$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8b6cc79-bd6e-4f0b-bbc6-fb03ffbab7ea.roa File: e8b6cc79-bd6e-4f0b-bbc6-fb03ffbab7ea.roa (raw, json) Hash identifier: N745YAeKhE9ZX3itJbpzFDn8nwG103euObFFLLzRE/c= Subject key identifier: 0C:9F:86:7A:1A:10:5A:65:7C:69:26:8F:5F:24:D4:3E:F7:DA:60:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31161C2825C10AABD794A3B4E9B77CBC37376537 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8b6cc79-bd6e-4f0b-bbc6-fb03ffbab7ea.roa Signing time: Mon 26 Oct 2026 02:03:39 +0000 ROA not before: Mon 26 Oct 2026 02:03:39 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:16:1c:28:25:c1:0a:ab:d7:94:a3:b4:e9:b7:7c:bc:37:37:65:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:03:39 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=685bc3b3db01f94b7e9ee55e5189149657a51e588bd74ce6f26a18923d97f1ae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:9e:9c:eb:35:5c:e7:9f:81:da:8f:be:dd: 0a:06:da:ad:c3:57:05:69:ba:a4:41:4e:8d:e2:55: e8:0b:c0:22:5c:05:31:c6:d7:99:ae:8d:a2:89:03: ce:54:58:61:d8:bc:2b:5b:6a:78:63:00:59:c4:88: 07:c7:e4:87:ef:2a:85:0d:48:b6:ee:44:e8:61:a1: 48:6d:22:4e:68:6f:59:02:6c:70:fa:93:ab:97:9b: 74:be:16:7e:85:6e:8d:b2:1d:86:2d:34:7e:33:f6: 8f:59:88:6e:44:7f:c2:5a:70:b0:39:05:06:bf:7e: 32:14:de:60:3d:2f:69:73:15:09:4f:e1:22:04:bb: 49:32:f3:09:23:bb:b2:6c:c6:85:1b:34:b1:61:f6: f3:72:2f:ac:c9:9e:4f:90:b2:ea:9c:76:fa:ff:1f: e9:72:ab:38:d7:81:ac:5b:5a:ea:17:de:cf:4b:82: 90:54:e6:fa:1d:0f:07:5a:fe:cb:79:fc:11:a2:c8: e0:72:d6:39:7e:76:3d:9c:90:25:bd:b7:9f:1f:d1: 42:5a:53:68:3b:a1:b8:a8:c8:19:66:ff:76:61:71: f1:e1:ab:d8:a0:7d:24:d5:fc:67:3c:6c:de:2c:4d: 9d:d4:82:a1:05:3a:d2:45:16:6e:2d:a3:ea:a8:d4: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:86:7A:1A:10:5A:65:7C:69:26:8F:5F:24:D4:3E:F7:DA:60:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8b6cc79-bd6e-4f0b-bbc6-fb03ffbab7ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.120.0/21 Signature Algorithm: sha256WithRSAEncryption 97:31:c7:16:75:58:e1:75:ef:6f:e5:55:d4:aa:22:92:bc:64: c5:38:96:3f:f8:57:01:d9:9c:b2:b5:d7:54:1d:05:18:f5:63: 10:be:ba:24:05:c3:2d:c9:3c:09:c7:f7:8d:22:98:3a:ae:54: d0:69:b2:01:78:47:cd:e5:5b:88:b1:12:6f:ae:18:5e:c2:d5: 47:ee:98:05:e3:50:6c:5a:3a:ef:3c:fb:f7:d7:9d:c3:b1:1f: c3:2a:c2:58:03:9b:c2:ed:37:46:11:f6:aa:95:a2:83:19:b2: 0e:cf:59:64:00:f4:d3:ed:ac:21:08:45:ab:4b:39:34:a1:da: e8:e4:08:c4:c8:40:89:16:9c:20:ba:1b:54:ca:5b:c4:6c:b1: c4:b1:1d:62:9c:58:c7:bf:e3:de:68:2c:98:9f:a5:1f:1a:3e: 3c:08:dc:8c:14:ba:9f:af:d2:2e:a0:f2:29:88:68:e4:e9:dd: c7:d8:91:1b:e4:e9:ff:c8:2c:ac:fb:c9:9b:48:7e:00:95:38: d5:c1:b4:c2:e0:bf:38:96:48:73:3b:e9:38:9e:ae:7c:ba:73: 62:a6:64:3c:ff:d8:03:ff:db:fc:42:10:53:ff:7c:87:08:40: 0f:a7:9e:61:d7:52:c2:5e:dd:1a:49:dc:e4:9f:c7:75:69:67: ea:a0:9b:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMRYcKCXBCqvXlKO06bd8vDc3ZTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIwMzM5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODViYzNiM2RiMDFmOTRiN2U5ZWU1NWU1MTg5MTQ5NjU3 YTUxZTU4OGJkNzRjZTZmMjZhMTg5MjNkOTdmMWFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuWJ6c6zVc55+B2o++3QoG2q3DVwVpuqRBTo3iVegLwCJc BTHG15mujaKJA85UWGHYvCtbanhjAFnEiAfH5IfvKoUNSLbuROhhoUhtIk5ob1kC bHD6k6uXm3S+Fn6Fbo2yHYYtNH4z9o9ZiG5Ef8JacLA5BQa/fjIU3mA9L2lzFQlP 4SIEu0ky8wkju7JsxoUbNLFh9vNyL6zJnk+Qsuqcdvr/H+lyqzjXgaxbWuoX3s9L gpBU5vodDwda/st5/BGiyOBy1jl+dj2ckCW9t58f0UJaU2g7obioyBlm/3ZhcfHh q9igfSTV/Gc8bN4sTZ3UgqEFOtJFFm4to+qo1C6PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDJ+GehoQWmV8aSaPXyTUPvfaYIIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4YjZjYzc5LWJkNmUtNGYwYi1iYmM2LWZiMDNmZmJhYjdlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3HgwDQYJKoZIhvcNAQELBQADggEBAJcxxxZ1WOF172/lVdSqIpK8ZMU4 lj/4VwHZnLK111QdBRj1YxC+uiQFwy3JPAnH940imDquVNBpsgF4R83lW4ixEm+u GF7C1UfumAXjUGxaOu88+/fXncOxH8MqwlgDm8LtN0YR9qqVooMZsg7PWWQA9NPt rCEIRatLOTSh2ujkCMTIQIkWnCC6G1TKW8RsscSxHWKcWMe/495oLJifpR8aPjwI 3IwUup+v0i6g8imIaOTp3cfYkRvk6f/ILKz7yZtIfgCVONXBtMLgvziWSHM76Tie rny6c2KmZDz/2AP/2/xCEFP/fIcIQA+nnmHXUsJe3RpJ3OSfx3VpZ+qgmxU= -----END CERTIFICATE-----Generated at Wed Nov 11 11:08:21 2026 by rpki-client