$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df529df2-da97-4aa4-8d39-4289994800bf.roa File: df529df2-da97-4aa4-8d39-4289994800bf.roa (raw, json) Hash identifier: 25AkAzEB9oCeGZ+2yDtZy1UJCBpED6o1Q8OgUAg2Uq8= Subject key identifier: D2:D3:8A:0F:90:96:1B:4F:A7:CD:7E:20:7D:F9:DE:AE:C0:9C:38:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B414BBA8AD149431AE15745A926FBC1F784BA17 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df529df2-da97-4aa4-8d39-4289994800bf.roa Signing time: Mon 26 Oct 2026 02:02:58 +0000 ROA not before: Mon 26 Oct 2026 02:02:58 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:41:4b:ba:8a:d1:49:43:1a:e1:57:45:a9:26:fb:c1:f7:84:ba:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:02:58 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=1981f15bb56a7307d78262688baec50322f1acfb29a650e83dfeb91d2a9922f9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:55:8e:95:03:79:ce:84:49:bb:ba:be:63: 11:04:85:52:67:9e:c6:a7:4c:e5:df:48:24:75:50: 9f:41:bb:d7:70:1a:6a:7e:36:01:03:d9:b5:cf:52: 29:03:dd:ba:a5:d4:5c:8c:39:9d:33:19:12:5e:3e: 9d:5a:10:d3:9d:eb:ca:7d:80:a8:50:a2:c5:24:ac: a1:77:27:86:57:b5:9e:2e:01:fb:c3:d8:52:7c:10: ef:18:8a:fc:b5:8a:dd:d9:06:8d:66:f9:ad:03:fb: 12:6f:8d:4f:75:a7:ed:99:ad:a7:d7:e3:d9:31:c5: ed:e3:3c:ba:33:ee:60:41:a0:bb:4b:2e:78:ee:e7: 56:8e:03:cf:5a:db:58:4c:4d:84:79:08:a2:81:55: d1:f4:65:2a:4f:02:1d:65:b0:bb:dd:4e:cf:ee:3b: 1b:fd:74:07:ce:60:6f:ae:c6:31:6b:9b:e0:3b:28: 60:fb:d2:34:84:b7:7c:c2:6e:6b:65:32:ce:68:27: fc:44:1d:26:f4:d9:2a:af:f5:ff:89:ab:c9:9f:01: 73:9f:2a:f5:21:6b:95:fc:d4:0f:42:ab:cf:91:db: 98:33:f1:21:35:90:5b:e6:43:90:b2:c6:f5:8e:bd: 81:63:d5:d3:1c:0e:01:7a:22:4d:58:b6:06:f2:d6: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D3:8A:0F:90:96:1B:4F:A7:CD:7E:20:7D:F9:DE:AE:C0:9C:38:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df529df2-da97-4aa4-8d39-4289994800bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:d8:31:2e:da:ff:fc:62:c0:c4:00:22:6c:50:e1:d4:0d:b0: 03:9b:ea:01:93:f6:da:b7:7b:44:1d:aa:17:06:9d:3a:2f:3d: c7:ee:86:ef:66:e0:36:f9:e2:a6:c8:5d:87:82:8f:4e:1c:84: 03:8b:0a:f1:c7:72:42:e0:a1:55:8a:7c:01:d3:4e:d0:a4:3e: 62:a7:75:e4:c9:9d:49:be:f4:57:9a:a3:fd:36:cb:ab:f3:cd: 1f:48:5d:ee:ee:6d:73:74:5c:49:5f:8d:e8:ef:42:07:14:4c: 9f:47:5c:d6:ce:13:47:6e:3f:ff:22:a0:bb:0c:e6:c5:3b:a9: 63:24:ae:1c:96:9f:60:69:e9:ba:fb:90:e9:da:45:69:96:8d: 85:4a:61:5a:e8:b9:c0:bb:ae:e4:0b:2f:89:4a:4f:60:be:7d: b7:8c:7e:9b:71:6a:bd:10:8d:41:38:de:07:5a:fe:2b:6f:1c: 84:64:26:41:29:fe:14:c1:a4:10:68:48:eb:5e:33:b7:87:65: 64:10:9f:92:e8:1d:cb:90:73:ac:23:d4:43:87:41:03:63:0c: 18:e2:f1:67:a0:e3:c3:66:6c:a5:b3:97:a8:db:01:32:ea:69: 1f:da:7b:4d:e6:15:b1:bd:be:2a:3f:bc:02:d5:90:5b:f0:5a: c1:da:b4:30 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK0FLuorRSUMa4VdFqSb7wfeEuhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIwMjU4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTgxZjE1YmI1NmE3MzA3ZDc4MjYyNjg4YmFlYzUwMzIy ZjFhY2ZiMjlhNjUwZTgzZGZlYjkxZDJhOTkyMmY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIkFWOlQN5zoRJu7q+YxEEhVJnnsanTOXfSCR1UJ9Bu9dw Gmp+NgED2bXPUikD3bql1FyMOZ0zGRJePp1aENOd68p9gKhQosUkrKF3J4ZXtZ4u AfvD2FJ8EO8Yivy1it3ZBo1m+a0D+xJvjU91p+2ZrafX49kxxe3jPLoz7mBBoLtL Lnju51aOA89a21hMTYR5CKKBVdH0ZSpPAh1lsLvdTs/uOxv9dAfOYG+uxjFrm+A7 KGD70jSEt3zCbmtlMs5oJ/xEHSb02Sqv9f+Jq8mfAXOfKvUha5X81A9Cq8+R25gz 8SE1kFvmQ5CyxvWOvYFj1dMcDgF6Ik1Ytgby1v+TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0tOKD5CWG0+nzX4gffnersCcOIIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmNTI5ZGYyLWRhOTctNGFhNC04ZDM5LTQyODk5OTQ4MDBiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPkDANBgkqhkiG9w0BAQsFAAOCAQEAmdgxLtr//GLAxAAibFDh1A2wA5vq AZP22rd7RB2qFwadOi89x+6G72bgNvnipshdh4KPThyEA4sK8cdyQuChVYp8AdNO 0KQ+Yqd15MmdSb70V5qj/TbLq/PNH0hd7u5tc3RcSV+N6O9CBxRMn0dc1s4TR24/ /yKguwzmxTupYySuHJafYGnpuvuQ6dpFaZaNhUphWui5wLuu5AsviUpPYL59t4x+ m3FqvRCNQTjeB1r+K28chGQmQSn+FMGkEGhI614zt4dlZBCfkugdy5BzrCPUQ4dB A2MMGOLxZ6Djw2ZspbOXqNsBMuppH9p7TeYVsb2+Kj+8AtWQW/Bawdq0MA== -----END CERTIFICATE-----Generated at Sun Nov 8 00:05:56 2026 by rpki-client