$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f07aaa7-8942-4579-a485-c14de17e54cd.roa File: 1f07aaa7-8942-4579-a485-c14de17e54cd.roa (raw, json) Hash identifier: 9TITeEk3o59w9Zco/7jYdKgIY+xq6Xv6r1l677WUmUg= Subject key identifier: 9B:D1:F6:B6:28:E3:52:9D:F8:F8:82:31:04:53:0C:A3:F1:66:59:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D0B9F9694F82A58E1F02468A5F373E30E65EB26 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f07aaa7-8942-4579-a485-c14de17e54cd.roa Signing time: Thu 30 Jul 2026 00:51:22 +0000 ROA not before: Thu 30 Jul 2026 00:51:22 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0b:9f:96:94:f8:2a:58:e1:f0:24:68:a5:f3:73:e3:0e:65:eb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 30 00:51:22 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=2c041a241e893e981138d87546c787d0fa9b885dd3b010120dd779545140810a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:e0:b9:fa:5e:cc:e8:a4:da:fc:7e:78:8c: cf:30:6e:01:69:c0:76:eb:82:69:74:72:bd:51:e8: 93:5b:16:62:c7:63:f4:14:06:3e:7c:b4:92:e2:ef: 53:7a:39:07:24:9c:d0:da:8f:32:ed:fc:60:7a:dc: bf:a3:66:8f:ad:0f:8e:18:cd:ff:5b:b5:a9:5e:76: 53:78:40:21:e8:13:51:0c:69:53:45:dd:bb:51:1b: 56:6f:f8:c0:26:3e:79:66:8e:23:ee:a5:4a:bd:3a: c5:21:d0:cd:24:ff:f3:2e:41:10:95:54:a0:09:01: 10:2c:42:d7:e0:ad:7e:d9:ff:f4:64:69:5b:02:f3: 00:13:bc:02:dd:17:3a:68:56:b6:e9:d4:71:dc:21: bf:e2:5a:26:97:69:1a:0b:ed:00:e8:28:71:9a:2b: 12:00:50:e6:e4:a1:7a:b7:71:04:3f:da:79:40:1d: 36:da:a2:a5:b4:20:60:0c:a0:07:bf:eb:21:67:ac: 05:4d:58:18:2c:61:d6:5a:0c:27:9d:08:16:df:a8: be:3d:e4:11:53:9a:bb:27:83:76:0f:3a:95:50:c7: 7d:25:8f:c3:b8:64:eb:56:f3:52:6e:9b:2a:e4:29: a9:0e:06:f4:de:45:62:7a:6b:fb:c4:7d:91:65:41: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:F6:B6:28:E3:52:9D:F8:F8:82:31:04:53:0C:A3:F1:66:59:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f07aaa7-8942-4579-a485-c14de17e54cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.189.0/24 Signature Algorithm: sha256WithRSAEncryption 55:09:80:96:8f:21:f1:f7:71:09:6a:b7:e6:e2:e8:70:cc:eb: 92:b3:bb:22:19:ce:73:40:e1:54:7e:99:ff:5d:e8:aa:57:90: c1:8e:75:f2:08:e8:39:80:58:5a:2a:33:6b:53:92:e2:c8:06: 69:43:2d:0f:92:54:63:ab:ec:32:37:ed:d3:d2:04:29:ee:81: 9f:bf:89:21:46:96:42:4e:6a:e4:b8:9a:ae:82:18:a0:f5:e4: 97:97:45:cf:42:a8:88:f1:12:56:90:a4:62:2f:15:44:b0:97: 98:d7:55:32:d5:a4:5d:df:cc:33:cd:23:36:33:bb:cc:c8:65: 0e:cb:45:9b:73:0b:6c:39:43:87:c8:19:23:5c:c3:a4:55:e9: ce:ae:71:81:40:63:1b:86:9a:95:74:6a:2c:42:34:d9:29:5f: 44:8e:f3:59:06:08:e1:21:a6:71:8d:d3:37:62:94:8b:cc:13: 6a:b2:53:1b:0a:c5:f4:4a:40:b1:3a:20:d5:c8:b0:29:8d:31: bf:3a:5e:f4:d9:1e:94:11:a3:81:60:59:79:f3:be:1f:86:43: 57:0a:9a:b7:a1:2b:71:9e:e7:4c:9a:a6:7f:ca:07:19:15:09: 33:5c:10:e1:c1:9f:b2:44:48:27:9d:bd:13:48:b7:a6:b7:dd: 3c:e5:42:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQuflpT4Kljh8CRopfNz4w5l6yYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzMwMDA1MTIyWhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzA0MWEyNDFlODkzZTk4MTEzOGQ4NzU0NmM3ODdkMGZh OWI4ODVkZDNiMDEwMTIwZGQ3Nzk1NDUxNDA4MTBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+/eC5+l7M6KTa/H54jM8wbgFpwHbrgml0cr1R6JNbFmLH Y/QUBj58tJLi71N6OQcknNDajzLt/GB63L+jZo+tD44Yzf9btaledlN4QCHoE1EM aVNF3btRG1Zv+MAmPnlmjiPupUq9OsUh0M0k//MuQRCVVKAJARAsQtfgrX7Z//Rk aVsC8wATvALdFzpoVrbp1HHcIb/iWiaXaRoL7QDoKHGaKxIAUObkoXq3cQQ/2nlA HTbaoqW0IGAMoAe/6yFnrAVNWBgsYdZaDCedCBbfqL495BFTmrsng3YPOpVQx30l j8O4ZOtW81JumyrkKakOBvTeRWJ6a/vEfZFlQXS9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm9H2tijjUp34+IIxBFMMo/FmWbQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmMDdhYWE3LTg5NDItNDU3OS1hNDg1LWMxNGRlMTdlNTRjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnr0wDQYJKoZIhvcNAQELBQADggEBAFUJgJaPIfH3cQlqt+bi6HDM65Kz uyIZznNA4VR+mf9d6KpXkMGOdfII6DmAWFoqM2tTkuLIBmlDLQ+SVGOr7DI37dPS BCnugZ+/iSFGlkJOauS4mq6CGKD15JeXRc9CqIjxElaQpGIvFUSwl5jXVTLVpF3f zDPNIzYzu8zIZQ7LRZtzC2w5Q4fIGSNcw6RV6c6ucYFAYxuGmpV0aixCNNkpX0SO 81kGCOEhpnGN0zdilIvME2qyUxsKxfRKQLE6INXIsCmNMb86XvTZHpQRo4FgWXnz vh+GQ1cKmrehK3Ge50yapn/KBxkVCTNcEOHBn7JESCedvRNIt6a33TzlQuk= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:23 2026 by rpki-client