$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25759bb1-0abe-4a35-9552-942325acf843.roa File: 25759bb1-0abe-4a35-9552-942325acf843.roa (raw, json) Hash identifier: MFGGaV+ChDxFgzofXcrSCuWaSZ8w5kj5J+6GLzFOXl4= Subject key identifier: 2E:51:1E:46:B6:4C:F1:D9:E0:DE:E4:C4:80:80:C2:41:13:8D:8B:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29D8F8D64B9A7B9555DE8B3DCF2DE1F6E8C48940 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25759bb1-0abe-4a35-9552-942325acf843.roa Signing time: Thu 15 Oct 2026 01:07:02 +0000 ROA not before: Thu 15 Oct 2026 01:07:02 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d8:f8:d6:4b:9a:7b:95:55:de:8b:3d:cf:2d:e1:f6:e8:c4:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:07:02 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=941c2f8a70e0e2d88090a259fa0b99d5ff94097090913eb4efe0e6374544d7c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:9e:b4:b0:e3:63:25:39:a7:55:67:bc:da: 68:17:d5:b9:d9:ad:20:6b:27:30:3b:57:d1:46:47: df:d0:56:32:5f:12:3a:41:54:93:fe:d1:f4:41:ec: f6:32:48:8f:1c:40:11:34:3b:c6:18:81:25:c3:fb: 71:23:ea:63:05:c8:f9:c3:5d:0d:f6:07:44:6a:29: df:ca:4f:ea:94:55:7c:50:7a:27:89:45:24:9c:63: 1e:94:1a:02:76:12:14:64:20:b1:27:0e:cd:55:be: 1f:e8:32:3c:f5:ff:b0:a6:da:a6:e3:d9:99:6c:15: a8:48:e1:1a:4c:d8:f3:02:37:a7:aa:88:c2:cc:cb: 43:e2:6f:2e:e6:4a:7d:1d:99:de:75:b2:83:87:dc: b8:fd:81:4b:aa:72:3c:39:32:2e:a6:86:9d:d2:14: 63:72:26:60:25:7d:25:ce:c7:f1:a7:fb:2d:ae:2e: f2:c7:cf:66:ab:f4:9e:7d:9f:ba:dd:90:88:56:f7: 39:80:a0:7a:ac:af:57:67:39:1f:33:77:24:e2:75: 6b:09:12:26:2a:d1:3c:10:93:da:f7:9a:cc:62:19: d2:6f:ba:7b:69:10:38:8b:85:8b:7d:59:47:36:50: 28:ed:1d:63:63:f2:bf:07:8b:30:c2:d4:06:13:17: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:51:1E:46:B6:4C:F1:D9:E0:DE:E4:C4:80:80:C2:41:13:8D:8B:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25759bb1-0abe-4a35-9552-942325acf843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.92.0/24 Signature Algorithm: sha256WithRSAEncryption 38:ae:67:1b:d0:aa:e9:85:a0:54:15:6e:a1:8e:85:c0:97:65: 61:88:68:cb:63:a2:6a:22:d0:c0:67:8a:63:c2:d7:64:57:0b: 8e:7a:19:41:7b:69:0e:cb:2e:6c:c8:f5:3f:15:fe:9e:14:38: 7a:42:c4:42:75:17:26:bf:40:b7:9a:41:78:dd:ba:1c:3d:b3: 85:7a:73:2e:1c:fc:61:0f:10:90:61:d3:ca:29:73:a3:51:77: 6e:72:2a:2c:97:50:90:96:64:a4:e0:39:0c:56:13:80:b6:d9: 84:56:5c:6e:53:36:8a:48:95:6b:f1:60:43:13:bd:94:f8:54: bd:a4:ec:46:b4:2b:22:c0:98:30:25:2d:21:50:68:e2:cd:79: 93:4a:81:44:d2:f2:e2:c9:c6:23:63:f4:e5:9b:fb:a1:f4:b8: 08:cb:8c:2c:0a:ac:08:cb:b4:8c:af:bd:2d:84:cb:77:2f:b3: 9d:12:c0:4f:3f:5c:c9:d2:4c:dd:40:66:68:cd:cd:43:e4:09: 49:0a:e6:1b:b1:93:49:2e:d4:1a:a7:9b:93:05:6f:82:b1:7d: b6:9f:ee:a5:a7:e3:e3:fb:0a:ce:a7:c8:40:ad:2d:f9:86:d3: 4a:60:83:4a:54:0a:be:59:b0:43:4d:80:e8:f4:ba:71:0c:5e: 57:89:a6:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKdj41kuae5VV3os9zy3h9ujEiUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDEwNzAyWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDFjMmY4YTcwZTBlMmQ4ODA5MGEyNTlmYTBiOTlkNWZm OTQwOTcwOTA5MTNlYjRlZmUwZTYzNzQ1NDRkN2M2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvSZ60sONjJTmnVWe82mgX1bnZrSBrJzA7V9FGR9/QVjJf EjpBVJP+0fRB7PYySI8cQBE0O8YYgSXD+3Ej6mMFyPnDXQ32B0RqKd/KT+qUVXxQ eieJRSScYx6UGgJ2EhRkILEnDs1Vvh/oMjz1/7Cm2qbj2ZlsFahI4RpM2PMCN6eq iMLMy0Piby7mSn0dmd51soOH3Lj9gUuqcjw5Mi6mhp3SFGNyJmAlfSXOx/Gn+y2u LvLHz2ar9J59n7rdkIhW9zmAoHqsr1dnOR8zdyTidWsJEiYq0TwQk9r3msxiGdJv untpEDiLhYt9WUc2UCjtHWNj8r8HizDC1AYTF+RNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULlEeRrZM8dng3uTEgIDCQRONi9owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1NzU5YmIxLTBhYmUtNGEzNS05NTUyLTk0MjMyNWFjZjg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsVwwDQYJKoZIhvcNAQELBQADggEBADiuZxvQqumFoFQVbqGOhcCXZWGI aMtjomoi0MBnimPC12RXC456GUF7aQ7LLmzI9T8V/p4UOHpCxEJ1Fya/QLeaQXjd uhw9s4V6cy4c/GEPEJBh08opc6NRd25yKiyXUJCWZKTgOQxWE4C22YRWXG5TNopI lWvxYEMTvZT4VL2k7Ea0KyLAmDAlLSFQaOLNeZNKgUTS8uLJxiNj9OWb+6H0uAjL jCwKrAjLtIyvvS2Ey3cvs50SwE8/XMnSTN1AZmjNzUPkCUkK5huxk0ku1Bqnm5MF b4Kxfbaf7qWn4+P7Cs6nyECtLfmG00pgg0pUCr5ZsENNgOj0unEMXleJpkU= -----END CERTIFICATE-----Generated at Tue Oct 20 18:48:19 2026 by rpki-client