$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa File: 5a885b28-9bb7-4be5-a945-f90048046452.roa (raw, json) Hash identifier: S9C1LLJlNuIs6Z6tGuft8aw8VYJ2RZgXI6z19zYyWiA= Subject key identifier: 11:34:1C:41:4A:91:41:AE:D1:EC:28:A9:7C:10:64:74:88:E7:4A:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68FDED46088526F7799075A5F6AB3E75BAC54C75 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa Signing time: Thu 15 Oct 2026 02:06:36 +0000 ROA not before: Thu 15 Oct 2026 02:06:36 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fd:ed:46:08:85:26:f7:79:90:75:a5:f6:ab:3e:75:ba:c5:4c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 02:06:36 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=f555f51c8b5336e95396039663c0c7445c9eb190dba1c898558371db25e28694, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:99:db:6f:42:93:fa:36:c2:4f:be:ae:b1: d3:98:aa:7d:c8:f5:bb:5f:be:76:b2:e6:26:f3:59: 05:89:16:f3:65:4b:bd:59:ab:d0:05:ea:04:74:b4: a4:90:ce:15:cf:15:2d:dd:61:71:c8:26:b7:ae:c9: c1:0f:ec:47:d2:c9:91:54:85:2d:9c:17:f4:9a:b2: 50:d3:06:7f:21:00:57:0b:33:6f:c5:1e:9a:c7:ba: af:7e:ad:4e:ef:b5:68:06:5a:da:53:d8:63:79:22: 32:a7:c1:f1:b5:45:12:5c:68:ef:43:15:ed:b8:fe: f3:a6:f6:69:2c:95:69:7c:41:2e:ee:40:6e:10:b0: 34:66:3a:9b:bf:43:83:8e:b2:1b:6d:2c:e4:d8:db: 6b:c6:23:ef:b7:e0:01:6a:ce:d2:08:9a:f6:23:bd: f9:06:00:81:80:f3:8d:c4:e3:e1:ce:74:bd:6c:c7: 63:86:ec:c8:0d:a8:0b:c2:88:e7:9f:36:93:53:38: 9a:65:49:ea:25:aa:b8:f8:11:6f:3b:4d:9c:e1:4c: c0:5f:c1:ab:f3:f8:ff:a3:ce:3a:46:37:40:f5:b7: e6:ca:32:fa:9d:cb:97:50:44:34:e6:54:3c:de:99: e7:69:dc:64:1b:5e:c2:37:40:5b:14:b6:78:56:74: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:1C:41:4A:91:41:AE:D1:EC:28:A9:7C:10:64:74:88:E7:4A:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.176.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:bb:57:27:78:68:34:a8:31:3b:6e:1e:7e:0a:8e:d2:71:62: 08:98:87:43:a9:16:4d:e7:c4:ab:fd:b7:ca:da:a9:f0:b5:56: 60:a2:87:92:17:6c:3b:d8:10:37:b1:90:4c:27:ed:8f:5d:f4: e3:64:2e:c1:3f:2c:3b:94:16:cb:c6:61:eb:02:06:e8:b3:d3: c4:95:14:46:cb:44:ae:fd:84:ff:94:79:32:17:c3:e4:5a:21: fe:3a:5b:e8:0f:d0:5c:57:a6:91:3c:63:fa:23:2b:ec:e7:29: b0:1f:7f:30:30:ef:3d:f8:d3:cc:73:b5:7e:27:65:d4:18:50: 45:78:a6:84:40:44:7c:16:0d:21:69:88:7b:ee:71:32:43:dd: 46:1a:dd:a0:1e:df:32:9d:60:cc:d5:ff:fa:3c:b3:73:ff:e5: 62:ce:e1:28:47:08:e5:eb:cf:ca:35:c5:51:cf:7f:6a:0d:bc: 27:d7:2d:fd:a1:49:49:f4:f1:3d:bc:65:e8:3c:c5:cc:53:c0: 2b:ca:d2:ed:c6:e5:d0:c4:9f:83:d7:31:75:af:0c:3d:ac:4e: ca:c8:4d:8f:ef:ef:22:95:ff:80:e3:68:94:88:22:c7:28:6b: 13:54:ff:ae:d8:c7:ea:3c:5e:d1:36:55:12:ae:0d:25:79:04: 14:bc:f5:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaP3tRgiFJvd5kHWl9qs+dbrFTHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDIwNjM2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTU1ZjUxYzhiNTMzNmU5NTM5NjAzOTY2M2MwYzc0NDVj OWViMTkwZGJhMWM4OTg1NTgzNzFkYjI1ZTI4Njk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVNZnbb0KT+jbCT76usdOYqn3I9btfvnay5ibzWQWJFvNl S71Zq9AF6gR0tKSQzhXPFS3dYXHIJreuycEP7EfSyZFUhS2cF/SaslDTBn8hAFcL M2/FHprHuq9+rU7vtWgGWtpT2GN5IjKnwfG1RRJcaO9DFe24/vOm9mkslWl8QS7u QG4QsDRmOpu/Q4OOshttLOTY22vGI++34AFqztIImvYjvfkGAIGA843E4+HOdL1s x2OG7MgNqAvCiOefNpNTOJplSeolqrj4EW87TZzhTMBfwavz+P+jzjpGN0D1t+bK Mvqdy5dQRDTmVDzemedp3GQbXsI3QFsUtnhWdOq3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUETQcQUqRQa7R7CipfBBkdIjnSlQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhODg1YjI4LTliYjctNGJlNS1hOTQ1LWY5MDA0ODA0NjQ1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3LAwDQYJKoZIhvcNAQELBQADggEBAI+7Vyd4aDSoMTtuHn4KjtJxYgiY h0OpFk3nxKv9t8raqfC1VmCih5IXbDvYEDexkEwn7Y9d9ONkLsE/LDuUFsvGYesC Buiz08SVFEbLRK79hP+UeTIXw+RaIf46W+gP0FxXppE8Y/ojK+znKbAffzAw7z34 08xztX4nZdQYUEV4poRARHwWDSFpiHvucTJD3UYa3aAe3zKdYMzV//o8s3P/5WLO 4ShHCOXrz8o1xVHPf2oNvCfXLf2hSUn08T28Zeg8xcxTwCvK0u3G5dDEn4PXMXWv DD2sTsrITY/v7yKV/4DjaJSIIscoaxNU/67Yx+o8XtE2VRKuDSV5BBS89Q0= -----END CERTIFICATE-----Generated at Thu Nov 5 11:22:11 2026 by rpki-client