$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa File: 6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa (raw, json) Hash identifier: zwZMxIj+nvs0UHL411cYzLhkubMHbZbSLhCKYBX2OnM= Subject key identifier: 89:6B:B5:4E:7C:2C:6E:CB:D6:B2:E1:B3:A4:7E:C2:5C:F9:A2:50:24 Certificate issuer: /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Certificate serial: 3CDFDA4C5867CA0A258C801B71B857493F88052C Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa Signing time: Thu 23 Jul 2026 00:20:08 +0000 ROA not before: Thu 23 Jul 2026 00:20:08 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 402422 IP address blocks: 15.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:df:da:4c:58:67:ca:0a:25:8c:80:1b:71:b8:57:49:3f:88:05:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Validity Not Before: Jul 23 00:20:08 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=8ef5c80e22438e4d6cfad3e160526bf8173285f2055e79fc7aaf207a8fb4e995, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:57:8b:1a:b2:da:b6:76:9b:d8:5f:2e:59: 05:e0:4e:7f:b5:04:08:6c:bd:86:df:e6:02:3a:94: 70:47:84:75:95:73:1d:e6:4e:fb:00:d1:33:61:d8: 17:d7:c4:b2:b1:4d:75:2d:0a:d4:05:4d:18:59:37: e1:90:13:bf:8e:81:47:cb:be:dd:c9:b4:3d:af:6a: 61:db:03:fe:99:d4:56:da:fc:dd:80:9d:3e:69:b8: 2e:7d:dc:0f:a2:ff:1b:fc:8c:aa:39:40:5b:52:fc: 76:62:ff:0d:25:f5:5e:7f:df:54:36:e7:ef:8c:c2: 4e:2f:09:85:fa:d5:a8:bf:ac:88:9b:6b:41:9b:5d: 64:3d:cb:2c:53:36:dd:6e:15:d9:57:3f:52:16:4a: 96:06:1b:ef:2d:23:a7:8b:25:58:16:f2:3f:a4:08: 51:24:7c:15:62:44:57:43:61:e7:96:aa:ec:db:6a: 7f:ac:4b:65:02:ca:af:7f:d5:54:aa:25:6e:fd:7b: 0d:5d:8a:b1:7e:e8:64:a1:44:63:e1:ec:59:49:62: 73:ee:d8:57:de:33:66:f8:47:ec:62:88:dc:ee:1f: b4:40:b1:24:ad:ce:14:d3:d9:d2:4e:59:31:89:14: 14:d8:4c:92:bd:59:b5:c7:ad:c8:cc:07:1d:71:24: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6B:B5:4E:7C:2C:6E:CB:D6:B2:E1:B3:A4:7E:C2:5C:F9:A2:50:24 X509v3 Authority Key Identifier: keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 64:2e:c1:ca:82:91:e7:9d:05:5a:2a:2b:99:41:72:e6:18:e3: 2a:89:81:28:2e:7f:92:32:95:c8:37:3b:5d:98:0f:da:77:5b: aa:3f:8e:62:12:3f:6a:cc:84:9b:4a:c8:08:ab:ec:46:7c:d7: 2e:fc:e7:8b:e5:9c:d5:d7:3f:ae:d8:62:6d:4c:d8:d1:bb:d2: 2d:d3:1c:99:39:ab:ab:b8:4f:20:88:43:41:7c:06:8a:dd:da: e7:47:0c:aa:7a:59:22:8b:97:c6:44:97:9b:90:e4:5c:71:e3: 9f:48:e7:01:1c:d4:2b:5b:e0:9c:96:af:b6:4c:e2:c8:65:62: