$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/802ffb08-edf8-4504-97e2-d3ba5be9b144.roa File: 802ffb08-edf8-4504-97e2-d3ba5be9b144.roa (raw, json) Hash identifier: Uxy5IclUBgU1wCzbIlWEfs4mmvcX//PMwyeWKEqGTz4= Subject key identifier: 65:2C:59:A5:D1:44:F6:41:1E:FE:9F:8A:C0:36:7D:CA:C5:51:34:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3386995210373A369FDB08B9198605EB291046BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/802ffb08-edf8-4504-97e2-d3ba5be9b144.roa Signing time: Thu 30 Jul 2026 01:00:51 +0000 ROA not before: Thu 30 Jul 2026 01:00:51 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:86:99:52:10:37:3a:36:9f:db:08:b9:19:86:05:eb:29:10:46:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 30 01:00:51 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=30dd1293a24a8438bc465479512e2349a08ab8f982d4694c2390fc63a623f725, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:ea:27:86:39:ea:b5:1f:06:57:16:25:7f: 55:92:32:44:bd:5a:76:7f:ed:0a:36:f2:b2:86:6d: bd:bd:05:ce:34:10:87:c4:ec:8b:73:8a:2c:ea:24: e8:50:f3:00:4b:3d:1f:72:51:a9:65:17:68:76:8f: 51:7b:5f:92:0c:11:87:b7:d6:b4:7d:6d:0c:d9:a1: bc:59:a6:ff:ae:67:d2:30:b2:07:59:72:55:00:88: 0b:12:af:2f:e4:c6:ba:4e:fe:87:5a:03:00:30:8e: 6d:ed:a3:aa:d2:b5:9c:15:7e:70:e4:31:92:dd:b9: 01:95:ac:f4:04:bb:a3:21:43:49:fe:8b:72:12:ed: c6:43:08:41:30:75:ae:68:53:9c:f5:fc:90:f3:8c: 1c:0f:2f:0e:e4:52:1c:d0:7c:74:95:09:fd:fd:10: ae:c3:05:07:f0:f2:a6:9b:6e:f9:bd:a8:77:bd:07: 3f:a6:52:ca:c4:b3:8a:f6:11:22:85:40:06:66:7b: 5c:d0:bd:15:af:4b:14:5f:b2:18:f7:6d:80:65:e4: 5d:99:1c:1b:90:4a:29:0f:b1:e0:e5:70:36:ce:10: a1:ce:51:e6:e6:ca:d4:7a:21:fe:9c:c0:68:04:d9: 15:66:b4:76:78:86:36:bd:0a:63:d1:4a:08:b3:a7: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:59:A5:D1:44:F6:41:1E:FE:9F:8A:C0:36:7D:CA:C5:51:34:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/802ffb08-edf8-4504-97e2-d3ba5be9b144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.159.0/24 Signature Algorithm: sha256WithRSAEncryption 89:5c:9a:f0:13:62:62:b1:7e:4a:9a:b7:b4:45:75:67:1b:8f: 07:85:d7:c0:63:7a:e6:e2:67:94:07:48:c1:d8:d3:82:b1:fe: 08:62:ed:00:5a:1f:32:95:4e:26:3a:b1:fa:e0:2e:05:52:59: f5:81:63:2b:70:41:8c:a3:42:53:80:cb:ac:8a:46:1a:8a:9c: 28:d1:ef:e8:46:3f:77:8e:31:8a:a2:8a:2a:b9:9f:21:be:3c: d2:94:ce:c1:e7:67:97:5d:c3:96:f9:ad:c8:a1:7a:66:6f:9e: 45:95:ff:72:2f:43:6c:05:3d:f9:13:84:af:54:ca:a4:d0:52: 20:4e:b5:76:32:ec:a1:73:a9:f0:38:68:e9:c7:b0:66:aa:2e: 86:5a:de:c6:57:40:15:d7:26:d5:2b:fa:7a:48:6f:8c:f7:e2: d9:25:ab:2d:e2:30:fb:9e:c4:28:07:8a:a0:41:12:23:f8:88: 2a:cf:62:6d:a7:3c:b7:b6:56:62:2a:88:9e:54:20:fb:48:0a: 24:58:e6:7b:ca:8c:e8:87:ee:37:7e:21:23:32:0c:02:4f:91: 08:65:d5:5e:47:85:5d:1f:4d:90:9a:3f:de:a1:4d:1a:03:b2: e4:dd:40:68:2d:c7:99:b8:d1:15:82:30:55:b3:bc:af:bf:bd: 59:a4:f4:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM4aZUhA3Ojaf2wi5GYYF6ykQRr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzMwMDEwMDUxWhcNMjYxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGRkMTI5M2EyNGE4NDM4YmM0NjU0Nzk1MTJlMjM0OWEw OGFiOGY5ODJkNDY5NGMyMzkwZmM2M2E2MjNmNzI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv6+onhjnqtR8GVxYlf1WSMkS9WnZ/7Qo28rKGbb29Bc40 EIfE7ItziizqJOhQ8wBLPR9yUallF2h2j1F7X5IMEYe31rR9bQzZobxZpv+uZ9Iw sgdZclUAiAsSry/kxrpO/odaAwAwjm3to6rStZwVfnDkMZLduQGVrPQEu6MhQ0n+ i3IS7cZDCEEwda5oU5z1/JDzjBwPLw7kUhzQfHSVCf39EK7DBQfw8qabbvm9qHe9 Bz+mUsrEs4r2ESKFQAZme1zQvRWvSxRfshj3bYBl5F2ZHBuQSikPseDlcDbOEKHO UebmytR6If6cwGgE2RVmtHZ4hja9CmPRSgizp7CrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZSxZpdFE9kEe/p+KwDZ9ysVRNLwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwMmZmYjA4LWVkZjgtNDUwNC05N2UyLWQzYmE1YmU5YjE0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnp8wDQYJKoZIhvcNAQELBQADggEBAIlcmvATYmKxfkqat7RFdWcbjweF 18BjeubiZ5QHSMHY04Kx/ghi7QBaHzKVTiY6sfrgLgVSWfWBYytwQYyjQlOAy6yK RhqKnCjR7+hGP3eOMYqiiiq5nyG+PNKUzsHnZ5ddw5b5rcihemZvnkWV/3IvQ2wF PfkThK9UyqTQUiBOtXYy7KFzqfA4aOnHsGaqLoZa3sZXQBXXJtUr+npIb4z34tkl qy3iMPuexCgHiqBBEiP4iCrPYm2nPLe2VmIqiJ5UIPtICiRY5nvKjOiH7jd+ISMy DAJPkQhl1V5HhV0fTZCaP96hTRoDsuTdQGgtx5m40RWCMFWzvK+/vVmk9AU= -----END CERTIFICATE-----Generated at Sat Aug 8 07:01:04 2026 by rpki-client