$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa File: cf8998d8-99d4-4b0b-9648-f902779332fe.roa (raw, json) Hash identifier: o3ruDx1iBIK/4ie3M+/wzCbzO6uChvLFj2kNC7iZvd4= Subject key identifier: 63:F5:21:8C:FF:37:7A:42:6C:49:BE:03:9A:A0:D0:B1:1D:3B:CC:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7963741C8AB01F06712A2D980B87C686B7594B21 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa Signing time: Mon 26 Oct 2026 02:50:05 +0000 ROA not before: Mon 26 Oct 2026 02:50:05 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:74:1c:8a:b0:1f:06:71:2a:2d:98:0b:87:c6:86:b7:59:4b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:50:05 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=c84cb142da9f7fab5671e81d5c89a55d5350c51be7ed69e405b0bd74588b06bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:ba:ca:a6:52:74:f9:f4:e0:36:2c:50:a3: be:18:f6:3b:5e:bf:6d:f7:7d:e5:06:e7:f3:04:ff: f7:64:56:61:d6:74:ef:40:0e:33:a8:5b:69:6e:21: 12:50:36:94:16:04:2d:50:ce:03:d8:fc:e8:3e:75: 08:1f:03:61:48:f4:e1:1d:f7:b0:bc:42:c6:af:95: 45:ec:54:fd:d6:18:ba:96:ff:39:85:98:1b:b0:5c: 43:0c:95:08:1b:b1:dd:09:46:d0:7d:e5:27:b6:ae: a1:39:ea:7e:f8:50:09:27:99:12:41:aa:b5:da:e7: 30:52:28:dd:f7:00:79:f6:ed:93:af:c4:a9:00:dc: 37:f2:7f:fc:02:51:6a:7b:52:eb:2a:10:0c:38:a5: 58:92:65:1e:25:10:e0:9f:1c:0e:5b:35:1b:0e:19: 87:ef:eb:93:72:93:87:ba:55:05:26:8f:03:d0:2b: 94:ae:b2:1f:a8:99:a1:ab:a6:75:1b:34:41:72:bb: 24:ee:b3:af:2e:dc:5c:1c:f3:fc:f1:62:6f:e1:a9: 05:89:b5:30:8e:d3:d6:ea:82:20:7a:71:7f:fa:42: 17:92:0f:18:98:92:a9:32:c8:d8:a4:06:b2:8e:6b: f8:e2:b4:8e:3b:44:04:b5:d6:45:dd:ee:ed:22:6e: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:21:8C:FF:37:7A:42:6C:49:BE:03:9A:A0:D0:B1:1D:3B:CC:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.232.0/24 Signature Algorithm: sha256WithRSAEncryption 28:61:40:d0:2e:7c:91:f9:be:75:05:ba:24:1a:05:1b:0a:30: 21:8a:8d:ba:fb:d0:94:77:90:4f:e3:5b:e8:57:e5:bb:1d:af: ea:2e:09:22:1a:b4:52:72:0e:a3:1f:ea:1d:16:36:cc:e7:73: c5:44:fd:f1:73:49:33:1b:9a:12:73:58:ea:72:07:62:e0:a8: 96:97:1c:45:f9:4e:7e:f8:9f:87:82:ff:02:57:1b:47:e3:c4: c1:d8:5b:5b:57:ef:5f:4c:8d:e6:a3:60:75:b8:d9:6e:b0:4b: 28:31:99:ca:ad:23:ea:fb:ba:36:29:10:dd:06:d4:48:7b:49: c6:09:8f:03:11:02:43:2d:d1:89:79:70:51:de:bb:29:30:2c: 0d:70:23:ba:bb:57:07:65:cb:ea:6e:d5:5a:56:1a:87:45:0f: ca:33:0c:cc:ea:94:b9:1d:ec:3b:b3:4e:af:ff:c4:bf:90:2a: 56:db:8f:24:78:6c:ae:d5:3a:36:29:15:70:fc:15:49:3d:f5: 2e:8f:7d:64:0a:1e:f9:0e:c3:22:60:f5:0c:6c:ca:7d:1e:a9: 0d:7f:e2:4d:bc:04:b9:b1:c4:bb:b3:23:65:51:19:00:fc:6c: 7e:71:01:bc:37:d3:4c:e3:1d:9b:25:28:78:9f:d2:b3:5e:54: 4e:52:ef:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeWN0HIqwHwZxKi2YC4fGhrdZSyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDI1MDA1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODRjYjE0MmRhOWY3ZmFiNTY3MWU4MWQ1Yzg5YTU1ZDUz NTBjNTFiZTdlZDY5ZTQwNWIwYmQ3NDU4OGIwNmJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC937rKplJ0+fTgNixQo74Y9jtev233feUG5/ME//dkVmHW dO9ADjOoW2luIRJQNpQWBC1QzgPY/Og+dQgfA2FI9OEd97C8QsavlUXsVP3WGLqW /zmFmBuwXEMMlQgbsd0JRtB95Se2rqE56n74UAknmRJBqrXa5zBSKN33AHn27ZOv xKkA3Dfyf/wCUWp7UusqEAw4pViSZR4lEOCfHA5bNRsOGYfv65Nyk4e6VQUmjwPQ K5Sush+omaGrpnUbNEFyuyTus68u3Fwc8/zxYm/hqQWJtTCO09bqgiB6cX/6QheS DxiYkqkyyNikBrKOa/jitI47RAS11kXd7u0ibhnDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY/UhjP83ekJsSb4DmqDQsR07zKYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmODk5OGQ4LTk5ZDQtNGIwYi05NjQ4LWY5MDI3NzkzMzJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP3OgwDQYJKoZIhvcNAQELBQADggEBAChhQNAufJH5vnUFuiQaBRsKMCGK jbr70JR3kE/jW+hX5bsdr+ouCSIatFJyDqMf6h0WNsznc8VE/fFzSTMbmhJzWOpy B2LgqJaXHEX5Tn74n4eC/wJXG0fjxMHYW1tX719MjeajYHW42W6wSygxmcqtI+r7 ujYpEN0G1Eh7ScYJjwMRAkMt0Yl5cFHeuykwLA1wI7q7Vwdly+pu1VpWGodFD8oz DMzqlLkd7DuzTq//xL+QKlbbjyR4bK7VOjYpFXD8FUk99S6PfWQKHvkOwyJg9Qxs yn0eqQ1/4k28BLmxxLuzI2VRGQD8bH5xAbw300zjHZslKHif0rNeVE5S75E= -----END CERTIFICATE-----Generated at Sun Nov 8 09:29:18 2026 by rpki-client