$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e761bb19-742b-44f4-85d5-a7a116c92228.roa File: e761bb19-742b-44f4-85d5-a7a116c92228.roa (raw, json) Hash identifier: c4k+7Zt1TUN+FeeV54AXUamZel9/qcNoQQ/peXE2CVs= Subject key identifier: 31:59:55:39:3E:AE:73:E0:11:2B:54:EF:35:09:66:2D:57:07:BC:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 645BB7324D2013E063EC934C105F8F65774404B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e761bb19-742b-44f4-85d5-a7a116c92228.roa Signing time: Sun 11 Oct 2026 14:07:31 +0000 ROA not before: Sun 11 Oct 2026 14:07:31 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5b:b7:32:4d:20:13:e0:63:ec:93:4c:10:5f:8f:65:77:44:04:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 11 14:07:31 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=3f551862be1a77d5e8049ad474ebfce34a60df590cfbee0a75dc3a96ffeaf37f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4d:bc:5a:b3:83:38:33:08:96:2d:79:82:51: df:fe:bd:45:83:aa:e9:02:33:f2:29:86:a2:c4:08: ed:28:ca:38:9b:e6:02:ee:ae:1e:b2:e5:7a:80:90: b0:f6:79:8e:dd:2a:e4:3c:13:0f:19:87:58:f8:94: 97:b8:7d:6f:b9:d5:1e:53:15:bc:e9:09:2e:db:58: 25:85:0c:17:39:7a:60:6a:7a:90:e2:a2:e9:bc:3e: 85:d9:5e:99:64:92:39:98:7d:e2:2f:92:bf:9f:7c: 37:6c:1a:30:64:36:9a:3b:0a:52:18:a4:13:d4:d6: 33:e0:8c:3f:f8:66:9a:44:fa:a0:b8:5e:c6:c0:78: 46:23:c7:94:0c:ae:35:68:ba:7d:b5:11:f3:4a:4a: 95:9f:da:80:75:12:a3:3f:11:94:ef:46:b3:23:f3: 47:76:b4:cf:27:d8:7f:69:7d:5a:11:0c:e8:6f:d7: 6d:89:d5:6f:e6:93:31:7e:87:cd:a6:e0:87:c5:5d: 1d:29:83:62:3f:a2:dc:e6:74:e1:ac:52:e0:03:2c: bb:d4:55:97:74:de:fc:60:31:5d:bc:c7:d3:4a:b5: c3:5f:79:50:7a:65:ff:a8:a3:b1:cf:dc:e2:86:93: 5d:86:a2:f9:d5:85:9b:9a:bb:8c:b0:30:c6:df:c6: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:59:55:39:3E:AE:73:E0:11:2B:54:EF:35:09:66:2D:57:07:BC:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e761bb19-742b-44f4-85d5-a7a116c92228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:7d:6c:f0:9e:06:53:4a:8e:d3:1c:bf:aa:d1:b2:e7:e4:b8: da:c2:e5:07:a3:b3:82:14:f4:f6:bb:1f:10:15:49:1b:f3:22: 9b:8b:07:52:13:14:97:3c:5e:bd:55:03:a0:e1:9a:0c:59:85: fb:e6:5c:db:b9:53:fd:72:1a:48:e7:d8:15:9b:3a:e3:da:cb: 9b:c1:41:a1:9c:df:91:b7:7c:92:09:b4:db:6a:ac:2d:a1:87: 55:fa:3a:78:37:cb:56:b1:2e:5f:aa:4a:1d:39:b4:d7:ae:ec: a2:ac:b2:95:ea:38:6b:24:66:81:c3:47:4e:b8:21:49:61:70: d9:23:3e:b8:9d:3c:34:f9:53:30:67:c0:77:ad:10:f1:af:43: 7e:88:76:f4:36:9a:89:dd:db:f9:1d:d7:ef:16:12:45:55:71: 19:a4:e4:9e:a1:fd:4e:84:35:88:1d:8c:ca:f2:07:fe:fe:67: dd:ee:fc:fa:65:82:9d:e9:f3:32:14:eb:b5:aa:32:b5:78:ae: 69:35:85:33:9d:90:24:fe:30:a5:f2:b8:fe:98:7f:0c:e0:9a: f0:d4:41:e3:77:53:5a:84:60:7a:a6:56:b1:da:d5:0d:cf:e0: e8:79:11:be:06:16:d6:4f:f5:77:f1:e3:2f:e6:50:2d:56:b0: 3d:a9:a4:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZFu3Mk0gE+Bj7JNMEF+PZXdEBLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDExMTQwNzMxWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjU1MTg2MmJlMWE3N2Q1ZTgwNDlhZDQ3NGViZmNlMzRh NjBkZjU5MGNmYmVlMGE3NWRjM2E5NmZmZWFmMzdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfTbxas4M4MwiWLXmCUd/+vUWDqukCM/IphqLECO0oyjib 5gLurh6y5XqAkLD2eY7dKuQ8Ew8Zh1j4lJe4fW+51R5TFbzpCS7bWCWFDBc5emBq epDioum8PoXZXplkkjmYfeIvkr+ffDdsGjBkNpo7ClIYpBPU1jPgjD/4ZppE+qC4 XsbAeEYjx5QMrjVoun21EfNKSpWf2oB1EqM/EZTvRrMj80d2tM8n2H9pfVoRDOhv 122J1W/mkzF+h82m4IfFXR0pg2I/otzmdOGsUuADLLvUVZd03vxgMV28x9NKtcNf eVB6Zf+oo7HP3OKGk12GovnVhZuau4ywMMbfxjWtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMVlVOT6uc+ARK1TvNQlmLVcHvDgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U3NjFiYjE5LTc0MmItNDRmNC04NWQ1LWE3YTExNmM5MjIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPxRQwDQYJKoZIhvcNAQELBQADggEBADt9bPCeBlNKjtMcv6rRsufkuNrC 5Qejs4IU9Pa7HxAVSRvzIpuLB1ITFJc8Xr1VA6DhmgxZhfvmXNu5U/1yGkjn2BWb OuPay5vBQaGc35G3fJIJtNtqrC2hh1X6Ong3y1axLl+qSh05tNeu7KKsspXqOGsk ZoHDR064IUlhcNkjPridPDT5UzBnwHetEPGvQ36IdvQ2mond2/kd1+8WEkVVcRmk 5J6h/U6ENYgdjMryB/7+Z93u/Pplgp3p8zIU67WqMrV4rmk1hTOdkCT+MKXyuP6Y fwzgmvDUQeN3U1qEYHqmVrHa1Q3P4Oh5Eb4GFtZP9Xfx4y/mUC1WsD2ppCY= -----END CERTIFICATE-----Generated at Sun Nov 8 04:06:13 2026 by rpki-client