$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa File: 025bca09-86b7-48bd-a586-a44ce744234f.roa (raw, json) Hash identifier: WhXlilBW17HO9uSYzyhHACjHKw1vd/DFUPnXflOl1t8= Subject key identifier: F7:C0:EB:22:63:47:2A:C0:02:5B:F1:80:1F:A5:2D:60:45:A1:23:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 121F1008C0424A1D021896045335AD7035955509 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa Signing time: Thu 15 Oct 2026 01:50:24 +0000 ROA not before: Thu 15 Oct 2026 01:50:24 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1f:10:08:c0:42:4a:1d:02:18:96:04:53:35:ad:70:35:95:55:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:50:24 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=854660d8b17d2f96a6c86c555f3e33de434ec5b43d6a30d242a794a04ef227ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a8:45:7b:f1:f6:b4:b8:b3:6d:bf:cd:f7:24: 8f:24:64:70:be:0b:5e:a6:80:07:88:d5:50:b0:48: 1c:7d:e8:90:9f:7c:3e:3e:e1:a3:41:89:26:13:20: 26:75:a2:0a:73:9f:c5:d3:8d:8d:0e:ee:7b:e2:77: f8:e6:f3:19:cb:b6:85:b5:99:34:b3:22:ec:5f:70: a6:af:e0:e9:83:09:99:25:df:73:75:41:56:15:31: 85:5a:df:4b:b2:a8:29:74:7c:a7:9c:0a:71:99:85: de:c1:98:d7:43:72:7d:b6:f6:ce:35:de:0d:ba:75: ef:12:85:8b:1f:1e:e7:ec:40:33:80:c4:78:fb:44: 6d:0e:57:7a:2a:70:ca:e8:34:77:b1:0b:6a:47:55: 3d:9e:45:d2:91:43:13:a4:71:41:39:48:c8:11:ef: 1e:06:48:a6:3c:92:43:b5:35:82:5f:a0:7c:c2:4f: 94:cd:12:5e:cc:a2:6d:83:ac:82:65:8f:6c:10:ea: e8:11:9a:c0:76:9a:eb:39:63:f5:bd:f4:44:99:91: 5b:9b:38:8d:b5:f9:b8:24:a6:63:48:73:d8:44:3f: 30:cb:7c:70:7c:21:10:04:3f:b0:04:62:b2:50:9f: 52:1a:af:9c:6d:48:48:ed:89:3c:d5:dc:b9:c0:07: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:EB:22:63:47:2A:C0:02:5B:F1:80:1F:A5:2D:60:45:A1:23:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025bca09-86b7-48bd-a586-a44ce744234f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.168.0/21 Signature Algorithm: sha256WithRSAEncryption 02:2a:6a:d2:7a:95:4c:62:39:87:5a:d2:e0:8c:21:11:ec:29: 76:e1:a1:01:2b:b1:5b:b0:a3:38:6a:bd:c6:b7:d1:fd:5f:e1: de:bc:be:ea:79:c9:a4:e4:c3:74:c3:3f:ef:83:65:42:ba:97: 55:c8:40:4e:55:3e:66:a2:81:c4:04:d6:2c:c4:25:e1:fc:17: 5e:56:3c:25:46:c8:5c:32:7f:08:32:36:6d:0d:54:b9:9b:94: cc:89:6c:03:8f:aa:57:04:9b:40:32:26:3d:c6:5b:28:64:48: 94:c4:42:1b:54:bb:d6:3c:80:30:4e:64:bc:29:69:3b:47:ec: fb:6c:14:83:16:bf:2f:da:4b:ae:20:ee:ac:ad:44:17:49:da: d2:fd:79:69:02:85:9a:94:7d:d4:c1:21:f5:00:9f:5e:37:3a: f6:ee:0a:cc:0d:bb:91:52:e5:84:fe:f9:1d:36:6a:21:15:e3: 5a:4a:65:bf:30:ec:0d:66:88:f6:cd:76:be:ff:0a:9e:e5:5a: 43:10:8c:6e:87:27:af:66:17:61:95:e6:da:bc:38:67:ac:c3: 5e:a9:a6:98:45:a1:b7:1d:bc:71:39:62:83:f3:d4:13:8b:0e: 66:25:a8:76:d7:d7:83:50:bd:c4:cd:bf:b6:33:74:d0:0f:84: 5b:26:70:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEh8QCMBCSh0CGJYEUzWtcDWVVQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDE1MDI0WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTQ2NjBkOGIxN2QyZjk2YTZjODZjNTU1ZjNlMzNkZTQz NGVjNWI0M2Q2YTMwZDI0MmE3OTRhMDRlZjIyN2VmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnqEV78fa0uLNtv833JI8kZHC+C16mgAeI1VCwSBx96JCf fD4+4aNBiSYTICZ1ogpzn8XTjY0O7nvid/jm8xnLtoW1mTSzIuxfcKav4OmDCZkl 33N1QVYVMYVa30uyqCl0fKecCnGZhd7BmNdDcn229s413g26de8ShYsfHufsQDOA xHj7RG0OV3oqcMroNHexC2pHVT2eRdKRQxOkcUE5SMgR7x4GSKY8kkO1NYJfoHzC T5TNEl7Mom2DrIJlj2wQ6ugRmsB2mus5Y/W99ESZkVubOI21+bgkpmNIc9hEPzDL fHB8IRAEP7AEYrJQn1Iar5xtSEjtiTzV3LnAB5BlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU98DrImNHKsACW/GAH6UtYEWhI54wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyNWJjYTA5LTg2YjctNDhiZC1hNTg2LWE0NGNlNzQ0MjM0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3KgwDQYJKoZIhvcNAQELBQADggEBAAIqatJ6lUxiOYda0uCMIRHsKXbh oQErsVuwozhqvca30f1f4d68vup5yaTkw3TDP++DZUK6l1XIQE5VPmaigcQE1izE JeH8F15WPCVGyFwyfwgyNm0NVLmblMyJbAOPqlcEm0AyJj3GWyhkSJTEQhtUu9Y8 gDBOZLwpaTtH7PtsFIMWvy/aS64g7qytRBdJ2tL9eWkChZqUfdTBIfUAn143Ovbu CswNu5FS5YT++R02aiEV41pKZb8w7A1miPbNdr7/Cp7lWkMQjG6HJ69mF2GV5tq8 OGesw16ppphFobcdvHE5YoPz1BOLDmYlqHbX14NQvcTNv7YzdNAPhFsmcG4= -----END CERTIFICATE-----Generated at Sun Nov 8 00:02:38 2026 by rpki-client