$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa File: eca36373-2c2b-4810-b0c5-c530f9afed33.roa (raw, json) Hash identifier: oXPcLAOyUNmQuuML048uo/gd/YKEAvpySv8nAPJRfV0= Subject key identifier: 64:00:43:D1:35:EB:51:B7:C1:59:69:73:07:10:96:97:09:8C:B8:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F83B51996ABDE0BC4E497EC50357E7F7305A2FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa Signing time: Mon 26 Oct 2026 03:21:00 +0000 ROA not before: Mon 26 Oct 2026 03:21:00 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:b5:19:96:ab:de:0b:c4:e4:97:ec:50:35:7e:7f:73:05:a2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 03:21:00 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=fce2e40d125cb582fed2e4b470c1d81b304cf5190479593c1baaf3953da5398a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:52:87:fd:06:d4:66:7c:1f:3a:e2:c7:16: fc:72:bd:0e:84:2a:50:f7:86:7d:de:10:7f:60:c0: 5d:db:5a:50:aa:45:03:2d:b4:e1:c0:25:d4:a8:e3: b6:17:98:c2:45:d1:56:f6:11:d8:53:b3:79:60:d4: 82:1c:ed:fe:26:22:c8:3c:09:79:06:46:11:82:3f: 73:23:46:85:9b:06:85:2c:17:08:87:e9:e5:74:8d: aa:91:79:89:e2:56:de:53:6c:e8:14:14:1c:55:7b: 97:7e:3a:e1:1c:85:6a:0b:a4:98:bf:78:08:ca:d5: f3:19:29:03:a0:2d:90:5b:98:81:72:ac:61:98:df: ed:e6:45:87:6e:8b:4a:cc:0c:8a:1e:74:e0:d9:e3: 22:7a:64:87:e0:e2:e6:16:82:df:de:28:37:e7:cd: 64:76:e5:00:19:57:9a:63:93:bc:fe:aa:a5:b2:95: 43:a8:fe:3a:b7:a1:0b:17:4c:95:78:4e:6c:f3:9b: 4d:92:05:04:88:85:c0:61:26:2d:8c:67:0b:d1:da: 1b:75:99:eb:06:0a:d7:2a:b3:48:5d:0f:97:9a:d9: eb:5e:90:48:61:7c:20:95:71:31:02:b9:e4:53:9d: 26:c7:aa:8c:ae:fe:c4:5c:95:03:d4:d9:bc:80:e0: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:00:43:D1:35:EB:51:B7:C1:59:69:73:07:10:96:97:09:8C:B8:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.88.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:06:9e:65:9b:65:3e:e5:54:f6:99:2d:ad:05:4d:f1:ea:a4: 29:ac:0c:21:ee:9a:63:a9:50:b5:d8:74:5a:c9:13:c0:1d:b1: f1:8f:aa:c5:b7:6b:89:32:fc:96:f9:23:2d:58:4b:c5:82:52: 26:5d:19:7a:d1:5b:e5:b6:0b:b0:f8:b6:68:71:73:c8:3a:5d: b7:8d:fd:82:81:0a:2d:16:e0:4e:7e:e6:5e:fa:39:ad:38:bd: 54:a5:33:86:32:68:8c:6d:b5:ed:de:8f:71:28:f9:84:6a:27: 0e:ce:4c:dc:3a:39:20:b0:bc:45:29:36:2b:2d:eb:fb:1b:6c: 8e:e4:93:12:a6:2c:2a:9e:a0:b9:2c:af:66:a2:fb:25:3f:46: 28:b4:ff:04:6e:80:09:57:d7:06:58:b9:7f:35:18:af:38:03: 7f:62:cc:02:7e:cd:7d:9f:d0:b5:3e:eb:d2:2c:cb:8f:47:1a: 35:e4:f9:06:76:0d:d8:05:d0:94:c1:e8:ea:1d:3f:df:51:1d: 1e:63:46:7a:08:b3:8c:66:69:d7:5b:45:f7:b0:8f:f8:91:b4: e3:d9:ac:f3:70:ca:46:51:4d:8d:a7:2a:b9:89:ba:b7:98:57: fa:6c:92:bf:55:3e:65:af:a2:ec:12:db:f2:9d:ca:bc:b5:aa: 35:b7:cf:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP4O1GZar3gvE5JfsUDV+f3MFov8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDMyMTAwWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2UyZTQwZDEyNWNiNTgyZmVkMmU0YjQ3MGMxZDgxYjMw NGNmNTE5MDQ3OTU5M2MxYmFhZjM5NTNkYTUzOThhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7b1KH/QbUZnwfOuLHFvxyvQ6EKlD3hn3eEH9gwF3bWlCq RQMttOHAJdSo47YXmMJF0Vb2EdhTs3lg1IIc7f4mIsg8CXkGRhGCP3MjRoWbBoUs FwiH6eV0jaqReYniVt5TbOgUFBxVe5d+OuEchWoLpJi/eAjK1fMZKQOgLZBbmIFy rGGY3+3mRYdui0rMDIoedODZ4yJ6ZIfg4uYWgt/eKDfnzWR25QAZV5pjk7z+qqWy lUOo/jq3oQsXTJV4Tmzzm02SBQSIhcBhJi2MZwvR2ht1mesGCtcqs0hdD5ea2ete kEhhfCCVcTECueRTnSbHqoyu/sRclQPU2byA4PUtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZABD0TXrUbfBWWlzBxCWlwmMuIcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjYTM2MzczLTJjMmItNDgxMC1iMGM1LWM1MzBmOWFmZWQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsVgwDQYJKoZIhvcNAQELBQADggEBAHoGnmWbZT7lVPaZLa0FTfHqpCms DCHummOpULXYdFrJE8AdsfGPqsW3a4ky/Jb5Iy1YS8WCUiZdGXrRW+W2C7D4tmhx c8g6XbeN/YKBCi0W4E5+5l76Oa04vVSlM4YyaIxtte3ej3Eo+YRqJw7OTNw6OSCw vEUpNist6/sbbI7kkxKmLCqeoLksr2ai+yU/Rii0/wRugAlX1wZYuX81GK84A39i zAJ+zX2f0LU+69Isy49HGjXk+QZ2DdgF0JTB6OodP99RHR5jRnoIs4xmaddbRfew j/iRtOPZrPNwykZRTY2nKrmJureYV/pskr9VPmWvouwS2/Kdyry1qjW3z1A= -----END CERTIFICATE-----Generated at Sun Nov 8 03:55:48 2026 by rpki-client