$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa File: 94f5f688-47ac-44f5-a5fd-9104b80f7066.roa (raw, json) Hash identifier: +3ApiQ0606xFMsavngcTQXt126XuAm0zmACbBh4VhSE= Subject key identifier: BD:F6:84:3F:6F:D8:6D:28:3F:14:C0:3B:C3:6F:36:73:47:79:7D:91 Certificate issuer: /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Certificate serial: 13939558A2D27E4F6E23D3845686B650B8AA832E Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa Signing time: Mon 04 May 2026 21:02:07 +0000 ROA not before: Mon 04 May 2026 21:02:07 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:93:95:58:a2:d2:7e:4f:6e:23:d3:84:56:86:b6:50:b8:aa:83:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0 Validity Not Before: May 4 21:02:07 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=8bf0d67477ba83a34f4c788ce969af9b254e4db30fd07cdbc1eb448c31830942, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:7b:88:4b:ce:98:e5:ac:34:d5:c5:bd:46: 29:6a:ce:5b:65:1b:c5:d9:27:29:fc:91:13:57:9b: b7:39:5c:0a:85:a5:cf:23:a5:c5:f6:92:96:0c:fa: 5a:78:3e:cf:b1:85:49:02:50:8e:b3:6f:94:d0:91: 6f:1c:04:2f:63:46:76:23:b0:9e:75:d2:d8:d9:31: d8:97:10:bc:4b:d0:fa:a6:63:09:19:af:ca:40:7f: 23:ba:7d:bd:39:34:b4:e3:a7:a9:3b:99:66:66:a8: 47:5f:0a:23:92:05:1d:a8:90:0f:52:26:56:c1:94: d8:f1:56:37:f6:c0:b6:e9:88:9e:48:14:c2:85:03: 24:36:64:e2:4a:e3:54:33:06:37:53:d6:bf:98:34: 7e:3c:85:78:a0:93:62:6e:bd:4a:49:fb:c2:07:9d: b7:4d:3d:59:5b:25:4e:4f:3b:42:de:c1:ed:dd:49: ad:eb:66:a7:c4:0a:c8:8a:93:d6:95:fa:12:b5:5a: b0:84:c7:97:ab:64:18:4f:cf:87:15:df:55:11:ab: c8:ea:37:7f:3d:64:5b:b8:cd:2f:65:da:d6:a2:0a: cf:77:a5:a9:f0:2b:53:34:c8:60:26:4c:1f:9b:08: aa:55:e2:d6:53:9d:80:9b:8b:1b:60:e9:36:7c:75: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:84:3F:6F:D8:6D:28:3F:14:C0:3B:C3:6F:36:73:47:79:7D:91 X509v3 Authority Key Identifier: keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/94f5f688-47ac-44f5-a5fd-9104b80f7066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:99:bb:1e:0f:aa:83:ab:a2:49:09:f9:ab:33:a2:92:57:a5: 68:63:41:4a:85:04:15:e5:25:05:0e:f5:1c:cc:87:ea:83:9c: d7:73:d1:4d:0a:3a:19:74:19:0f:66:82:e0:e9:4c:cf:4c:ed: 5f:34:47:cd:97:02:0c:93:4a:50:27:22:69:79:34:a8:a0:2d: 05:25:20:11:e5:39:7e:c7:2c:9a:d5:ae:dc:65:ac:4c:76:a4: 4c:e7:bd:ae:6b:69:d7:ef:9e:db:3f:4c:9c:28:cb:b3:ed:e1: 23:d6:d5:fe:33:03:77:61:76:26:c1:e9:41:fd:2b:04:0d:5b: 