$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20cb0dce-0e2f-4af3-aa79-d762845915fd.roa File: 20cb0dce-0e2f-4af3-aa79-d762845915fd.roa (raw, json) Hash identifier: yK+kTer9bA8l9xl+U3KS6T16WkCLN0TZN9LKwvyL/LM= Subject key identifier: 13:36:1F:0C:59:B8:E8:71:37:3D:2D:5C:57:00:E9:C7:27:17:51:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 675EDF1BE28F5388A40393545A275FF2C820E697 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20cb0dce-0e2f-4af3-aa79-d762845915fd.roa Signing time: Mon 27 Jul 2026 02:00:06 +0000 ROA not before: Mon 27 Jul 2026 02:00:06 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5e:df:1b:e2:8f:53:88:a4:03:93:54:5a:27:5f:f2:c8:20:e6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 02:00:06 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=3f79bd5bd2e2bc21f1f29e439566d8b8aa76f709ac850018b185409604f9991b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:3a:8d:25:f7:b1:89:3c:e0:ca:15:fb:d5: 06:b8:5c:af:f1:34:33:ba:32:8d:1b:e8:de:43:36: d3:b3:70:ad:36:e8:79:ae:52:1f:46:72:6a:0d:cd: 20:c0:b2:98:b7:ab:22:bc:41:37:ef:39:2b:d2:c2: 0f:27:43:95:c3:78:a4:fe:65:06:21:71:20:7b:a6: 0f:b1:04:20:0c:4d:63:8d:37:64:27:41:f1:8a:a0: 7b:33:ae:da:8f:3b:31:ff:ed:16:13:63:7b:fb:78: 24:c9:0e:ed:e1:7c:50:59:0d:b1:00:09:d7:f9:5b: e3:69:79:3a:99:ff:2f:5c:4b:19:77:df:67:9a:07: f2:ba:a5:03:14:e7:48:2a:cd:73:0a:5c:a5:f4:13: 6b:f2:be:dd:f0:a5:15:3f:ca:a8:88:57:42:e6:05: 1a:40:a4:3c:8b:f7:77:51:a6:b2:0d:c8:96:17:f1: e6:a9:50:93:21:c0:67:bd:cf:98:c3:19:4e:94:be: 72:97:be:fb:08:6b:cd:b9:dd:3b:9c:6c:f1:b5:28: 6d:56:aa:ce:ae:52:46:fa:f1:2d:9c:9f:77:99:4b: c4:1c:53:e4:4f:f1:f4:4d:b2:47:30:86:a3:ac:7f: 48:98:ba:ac:92:9e:dd:33:35:ed:67:ba:9a:c4:a4: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:36:1F:0C:59:B8:E8:71:37:3D:2D:5C:57:00:E9:C7:27:17:51:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20cb0dce-0e2f-4af3-aa79-d762845915fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.193.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:14:a8:9e:72:9c:98:b6:41:1c:86:c9:97:aa:24:52:f9:1c: 1d:e4:e8:d3:6c:ed:71:40:4c:51:e9:de:2d:9f:db:bb:92:d6: 63:56:ff:b5:3d:66:14:06:ab:c4:25:2b:2b:9b:40:2a:18:51: 04:a4:81:52:f6:53:73:93:b5:f4:b2:2e:83:13:92:bc:f7:40: 63:da:bb:2a:3a:90:53:94:6a:e5:f8:aa:d3:6c:0c:34:25:93: 49:32:ad:d8:ba:ee:bd:95:d7:5a:aa:f0:0a:7a:2a:64:62:df: 08:d0:63:60:36:c4:ca:02:76:36:6d:1f:96:b2:e3:fc:cc:c7: ec:6a:98:4f:5e:24:6a:2e:02:b7:7b:6b:30:89:e9:ca:d3:e0: 06:fe:bb:eb:fa:48:ed:b5:d6:23:ba:d1:28:f7:7d:b7:7e:3b: 11:10:54:0d:c1:01:6b:59:45:93:06:64:4b:41:4f:88:67:24: 4c:13:ab:da:79:a4:8a:57:c3:45:e8:9d:9b:28:0c:5c:ba:c6: 3b:e2:63:f5:3c:26:0e:1d:d1:19:4f:22:b6:bb:0a:e8:fb:2d: ea:80:bb:91:b6:b9:30:67:75:6c:dd:ba:e8:cc:38:49:22:35: 5c:4c:ee:99:6b:41:a5:eb:0a:11:c5:96:4c:7f:c4:5c:38:3f: 9b:65:73:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ17fG+KPU4ikA5NUWidf8sgg5pcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIwMDA2WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjc5YmQ1YmQyZTJiYzIxZjFmMjllNDM5NTY2ZDhiOGFh NzZmNzA5YWM4NTAwMThiMTg1NDA5NjA0Zjk5OTFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjMjqNJfexiTzgyhX71Qa4XK/xNDO6Mo0b6N5DNtOzcK02 6HmuUh9GcmoNzSDAspi3qyK8QTfvOSvSwg8nQ5XDeKT+ZQYhcSB7pg+xBCAMTWON N2QnQfGKoHszrtqPOzH/7RYTY3v7eCTJDu3hfFBZDbEACdf5W+NpeTqZ/y9cSxl3 32eaB/K6pQMU50gqzXMKXKX0E2vyvt3wpRU/yqiIV0LmBRpApDyL93dRprINyJYX 8eapUJMhwGe9z5jDGU6UvnKXvvsIa8253TucbPG1KG1Wqs6uUkb68S2cn3eZS8Qc U+RP8fRNskcwhqOsf0iYuqySnt0zNe1nuprEpANlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEzYfDFm46HE3PS1cVwDpxycXUakwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwY2IwZGNlLTBlMmYtNGFmMy1hYTc5LWQ3NjI4NDU5MTVmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5sEwDQYJKoZIhvcNAQELBQADggEBAJoUqJ5ynJi2QRyGyZeqJFL5HB3k 6NNs7XFATFHp3i2f27uS1mNW/7U9ZhQGq8QlKyubQCoYUQSkgVL2U3OTtfSyLoMT krz3QGPauyo6kFOUauX4qtNsDDQlk0kyrdi67r2V11qq8Ap6KmRi3wjQY2A2xMoC djZtH5ay4/zMx+xqmE9eJGouArd7azCJ6crT4Ab+u+v6SO211iO60Sj3fbd+OxEQ VA3BAWtZRZMGZEtBT4hnJEwTq9p5pIpXw0XonZsoDFy6xjviY/U8Jg4d0RlPIra7 Cuj7LeqAu5G2uTBndWzduujMOEkiNVxM7plrQaXrChHFlkx/xFw4P5tlczY= -----END CERTIFICATE-----Generated at Tue Jul 28 19:09:59 2026 by rpki-client