$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63ce8849-af42-4f16-a0b4-36ca32102bda.roa File: 63ce8849-af42-4f16-a0b4-36ca32102bda.roa (raw, json) Hash identifier: I9+7aPlWwCrJUToVCIDp1h2tGqz+vz/QDUj78U3Fg/c= Subject key identifier: CA:9B:E4:AF:33:6E:66:9D:E5:AF:D3:E8:FD:DA:36:FD:56:0A:5B:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27CECA799A604381825CE572BA0FF77BF84E5D06 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63ce8849-af42-4f16-a0b4-36ca32102bda.roa Signing time: Thu 08 Oct 2026 01:04:37 +0000 ROA not before: Thu 08 Oct 2026 01:04:37 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 15.230.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ce:ca:79:9a:60:43:81:82:5c:e5:72:ba:0f:f7:7b:f8:4e:5d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 8 01:04:37 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=e9a0a293497f142651e43d4972117e4d64414ec1fd7a81c2811dcba5a3d23f71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:03:ee:ad:a6:d2:69:eb:ca:0c:73:4d:ae: b6:ad:f8:7f:a6:e2:ac:7c:93:9d:10:b1:07:df:e9: 34:83:ca:c5:02:25:d8:f6:c7:2c:0a:e6:1e:af:cd: e7:80:88:a4:60:ba:f6:0c:fc:ef:d5:24:3b:36:c2: d3:28:01:eb:11:bf:7b:7f:1b:a8:32:f4:5e:aa:b7: a7:57:3b:bd:5f:f0:2b:c9:ed:52:a4:43:53:1a:02: be:dd:0e:6a:ab:df:92:0a:0d:4f:19:f3:15:45:68: 1d:02:83:d1:82:8b:ab:b1:61:c6:06:4a:33:59:4a: 8c:0b:8a:a1:37:73:07:ef:e9:2e:81:b1:5b:8b:84: f6:3a:27:dc:db:3b:4b:de:77:c2:05:42:98:81:ed: 25:f4:8c:3d:1d:23:87:25:1c:ee:43:9c:35:e6:99: 66:55:6a:47:5a:57:71:ca:a3:02:d2:93:5c:de:77: 41:d5:cf:88:5b:45:8f:ba:66:c7:36:c7:76:84:29: 03:bb:db:4b:c0:dc:61:86:61:94:c2:b3:7e:77:1e: 87:b5:6a:99:ac:17:04:38:ed:7f:0f:a8:2f:40:33: f9:f5:b9:39:da:fa:b0:b9:66:75:28:80:99:b4:3a: 74:bb:0c:5e:99:b8:ff:29:e5:08:3d:93:dd:47:43: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9B:E4:AF:33:6E:66:9D:E5:AF:D3:E8:FD:DA:36:FD:56:0A:5B:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63ce8849-af42-4f16-a0b4-36ca32102bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.147.0/24 Signature Algorithm: sha256WithRSAEncryption 33:b6:0d:cb:db:3a:8d:22:99:d2:bc:56:0b:7c:3c:5e:8a:ed: 0e:d0:37:68:1e:6b:1a:7d:c1:57:ee:c2:84:d4:e6:f2:01:20: ce:23:bd:21:71:24:62:e7:77:55:82:49:0a:28:48:0a:c2:a5: b9:5c:ab:05:0c:2b:a0:ac:ee:e4:02:b2:1c:ae:3b:89:ef:fa: 9d:87:1b:65:db:c7:c3:ae:b2:37:5c:a6:49:a9:8b:55:36:ba: bc:eb:a3:92:95:5a:2e:69:fe:50:7c:19:60:da:4f:5d:28:56: 8b:b0:07:6d:77:64:9e:6d:33:0f:e6:7b:c5:06:c0:17:b8:14: 8f:ba:47:f4:74:04:d2:dc:f5:01:bd:25:ba:9c:91:b5:b7:81: 07:63:14:0d:d0:50:2d:5f:4a:e4:51:e3:42:42:4c:54:ce:00: ae:f2:74:33:f3:c8:4b:99:be:33:27:8e:dd:e6:aa:e8:39:69: d6:34:3d:ce:ee:32:15:46:64:60:1a:2c:98:58:de:1f:c4:00: 0b:29:61:8f:4d:80:2e:2a:c9:c4:ec:85:d2:f1:6a:b4:4a:e6: a9:c1:61:af:82:13:14:2c:e0:11:62:3d:f4:85:f5:d8:cc:0b: 8d:4c:5d:f1:f4:72:51:92:4e:ac:92:0c:87:a5:b8:ee:12:23: d7:62:bc:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ87KeZpgQ4GCXOVyug/3e/hOXQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDA4MDEwNDM3WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWEwYTI5MzQ5N2YxNDI2NTFlNDNkNDk3MjExN2U0ZDY0 NDE0ZWMxZmQ3YTgxYzI4MTFkY2JhNWEzZDIzZjcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5dQPurabSaevKDHNNrrat+H+m4qx8k50QsQff6TSDysUC Jdj2xywK5h6vzeeAiKRguvYM/O/VJDs2wtMoAesRv3t/G6gy9F6qt6dXO71f8CvJ 7VKkQ1MaAr7dDmqr35IKDU8Z8xVFaB0Cg9GCi6uxYcYGSjNZSowLiqE3cwfv6S6B sVuLhPY6J9zbO0ved8IFQpiB7SX0jD0dI4clHO5DnDXmmWZVakdaV3HKowLSk1ze d0HVz4hbRY+6Zsc2x3aEKQO720vA3GGGYZTCs353Hoe1apmsFwQ47X8PqC9AM/n1 uTna+rC5ZnUogJm0OnS7DF6ZuP8p5Qg9k91HQ66DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUypvkrzNuZp3lr9Po/do2/VYKW0EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzY2U4ODQ5LWFmNDItNGYxNi1hMGI0LTM2Y2EzMjEwMmJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5pMwDQYJKoZIhvcNAQELBQADggEBADO2DcvbOo0imdK8Vgt8PF6K7Q7Q N2geaxp9wVfuwoTU5vIBIM4jvSFxJGLnd1WCSQooSArCpblcqwUMK6Cs7uQCshyu O4nv+p2HG2Xbx8Ousjdcpkmpi1U2urzro5KVWi5p/lB8GWDaT10oVouwB213ZJ5t Mw/me8UGwBe4FI+6R/R0BNLc9QG9JbqckbW3gQdjFA3QUC1fSuRR40JCTFTOAK7y dDPzyEuZvjMnjt3mqug5adY0Pc7uMhVGZGAaLJhY3h/EAAspYY9NgC4qycTshdLx arRK5qnBYa+CExQs4BFiPfSF9djMC41MXfH0clGSTqySDIeluO4SI9divBM= -----END CERTIFICATE-----Generated at Thu Nov 5 07:17:11 2026 by rpki-client