$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa File: 94f5f688-47ac-44f5-a5fd-9104b80f7066.roa (raw, json) Hash identifier: aUhQRu4CoypybaMEgze7tlYkjV/oIOd07MuqYcInyek= Subject key identifier: F3:52:53:9D:8C:C5:C0:02:28:0E:EA:54:45:41:47:AE:8E:B7:59:AB Certificate issuer: /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Certificate serial: 7C4CB864AA61A3DFF67ADACB36EEC749561E77EE Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa Signing time: Sun 11 Oct 2026 00:20:09 +0000 ROA not before: Sun 11 Oct 2026 00:20:09 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4c:b8:64:aa:61:a3:df:f6:7a:da:cb:36:ee:c7:49:56:1e:77:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Validity Not Before: Oct 11 00:20:09 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=ab600ed7b2078703d8f68cbce068e31fdf531061bed67931c83d5f098898ebde, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:b8:a5:c1:9a:5c:5e:92:0b:9b:00:0b:6a: 9a:bc:7f:22:7f:9b:b8:9a:f3:53:10:00:33:d5:b0: a5:51:a8:82:99:ad:9e:40:5c:03:41:75:6c:84:1e: d7:08:79:6a:3d:0b:f9:74:e6:b7:bb:63:4c:26:55: de:48:96:40:61:c9:cb:34:1f:92:61:43:d2:74:2b: 51:31:8b:fd:8d:fd:2d:19:6c:e0:83:35:ae:52:50: b3:a4:dc:bd:dc:0a:92:5e:78:4c:00:39:e7:d3:ac: 9f:f6:21:bd:5f:0f:02:10:24:74:8e:38:d9:56:36: 55:10:7c:0e:a4:67:fa:fb:ff:72:5b:77:51:61:c5: 12:ed:7a:8b:a5:c7:70:3f:04:29:56:e9:70:6a:7d: 34:73:12:05:71:97:21:31:83:1a:73:cf:21:ef:9b: 8e:b0:86:52:04:68:b7:1c:f7:b4:ea:2f:a1:6d:75: e9:02:a5:2e:04:3d:63:af:03:27:2e:06:62:60:c8: 05:3f:b3:91:05:4b:fb:e6:96:99:f2:ea:ac:54:9f: 69:9c:46:39:81:3a:3d:b9:3b:a6:37:55:26:3d:95: 00:2d:17:25:af:16:da:cd:2f:b6:f7:92:01:84:d3: c5:51:38:7e:82:df:86:d7:31:a8:7a:9a:b9:d6:e0: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:53:9D:8C:C5:C0:02:28:0E:EA:54:45:41:47:AE:8E:B7:59:AB X509v3 Authority Key Identifier: keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:66:db:70:2c:04:e1:4a:09:f3:3c:c0:36:b0:84:6c:80:ad: ea:bb:37:f7:96:9e:18:44:30:6b:ff:de:11:05:81:89:00:a1: 75:37:9e:59:29:05:3b:0b:05:87:6a:70:dc:c1:f4:98:46:c3: 74:a8:2b:41:cd:0a:4a:c5:30:65:dd:32:40:16:5b:b7:b0:f4: 2c:72:c1:8b:61:bb:d9:b8:60:cb:c8:03:28:49:31:24:3a:26: 75:f1:c4:7c:24:ed:09:92:52:d7:89:23:97:48:ae:bf:22:22: b1:f1:a0:89:e0:4e:16:4e:ee:44:46:ed:7d:46:0e:76:c2:25: 