$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121af65-dcc1-476d-bdbc-9678cc816b63.roa File: a121af65-dcc1-476d-bdbc-9678cc816b63.roa (raw, json) Hash identifier: Sm1IuZx0JnwyTOFF4yEAeU+bnij5jQyAM4+vWbUZupk= Subject key identifier: D2:D9:24:22:03:17:FA:96:A9:4A:51:0C:F5:CD:F0:5C:21:C7:E2:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10E82E848F5E6F9088FB8F21BA4436DB04673370 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121af65-dcc1-476d-bdbc-9678cc816b63.roa Signing time: Mon 12 Oct 2026 01:10:29 +0000 ROA not before: Mon 12 Oct 2026 01:10:29 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e8:2e:84:8f:5e:6f:90:88:fb:8f:21:ba:44:36:db:04:67:33:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 12 01:10:29 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=017abe6689acd7492fdb7a9eece80e008796827e3bac59fdffdeee49fed44b06, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:db:a1:64:65:df:9a:b6:25:26:e3:00:5a: 5b:af:b0:4d:2a:e3:5b:79:c9:25:d7:f1:06:a1:16: 53:05:ba:95:98:f9:91:cc:9e:0c:a7:c7:2a:8c:15: 41:fc:cf:26:ea:45:6c:0e:13:5b:15:14:3a:c7:4a: 43:0f:84:67:5d:82:24:a7:84:2c:a9:fe:ae:ac:00: cf:52:cd:70:fd:a9:45:31:86:7d:06:c8:a8:0d:a2: 06:96:11:0e:57:af:78:33:c1:e3:ab:e8:6d:4b:37: ed:15:fa:1b:b7:1d:bc:b3:bf:94:8d:f3:f5:2d:9a: 1a:7f:b6:97:3a:d2:43:1a:fe:ed:9e:ff:44:6d:1b: 09:1c:f2:1b:e4:aa:fc:90:0f:05:26:f2:03:53:cd: 04:82:09:eb:ea:b1:1c:87:61:6c:26:cf:45:f8:3e: fe:52:2f:59:be:c3:06:a2:61:43:10:72:d4:c1:2a: 64:ff:82:4e:a7:c9:79:a3:72:d7:bf:de:82:c5:c3: c6:bb:db:80:df:da:57:be:c4:7b:09:2b:21:24:be: 5e:7a:c8:85:b0:78:0a:07:3a:e5:c2:9c:c4:73:8f: 0d:e8:3d:b3:0f:15:92:aa:e4:f4:88:67:59:87:d9: 8b:ad:4d:15:67:56:43:23:2f:37:c1:b1:cf:53:3f: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D9:24:22:03:17:FA:96:A9:4A:51:0C:F5:CD:F0:5C:21:C7:E2:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121af65-dcc1-476d-bdbc-9678cc816b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.222.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:39:5d:00:fe:dc:c5:63:ce:b7:98:19:a9:67:ff:a3:c3:2b: 9f:28:d4:88:0c:17:3c:84:c9:23:4c:ab:28:f4:1b:ff:ad:e8: 29:99:f5:a5:33:bf:10:b6:63:88:f3:28:45:01:d9:d8:b4:72: 4c:00:a8:14:90:52:bf:fd:3d:27:f9:d8:c2:01:98:fe:41:60: 33:40:95:bc:73:de:6d:1c:69:8c:f4:6d:d7:b7:41:44:55:fb: 6e:d8:52:f0:47:81:1d:15:06:aa:77:dd:f4:d8:1a:80:c3:e2: 24:00:7b:e5:04:bb:78:25:3a:81:73:71:fa:7a:61:30:ef:2b: 9c:19:83:a5:4a:55:da:6a:f2:66:e1:64:49:34:6d:14:7a:5d: 9e:37:f4:60:f2:a4:43:26:62:b7:c0:a8:fc:cb:da:e1:9d:86: 0f:41:75:e8:1c:ec:74:54:e7:cc:0c:d4:66:7a:42:98:3b:59: d0:38:9f:49:80:d9:63:e0:dc:bf:81:28:6b:df:e3:22:86:63: ae:ee:9a:8a:f8:34:db:7f:84:b2:c1:38:85:4c:57:4f:bd:66: 8e:a7:67:e6:71:59:7e:11:e3:ae:98:77:bd:87:53:51:fa:d9: 5c:a2:29:e3:b6:1e:60:fa:a5:56:a0:87:0b:8a:9d:27:cd:87: a2:d8:60:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEOguhI9eb5CI+48hukQ22wRnM3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDEyMDExMDI5WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTdhYmU2Njg5YWNkNzQ5MmZkYjdhOWVlY2U4MGUwMDg3 OTY4MjdlM2JhYzU5ZmRmZmRlZWU0OWZlZDQ0YjA2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClD9uhZGXfmrYlJuMAWluvsE0q41t5ySXX8QahFlMFupWY +ZHMngynxyqMFUH8zybqRWwOE1sVFDrHSkMPhGddgiSnhCyp/q6sAM9SzXD9qUUx hn0GyKgNogaWEQ5Xr3gzweOr6G1LN+0V+hu3Hbyzv5SN8/Utmhp/tpc60kMa/u2e /0RtGwkc8hvkqvyQDwUm8gNTzQSCCevqsRyHYWwmz0X4Pv5SL1m+wwaiYUMQctTB KmT/gk6nyXmjcte/3oLFw8a724Df2le+xHsJKyEkvl56yIWweAoHOuXCnMRzjw3o PbMPFZKq5PSIZ1mH2YutTRVnVkMjLzfBsc9TP1xHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0tkkIgMX+papSlEM9c3wXCHH4t8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExMjFhZjY1LWRjYzEtNDc2ZC1iZGJjLTk2NzhjYzgxNmI2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3N4wDQYJKoZIhvcNAQELBQADggEBAI05XQD+3MVjzreYGaln/6PDK58o 1IgMFzyEySNMqyj0G/+t6CmZ9aUzvxC2Y4jzKEUB2di0ckwAqBSQUr/9PSf52MIB mP5BYDNAlbxz3m0caYz0bde3QURV+27YUvBHgR0VBqp33fTYGoDD4iQAe+UEu3gl OoFzcfp6YTDvK5wZg6VKVdpq8mbhZEk0bRR6XZ439GDypEMmYrfAqPzL2uGdhg9B degc7HRU58wM1GZ6Qpg7WdA4n0mA2WPg3L+BKGvf4yKGY67umor4NNt/hLLBOIVM V0+9Zo6nZ+ZxWX4R466Yd72HU1H62VyiKeO2HmD6pVaghwuKnSfNh6LYYDk= -----END CERTIFICATE-----Generated at Mon Oct 19 05:47:58 2026 by rpki-client