$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa File: 551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa (raw, json) Hash identifier: YehawQHtILGczJaEpovZnCWKRRJQXCuwNN3IPZZjr6A= Subject key identifier: FF:B4:1B:C9:37:65:38:F5:0A:1A:2A:D4:28:1B:0D:15:D7:E5:07:AD Certificate issuer: /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Certificate serial: 703DBC6B8DA7C3DBE06DE7E549A2EB9013FB5061 Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa Signing time: Sun 11 Oct 2026 00:20:09 +0000 ROA not before: Sun 11 Oct 2026 00:20:09 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 15.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3d:bc:6b:8d:a7:c3:db:e0:6d:e7:e5:49:a2:eb:90:13:fb:50:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Validity Not Before: Oct 11 00:20:09 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=d741465706dd2915c30803dd62690ddf62a4ac20835475a2d541a4bdec96488f, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:ed:00:20:b2:21:5a:1d:45:78:2d:75:5d: f5:60:3f:89:a2:6b:88:49:02:75:32:90:6d:ce:8a: d8:bf:b6:08:d1:c3:0b:ff:6c:89:01:53:fc:73:7d: 56:d1:9a:ce:4e:9f:fe:ea:c6:41:4b:9c:1b:3b:48: 0b:0e:6e:85:6c:0e:e3:26:be:3b:b0:19:97:8c:29: 9d:7f:59:1a:4f:4b:65:07:22:ca:0e:28:76:2d:18: c4:95:ce:6c:cb:e5:d4:1f:cd:f1:15:6b:68:f5:0a: ec:20:27:25:5d:f4:95:05:4a:cc:12:9e:a5:04:5c: 5f:1f:12:19:a4:9a:33:24:72:88:04:0e:88:ba:4e: 4b:36:44:70:a8:78:59:6a:10:16:47:9c:b0:f9:4a: a2:e9:53:ec:19:3f:52:e9:5d:41:51:57:35:9c:2f: c6:1c:1c:9e:73:1e:7f:71:72:a7:4e:29:32:5c:19: 41:ac:70:b4:26:c0:ad:63:a6:a6:12:c7:67:19:04: df:06:c0:1e:9b:e5:56:72:c5:b8:6d:10:27:0f:09: 31:d5:46:8f:e9:a3:6b:40:fc:0b:57:c2:ae:37:84: 39:fd:1c:9b:4b:db:31:cd:bf:99:1d:3c:e0:37:5c: 62:5a:ee:12:90:88:0a:b5:6d:f4:46:a8:f4:f4:1b: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B4:1B:C9:37:65:38:F5:0A:1A:2A:D4:28:1B:0D:15:D7:E5:07:AD X509v3 Authority Key Identifier: keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 69:9b:43:5f:1e:52:61:dd:49:1b:a2:dd:28:55:68:93:be:66: c5:d5:ac:b1:5d:bd:13:36:ad:50:16:eb:70:05:af:0c:37:db: 40:cd:8b:41:1c:b9:65:b4:91:f0:78:a0:b2:6b:7c:b5:ea:b1: 0f:a7:c7:5a:0a:dd:ae:cc:77:fc:64:a3:3f:77:13:99:82:d3: 16:fd:83:18:1d:01:05:65:11:a3:04:85:af:1b:5e:b8:f6:9c: 14:ad:24:f9:c1:0c:62:99:d9:1e:2a:d5:b8:34:5d:15:f8:ac: 62:8d:0e:25:45:75:da:f0:10:df:0d:8d:c2:88:9f:08:19:59: 