b4:5c:c5:19:59:e7:3c:02:d1:cd:03:3f:6f:f4:9a:ff:b3:f7: a1:3f:20:da:64:1f:10:b2:2e:a4:61:c5:9c:55:27:72:5d:5a: 40:3a:43:43:74:66:4d:1a:00:ca:91:bf:d7:e7:05:69:7c:c5: ea:34:8f:99:b1:dc:24:f0:5e:e9:28:70:17:48:8a:f9:3e:e7: 0d:00:9b:6d:40:dc:ce:ee:f6:cd:cb:3c:a5:16:f6:2d:c0:a0: 9a:49:ae:85:db:50:c6:69:ad:60:a0:c7:2c:79:9b:46:d6:35: e4:e1:81:67:ac:75:ad:89:3b:97:a9:c1:93:1c:ef:63:77:fa: 80:36:3b:66 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPN/aTFhnygoljIAbcbhXST+IBSwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDBiMTBmMzhlZWZmNjhiNWMyMjJiZWQ2MDUyM2M4ZDI5 YWY4NzRlZTk5OTY5MDk2ZDAwHhcNMjYwNzIzMDAyMDA4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWY1YzgwZTIyNDM4ZTRkNmNmYWQzZTE2MDUyNmJmODE3 MzI4NWYyMDU1ZTc5ZmM3YWFmMjA3YThmYjRlOTk1MS0wKwYDVQQDEyRmODdjZGYw ZS0zMjdiLTRhMTgtYTUwZS1jZDJmMTMxNzkwOWUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkwleLGrLatnab2F8uWQXgTn+1BAhsvYbf5gI6lHBHhHWV cx3mTvsA0TNh2BfXxLKxTXUtCtQFTRhZN+GQE7+OgUfLvt3JtD2vamHbA/6Z1Fba /N2AnT5puC593A+i/xv8jKo5QFtS/HZi/w0l9V5/31Q25++Mwk4vCYX61ai/rIib a0GbXWQ9yyxTNt1uFdlXP1IWSpYGG+8tI6eLJVgW8j+kCFEkfBViRFdDYeeWquzb an+sS2UCyq9/1VSqJW79ew1dirF+6GShRGPh7FlJYnPu2FfeM2b4R+xiiNzuH7RA sSStzhTT2dJOWTGJFBTYTJK9WbXHrcjMBx1xJO9RAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiWu1TnwsbsvWsuGzpH7CXPmiUCQwHwYDVR0jBBgwFoAUQB2pzBcZ6ojM mO6NOpp7t2izj8gwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWViNTUxNy02 YTcyLTRjMmMtODEwNy02NTg4ZWE0YWVkNTkvMDBiMTBmMzhlZWZmNjhiNWMyMjJi ZWQ2MDUyM2M4ZDI5YWY4NzRlZTk5OTY5MDk2ZDAuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmQzNmFkNjQtMjAwZi00MDY0LTg0YTgtM2M3 Y2M5MWNkZWNlLzY3NjdlYjAyLTJkOTYtNGNkYS1iYmViLTgxNGZhNTVmZWUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZkMzZhZDY0LTIwMGYtNDA2NC04NGE4 LTNjN2NjOTFjZGVjZS9fMmkxd2lLLTFnVWp5TkthLUhUdW1aYVFsdEEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPyTANBgkqhkiG9w0BAQsFAAOCAQEAZC7ByoKR550FWiormUFy5hjjKomB KC5/kjKVyDc7XZgP2ndbqj+OYhI/asyEm0rICKvsRnzXLvzni+Wc1dc/rthibUzY 0bvSLdMcmTmrq7hPIIhDQXwGit3a50cMqnpZIouXxkSXm5DkXHHjn0jnARzUK1vg nJavtkziyGVitFzFGVnnPALRzQM/b/Sa/7P3oT8g2mQfELIupGHFnFUncl1aQDpD Q3RmTRoAypG/1+cFaXzF6jSPmbHcJPBe6ShwF0iK+T7nDQCbbUDczu72zcs8pRb2 LcCgmkmuhdtQxmmtYKDHLHmbRtY15OGBZ6x1rYk7l6nBkxzvY3f6gDY7Zg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:10:17 2026 by rpki-client