$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa File: 27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa (raw, json) Hash identifier: f96Ak1WwnaTCXy6YrDSjYtTFZTCeHKYwBiiqxN9b59k= Subject key identifier: C9:2E:D0:AB:74:3A:D0:8A:DE:F6:F6:3D:80:70:7F:25:2B:7F:F3:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6BE061B27F1D819776B1D7C514AEAC6A681E42D1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa Signing time: Mon 27 Jul 2026 01:00:12 +0000 ROA not before: Mon 27 Jul 2026 01:00:12 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e0:61:b2:7f:1d:81:97:76:b1:d7:c5:14:ae:ac:6a:68:1e:42:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:00:12 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=e6a01fe3bb5e42c6fcc30ebcf6e41da2bc56f6705086cbb71dd6f0565d93200d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:89:2e:99:47:07:16:aa:17:71:64:25:64: e6:b0:f9:06:18:78:aa:5f:5a:ff:9a:b6:2b:3b:26: af:2b:0d:d2:cc:8b:63:cc:4d:13:7c:d0:4f:8b:3b: 0c:96:be:1f:32:42:d4:3a:fb:cb:2f:96:7c:27:5c: a6:f1:f0:2b:17:da:32:87:3b:ac:86:9e:f5:b1:23: de:8d:72:21:14:21:3f:9a:22:1a:5e:23:00:4e:da: fe:6c:43:19:a8:30:64:c5:17:74:43:98:5a:8b:f1: 84:cf:36:bb:95:87:7b:31:5b:82:b5:e5:5e:be:b0: 36:fc:74:bf:e4:46:89:79:67:7f:b6:7e:a1:9e:a3: 23:24:f6:fe:9c:84:41:62:38:7d:70:cf:0f:d0:0a: ba:51:cc:52:9e:e0:21:19:f2:d7:c2:c1:94:c1:79: 3c:89:be:b3:63:83:d1:7f:13:0f:60:45:96:e2:10: 9a:0a:38:d8:9e:08:e1:90:5b:e7:92:12:dd:c6:97: 5d:65:73:60:b9:d8:1d:8b:5c:6a:1b:ad:9e:73:ea: 7a:8c:90:8f:20:8a:11:ed:ad:51:9c:3b:a7:b8:07: 5c:a1:99:a1:e1:35:8f:b2:e0:d3:e3:56:67:ed:03: c9:02:35:95:61:fb:50:24:bf:32:9c:ba:9f:ea:3b: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:D0:AB:74:3A:D0:8A:DE:F6:F6:3D:80:70:7F:25:2B:7F:F3:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.176.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:4e:80:da:9b:11:68:aa:50:31:49:03:8a:63:f5:0b:c9:ea: 20:e1:88:c8:9e:82:81:d3:65:ec:b6:07:75:74:15:11:b7:72: b8:e8:df:d7:60:64:2d:0c:21:54:d2:31:0a:58:0d:b7:c7:3e: 2e:07:58:eb:63:58:1c:24:5f:a1:37:dd:b1:3e:38:87:17:ff: 9c:56:43:1e:e5:0c:41:22:97:41:28:97:70:84:48:fc:fa:42: a1:75:68:ad:ff:59:03:b4:9b:c5:b0:a5:fe:3e:bb:18:f7:55: 18:88:3d:a6:fb:dd:06:70:8a:9f:7c:0b:81:ef:df:48:8c:9b: 41:39:f7:f4:b8:19:43:8c:78:3d:f8:8c:88:d8:48:d5:d9:38: 36:08:c6:00:22:d5:92:00:15:aa:35:3e:b7:fc:2d:bf:bf:89: 27:bd:e3:fc:db:ec:c2:e8:91:90:f0:1f:23:86:d6:08:7f:dc: 75:53:32:80:4f:66:a6:2d:03:08:dd:a9:ba:05:9b:e5:71:20: 6a:f3:30:90:04:e8:85:f2:29:ff:98:c1:23:ce:bf:66:d5:cb: 3d:e9:ab:21:ef:68:68:00:16:6f:9b:7e:c1:36:96:81:0b:06: d7:8f:a1:5d:08:f6:f0:6b:de:4b:24:12:24:dd:0e:2c:6b:fc: 8a:c6:b7:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa+Bhsn8dgZd2sdfFFK6samgeQtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDEwMDEyWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmEwMWZlM2JiNWU0MmM2ZmNjMzBlYmNmNmU0MWRhMmJj NTZmNjcwNTA4NmNiYjcxZGQ2ZjA1NjVkOTMyMDBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk04kumUcHFqoXcWQlZOaw+QYYeKpfWv+atis7Jq8rDdLM i2PMTRN80E+LOwyWvh8yQtQ6+8svlnwnXKbx8CsX2jKHO6yGnvWxI96NciEUIT+a IhpeIwBO2v5sQxmoMGTFF3RDmFqL8YTPNruVh3sxW4K15V6+sDb8dL/kRol5Z3+2 fqGeoyMk9v6chEFiOH1wzw/QCrpRzFKe4CEZ8tfCwZTBeTyJvrNjg9F/Ew9gRZbi EJoKONieCOGQW+eSEt3Gl11lc2C52B2LXGobrZ5z6nqMkI8gihHtrVGcO6e4B1yh maHhNY+y4NPjVmftA8kCNZVh+1AkvzKcup/qO7y5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyS7Qq3Q60Ire9vY9gHB/JSt/8z8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3MjQ3YmQ5LTJhMzctNGZlNy04ODVkLWNhMGM5MTE4YzkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvLAwDQYJKoZIhvcNAQELBQADggEBAIpOgNqbEWiqUDFJA4pj9QvJ6iDh iMiegoHTZey2B3V0FRG3crjo39dgZC0MIVTSMQpYDbfHPi4HWOtjWBwkX6E33bE+ OIcX/5xWQx7lDEEil0Eol3CESPz6QqF1aK3/WQO0m8Wwpf4+uxj3VRiIPab73QZw ip98C4Hv30iMm0E59/S4GUOMeD34jIjYSNXZODYIxgAi1ZIAFao1Prf8Lb+/iSe9 4/zb7MLokZDwHyOG1gh/3HVTMoBPZqYtAwjdqboFm+VxIGrzMJAE6IXyKf+YwSPO v2bVyz3pqyHvaGgAFm+bfsE2loELBtePoV0I9vBr3kskEiTdDixr/IrGt5c= -----END CERTIFICATE-----Generated at Tue Jul 28 17:00:56 2026 by rpki-client