$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/981ec3ab-9d8b-4623-98c1-07932cf0344e.roa File: 981ec3ab-9d8b-4623-98c1-07932cf0344e.roa (raw, json) Hash identifier: GWCJAqpSuijLqDNqjpmVxo2N9jGEjMeNz4lhqoyrDTI= Subject key identifier: 53:B1:BB:C1:71:D7:68:C0:7C:9E:7D:FB:AA:0E:BF:5E:B9:46:CF:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2091E2FC9A3E76F606E2FCA8D7F0DA249C205B79 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/981ec3ab-9d8b-4623-98c1-07932cf0344e.roa Signing time: Sun 18 Oct 2026 01:20:10 +0000 ROA not before: Sun 18 Oct 2026 01:20:10 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:91:e2:fc:9a:3e:76:f6:06:e2:fc:a8:d7:f0:da:24:9c:20:5b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 01:20:10 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=f1068c9c7ec6edfec273afcd6e20e1bcef1da59a52fc25b365c30483da3547d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:9b:9b:fb:bd:5a:66:7a:e8:8e:90:4d:f9: e6:57:fb:bc:53:65:4d:d5:11:10:27:2a:3f:53:6f: 29:86:4c:27:73:3f:2a:3d:29:3b:a8:15:0c:39:24: 2f:74:0e:9f:81:dd:8b:9d:33:55:bf:78:32:4a:28: 1f:8d:16:cd:f4:b9:4d:db:b5:6d:c6:48:7e:f8:6a: 75:61:fa:db:03:50:1b:bd:7e:9c:f8:2d:71:37:f6: 94:a7:43:f9:cf:db:a9:6f:1d:b0:b3:e1:4d:72:80: 2e:83:20:cb:8d:08:e9:3c:f0:54:30:a6:97:a6:9c: 99:42:2a:d7:28:83:23:d8:90:ec:5b:1c:f1:1c:2b: bf:2a:f8:96:fc:ff:70:1f:30:a4:ce:32:73:9a:a4: 64:b9:93:c4:9b:40:9b:ac:7d:d9:13:04:e4:87:10: 8a:09:37:5b:e4:4c:b9:78:9e:6c:47:e5:c0:12:fe: 2b:ce:ff:b9:25:51:d2:65:b8:0d:19:fe:28:51:e7: 18:f6:4d:74:19:08:54:a1:81:26:f0:7f:ce:f1:64: 33:a2:13:2d:cd:a0:f2:9b:a6:68:12:28:96:5a:2b: 62:10:47:d0:97:38:78:87:ea:6a:0d:f6:d9:af:15: 46:b9:19:3e:be:43:5d:b3:f3:d1:d1:9c:01:e6:a7: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:BB:C1:71:D7:68:C0:7C:9E:7D:FB:AA:0E:BF:5E:B9:46:CF:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/981ec3ab-9d8b-4623-98c1-07932cf0344e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.118.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:62:1a:c8:1c:cd:73:aa:fb:fd:3f:a9:76:bf:26:ec:24:9d: 0d:61:78:dd:50:4e:0f:d9:8b:f8:d7:1c:f6:1c:ad:98:08:13: d0:e7:75:bb:ed:61:d2:69:a5:c6:af:72:14:db:8f:54:cc:1c: 0d:97:cb:6d:1c:87:8a:6e:25:9d:01:15:81:bf:2e:35:05:de: 61:5e:02:71:99:cf:89:e4:99:68:fd:e2:f6:ec:dd:bc:00:a6: 86:73:84:41:12:96:b5:5b:54:8b:a7:87:79:c2:7a:24:64:89: b7:b3:2a:41:3b:70:9e:5f:6e:92:35:b1:f7:09:9c:37:81:e2: 11:00:fe:2f:f7:13:c3:e7:61:52:10:5c:c7:92:d1:f5:d6:02: f8:d1:8d:03:3c:bc:4c:38:57:32:62:5e:79:b2:58:32:1b:a2: 82:4e:ac:73:33:41:bc:6b:f4:18:56:3a:2c:c4:a5:25:1b:33: e2:37:33:ea:31:33:f4:d2:5f:64:28:09:26:93:01:4e:20:01: b7:e2:0a:50:32:d9:a3:ee:40:64:85:a9:ef:ba:49:e7:6b:47: bd:01:09:72:33:12:96:9f:8b:b1:68:23:49:fb:00:82:58:7c: 63:74:f9:9e:06:25:49:e3:82:f4:27:8d:00:cc:e8:e4:cf:69: a4:dd:b0:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIJHi/Jo+dvYG4vyo1/DaJJwgW3kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE4MDEyMDEwWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTA2OGM5YzdlYzZlZGZlYzI3M2FmY2Q2ZTIwZTFiY2Vm MWRhNTlhNTJmYzI1YjM2NWMzMDQ4M2RhMzU0N2Q2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvoZub+71aZnrojpBN+eZX+7xTZU3VERAnKj9TbymGTCdz Pyo9KTuoFQw5JC90Dp+B3YudM1W/eDJKKB+NFs30uU3btW3GSH74anVh+tsDUBu9 fpz4LXE39pSnQ/nP26lvHbCz4U1ygC6DIMuNCOk88FQwppemnJlCKtcogyPYkOxb HPEcK78q+Jb8/3AfMKTOMnOapGS5k8SbQJusfdkTBOSHEIoJN1vkTLl4nmxH5cAS /ivO/7klUdJluA0Z/ihR5xj2TXQZCFShgSbwf87xZDOiEy3NoPKbpmgSKJZaK2IQ R9CXOHiH6moN9tmvFUa5GT6+Q12z89HRnAHmp4SLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU7G7wXHXaMB8nn37qg6/XrlGz2QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4MWVjM2FiLTlkOGItNDYyMy05OGMxLTA3OTMyY2YwMzQ0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnnYwDQYJKoZIhvcNAQELBQADggEBAAtiGsgczXOq+/0/qXa/JuwknQ1h eN1QTg/Zi/jXHPYcrZgIE9DndbvtYdJppcavchTbj1TMHA2Xy20ch4puJZ0BFYG/ LjUF3mFeAnGZz4nkmWj94vbs3bwApoZzhEESlrVbVIunh3nCeiRkibezKkE7cJ5f bpI1sfcJnDeB4hEA/i/3E8PnYVIQXMeS0fXWAvjRjQM8vEw4VzJiXnmyWDIbooJO rHMzQbxr9BhWOizEpSUbM+I3M+oxM/TSX2QoCSaTAU4gAbfiClAy2aPuQGSFqe+6 SedrR70BCXIzEpafi7FoI0n7AIJYfGN0+Z4GJUnjgvQnjQDM6OTPaaTdsOM= -----END CERTIFICATE-----Generated at Sun Nov 8 01:01:25 2026 by rpki-client