$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c6fdfa6-41c9-4678-9080-e499358dda44.roa File: 9c6fdfa6-41c9-4678-9080-e499358dda44.roa (raw, json) Hash identifier: w7pj/40AMbSfJ0IbS6ok3YyY6kBU3SiIjFaQSaX5vfE= Subject key identifier: 37:2E:6D:BB:10:2A:40:4F:BC:1C:17:0C:FA:2B:58:DE:88:C0:67:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2608DD07C8B07581536DF51C562A4E11178A6F8E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c6fdfa6-41c9-4678-9080-e499358dda44.roa Signing time: Tue 19 May 2026 02:51:11 +0000 ROA not before: Tue 19 May 2026 02:51:11 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:08:dd:07:c8:b0:75:81:53:6d:f5:1c:56:2a:4e:11:17:8a:6f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 02:51:11 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=e10db9d012c9d9f8b72d7728a5c1a1ee6f5d61501e4df947c450363939a5810d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:d0:98:23:8e:37:b8:ff:1b:69:da:fb:8e: ad:d4:19:28:04:64:6a:20:da:bd:2c:3a:76:68:ec: 01:fa:12:27:c5:31:0e:79:b4:57:38:29:68:80:fa: 0a:2a:a9:5f:f4:b2:b8:c6:fe:c5:97:8f:bb:d5:01: 8e:db:be:e8:83:23:93:09:d4:7c:d3:93:4d:a2:91: 60:66:05:41:76:09:40:49:86:fa:6e:7a:14:49:61: 9a:f4:fe:78:1e:c6:3e:28:a8:0d:ef:36:52:dd:e9: 6c:2e:ec:56:cb:4b:08:91:e0:4e:41:0b:1e:d5:34: 6a:7f:df:26:d7:37:d5:2d:b3:2d:49:d4:ce:33:ac: 81:73:a3:dd:e0:6a:b0:c5:e6:d1:37:e4:f2:b5:26: 2f:b5:2d:8a:16:44:fa:56:b4:8b:bd:6e:ba:60:5f: 6c:7b:b0:a6:61:67:0d:ae:1e:25:bb:c3:e5:88:87: 79:d5:f5:3d:6b:37:b8:fc:97:e1:c4:17:64:03:25: 15:73:f3:99:f7:eb:90:1b:96:12:3a:e0:71:82:25: 7a:f2:95:46:b3:7d:ab:73:14:d7:43:ab:35:b9:8b: 04:9a:6a:f5:3e:4f:73:d1:fe:f8:16:5f:4d:28:52: 46:b4:c7:cf:17:7e:44:76:7a:8e:d8:c0:cf:ab:34: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2E:6D:BB:10:2A:40:4F:BC:1C:17:0C:FA:2B:58:DE:88:C0:67:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c6fdfa6-41c9-4678-9080-e499358dda44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.148.0/22 Signature Algorithm: sha256WithRSAEncryption 61:53:25:12:26:fe:04:cd:36:92:55:65:c5:20:37:b3:e1:b8: f1:90:98:93:97:88:34:01:57:4f:6c:fd:0b:0e:23:a1:b1:08: e3:f1:32:a9:ee:c0:df:57:e6:64:de:db:c2:77:4a:a0:c6:93: 3b:33:15:0e:f4:2c:c9:38:7c:61:eb:80:02:2e:ea:af:92:76: 98:2a:49:be:65:c8:dc:92:59:1e:fc:37:3b:e2:ec:a9:66:7d: 20:7b:55:87:f8:b4:12:e5:05:85:b1:44:b1:c6:e3:db:a0:e6: a7:d0:09:72:cb:71:99:e4:22:55:cc:31:1b:09:f8:f0:a1:25: f7:99:5e:78:07:2f:8c:2a:8e:46:9d:66:c0:fb:29:de:25:9c: 60:bf:fb:68:7d:66:ed:46:a4:58:a4:06:2f:1a:34:ed:1a:b1: 7c:9d:18:45:e1:ff:69:bf:ec:fe:37:f9:7b:a8:cc:5d:c9:f8: 2b:3f:2a:6f:c7:e8:7d:b8:52:ea:1a:83:3c:e7:1b:17:99:ae: 58:a6:12:6f:8d:55:1e:a1:bc:8a:4c:65:37:8d:1a:cc:e5:79: c3:50:6a:da:4f:93:1a:80:cf:02:30:13:a4:d6:b7:30:cf:ee: ce:f7:b8:b9:75:4f:76:aa:90:28:38:ee:4f:f2:f1:ea:7d:ef: 79:cf:a0:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJgjdB8iwdYFTbfUcVipOEReKb44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDI1MTExWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTBkYjlkMDEyYzlkOWY4YjcyZDc3MjhhNWMxYTFlZTZm NWQ2MTUwMWU0ZGY5NDdjNDUwMzYzOTM5YTU4MTBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkKNCYI443uP8badr7jq3UGSgEZGog2r0sOnZo7AH6EifF MQ55tFc4KWiA+goqqV/0srjG/sWXj7vVAY7bvuiDI5MJ1HzTk02ikWBmBUF2CUBJ hvpuehRJYZr0/ngexj4oqA3vNlLd6Wwu7FbLSwiR4E5BCx7VNGp/3ybXN9Utsy1J 1M4zrIFzo93garDF5tE35PK1Ji+1LYoWRPpWtIu9brpgX2x7sKZhZw2uHiW7w+WI h3nV9T1rN7j8l+HEF2QDJRVz85n365AblhI64HGCJXrylUazfatzFNdDqzW5iwSa avU+T3PR/vgWX00oUka0x88XfkR2eo7YwM+rNA4RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNy5tuxAqQE+8HBcM+itY3ojAZxEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljNmZkZmE2LTQxYzktNDY3OC05MDgwLWU0OTkzNThkZGE0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3JQwDQYJKoZIhvcNAQELBQADggEBAGFTJRIm/gTNNpJVZcUgN7PhuPGQ mJOXiDQBV09s/QsOI6GxCOPxMqnuwN9X5mTe28J3SqDGkzszFQ70LMk4fGHrgAIu 6q+SdpgqSb5lyNySWR78Nzvi7KlmfSB7VYf4tBLlBYWxRLHG49ug5qfQCXLLcZnk IlXMMRsJ+PChJfeZXngHL4wqjkadZsD7Kd4lnGC/+2h9Zu1GpFikBi8aNO0asXyd GEXh/2m/7P43+XuozF3J+Cs/Km/H6H24UuoagzznGxeZrlimEm+NVR6hvIpMZTeN GszlecNQatpPkxqAzwIwE6TWtzDP7s73uLl1T3aqkCg47k/y8ep973nPoPw= -----END CERTIFICATE-----Generated at Fri May 22 16:04:31 2026 by rpki-client