:FF:74:06:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49A45A04CD81121264B643605A20D7234D64625C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0659de0f-1c21-473e-9c33-b34da5f20385.roa Signing time: Sun 02 Aug 2026 00:50:08 +0000 ROA not before: Sun 02 Aug 2026 00:50:08 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a4:5a:04:cd:81:12:12:64:b6:43:60:5a:20:d7:23:4d:64:62:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 2 00:50:08 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=cd6dfabb1e65331bfca599ccf5f15ec0ce5abc518f1c788f54fce8c6d1a0f131, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:db:f1:e2:6b:78:f2:16:58:1a:1c:07:78: 5c:6e:da:c3:7e:50:f5:e8:5f:9a:5a:fe:23:8f:57: 3b:5f:8d:d0:d4:06:bb:ed:a9:13:ba:33:4a:c0:f4: c5:2d:f4:c2:d1:8d:b2:a8:30:f7:11:5d:a0:4c:09: e5:81:1e:5d:3a:df:48:18:01:86:66:f3:1c:d7:d5: d2:4c:2a:3d:dd:23:25:de:86:3d:e0:38:6d:21:17: fa:dc:b0:f7:58:5c:a4:84:0e:4e:f2:b4:3c:86:26: e3:76:6d:30:42:24:ad:01:de:23:5b:57:db:62:9b: f5:87:69:15:ce:96:e9:9b:43:21:f1:b9:7e:d3:53: c4:04:4c:4c:cf:07:13:73:ea:38:3d:ed:b2:f3:aa: a4:bf:47:89:45:2a:8b:84:4b:8c:dd:45:cf:83:d2: 11:b0:fa:16:db:bc:fb:3a:62:bf:a2:e8:5d:e9:bd: a2:c3:f9:de:05:e7:61:38:01:ee:5c:8f:b4:ed:2b: e3:bb:ec:bb:df:1e:0d:7c:bd:17:fa:89:0c:e3:42: 8d:15:c0:94:c7:b5:d4:48:0e:cb:34:a3:44:0b:a9: b4:18:09:82:91:39:50:90:20:01:6e:fe:02:e2:bd: 1e:eb:2b:7f:f8:3c:39:ec:34:9f:fb:c1:c6:e5:4a: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8C:FA:06:D9:AF:71:F6:D4:1D:6B:B2:BD:B3:9C:2A:FF:74:06:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0659de0f-1c21-473e-9c33-b34da5f20385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.76.0/24 Signature Algorithm: sha256WithRSAEncryption 93:40:4c:85:68:c0:04:31:67:88:66:56:ff:57:b6:39:57:6b: 8f:fd:5a:7b:be:0b:95:9f:bd:38:12:16:59:2d:1e:6a:35:52: ff:7e:95:f4:0c:9e:fa:94:33:d7:92:bc:b0:82:73:85:38:22: fe:81:4b:a8:3b:cc:d3:28:9d:55:0e:73:a5:fc:5e:f3:34:0b: 60:82:7a:03:e5:a6:57:bf:48:57:2b:4c:d3:32:d4:55:c6:ae: 70:3d:dd:f1:0f:87:a8:00:2c:78:97:a5:f1:ca:bf:da:9b:59: e4:fd:c4:ef:85:3a:12:d3:19:b6:7f:46:45:14:84:6d:eb:1c: fb:b9:b6:30:ce:cf:6d:7a:02:4f:fc:fd:7a:f0:2d:7f:b7:dc: e2:61:d0:09:fa:c5:52:f9:d0:ea:7d:c5:f9:6b:11:46:08:ad: f7:fe:5f:e0:a2:2f:69:38:2a:6c:86:46:64:97:9a:98:d2:2e: 82:86:f6:70:18:e2:f7:07:e0:26:57:85:3f:f4:db:62:b8:ad: 08:0c:3c:77:4d:3f:c7:d5:da:39:40:cd:cb:d5:bf:75:24:a6: e1:cd:dc:9e:eb:d3:1a:8e:de:16:3d:3f:e4:65:4f:cd:4f:7f: 45:03:1e:4b:b2:d8:80:54:2b:1e:78:76:7f:c6:9b:81:c8:92: 70:03:b4:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSaRaBM2BEhJktkNgWiDXI01kYlwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDA1MDA4WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDZkZmFiYjFlNjUzMzFiZmNhNTk5Y2NmNWYxNWVjMGNl NWFiYzUxOGYxYzc4OGY1NGZjZThjNmQxYTBmMTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9Mdvx4mt48hZYGhwHeFxu2sN+UPXoX5pa/iOPVztfjdDU BrvtqRO6M0rA9MUt9MLRjbKoMPcRXaBMCeWBHl0630gYAYZm8xzX1dJMKj3dIyXe hj3gOG0hF/rcsPdYXKSEDk7ytDyGJuN2bTBCJK0B3iNbV9tim/WHaRXOlumbQyHx uX7TU8QETEzPBxNz6jg97bLzqqS/R4lFKouES4zdRc+D0hGw+hbbvPs6Yr+i6F3p vaLD+d4F52E4Ae5cj7TtK+O77LvfHg18vRf6iQzjQo0VwJTHtdRIDss0o0QLqbQY CYKROVCQIAFu/gLivR7rK3/4PDnsNJ/7wcblSvNjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU94z6BtmvcfbUHWuyvbOcKv90Bh0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2NTlkZTBmLTFjMjEtNDczZS05YzMzLWIzNGRhNWYyMDM4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnkwwDQYJKoZIhvcNAQELBQADggEBAJNATIVowAQxZ4hmVv9XtjlXa4/9 Wnu+C5WfvTgSFlktHmo1Uv9+lfQMnvqUM9eSvLCCc4U4Iv6BS6g7zNMonVUOc6X8 XvM0C2CCegPlple/SFcrTNMy1FXGrnA93fEPh6gALHiXpfHKv9qbWeT9xO+FOhLT GbZ/RkUUhG3rHPu5tjDOz216Ak/8/XrwLX+33OJh0An6xVL50Op9xflrEUYIrff+ X+CiL2k4KmyGRmSXmpjSLoKG9nAY4vcH4CZXhT/022K4rQgMPHdNP8fV2jlAzcvV v3UkpuHN3J7r0xqO3hY9P+RlT81Pf0UDHkuy2IBUKx54dn/Gm4HIknADtFM= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:32 2026 by rpki-client