$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8198d2-fc4e-47af-98c1-d34831cfdf1e.roa File: af8198d2-fc4e-47af-98c1-d34831cfdf1e.roa (raw, json) Hash identifier: nDcDiOXrpm52uGGevJmUG5tpS+zxgyJ0IsOFkh7kvTE= Subject key identifier: 49:00:7E:4C:6A:A3:EC:7F:BF:58:8F:97:CD:10:DA:04:AB:12:09:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D00E9189A16A5DC35AB70D51064D298BADD73D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8198d2-fc4e-47af-98c1-d34831cfdf1e.roa Signing time: Sun 18 Oct 2026 01:08:33 +0000 ROA not before: Sun 18 Oct 2026 01:08:33 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:e9:18:9a:16:a5:dc:35:ab:70:d5:10:64:d2:98:ba:dd:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 01:08:33 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=2d2039ac69379e651a99208e590bc681b3406ee722914cc2ed4f32cf2ca7ac59, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:6f:d1:6a:af:5a:ae:b0:26:fe:c2:9e:77: f6:19:34:20:34:9c:41:81:3a:27:c7:7e:8e:3e:63: 7a:a7:1d:5e:57:af:4f:3a:e4:49:79:b5:d5:67:29: 80:3b:c4:e1:27:23:07:cc:80:86:8e:73:96:57:78: 80:34:fb:94:ff:40:aa:e8:c7:9e:e3:71:f6:e8:89: 40:73:37:8d:b3:e8:aa:db:ca:97:06:ef:c5:fe:af: 0e:1d:9e:ce:17:40:ba:f8:4b:50:13:78:94:1d:4e: 54:9d:d3:5c:9c:c2:0b:1c:20:1f:b3:9b:62:44:cd: d5:cb:01:9f:5f:16:cd:84:bd:d1:61:67:44:02:73: 09:e4:48:b6:3f:d8:6e:06:b9:9e:43:4c:73:bd:87: 27:da:c2:f3:2d:8e:e7:f9:a5:1e:24:71:e6:6f:50: 83:ab:c6:9a:37:bb:db:15:fa:9c:ff:21:89:3d:30: f3:88:11:ae:de:65:fb:b0:94:62:7c:1c:0b:57:10: 65:45:9f:b9:e8:27:a4:20:3f:ef:41:75:58:e7:a8: bb:d5:c4:f8:f0:d2:de:4d:00:7e:2b:02:50:9b:fe: da:2b:0c:1c:1d:19:ba:a7:0e:c2:9d:47:5a:96:24: 6b:e7:42:dc:19:0c:96:43:0f:96:ca:67:dd:f8:71: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:7E:4C:6A:A3:EC:7F:BF:58:8F:97:CD:10:DA:04:AB:12:09:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8198d2-fc4e-47af-98c1-d34831cfdf1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.136.0/24 Signature Algorithm: sha256WithRSAEncryption 83:0f:26:89:07:40:ec:7d:5d:ff:f0:9f:e3:e1:92:da:82:98: 81:ed:d8:6e:62:81:69:43:79:16:4b:88:9f:c8:e2:9e:5f:52: 0b:f5:a7:49:cb:43:12:d5:e7:6b:98:a9:9e:fe:29:6a:cc:b7: 59:d6:40:7f:ae:f7:d7:1b:ca:f5:de:be:7c:e4:27:9a:1b:c0: 0a:38:dc:13:a2:45:5a:83:cc:bc:a2:29:31:63:ca:ed:ce:5f: a6:7c:4d:db:19:e0:48:4f:75:04:d6:ef:ae:80:c2:ab:6a:75: ba:bd:49:f2:ed:39:4a:a8:51:7c:81:62:89:6a:22:98:06:97: cb:8e:a3:4a:98:75:c4:04:59:2f:fd:8b:94:08:e3:09:8e:f1: 3a:13:1f:eb:db:1b:07:88:99:3b:aa:5f:89:65:36:ec:2e:92: f9:37:7a:e6:78:1f:8a:f2:23:59:3b:d5:98:27:47:e1:69:5d: 44:3d:ff:1a:e4:76:9e:11:f1:5f:24:80:bb:91:f4:30:5d:12: c3:44:17:eb:8c:87:b7:10:01:e4:c8:4f:a2:06:b0:e9:1e:9c: 32:d0:47:5a:4d:df:22:35:30:2f:3b:d5:c5:fd:41:55:d0:e5: 20:99:a2:f0:e5:3e:8c:a7:31:d8:90:24:34:ec:8a:9c:04:bf: 6b:3e:d2:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULQDpGJoWpdw1q3DVEGTSmLrdc9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE4MDEwODMzWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDIwMzlhYzY5Mzc5ZTY1MWE5OTIwOGU1OTBiYzY4MWIz NDA2ZWU3MjI5MTRjYzJlZDRmMzJjZjJjYTdhYzU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEfG/Raq9arrAm/sKed/YZNCA0nEGBOifHfo4+Y3qnHV5X r0865El5tdVnKYA7xOEnIwfMgIaOc5ZXeIA0+5T/QKrox57jcfboiUBzN42z6Krb ypcG78X+rw4dns4XQLr4S1ATeJQdTlSd01ycwgscIB+zm2JEzdXLAZ9fFs2EvdFh Z0QCcwnkSLY/2G4GuZ5DTHO9hyfawvMtjuf5pR4kceZvUIOrxpo3u9sV+pz/IYk9 MPOIEa7eZfuwlGJ8HAtXEGVFn7noJ6QgP+9BdVjnqLvVxPjw0t5NAH4rAlCb/tor DBwdGbqnDsKdR1qWJGvnQtwZDJZDD5bKZ934cQ5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSQB+TGqj7H+/WI+XzRDaBKsSCY0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmODE5OGQyLWZjNGUtNDdhZi05OGMxLWQzNDgzMWNmZGYxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnogwDQYJKoZIhvcNAQELBQADggEBAIMPJokHQOx9Xf/wn+PhktqCmIHt 2G5igWlDeRZLiJ/I4p5fUgv1p0nLQxLV52uYqZ7+KWrMt1nWQH+u99cbyvXevnzk J5obwAo43BOiRVqDzLyiKTFjyu3OX6Z8TdsZ4EhPdQTW766Awqtqdbq9SfLtOUqo UXyBYolqIpgGl8uOo0qYdcQEWS/9i5QI4wmO8ToTH+vbGweImTuqX4llNuwukvk3 euZ4H4ryI1k71ZgnR+FpXUQ9/xrkdp4R8V8kgLuR9DBdEsNEF+uMh7cQAeTIT6IG sOkenDLQR1pN3yI1MC871cX9QVXQ5SCZovDlPoynMdiQJDTsipwEv2s+0qM= -----END CERTIFICATE-----Generated at Sun Nov 8 05:38:23 2026 by rpki-client