$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa File: 25d1778a-9121-4e26-8dc8-e7eed6e82870.roa (raw, json) Hash identifier: 206+VHOW1R5X23iaxDwpEJEDEupsFt2g6q8C5SUBYm4= Subject key identifier: E7:33:49:37:00:82:01:DF:69:D4:28:19:5A:05:9F:7F:1C:7D:20:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5793B7A3709E36E4D8F8B67E29808FE961E231C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa Signing time: Thu 15 Oct 2026 02:07:08 +0000 ROA not before: Thu 15 Oct 2026 02:07:08 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:93:b7:a3:70:9e:36:e4:d8:f8:b6:7e:29:80:8f:e9:61:e2:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 02:07:08 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=10f58fd152916be062f8f386015560af6eb6d6da15ebc048b53b9768dc754f1c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:0d:94:e4:a7:28:d2:e7:43:5d:9d:e7:a1: 9e:d3:7f:a6:28:50:d0:e1:1c:6d:3d:aa:20:c4:94: 48:5e:60:80:4e:06:a5:80:e7:00:0d:a0:8e:da:e4: 0c:71:14:8c:7e:02:9d:a5:6a:51:36:7d:ca:e4:6c: 44:ed:f8:23:c8:82:7e:77:8c:c7:a9:93:3e:97:a2: ba:ec:a0:b5:bd:49:c9:a6:54:22:b9:ee:b4:52:1f: 14:aa:92:9c:30:4e:57:9c:5c:0f:22:0a:65:c0:87: 34:a7:31:42:ab:82:7b:64:c1:ce:f4:af:4a:f9:b7: cf:ef:bc:d0:48:8b:17:c1:39:f1:d0:04:1b:e9:b7: 04:9a:8f:96:3c:e8:50:cf:a1:68:93:cd:22:46:c8: d6:5b:e3:ac:4b:4b:4b:90:79:cf:e4:66:fb:6f:e3: 4b:99:12:65:c0:68:7f:2f:35:77:3e:a7:7b:bc:c7: b3:49:6c:dc:33:48:40:bc:d5:c7:0a:b6:43:b3:17: 7e:97:d1:4a:6d:8c:e9:52:04:97:96:2c:86:c7:fb: b2:97:5f:ba:e2:1a:b2:42:3a:bc:4f:f5:f1:e4:6b: 8f:f0:88:3e:3e:e3:07:6c:a5:22:40:ac:03:cd:c3: 69:a7:e9:ab:96:54:4d:39:04:cf:c4:08:23:ef:4e: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:49:37:00:82:01:DF:69:D4:28:19:5A:05:9F:7F:1C:7D:20:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.16.0/20 Signature Algorithm: sha256WithRSAEncryption a3:ad:e0:c0:ac:76:1e:09:a2:e6:b6:46:3d:26:f4:b1:1b:f0: 17:b9:b9:25:01:27:08:0e:b9:16:44:b9:56:39:25:8e:c2:6e: 25:59:8f:ba:f8:43:dd:85:54:83:75:e4:15:b1:30:97:61:12: f4:7c:c3:45:bd:1d:7c:b2:32:36:ce:a5:a2:41:0c:1f:22:c4: df:ab:cf:7d:dc:09:60:fc:99:f4:1d:d1:47:d3:20:37:79:4b: a5:8f:bb:f9:db:44:b7:56:9a:9a:ef:df:6d:0a:4a:cd:5b:89: c7:b6:e5:17:d1:b4:fc:d8:8f:35:f2:e6:a0:b5:a0:eb:4e:c1: d6:4e:83:64:41:3b:e6:90:2b:f2:43:45:9f:c9:98:7d:a4:66: af:f0:4a:ae:d3:60:54:f6:49:ba:5c:af:7e:ec:e9:d1:cf:73: 51:73:4b:a5:7a:6b:95:99:d0:82:6f:af:75:99:f3:a2:0f:87: 2b:af:8a:8a:25:cf:7a:66:c1:20:43:4d:5a:24:c2:22:d6:61: bb:97:32:a1:51:cf:1c:05:ce:33:1c:1c:ef:9a:36:39:f2:8b: 9c:bd:f1:2f:9f:aa:de:3b:82:33:19:8c:9b:78:3c:df:89:b8: ce:6d:27:b1:d8:af:a8:95:a1:34:71:0c:4a:af:5f:06:46:dd: 5c:f1:a8:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV5O3o3CeNuTY+LZ+KYCP6WHiMcQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDIwNzA4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGY1OGZkMTUyOTE2YmUwNjJmOGYzODYwMTU1NjBhZjZl YjZkNmRhMTVlYmMwNDhiNTNiOTc2OGRjNzU0ZjFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVZg2U5Kco0udDXZ3noZ7Tf6YoUNDhHG09qiDElEheYIBO BqWA5wANoI7a5AxxFIx+Ap2lalE2fcrkbETt+CPIgn53jMepkz6XorrsoLW9Scmm VCK57rRSHxSqkpwwTlecXA8iCmXAhzSnMUKrgntkwc70r0r5t8/vvNBIixfBOfHQ BBvptwSaj5Y86FDPoWiTzSJGyNZb46xLS0uQec/kZvtv40uZEmXAaH8vNXc+p3u8 x7NJbNwzSEC81ccKtkOzF36X0UptjOlSBJeWLIbH+7KXX7riGrJCOrxP9fHka4/w iD4+4wdspSJArAPNw2mn6auWVE05BM/ECCPvTj1HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5zNJNwCCAd9p1CgZWgWffxx9IB8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1ZDE3NzhhLTkxMjEtNGUyNi04ZGM4LWU3ZWVkNmU4Mjg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPtRAwDQYJKoZIhvcNAQELBQADggEBAKOt4MCsdh4Joua2Rj0m9LEb8Be5 uSUBJwgOuRZEuVY5JY7CbiVZj7r4Q92FVIN15BWxMJdhEvR8w0W9HXyyMjbOpaJB DB8ixN+rz33cCWD8mfQd0UfTIDd5S6WPu/nbRLdWmprv320KSs1bice25RfRtPzY jzXy5qC1oOtOwdZOg2RBO+aQK/JDRZ/JmH2kZq/wSq7TYFT2Sbpcr37s6dHPc1Fz S6V6a5WZ0IJvr3WZ86IPhyuvioolz3pmwSBDTVokwiLWYbuXMqFRzxwFzjMcHO+a Njnyi5y98S+fqt47gjMZjJt4PN+JuM5tJ7HYr6iVoTRxDEqvXwZG3VzxqHE= -----END CERTIFICATE-----Generated at Mon Oct 19 13:14:57 2026 by rpki-client