$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe191473-02d8-4d24-90fb-35fe52305882.roa File: fe191473-02d8-4d24-90fb-35fe52305882.roa (raw, json) Hash identifier: X+5dDUIBoWhaV+eXJuNbjjPONi5gFTY8VxbUAkfoiPY= Subject key identifier: B5:97:10:D0:CF:30:97:6E:D7:3B:12:D3:AE:F2:17:9D:5D:22:52:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43C6F1F57C4C7A3353A4BF28CE2A9E8C42817EB2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe191473-02d8-4d24-90fb-35fe52305882.roa Signing time: Thu 15 Oct 2026 01:06:44 +0000 ROA not before: Thu 15 Oct 2026 01:06:44 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c6:f1:f5:7c:4c:7a:33:53:a4:bf:28:ce:2a:9e:8c:42:81:7e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:06:44 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=5b7996004f06cf586284bdb45bbca04833a8090082a40aca7389948ad8a89f84, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:26:62:8c:d0:dd:50:f6:0c:d8:bd:63:a8: 72:5e:42:7c:c2:03:0b:f0:ea:61:59:79:73:88:2e: 18:52:54:a8:32:22:e1:ca:48:e5:c0:e2:8a:8b:e4: 89:43:c0:71:cb:d5:96:78:6a:e1:de:21:98:33:04: 39:91:51:e5:53:f3:c5:22:ac:9d:6c:93:5a:1c:1e: 92:3e:76:a7:5e:99:aa:a9:9d:8b:fd:df:ab:fb:bd: bf:44:a2:f3:47:f2:97:7f:95:64:43:4f:09:6a:eb: 68:b0:de:4f:a1:77:78:84:4c:d2:f5:b2:2f:89:6e: 4d:fb:83:27:0d:01:1c:ca:41:69:70:3e:34:d3:30: 98:f3:81:19:51:a6:00:b3:a1:97:c6:c6:a3:bd:55: c4:c6:b0:6b:c2:81:be:ac:18:c8:2a:c2:bc:ee:7b: 87:d1:e1:5c:a0:3b:da:ca:4f:79:7f:ea:26:7e:2c: cd:ad:57:c9:60:82:47:e1:57:2e:59:70:83:a0:7c: fd:2d:08:1e:c0:e7:e0:cb:d7:8e:05:7c:cf:3c:11: 1b:69:9a:bd:dd:ee:95:14:b4:5f:9e:f0:70:48:cc: 6c:b6:23:5f:f3:4a:65:6d:e2:e7:08:c3:f0:54:86: 33:fe:be:1a:3f:b1:3c:43:71:63:e8:86:c3:5e:7b: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:97:10:D0:CF:30:97:6E:D7:3B:12:D3:AE:F2:17:9D:5D:22:52:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe191473-02d8-4d24-90fb-35fe52305882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.32.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:5e:b6:38:6f:1a:8c:a2:4a:11:df:c3:66:6c:9e:31:9b:07: d0:47:86:1b:fc:cc:57:d3:ad:06:0e:3f:de:e3:e4:97:6d:b4: 03:b3:aa:6f:a3:de:2a:06:26:75:5e:41:a4:7c:88:e1:04:7f: 35:64:be:0e:0b:c0:e1:21:aa:a0:47:e7:df:34:14:f9:a5:92: 2e:c7:b7:b9:4c:24:5a:c5:ca:75:45:52:31:9f:d5:60:82:54: 7c:53:95:cb:e3:cf:5a:38:d5:be:d8:69:4d:e0:36:04:79:35: fd:ec:23:64:24:10:02:11:e6:ec:b3:23:61:0d:48:9b:df:c1: 5a:29:3d:9f:cd:90:08:76:37:e8:2f:69:0c:b6:68:76:5d:b5: 7f:49:9a:20:4b:8c:64:55:51:1d:4f:25:7f:1e:63:7a:34:e7: 17:3f:37:07:6f:7c:2a:59:60:6b:75:65:2a:a0:f1:4d:82:e2: 84:bc:d1:b8:49:41:aa:3e:9a:32:aa:d8:a1:e9:04:df:5b:ea: 3b:4b:0e:41:ac:9d:17:cd:b4:8e:57:10:c5:72:c6:fb:a6:70: a0:28:b0:b0:3e:51:b4:1b:d5:56:53:f9:92:db:a5:75:61:85: 7e:8c:61:83:22:87:41:44:8f:53:e8:be:1e:70:73:2c:eb:24: 4a:f9:7b:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ8bx9XxMejNTpL8oziqejEKBfrIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDEwNjQ0WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yjc5OTYwMDRmMDZjZjU4NjI4NGJkYjQ1YmJjYTA0ODMz YTgwOTAwODJhNDBhY2E3Mzg5OTQ4YWQ4YTg5Zjg0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfyCZijNDdUPYM2L1jqHJeQnzCAwvw6mFZeXOILhhSVKgy IuHKSOXA4oqL5IlDwHHL1ZZ4auHeIZgzBDmRUeVT88UirJ1sk1ocHpI+dqdemaqp nYv936v7vb9EovNH8pd/lWRDTwlq62iw3k+hd3iETNL1si+Jbk37gycNARzKQWlw PjTTMJjzgRlRpgCzoZfGxqO9VcTGsGvCgb6sGMgqwrzue4fR4VygO9rKT3l/6iZ+ LM2tV8lggkfhVy5ZcIOgfP0tCB7A5+DL144FfM88ERtpmr3d7pUUtF+e8HBIzGy2 I1/zSmVt4ucIw/BUhjP+vho/sTxDcWPohsNeewEVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtZcQ0M8wl27XOxLTrvIXnV0iUtowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZlMTkxNDczLTAyZDgtNGQyNC05MGZiLTM1ZmU1MjMwNTg4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3CAwDQYJKoZIhvcNAQELBQADggEBAH5etjhvGoyiShHfw2ZsnjGbB9BH hhv8zFfTrQYOP97j5JdttAOzqm+j3ioGJnVeQaR8iOEEfzVkvg4LwOEhqqBH5980 FPmlki7Ht7lMJFrFynVFUjGf1WCCVHxTlcvjz1o41b7YaU3gNgR5Nf3sI2QkEAIR 5uyzI2ENSJvfwVopPZ/NkAh2N+gvaQy2aHZdtX9JmiBLjGRVUR1PJX8eY3o05xc/ NwdvfCpZYGt1ZSqg8U2C4oS80bhJQao+mjKq2KHpBN9b6jtLDkGsnRfNtI5XEMVy xvumcKAosLA+UbQb1VZT+ZLbpXVhhX6MYYMih0FEj1Povh5wcyzrJEr5ez0= -----END CERTIFICATE-----Generated at Tue Nov 10 05:08:44 2026 by rpki-client