$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c13d626a-15ae-469b-af83-18af705f1c0a.roa File: c13d626a-15ae-469b-af83-18af705f1c0a.roa (raw, json) Hash identifier: JAG2Tc/UrEwAZV0+5FRwFAHbASsKli/Yc30PnqPu+rE= Subject key identifier: 7E:83:2E:D8:17:87:DD:EA:F7:83:5B:80:A7:B9:C1:F1:73:B9:50:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01BDE15C9B692E9F308B9CA5AF742E90370D2E15 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c13d626a-15ae-469b-af83-18af705f1c0a.roa Signing time: Sun 18 Oct 2026 01:08:30 +0000 ROA not before: Sun 18 Oct 2026 01:08:30 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bd:e1:5c:9b:69:2e:9f:30:8b:9c:a5:af:74:2e:90:37:0d:2e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 01:08:30 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=defa3b0e1a2cb7242cd1a9ac3f63a99a362f54408f636af8a53c02fd68194aa9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:6f:7b:6f:20:b0:96:f4:ea:02:10:26:e0: 68:bf:d6:14:1c:33:76:fb:10:fc:32:9e:4b:ee:6e: 81:0f:5d:b1:eb:5d:72:5f:fb:e1:2e:33:44:54:a2: b9:56:a3:40:c5:53:87:1a:2c:db:72:bb:5d:73:cd: 0d:3c:01:a3:b0:2b:6c:20:90:92:e9:de:14:43:0c: ca:fc:a3:fc:44:80:f6:e8:1d:cb:b8:b8:c2:65:b6: 4b:2c:2d:de:0c:c3:95:92:42:6c:aa:5e:f9:88:75: ed:38:6c:e1:86:0c:ff:48:de:f0:7a:63:96:46:76: 58:2f:d1:48:8f:08:c9:7b:75:aa:2d:98:14:92:c0: ea:3c:7f:25:50:03:f5:87:89:5e:18:ea:a5:ad:73: f1:ea:a1:5b:ca:53:15:c1:9f:1b:db:3f:c9:f2:65: 16:a9:62:75:af:ab:35:96:5a:e2:8d:cd:7b:43:82: 0c:80:68:e4:d4:c9:31:cc:91:31:58:8b:85:77:f9: 71:22:42:74:1f:41:cd:2c:74:53:27:1e:7d:5d:1c: 57:7c:13:a1:85:6c:57:ca:64:d5:84:da:40:42:c7: d4:e1:e4:93:28:3a:c3:84:69:e7:e4:dc:c0:e3:17: c7:65:26:e2:09:5a:e5:e6:86:f2:b2:25:3e:06:42: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:2E:D8:17:87:DD:EA:F7:83:5B:80:A7:B9:C1:F1:73:B9:50:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c13d626a-15ae-469b-af83-18af705f1c0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.218.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:cf:50:bd:20:08:21:fa:42:1e:89:6a:da:1c:5d:c9:ec:5a: cf:1f:5c:8a:12:d2:35:2c:61:a6:6c:b4:31:36:16:08:18:b6: 20:f9:67:8f:4f:6b:cd:6b:7c:83:94:d5:7e:b2:27:3a:83:6c: 4e:94:98:09:b1:6b:30:b1:59:f1:ff:59:e4:a7:32:b6:26:b2: 31:9b:ea:8b:d7:a3:8e:71:25:a3:84:66:d4:e6:86:79:ab:6b: 22:26:a3:bf:a8:90:aa:f4:08:72:59:19:9a:a1:b8:69:ab:5a: 64:07:56:1f:48:e4:1a:f1:eb:54:da:5c:76:96:21:be:07:4d: e0:68:ca:39:fc:12:00:c3:93:cd:df:cb:20:a7:ce:fa:86:2f: 3d:a9:19:b9:28:01:79:1f:cc:7c:ea:85:77:3a:89:5b:ff:8d: 86:81:66:81:b2:c6:75:6d:44:4c:60:19:99:d5:3d:84:cc:79: ed:44:10:21:2b:f2:49:0b:15:1e:3d:4c:bb:a5:99:72:51:97: 04:66:5c:fe:68:ce:be:f5:6a:ae:4b:55:e1:19:37:ea:09:00: 0e:03:3b:ef:1c:be:e7:00:24:14:55:55:58:f3:e4:a8:fb:30: da:6d:bf:56:6d:3c:41:65:47:e6:e0:b1:8e:56:c3:40:ca:7e: 96:e1:a0:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAb3hXJtpLp8wi5ylr3QukDcNLhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE4MDEwODMwWhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWZhM2IwZTFhMmNiNzI0MmNkMWE5YWMzZjYzYTk5YTM2 MmY1NDQwOGY2MzZhZjhhNTNjMDJmZDY4MTk0YWE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVZW97byCwlvTqAhAm4Gi/1hQcM3b7EPwynkvuboEPXbHr XXJf++EuM0RUorlWo0DFU4caLNtyu11zzQ08AaOwK2wgkJLp3hRDDMr8o/xEgPbo Hcu4uMJltkssLd4Mw5WSQmyqXvmIde04bOGGDP9I3vB6Y5ZGdlgv0UiPCMl7daot mBSSwOo8fyVQA/WHiV4Y6qWtc/HqoVvKUxXBnxvbP8nyZRapYnWvqzWWWuKNzXtD ggyAaOTUyTHMkTFYi4V3+XEiQnQfQc0sdFMnHn1dHFd8E6GFbFfKZNWE2kBCx9Th 5JMoOsOEaefk3MDjF8dlJuIJWuXmhvKyJT4GQuonAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfoMu2BeH3er3g1uAp7nB8XO5UP4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MxM2Q2MjZhLTE1YWUtNDY5Yi1hZjgzLTE4YWY3MDVmMWMwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPntowDQYJKoZIhvcNAQELBQADggEBAEzPUL0gCCH6Qh6JatocXcnsWs8f XIoS0jUsYaZstDE2FggYtiD5Z49Pa81rfIOU1X6yJzqDbE6UmAmxazCxWfH/WeSn MrYmsjGb6ovXo45xJaOEZtTmhnmrayImo7+okKr0CHJZGZqhuGmrWmQHVh9I5Brx 61TaXHaWIb4HTeBoyjn8EgDDk83fyyCnzvqGLz2pGbkoAXkfzHzqhXc6iVv/jYaB ZoGyxnVtRExgGZnVPYTMee1EECEr8kkLFR49TLulmXJRlwRmXP5ozr71aq5LVeEZ N+oJAA4DO+8cvucAJBRVVVjz5Kj7MNptv1ZtPEFlR+bgsY5Ww0DKfpbhoH8= -----END CERTIFICATE-----Generated at Sun Nov 8 06:02:51 2026 by rpki-client