$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3645d887-572b-4fbd-b02b-9306f0281b03.roa File: 3645d887-572b-4fbd-b02b-9306f0281b03.roa (raw, json) Hash identifier: FjRG8ahK/xETcqNzXVdEMWX3npY6t8AK5Sqnc9o3i1U= Subject key identifier: 98:CA:37:28:44:62:C1:AC:02:64:33:23:3E:F3:5F:C7:26:2F:0A:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 137F09F4D006ED1BF4A6C64399ED815ED8266C29 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3645d887-572b-4fbd-b02b-9306f0281b03.roa Signing time: Tue 27 Oct 2026 00:40:08 +0000 ROA not before: Tue 27 Oct 2026 00:40:08 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7f:09:f4:d0:06:ed:1b:f4:a6:c6:43:99:ed:81:5e:d8:26:6c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 27 00:40:08 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=b610f96374011e84258f8548f23b2222c0456831b49a2b72a2911441b62b1832, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7a:64:12:ec:cb:83:e2:13:32:b9:d1:af:d5: 78:e2:98:a2:2b:64:1d:b6:06:f5:56:dd:1a:99:19: e5:c3:06:fe:e9:6d:70:7e:6f:20:f4:08:fa:ea:e3: 6e:62:ca:90:e2:84:a8:4d:d9:50:81:75:66:d7:5f: 8e:fb:3e:c4:40:0d:5d:c9:e8:b5:a4:82:d7:e6:e4: 96:8b:ec:a3:2d:60:0a:cd:72:25:34:66:cf:73:5f: a5:73:48:db:5c:dc:1a:69:c2:11:cf:b4:30:07:d8: 15:c6:26:01:cf:7b:5d:45:c4:a9:eb:45:56:be:74: 06:f5:42:17:b1:cb:bb:9f:e6:21:01:6b:37:b5:e5: 42:19:a5:35:24:bc:65:06:40:41:d5:13:0f:e7:41: c8:b3:d2:52:5f:fe:f4:e0:dd:d6:54:76:5b:c7:c7: b9:81:a7:85:e5:8c:8c:cf:64:01:24:c9:e8:47:7b: 1b:61:88:da:4d:f7:3d:f0:de:f2:ff:ce:c8:1d:05: d5:d7:ec:82:c1:80:2d:c0:b3:59:db:12:9a:2a:4f: 00:59:ca:b3:5d:e2:88:52:04:ba:ce:81:cf:9b:e3: 33:a9:27:60:d8:86:2f:f1:a8:98:53:bd:de:94:1c: 31:0f:47:cd:98:da:7c:50:1e:1c:11:65:18:56:c7: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CA:37:28:44:62:C1:AC:02:64:33:23:3E:F3:5F:C7:26:2F:0A:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3645d887-572b-4fbd-b02b-9306f0281b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.246.0/23 Signature Algorithm: sha256WithRSAEncryption 83:ad:a6:13:cd:3c:01:a8:e8:1b:c5:57:0d:72:84:6a:55:15: 4a:e0:24:fc:4a:09:54:da:79:cc:6f:bc:a1:66:fa:e0:90:ef: 26:31:be:5b:b8:78:22:25:e7:03:b6:0f:cd:48:79:08:74:1f: 33:5d:16:08:0f:8a:77:64:5a:c8:d1:e3:f0:ea:1c:d0:00:94: 73:fc:54:b0:7f:05:bd:b8:05:a1:33:63:84:78:b3:01:38:bf: 75:bf:6d:78:13:f4:d3:81:7e:63:ba:88:d8:30:79:f8:e8:ea: 17:e1:c7:27:88:2f:07:37:32:ab:03:6b:ce:bb:ff:58:bd:ae: 1f:44:5e:46:81:73:11:e4:6b:1a:31:2c:96:b2:45:be:98:48: 2d:b6:ca:48:b1:68:ce:08:db:8f:6b:e1:cd:0b:4a:1a:2f:99: 65:a8:b8:30:f8:0d:9a:6a:28:d2:80:0e:47:c8:4d:4c:05:30: 06:c8:b9:88:46:ae:fc:8a:5e:99:84:b1:25:d0:5a:e9:4c:ff: e3:5a:15:e0:ea:92:fa:cc:f1:cf:a3:43:0c:9a:a6:23:90:54: d2:fb:4c:63:c7:cb:8a:73:9d:76:4b:64:f9:4e:74:25:f8:85: 69:b7:2c:ec:0a:06:3a:bd:b3:bd:14:3c:7c:ce:ef:d1:2d:88: 6e:78:47:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE38J9NAG7Rv0psZDme2BXtgmbCkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI3MDA0MDA4WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjEwZjk2Mzc0MDExZTg0MjU4Zjg1NDhmMjNiMjIyMmMw NDU2ODMxYjQ5YTJiNzJhMjkxMTQ0MWI2MmIxODMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKemQS7MuD4hMyudGv1XjimKIrZB22BvVW3RqZGeXDBv7p bXB+byD0CPrq425iypDihKhN2VCBdWbXX477PsRADV3J6LWkgtfm5JaL7KMtYArN ciU0Zs9zX6VzSNtc3BppwhHPtDAH2BXGJgHPe11FxKnrRVa+dAb1Qhexy7uf5iEB aze15UIZpTUkvGUGQEHVEw/nQciz0lJf/vTg3dZUdlvHx7mBp4XljIzPZAEkyehH exthiNpN9z3w3vL/zsgdBdXX7ILBgC3As1nbEpoqTwBZyrNd4ohSBLrOgc+b4zOp J2DYhi/xqJhTvd6UHDEPR82Y2nxQHhwRZRhWx72lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmMo3KERiwawCZDMjPvNfxyYvClEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2NDVkODg3LTU3MmItNGZiZC1iMDJiLTkzMDZmMDI4MWIwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPnvYwDQYJKoZIhvcNAQELBQADggEBAIOtphPNPAGo6BvFVw1yhGpVFUrg JPxKCVTaecxvvKFm+uCQ7yYxvlu4eCIl5wO2D81IeQh0HzNdFggPindkWsjR4/Dq HNAAlHP8VLB/Bb24BaEzY4R4swE4v3W/bXgT9NOBfmO6iNgwefjo6hfhxyeILwc3 MqsDa867/1i9rh9EXkaBcxHkaxoxLJayRb6YSC22ykixaM4I249r4c0LShovmWWo uDD4DZpqKNKADkfITUwFMAbIuYhGrvyKXpmEsSXQWulM/+NaFeDqkvrM8c+jQwya piOQVNL7TGPHy4pznXZLZPlOdCX4hWm3LOwKBjq9s70UPHzO79EtiG54RxA= -----END CERTIFICATE-----Generated at Sun Nov 8 02:45:25 2026 by rpki-client