$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa File: 94f5f688-47ac-44f5-a5fd-9104b80f7066.roa (raw, json) Hash identifier: rcFnStVAxLQaOMwBHza12CiGh+l3t0dvKX5HYrnBBgU= Subject key identifier: 97:F9:64:F6:7B:B1:E4:68:9C:B2:8E:64:88:21:78:98:02:49:9B:8F Certificate issuer: /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Certificate serial: 543BD6A01BB51DD7F1ABEF07EC773D0DBC55C916 Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa Signing time: Thu 23 Jul 2026 00:20:07 +0000 ROA not before: Thu 23 Jul 2026 00:20:07 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3b:d6:a0:1b:b5:1d:d7:f1:ab:ef:07:ec:77:3d:0d:bc:55:c9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Validity Not Before: Jul 23 00:20:07 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=0aa3e71b8ce1827f94c80cf943008093e3da58494a65d7e53313704c9db1de76, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:2e:f6:fd:0f:ef:4a:9a:ef:50:b1:05:7f: 5b:74:8b:8c:16:df:7a:78:cd:1a:a7:30:b5:2a:72: 80:7b:74:e1:92:ca:5e:e7:af:b0:a9:45:11:b0:91: c1:a2:b7:62:bd:7b:d1:37:0c:20:04:7d:c5:01:32: 6d:53:37:ca:79:de:a8:fd:fc:f1:c5:9b:0f:33:d3: f3:c9:d7:52:07:f2:b3:57:b3:78:36:7c:49:09:2c: e1:d6:2b:d5:d7:d7:96:3b:01:16:0a:fa:ca:96:09: b3:4b:9c:50:45:17:e2:84:2d:aa:62:bb:6c:68:4f: 35:c8:82:65:41:7c:16:bc:23:46:1e:31:0f:75:e9: 4c:b4:b5:71:b3:6c:8c:ef:f4:e8:c5:b5:f2:8a:d0: 1f:00:e4:1d:08:18:44:0e:1f:cc:91:07:30:31:bf: 65:d2:55:86:c0:58:fa:01:7e:15:59:b8:43:f5:e3: 93:ac:63:ce:6b:60:80:0b:a9:5a:97:b5:0d:13:fa: d5:c3:3b:a0:2b:8c:cf:f8:de:e0:dd:08:24:ec:57: 2b:d3:f2:20:59:32:b2:a1:3f:bd:af:7a:93:17:ec: 9f:0c:00:51:52:28:bc:ba:79:f8:cb:da:d2:fb:01: 44:4e:c4:55:47:a9:86:8f:85:22:d1:f0:a6:02:39: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F9:64:F6:7B:B1:E4:68:9C:B2:8E:64:88:21:78:98:02:49:9B:8F X509v3 Authority Key Identifier: keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5f:da:b7:e2:42:ee:e2:ce:8d:52:93:d2:f1:0a:eb:ad:3d:a1: 3b:57:ca:92:96:b9:e7:c6:98:b9:b3:6e:14:41:04:65:16:8a: 94:c4:6c:b8:5b:0a:79:16:fd:fa:8f:a9:3d:d7:3b:ba:c3:74: c8:37:48:b5:ab:e8:26:f7:87:eb:87:0e:27:74:05:b8:44:dd: 63:64:38:5a:02:b3:58:5f:52:59:1b:1a:5c:13:83:8a:bd:cc: e8:90:a3:6b:91:27:5b:60:27:3c:75:6a:70:ef:6c:a9:e7:ed: a6:4a:1d:16:fc:f0:8f:b0:14:7d:de:f6:f1:c4:06:36:93:8a: 