$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b16b6e87-892c-4ecd-9301-162d43679637.roa File: b16b6e87-892c-4ecd-9301-162d43679637.roa (raw, json) Hash identifier: E0/gdeLbgXiWjx6ZrqwkjGFpGhccvpf13a82a7dGeWI= Subject key identifier: 4E:AA:C8:01:C5:A0:99:A1:44:A9:9E:B9:9D:38:D9:72:26:91:0A:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7FE605F03910BDBBDD32CC03743BCADDEB0F52 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b16b6e87-892c-4ecd-9301-162d43679637.roa Signing time: Mon 27 Jul 2026 01:01:45 +0000 ROA not before: Mon 27 Jul 2026 01:01:45 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.221.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e6:05:f0:39:10:bd:bb:dd:32:cc:03:74:3b:ca:dd:eb:0f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:01:45 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=6df3e14a970a5f7e65a0a6715489f346ce0eef2f98f4dff3c0ffef647780ffe5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:49:70:30:ca:e6:c2:40:82:ae:a3:5a:e6: 23:6d:f7:7c:a7:22:d0:c7:53:0b:25:95:20:61:14: 7c:c2:05:a0:fe:b4:7a:76:8c:a5:b5:8c:73:01:18: 25:65:fd:62:fb:a4:29:b8:bb:ae:83:27:06:91:e5: 45:fe:bb:ef:37:99:23:dc:f5:4d:ab:27:53:b7:59: 94:e7:64:c9:94:04:cf:da:86:38:ef:cf:5c:3d:e6: 8d:bb:a6:cf:9d:84:c3:e5:aa:56:f5:e3:5d:aa:68: 6c:08:87:22:3c:68:34:52:84:37:ab:13:b1:c0:b3: 7f:ac:97:50:ea:b3:9e:50:59:b7:b5:db:72:64:32: a3:3e:30:ab:ba:96:68:08:09:03:2f:37:c8:34:49: 49:ea:ba:0d:33:56:ba:42:b7:ae:3e:6d:80:95:65: 29:de:8f:6d:08:05:65:1f:ea:d8:27:96:80:bd:4b: 97:22:0a:c0:3e:7a:34:7a:f7:2e:66:1c:03:d8:66: 2f:28:26:ed:6b:96:5c:29:11:cf:47:a5:88:c6:3f: 5c:ca:53:d1:47:4a:3f:e7:19:06:98:ef:1f:05:b6: f3:ea:a6:dc:62:65:5d:c8:16:dd:b3:cc:13:6a:cd: 3e:49:1b:0f:d0:f3:bd:41:ab:c5:3e:0c:e4:e5:a9: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AA:C8:01:C5:A0:99:A1:44:A9:9E:B9:9D:38:D9:72:26:91:0A:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b16b6e87-892c-4ecd-9301-162d43679637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.0.0/24 Signature Algorithm: sha256WithRSAEncryption 39:a2:d8:12:dc:69:83:fc:3b:e4:8b:d4:b0:ab:dd:df:4c:8b: c2:a7:1c:f1:b9:21:0a:fa:77:5b:e7:c8:cd:9c:1b:6d:00:7c: 4e:9c:fe:0c:8a:db:25:47:44:b9:af:0d:aa:5a:53:d8:d5:fe: a3:4b:36:66:4b:44:0f:44:a3:20:e4:9f:69:d7:f6:d6:d6:66: e7:35:69:24:cf:61:55:d7:c8:3d:03:d9:ef:ec:3a:33:31:63: b1:c8:61:2d:93:85:fc:0b:d5:b2:88:d0:d4:d4:58:b6:e3:12: 7c:d1:66:bb:50:28:45:fa:44:e1:b8:d3:7e:a9:8a:c0:de:66: a1:6a:35:4c:43:a1:fd:bd:e6:fc:ba:30:af:c1:76:b5:f5:56: 39:08:5a:6f:d3:1b:39:83:bd:47:d4:12:3f:dd:87:c4:4b:58: b2:1a:1d:b8:45:b2:92:cb:4e:98:dd:5c:f2:d5:69:30:e6:00: 1e:48:0f:ac:12:40:68:74:6d:a6:da:e4:a1:a3:59:35:73:56: 9c:da:d0:45:f5:16:bb:7c:03:ae:55:88:42:e6:b0:7b:6d:21: ac:c2:cd:7d:d3:03:16:27:5b:5c:a8:3e:b7:30:1b:b4:8f:4c: 01:cc:d9:b5:c5:d7:db:75:d7:31:c9:f7:f0:f8:db:b2:1b:28: bc:fb:56:9d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITf+YF8DkQvbvdMswDdDvK3esPUjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNjA3MjcwMTAxNDVaFw0yNjEwMjUyMzU5NTla MHoxSTBHBgNVBAUTQDZkZjNlMTRhOTcwYTVmN2U2NWEwYTY3MTU0ODlmMzQ2Y2Uw ZWVmMmY5OGY0ZGZmM2MwZmZlZjY0Nzc4MGZmZTUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKk4SXAwyubCQIKuo1rmI233fKci0MdTCyWVIGEUfMIFoP60 enaMpbWMcwEYJWX9YvukKbi7roMnBpHlRf677zeZI9z1TasnU7dZlOdkyZQEz9qG OO/PXD3mjbumz52Ew+WqVvXjXapobAiHIjxoNFKEN6sTscCzf6yXUOqznlBZt7Xb cmQyoz4wq7qWaAgJAy83yDRJSeq6DTNWukK3rj5tgJVlKd6PbQgFZR/q2CeWgL1L lyIKwD56NHr3LmYcA9hmLygm7WuWXCkRz0eliMY/XMpT0UdKP+cZBpjvHwW28+qm 3GJlXcgW3bPME2rNPkkbD9DzvUGrxT4M5OWpnK8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBROqsgBxaCZoUSpnrmdONlyJpEKMzAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYjE2YjZlODctODkyYy00ZWNkLTkzMDEtMTYyZDQzNjc5NjM3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAA/dADANBgkqhkiG9w0BAQsFAAOCAQEAOaLYEtxpg/w75IvUsKvd30yLwqcc 8bkhCvp3W+fIzZwbbQB8Tpz+DIrbJUdEua8NqlpT2NX+o0s2ZktED0SjIOSfadf2 1tZm5zVpJM9hVdfIPQPZ7+w6MzFjschhLZOF/AvVsojQ1NRYtuMSfNFmu1AoRfpE 4bjTfqmKwN5moWo1TEOh/b3m/Lowr8F2tfVWOQhab9MbOYO9R9QSP92HxEtYshod uEWykstOmN1c8tVpMOYAHkgPrBJAaHRtptrkoaNZNXNWnNrQRfUWu3wDrlWIQuaw e20hrMLNfdMDFidbXKg+tzAbtI9MAczZtcXX23XXMcn38PjbshsovPtWnQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:28:16 2026 by rpki-client