$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1a10311-0b16-45c6-a981-4a75c65eaa00.roa File: f1a10311-0b16-45c6-a981-4a75c65eaa00.roa (raw, json) Hash identifier: vH1h7qUT85CkwQvq+xAcOlCJQcVaI+nq+ILsAt7fmVc= Subject key identifier: 0E:CC:C1:25:BA:36:A2:91:AF:9E:42:0D:CC:C5:51:4D:8A:C3:C5:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39AA40B41D21B4063E127A1B24FC632ADB905F84 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1a10311-0b16-45c6-a981-4a75c65eaa00.roa Signing time: Thu 23 Jul 2026 14:41:03 +0000 ROA not before: Thu 23 Jul 2026 14:41:03 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:aa:40:b4:1d:21:b4:06:3e:12:7a:1b:24:fc:63:2a:db:90:5f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 23 14:41:03 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=8460a13aaaeb1533e9d1f08ff4ba7afacdfb1c43364ddfa8011d55433efa3a67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:55:4c:cf:25:48:47:b7:3c:3b:ae:11:55: 8c:f4:dd:50:60:1c:53:89:7f:2f:52:7c:13:a0:79: 8d:1e:2d:40:cf:79:9c:e3:53:7d:f9:97:1c:88:8d: 70:f7:e7:6b:78:ae:8e:6f:d5:d4:3c:ec:02:1e:97: 9f:f6:2b:67:ac:c3:d6:5a:76:dd:fb:36:aa:40:ad: bb:31:bb:dd:c2:50:9a:10:ad:29:62:39:45:b6:c4: 10:d7:67:84:76:0e:05:3b:37:b3:6e:b0:9e:22:7b: 02:15:b4:3f:63:79:f0:46:ac:e4:b0:2f:91:a4:53: 39:b5:86:53:e0:3b:f5:45:63:20:6b:5e:b6:b7:7f: 1a:0e:9f:6b:04:b8:6b:54:60:63:9d:cd:9c:3f:bc: 2c:f3:2a:87:01:fd:91:ef:2a:23:7e:d9:77:f7:88: 88:93:76:be:b7:74:4e:42:d5:4f:68:e7:9e:a0:a1: 97:4a:68:4d:e3:8f:60:bd:ca:08:2e:8d:35:51:14: 67:76:da:a4:96:b7:f2:b0:7b:71:b9:86:6f:a6:f0: 93:03:1f:8b:5c:6d:7a:0c:4f:15:f1:00:82:d0:cb: 1e:cc:2b:fc:61:b5:fb:51:3b:44:94:67:43:42:4d: 10:32:a7:7e:85:c8:22:b1:d7:03:72:ca:f3:f4:f5: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:C1:25:BA:36:A2:91:AF:9E:42:0D:CC:C5:51:4D:8A:C3:C5:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1a10311-0b16-45c6-a981-4a75c65eaa00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.160.0/20 Signature Algorithm: sha256WithRSAEncryption b3:81:83:ec:fb:76:43:cd:ce:5e:43:f2:0c:0e:f1:cc:86:ff: ce:29:72:fb:55:eb:5c:d0:30:7d:b6:08:b0:a5:7b:48:e3:b1: d3:71:1f:ff:52:ef:0e:fb:bb:79:63:d7:75:64:d0:e5:30:ca: f5:b4:c1:f6:80:1c:11:74:87:60:1e:6e:2c:41:d6:e8:82:31: 3e:3e:60:6c:33:41:b6:df:79:cb:8d:5a:b4:46:f4:63:a0:7a: 94:9f:89:9f:b0:67:3e:1d:6d:b2:f7:c9:6d:e5:dd:2d:91:1e: 99:cf:16:1c:ea:aa:b4:32:1a:72:0d:2f:c4:80:36:af:70:50: 77:b8:8f:8c:0a:cd:b0:b6:12:3e:bc:63:88:da:2f:84:b5:53: 1e:dc:3e:8d:33:26:a7:aa:de:08:0a:76:2e:39:a0:5b:55:78: b7:93:27:d5:b3:d5:0a:29:24:29:fc:14:9b:11:f5:21:78:40: 34:84:5c:e1:93:a1:d2:dc:b8:01:f7:ff:55:5e:aa:2a:dd:6e: 80:3b:c1:1a:73:fe:0a:1f:5f:63:6b:69:c5:ca:6e:09:bc:9c: 41:29:4b:12:ba:cd:34:5e:7a:4e:6a:3b:e2:4e:9d:f9:3a:a0: 88:f6:49:64:64:ce:66:29:d4:cc:b5:5d:ba:21:45:a2:9b:46: b2:ea:53:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOapAtB0htAY+EnobJPxjKtuQX4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIzMTQ0MTAzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDYwYTEzYWFhZWIxNTMzZTlkMWYwOGZmNGJhN2FmYWNk ZmIxYzQzMzY0ZGRmYTgwMTFkNTU0MzNlZmEzYTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+TlVMzyVIR7c8O64RVYz03VBgHFOJfy9SfBOgeY0eLUDP eZzjU335lxyIjXD352t4ro5v1dQ87AIel5/2K2esw9Zadt37NqpArbsxu93CUJoQ rSliOUW2xBDXZ4R2DgU7N7NusJ4iewIVtD9jefBGrOSwL5GkUzm1hlPgO/VFYyBr Xra3fxoOn2sEuGtUYGOdzZw/vCzzKocB/ZHvKiN+2Xf3iIiTdr63dE5C1U9o556g oZdKaE3jj2C9yggujTVRFGd22qSWt/Kwe3G5hm+m8JMDH4tcbXoMTxXxAILQyx7M K/xhtftRO0SUZ0NCTRAyp36FyCKx1wNyyvP09WOdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDszBJbo2opGvnkINzMVRTYrDxWcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxYTEwMzExLTBiMTYtNDVjNi1hOTgxLTRhNzVjNjVlYWEwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPxaAwDQYJKoZIhvcNAQELBQADggEBALOBg+z7dkPNzl5D8gwO8cyG/84p cvtV61zQMH22CLCle0jjsdNxH/9S7w77u3lj13Vk0OUwyvW0wfaAHBF0h2AebixB 1uiCMT4+YGwzQbbfecuNWrRG9GOgepSfiZ+wZz4dbbL3yW3l3S2RHpnPFhzqqrQy GnINL8SANq9wUHe4j4wKzbC2Ej68Y4jaL4S1Ux7cPo0zJqeq3ggKdi45oFtVeLeT J9Wz1QopJCn8FJsR9SF4QDSEXOGTodLcuAH3/1VeqirdboA7wRpz/gofX2NracXK bgm8nEEpSxK6zTReek5qO+JOnfk6oIj2SWRkzmYp1My1XbohRaKbRrLqUxM= -----END CERTIFICATE-----Generated at Fri Jul 24 09:22:34 2026 by rpki-client