89:c3:a1:a5:0a:00:e5:74:ed:86:78:94:ff:d4:18:68:36:24: ab:e7:d8:7f:28:f7:50:cc:c5:13:0c:53:b8:d1:72:4a:57:08: 0e:74:69:72:96:fd:ba:cc:22:d6:1d:0f:1f:1b:7a:ee:ac:1c: 34:6e:12:6a:87:26:4f:fb:d2:32:27:9f:25:6e:c8:0d:43:88: 91:87:cf:10:a5:70:d2:f8:66:f4:75:d5:08:b4:e1:fc:83:4e: 28:66:f3:14:e4:17:77:11:c3:0e:3d:04:fd:53:2c:9e:23:81: 71:b5:60:2a:a3:69:d8:de:b8:b5:70:fd:41:3f:30:ca:c6:3e: 1f:9f:a2:08 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfEy4ZKpho9/2etrLNu7HSVYed+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDBiMTBmMzhlZWZmNjhiNWMyMjJiZWQ2MDUyM2M4ZDI5 YWY4NzRlZTk5OTY5MDk2ZDAwHhcNMjYxMDExMDAyMDA5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjYwMGVkN2IyMDc4NzAzZDhmNjhjYmNlMDY4ZTMxZmRm NTMxMDYxYmVkNjc5MzFjODNkNWYwOTg4OThlYmRlMS0wKwYDVQQDEyRmODdjZGYw ZS0zMjdiLTRhMTgtYTUwZS1jZDJmMTMxNzkwOWUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ1LilwZpcXpILmwALapq8fyJ/m7ia81MQADPVsKVRqIKZ rZ5AXANBdWyEHtcIeWo9C/l05re7Y0wmVd5IlkBhycs0H5JhQ9J0K1Exi/2N/S0Z bOCDNa5SULOk3L3cCpJeeEwAOefTrJ/2Ib1fDwIQJHSOONlWNlUQfA6kZ/r7/3Jb d1FhxRLteoulx3A/BClW6XBqfTRzEgVxlyExgxpzzyHvm46whlIEaLcc97TqL6Ft dekCpS4EPWOvAycuBmJgyAU/s5EFS/vmlpny6qxUn2mcRjmBOj25O6Y3VSY9lQAt FyWvFtrNL7b3kgGE08VROH6C34bXMah6mrnW4MHzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU81JTnYzFwAIoDupURUFHro63WaswHwYDVR0jBBgwFoAUQB2pzBcZ6ojM mO6NOpp7t2izj8gwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWViNTUxNy02 YTcyLTRjMmMtODEwNy02NTg4ZWE0YWVkNTkvMDBiMTBmMzhlZWZmNjhiNWMyMjJi ZWQ2MDUyM2M4ZDI5YWY4NzRlZTk5OTY5MDk2ZDAuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmQzNmFkNjQtMjAwZi00MDY0LTg0YTgtM2M3 Y2M5MWNkZWNlLzk0ZjVmNjg4LTQ3YWMtNDRmNS1hNWZkLTkxMDRiODBmNzA2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZkMzZhZDY0LTIwMGYtNDA2NC04NGE4 LTNjN2NjOTFjZGVjZS9fMmkxd2lLLTFnVWp5TkthLUhUdW1aYVFsdEEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPyTANBgkqhkiG9w0BAQsFAAOCAQEAhWbbcCwE4UoJ8zzANrCEbICt6rs3 95aeGEQwa//eEQWBiQChdTeeWSkFOwsFh2pw3MH0mEbDdKgrQc0KSsUwZd0yQBZb t7D0LHLBi2G72bhgy8gDKEkxJDomdfHEfCTtCZJS14kjl0iuvyIisfGgieBOFk7u REbtfUYOdsIlicOhpQoA5XTthniU/9QYaDYkq+fYfyj3UMzFEwxTuNFySlcIDnRp cpb9uswi1h0PHxt67qwcNG4SaocmT/vSMiefJW7IDUOIkYfPEKVw0vhm9HXVCLTh /INOKGbzFOQXdxHDDj0E/VMsniOBcbVgKqNp2N64tXD9QT8wysY+H5+iCA== -----END CERTIFICATE-----Generated at Thu Nov 12 21:36:18 2026 by rpki-client