02:60:f1:97:98:84:d3:eb:d0:29:5b:83:62:db:2e:ca:d5:db: bb:b6:0d:f8:5f:d7:38:9c:e0:56:1a:28:17:79:b7:f6:61:5b: 87:ff:44:68:07:85:b4:4f:27:af:8a:a1:9e:86:40:69:95:20: fc:5e:21:86:40:96:c4:ff:45:e7:b3:9d:d2:75:63:71:4b:f9: c5:11:76:37:62:2c:67:e9:f3:cb:f2:61:01:f1:89:9c:e7:b1: e0:3c:d7:c7:6f:aa:47:77:fe:b6:89:bd:cf:42:0b:86:b9:37: 9c:9d:f8:54:13:ed:ad:2c:f0:80:38:d8:4c:4e:c5:e2:31:b3: 82:5f:3c:cc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcD28a42nw9vgbeflSaLrkBP7UGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDBiMTBmMzhlZWZmNjhiNWMyMjJiZWQ2MDUyM2M4ZDI5 YWY4NzRlZTk5OTY5MDk2ZDAwHhcNMjYxMDExMDAyMDA5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzQxNDY1NzA2ZGQyOTE1YzMwODAzZGQ2MjY5MGRkZjYy YTRhYzIwODM1NDc1YTJkNTQxYTRiZGVjOTY0ODhmMS0wKwYDVQQDEyRmODdjZGYw ZS0zMjdiLTRhMTgtYTUwZS1jZDJmMTMxNzkwOWUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgre0AILIhWh1FeC11XfVgP4mia4hJAnUykG3Oiti/tgjR wwv/bIkBU/xzfVbRms5On/7qxkFLnBs7SAsOboVsDuMmvjuwGZeMKZ1/WRpPS2UH IsoOKHYtGMSVzmzL5dQfzfEVa2j1CuwgJyVd9JUFSswSnqUEXF8fEhmkmjMkcogE Doi6Tks2RHCoeFlqEBZHnLD5SqLpU+wZP1LpXUFRVzWcL8YcHJ5zHn9xcqdOKTJc GUGscLQmwK1jpqYSx2cZBN8GwB6b5VZyxbhtECcPCTHVRo/po2tA/AtXwq43hDn9 HJtL2zHNv5kdPOA3XGJa7hKQiAq1bfRGqPT0G7apAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/7QbyTdlOPUKGirUKBsNFdflB60wHwYDVR0jBBgwFoAUQB2pzBcZ6ojM mO6NOpp7t2izj8gwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWViNTUxNy02 YTcyLTRjMmMtODEwNy02NTg4ZWE0YWVkNTkvMDBiMTBmMzhlZWZmNjhiNWMyMjJi ZWQ2MDUyM2M4ZDI5YWY4NzRlZTk5OTY5MDk2ZDAuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmQzNmFkNjQtMjAwZi00MDY0LTg0YTgtM2M3 Y2M5MWNkZWNlLzU1MWI1ZGY4LTBiMTQtNGNlNC1hNWE4LTc3NGE0NGY0YzVjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZkMzZhZDY0LTIwMGYtNDA2NC04NGE4 LTNjN2NjOTFjZGVjZS9fMmkxd2lLLTFnVWp5TkthLUhUdW1aYVFsdEEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPyTANBgkqhkiG9w0BAQsFAAOCAQEAaZtDXx5SYd1JG6LdKFVok75mxdWs sV29EzatUBbrcAWvDDfbQM2LQRy5ZbSR8Higsmt8teqxD6fHWgrdrsx3/GSjP3cT mYLTFv2DGB0BBWURowSFrxteuPacFK0k+cEMYpnZHirVuDRdFfisYo0OJUV12vAQ 3w2NwoifCBlZAmDxl5iE0+vQKVuDYtsuytXbu7YN+F/XOJzgVhooF3m39mFbh/9E aAeFtE8nr4qhnoZAaZUg/F4hhkCWxP9F57Od0nVjcUv5xRF2N2IsZ+nzy/JhAfGJ nOex4DzXx2+qR3f+tom9z0ILhrk3nJ34VBPtrSzwgDjYTE7F4jGzgl88zA== -----END CERTIFICATE-----Generated at Wed Nov 11 13:46:39 2026 by rpki-client