92:b0:09:e7:6e:f9:70:59:45:ba:cc:80:dc:d7:09:cc:93:a5: 58:4a:31:e2:63:ff:d2:89:bb:c2:24:5c:ff:f8:3b:d7:61:61: 70:9b:6f:79:39:c8:09:4f:9b:63:bc:ec:46:91:9a:ed:dc:71: 30:56:84:a0:a6:bd:a5:a0:e9:a5:7e:ac:70:1a:e1:d0:2c:8f: 48:63:9e:ae:78:d9:f2:e0:ee:58:8e:54:23:52:ce:50:cf:43: 1f:51:0a:1e:48:f7:c4:5e:55:4c:0c:63:4b:f8:24:24:97:84: e0:17:ed:d1:42:0d:6d:38:0b:46:6b:57:73:4d:9b:e1:76:31: be:b3:2d:5f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE5OVWKLSfk9uI9OEVoa2ULiqgy4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDBiMTBmMzhlZWZmNjhiNWMyMjJiZWQ2MDUyM2M4ZDI5 YWY4NzRlZTk5OTY5MDk2ZDAwHhcNMjYwNTA0MjEwMjA3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmYwZDY3NDc3YmE4M2EzNGY0Yzc4OGNlOTY5YWY5YjI1 NGU0ZGIzMGZkMDdjZGJjMWViNDQ4YzMxODMwOTQyMS0wKwYDVQQDEyRmODdjZGYw ZS0zMjdiLTRhMTgtYTUwZS1jZDJmMTMxNzkwOWUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzQnuIS86Y5aw01cW9RilqzltlG8XZJyn8kRNXm7c5XAqF pc8jpcX2kpYM+lp4Ps+xhUkCUI6zb5TQkW8cBC9jRnYjsJ510tjZMdiXELxL0Pqm YwkZr8pAfyO6fb05NLTjp6k7mWZmqEdfCiOSBR2okA9SJlbBlNjxVjf2wLbpiJ5I FMKFAyQ2ZOJK41QzBjdT1r+YNH48hXigk2JuvUpJ+8IHnbdNPVlbJU5PO0Lewe3d Sa3rZqfECsiKk9aV+hK1WrCEx5erZBhPz4cV31URq8jqN389ZFu4zS9l2taiCs93 panwK1M0yGAmTB+bCKpV4tZTnYCbixtg6TZ8dXjrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvfaEP2/YbSg/FMA7w282c0d5fZEwHwYDVR0jBBgwFoAUQB2pzBcZ6ojM mO6NOpp7t2izj8gwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWViNTUxNy02 YTcyLTRjMmMtODEwNy02NTg4ZWE0YWVkNTkvMDBiMTBmMzhlZWZmNjhiNWMyMjJi ZWQ2MDUyM2M4ZDI5YWY4NzRlZTk5OTY5MDk2ZDAuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmQzNmFkNjQtMjAwZi00MDY0LTg0YTgtM2M3 Y2M5MWNkZWNlLzk0ZjVmNjg4LTQ3YWMtNDRmNS1hNWZkLTkxMDRiODBmNzA2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZkMzZhZDY0LTIwMGYtNDA2NC04NGE4 LTNjN2NjOTFjZGVjZS9fMmkxd2lLLTFnVWp5TkthLUhUdW1aYVFsdEEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPyTANBgkqhkiG9w0BAQsFAAOCAQEAeJm7Hg+qg6uiSQn5qzOiklelaGNB SoUEFeUlBQ71HMyH6oOc13PRTQo6GXQZD2aC4OlMz0ztXzRHzZcCDJNKUCciaXk0 qKAtBSUgEeU5fscsmtWu3GWsTHakTOe9rmtp1++e2z9MnCjLs+3hI9bV/jMDd2F2 JsHpQf0rBA1bkrAJ5275cFlFusyA3NcJzJOlWEox4mP/0om7wiRc//g712FhcJtv eTnICU+bY7zsRpGa7dxxMFaEoKa9paDppX6scBrh0CyPSGOernjZ8uDuWI5UI1LO UM9DH1EKHkj3xF5VTAxjS/gkJJeE4Bft0UINbTgLRmtXc02b4XYxvrMtXw== -----END CERTIFICATE-----Generated at Tue May 12 23:00:11 2026 by rpki-client