9b:c3:dc:d0:37:f4:93:06:11:87:c3:a6:bf:84:28:04:b8:24: 92:a5:09:80:d1:77:51:d0:db:ac:bb:fb:ed:a2:55:cd:4d:e3: a0:b7:d9:69:1a:3f:a8:c8:40:2c:84:f2:88:fd:84:cb:8f:c7: ef:0d:ab:c9:75:65:43:df:d9:d1:4b:29:ac:f3:49:80:1b:6b: 5b:85:02:80:59:96:0e:72:23:4e:f2:83:11:2d:6d:5d:cf:7b: ef:75:13:cd:db:77:94:8a:15:db:44:4d:82:12:6b:cb:fc:a6: 54:df:0d:2a:80:e4:62:a0:2f:16:76:a0:3f:31:10:c9:dd:e0: 5f:2f:ae:76 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVDvWoBu1Hdfxq+8H7Hc9DbxVyRYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDBiMTBmMzhlZWZmNjhiNWMyMjJiZWQ2MDUyM2M4ZDI5 YWY4NzRlZTk5OTY5MDk2ZDAwHhcNMjYwNzIzMDAyMDA3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWEzZTcxYjhjZTE4MjdmOTRjODBjZjk0MzAwODA5M2Uz ZGE1ODQ5NGE2NWQ3ZTUzMzEzNzA0YzlkYjFkZTc2MS0wKwYDVQQDEyRmODdjZGYw ZS0zMjdiLTRhMTgtYTUwZS1jZDJmMTMxNzkwOWUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK7y72/Q/vSprvULEFf1t0i4wW33p4zRqnMLUqcoB7dOGS yl7nr7CpRRGwkcGit2K9e9E3DCAEfcUBMm1TN8p53qj9/PHFmw8z0/PJ11IH8rNX s3g2fEkJLOHWK9XX15Y7ARYK+sqWCbNLnFBFF+KELapiu2xoTzXIgmVBfBa8I0Ye MQ916Uy0tXGzbIzv9OjFtfKK0B8A5B0IGEQOH8yRBzAxv2XSVYbAWPoBfhVZuEP1 45OsY85rYIALqVqXtQ0T+tXDO6ArjM/43uDdCCTsVyvT8iBZMrKhP72vepMX7J8M AFFSKLy6efjL2tL7AUROxFVHqYaPhSLR8KYCOarvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUl/lk9nux5Gicso5kiCF4mAJJm48wHwYDVR0jBBgwFoAUQB2pzBcZ6ojM mO6NOpp7t2izj8gwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWViNTUxNy02 YTcyLTRjMmMtODEwNy02NTg4ZWE0YWVkNTkvMDBiMTBmMzhlZWZmNjhiNWMyMjJi ZWQ2MDUyM2M4ZDI5YWY4NzRlZTk5OTY5MDk2ZDAuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmQzNmFkNjQtMjAwZi00MDY0LTg0YTgtM2M3 Y2M5MWNkZWNlLzk0ZjVmNjg4LTQ3YWMtNDRmNS1hNWZkLTkxMDRiODBmNzA2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZkMzZhZDY0LTIwMGYtNDA2NC04NGE4 LTNjN2NjOTFjZGVjZS9fMmkxd2lLLTFnVWp5TkthLUhUdW1aYVFsdEEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPyTANBgkqhkiG9w0BAQsFAAOCAQEAX9q34kLu4s6NUpPS8QrrrT2hO1fK kpa558aYubNuFEEEZRaKlMRsuFsKeRb9+o+pPdc7usN0yDdItavoJveH64cOJ3QF uETdY2Q4WgKzWF9SWRsaXBODir3M6JCja5EnW2AnPHVqcO9sqeftpkodFvzwj7AU fd728cQGNpOKm8Pc0Df0kwYRh8Omv4QoBLgkkqUJgNF3UdDbrLv77aJVzU3joLfZ aRo/qMhALITyiP2Ey4/H7w2ryXVlQ9/Z0UsprPNJgBtrW4UCgFmWDnIjTvKDES1t Xc9773UTzdt3lIoV20RNghJry/ymVN8NKoDkYqAvFnagPzEQyd3gXy+udg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:02:28 2026 by rpki-client