$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8710ea42-5251-4f2c-8194-07838b3f5ffc.roa File: 8710ea42-5251-4f2c-8194-07838b3f5ffc.roa (raw, json) Hash identifier: 4MpcTrZ+FXTPH3uz3iUU4MPFjyJfMtgUNvR9JFN6g2c= Subject key identifier: E4:8E:E0:58:91:5F:09:3C:08:EA:FF:8B:AB:58:2E:1E:AF:B8:02:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D4FDA4EB55B5AF3CC502D1FF1517378FB43D6B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8710ea42-5251-4f2c-8194-07838b3f5ffc.roa Signing time: Mon 26 Oct 2026 01:40:43 +0000 ROA not before: Mon 26 Oct 2026 01:40:43 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4f:da:4e:b5:5b:5a:f3:cc:50:2d:1f:f1:51:73:78:fb:43:d6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:40:43 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=30e004ce0625475b7a0982bd56e5044519a407be229eb97b40c9dae2827cd704, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c1:9e:53:95:85:ec:dd:c9:97:d1:ca:ed:37: 40:4b:22:db:02:53:43:8e:96:be:3e:24:43:6d:bd: 9b:6c:60:0c:c1:f4:69:86:97:77:27:d8:0b:7e:8c: 90:e7:0f:3c:0d:c8:9e:92:51:f4:a5:62:8f:e5:fd: 06:ae:5f:95:28:3b:3e:08:73:c0:d8:c0:d8:dd:44: d3:27:fa:8a:7a:d4:87:08:a9:c6:c7:ca:0a:bb:fc: 2c:4d:13:66:38:23:72:fd:bb:ca:f9:0d:ad:84:e5: f8:fc:32:12:86:b8:79:76:07:d1:81:c0:60:39:97: 3b:9e:2b:95:3a:e5:ee:93:db:31:5d:82:44:ce:00: 5c:3a:42:1d:76:93:1b:de:fc:2d:79:1c:57:5b:d5: 97:4f:47:b5:84:d4:df:c5:22:02:38:85:3a:12:13: bc:00:81:5a:72:a2:96:fd:56:9b:01:9f:f2:c8:f2: 89:c2:ab:a2:d6:4a:73:0c:27:6a:a5:58:38:ab:cc: 2c:c2:25:6c:64:23:49:0e:8a:0b:66:d4:91:6d:04: 19:48:95:b5:b5:af:85:ab:48:3d:3a:0e:ea:e8:75: 38:47:9d:74:c8:1a:16:66:27:56:fe:ef:b6:f2:fc: 57:2c:9f:b7:f4:f3:9a:8f:6c:3f:4f:de:4d:f1:7f: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:E0:58:91:5F:09:3C:08:EA:FF:8B:AB:58:2E:1E:AF:B8:02:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8710ea42-5251-4f2c-8194-07838b3f5ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:f7:32:0a:cd:78:a2:84:1a:77:08:a9:76:70:9d:95:65:ae: 34:9a:35:05:af:f2:97:a3:ab:4f:fd:6e:c4:b3:dd:b1:49:90: 71:14:28:f4:c9:3f:b0:b8:78:23:7d:11:d3:d7:9c:f5:0a:ea: 71:f6:47:ca:98:d9:00:3d:9b:10:4a:fa:a4:96:41:26:dc:dc: d7:57:a3:54:d9:da:83:4f:87:76:7d:48:a6:b5:c7:e8:69:08: 70:78:43:1c:ae:d2:ab:eb:77:6d:58:a0:bf:0c:d7:10:12:f9: d9:4a:0c:69:eb:e3:96:3c:3c:cf:46:b5:80:ea:7c:57:b6:5c: 83:cb:90:09:f5:5f:cb:60:2b:39:4b:fa:eb:03:62:3f:35:62: d2:b9:30:fe:f7:37:10:04:f3:94:77:5d:ed:45:0e:c0:e7:24: c8:82:a2:70:36:8c:fe:52:91:75:74:64:04:97:a3:9d:f9:d8: 8a:d9:f0:17:f7:5a:f6:a6:04:2d:f0:4d:70:09:88:62:d3:83: 9a:62:24:66:21:48:43:17:f4:bd:f0:b5:23:23:7c:cb:ea:dc: e2:df:a9:9b:ed:58:0e:22:8f:51:43:21:74:2f:ba:06:bb:18: cb:ff:70:72:11:4c:e2:fe:f9:bd:4e:55:8a:11:c3:4e:47:35: 8b:36:70:b2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHU/aTrVbWvPMUC0f8VFzePtD1rUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDE0MDQzWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGUwMDRjZTA2MjU0NzViN2EwOTgyYmQ1NmU1MDQ0NTE5 YTQwN2JlMjI5ZWI5N2I0MGM5ZGFlMjgyN2NkNzA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtwZ5TlYXs3cmX0crtN0BLItsCU0OOlr4+JENtvZtsYAzB 9GmGl3cn2At+jJDnDzwNyJ6SUfSlYo/l/QauX5UoOz4Ic8DYwNjdRNMn+op61IcI qcbHygq7/CxNE2Y4I3L9u8r5Da2E5fj8MhKGuHl2B9GBwGA5lzueK5U65e6T2zFd gkTOAFw6Qh12kxve/C15HFdb1ZdPR7WE1N/FIgI4hToSE7wAgVpyopb9VpsBn/LI 8onCq6LWSnMMJ2qlWDirzCzCJWxkI0kOigtm1JFtBBlIlbW1r4WrSD06DurodThH nXTIGhZmJ1b+77by/Fcsn7f085qPbD9P3k3xfy9fAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5I7gWJFfCTwI6v+Lq1guHq+4AuUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3MTBlYTQyLTUyNTEtNGYyYy04MTk0LTA3ODM4YjNmNWZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP9TANBgkqhkiG9w0BAQsFAAOCAQEANfcyCs14ooQadwipdnCdlWWuNJo1 Ba/yl6OrT/1uxLPdsUmQcRQo9Mk/sLh4I30R09ec9QrqcfZHypjZAD2bEEr6pJZB Jtzc11ejVNnag0+Hdn1IprXH6GkIcHhDHK7Sq+t3bVigvwzXEBL52UoMaevjljw8 z0a1gOp8V7Zcg8uQCfVfy2ArOUv66wNiPzVi0rkw/vc3EATzlHdd7UUOwOckyIKi cDaM/lKRdXRkBJejnfnYitnwF/da9qYELfBNcAmIYtODmmIkZiFIQxf0vfC1IyN8 y+rc4t+pm+1YDiKPUUMhdC+6BrsYy/9wchFM4v75vU5VihHDTkc1izZwsg== -----END CERTIFICATE-----Generated at Sun Nov 8 01:04:49 2026 by rpki-client