$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e388e204-58ea-48b1-84fd-54964688d4b4.roa File: e388e204-58ea-48b1-84fd-54964688d4b4.roa (raw, json) Hash identifier: DJL7sOS6WnK4RQGYkkyjFanVqcEiw+YrH5l5u3rulbw= Subject key identifier: FF:88:E8:92:B8:F9:CC:1F:9F:1D:1C:DD:36:44:C2:90:0A:A6:1D:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08E40165227E3FA68881004AE22C58F1F4388364 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e388e204-58ea-48b1-84fd-54964688d4b4.roa Signing time: Mon 12 Oct 2026 01:11:15 +0000 ROA not before: Mon 12 Oct 2026 01:11:15 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e4:01:65:22:7e:3f:a6:88:81:00:4a:e2:2c:58:f1:f4:38:83:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 12 01:11:15 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=747edae27ad015b1b91bbb07227a1f647aae2d0db8e881f76a4406e5054a6db2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ac:47:5f:71:6c:c5:ec:10:d6:12:98:0e:5f: e8:c1:c9:3d:7f:72:ff:24:35:46:3e:e5:90:3b:a4: 46:f6:9a:60:5c:e1:29:5a:5c:34:a1:92:a0:a7:97: 0b:48:29:03:d3:a7:47:f4:7d:d0:9b:f9:a0:77:cf: b4:86:94:a3:3d:b1:e1:2e:8f:aa:56:51:cb:29:43: a1:3f:37:ff:88:99:8b:3d:43:c5:e2:ee:d0:a7:5c: 67:9f:03:28:59:2c:c9:f6:10:6a:b9:2d:b6:c9:e1: 77:e3:a5:ad:96:b7:a1:04:60:38:ec:4f:f8:83:7c: 12:9d:81:54:91:f6:33:8e:a1:ef:01:8b:06:1e:fe: c5:65:86:c9:5d:03:6a:5a:58:99:17:05:86:1e:d0: 7f:63:54:d4:d9:f5:bc:a6:3b:65:21:14:5c:61:d6: 44:98:0b:0c:15:1b:92:16:3e:24:f5:61:f5:8f:0a: 95:89:f8:7e:20:c2:66:3a:9a:e8:ea:55:23:34:e7: e1:95:96:91:8a:95:cd:55:5b:82:4a:48:db:cd:21: e3:ad:aa:c4:1d:cc:e3:18:f6:07:f2:f0:ae:b2:d0: 82:e8:0f:52:71:72:09:e5:54:b6:39:c1:81:aa:bc: 57:c3:56:7f:93:61:28:e5:81:6b:a3:cd:23:42:68: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:E8:92:B8:F9:CC:1F:9F:1D:1C:DD:36:44:C2:90:0A:A6:1D:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e388e204-58ea-48b1-84fd-54964688d4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.228.0/22 Signature Algorithm: sha256WithRSAEncryption 30:6f:40:c8:29:a0:73:f0:8c:71:3e:f6:2f:42:0d:c7:7a:7d: 6c:d2:df:a3:2a:5e:58:e7:6f:79:fd:22:f9:c9:fc:8c:8c:84: b4:a7:03:15:d8:7e:7d:c6:80:1b:c9:6a:89:21:1c:fc:18:7a: 30:25:86:94:ac:65:76:f2:d2:5b:3f:cc:5b:28:5a:d4:03:f6: 8d:92:70:bc:55:90:c9:d9:20:54:c6:cc:13:a4:67:9f:b7:8c: e3:f8:c9:ec:78:08:cd:d6:2a:fe:2e:e9:81:94:1a:52:28:69: dc:16:d7:fb:37:d3:9d:67:e2:b7:3b:cd:d2:95:63:b1:52:2e: a9:cc:61:9f:fb:4e:88:6b:1d:4b:d3:48:60:48:2b:b5:9b:a1: bf:89:f0:4e:fb:44:20:97:7e:df:d2:15:ae:e7:8e:f8:d5:8e: 4b:81:84:ce:36:4a:ee:4d:f1:97:bf:7e:3d:90:58:83:e8:e2: 54:9a:ce:27:af:23:88:a9:36:9d:b4:28:5e:4d:9a:9e:95:b6: 48:0e:c3:8a:66:0c:79:ab:7f:9b:a0:73:39:d6:1e:9b:7f:18: 1b:c1:e6:4c:04:49:6f:4e:50:1e:dc:21:82:7d:85:10:7c:64: 2b:ee:92:05:2b:33:76:28:e8:af:61:56:4c:69:85:0d:0b:c7: c5:05:f3:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCOQBZSJ+P6aIgQBK4ixY8fQ4g2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDEyMDExMTE1WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDdlZGFlMjdhZDAxNWIxYjkxYmJiMDcyMjdhMWY2NDdh YWUyZDBkYjhlODgxZjc2YTQ0MDZlNTA1NGE2ZGIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtrEdfcWzF7BDWEpgOX+jByT1/cv8kNUY+5ZA7pEb2mmBc 4SlaXDShkqCnlwtIKQPTp0f0fdCb+aB3z7SGlKM9seEuj6pWUcspQ6E/N/+ImYs9 Q8Xi7tCnXGefAyhZLMn2EGq5LbbJ4Xfjpa2Wt6EEYDjsT/iDfBKdgVSR9jOOoe8B iwYe/sVlhsldA2paWJkXBYYe0H9jVNTZ9bymO2UhFFxh1kSYCwwVG5IWPiT1YfWP CpWJ+H4gwmY6mujqVSM05+GVlpGKlc1VW4JKSNvNIeOtqsQdzOMY9gfy8K6y0ILo D1JxcgnlVLY5wYGqvFfDVn+TYSjlgWujzSNCaCfJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/4jokrj5zB+fHRzdNkTCkAqmHcYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzODhlMjA0LTU4ZWEtNDhiMS04NGZkLTU0OTY0Njg4ZDRiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3OQwDQYJKoZIhvcNAQELBQADggEBADBvQMgpoHPwjHE+9i9CDcd6fWzS 36MqXljnb3n9IvnJ/IyMhLSnAxXYfn3GgBvJaokhHPwYejAlhpSsZXby0ls/zFso WtQD9o2ScLxVkMnZIFTGzBOkZ5+3jOP4yex4CM3WKv4u6YGUGlIoadwW1/s3051n 4rc7zdKVY7FSLqnMYZ/7TohrHUvTSGBIK7Wbob+J8E77RCCXft/SFa7njvjVjkuB hM42Su5N8Ze/fj2QWIPo4lSazievI4ipNp20KF5Nmp6VtkgOw4pmDHmrf5ugcznW Hpt/GBvB5kwESW9OUB7cIYJ9hRB8ZCvukgUrM3Yo6K9hVkxphQ0Lx8UF8x4= -----END CERTIFICATE-----Generated at Sun Nov 8 01:10:38 2026 by rpki-client