$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1fecfeb1-6716-4dba-8f93-41774a220829.roa File: 1fecfeb1-6716-4dba-8f93-41774a220829.roa (raw, json) Hash identifier: uryCEiuhLRrtqskz9fX310aR3Xe5PH8yS8Rbia2prFc= Subject key identifier: 1C:41:52:53:79:4A:61:3B:D8:F9:B5:D5:E6:D6:2D:B9:36:65:59:85 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 17D9FE6DC645188242A857F7E626C28F1A6F6A7D Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1fecfeb1-6716-4dba-8f93-41774a220829.roa Signing time: Mon 26 Oct 2026 00:50:08 +0000 ROA not before: Mon 26 Oct 2026 00:50:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d9:fe:6d:c6:45:18:82:42:a8:57:f7:e6:26:c2:8f:1a:6f:6a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 26 00:50:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=135211c8e5b3f7302963efcfb7db47b41b418a6e05c49ac4f16a7a6ae9baba63, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:bf:06:a9:20:03:6f:e7:bd:74:8a:7d:77: f1:e1:08:4d:fd:ef:61:a7:71:e7:83:22:93:3b:8e: 4d:54:6a:ca:d7:96:2e:3e:c3:69:30:cd:8c:de:3b: af:a4:39:fe:cd:f1:b0:ae:61:9e:d2:a1:1e:72:24: 02:ca:3b:6d:3d:9a:e4:82:ca:87:e3:e3:64:4d:c4: 23:d0:f9:e9:e1:da:b6:89:1b:86:33:a6:d7:f9:e2: ec:ad:52:49:16:5c:45:f5:c1:0e:34:70:37:49:96: 72:aa:09:de:17:94:2d:55:41:45:f1:75:d3:3b:dc: ef:ef:aa:af:34:df:b6:e7:bd:64:e1:4d:7a:0a:e2: 28:f8:c9:3b:67:8b:cb:90:8f:c8:d8:b8:2f:56:c0: 1c:d6:b2:39:2b:68:55:b0:8e:2f:31:12:59:16:e2: bb:54:3a:5d:9c:c1:f6:ae:60:b0:db:42:63:cd:0d: e9:44:38:97:49:c0:9c:23:cf:57:f1:c1:5e:79:61: f3:3e:6f:83:ae:a7:09:ad:c3:d2:8a:6a:a6:47:67: 26:9c:b2:e4:fc:56:39:1c:8e:5d:7d:f8:c0:1c:65: aa:85:f3:fb:9c:1d:59:de:c7:6e:a2:09:7b:83:70: 32:a9:cf:4e:db:dd:0a:54:84:5f:3b:fa:f1:4b:60: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:52:53:79:4A:61:3B:D8:F9:B5:D5:E6:D6:2D:B9:36:65:59:85 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1fecfeb1-6716-4dba-8f93-41774a220829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:74:77:4c:34:ef:00:42:c4:3b:83:dd:ed:27:32:a7:6f:af: 66:92:b9:ad:df:38:42:c3:ec:f4:4f:0e:e6:9d:b7:f2:60:dc: 50:93:a8:6c:fc:fb:46:f2:36:3c:8e:90:3d:9d:0c:dc:e4:12: ec:df:ff:52:e5:fe:40:9b:83:21:54:f7:78:78:6a:43:a6:8c: ba:ba:35:c0:c0:c1:bf:95:e3:3e:d5:d5:fb:0f:1c:76:db:d2: bc:a3:d9:ca:89:22:f4:8f:95:4d:b9:15:64:76:5d:3e:e5:a6: 93:e0:76:44:d6:d6:80:88:bd:9d:a6:3d:80:d7:16:5a:a6:80: 66:a5:83:88:fc:7e:37:d0:ac:e8:cf:51:81:86:c2:01:dc:b0: dc:23:9b:d5:94:5f:17:ba:3e:9d:9b:b6:34:b3:ba:30:7d:ce: f7:00:10:f9:12:09:ca:c9:ca:d5:75:d6:5d:a0:8a:00:4e:3f: 73:e8:c5:f7:cc:a8:90:02:c8:70:80:cb:a3:eb:db:eb:6f:02: 7f:31:df:a1:8c:2a:86:e6:be:7f:39:8f:c6:14:3c:35:5f:e9: 05:40:73:05:48:e2:7d:f5:54:06:27:ac:70:40:49:35:8f:76: a2:d6:db:60:4d:2b:8e:9f:6e:7b:45:94:29:3b:49:13:4e:6c: 0e:8b:1f:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF9n+bcZFGIJCqFf35ibCjxpvan0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDI2MDA1MDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzUyMTFjOGU1YjNmNzMwMjk2M2VmY2ZiN2RiNDdiNDFi NDE4YTZlMDVjNDlhYzRmMTZhN2E2YWU5YmFiYTYzMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfR78GqSADb+e9dIp9d/HhCE3972GnceeDIpM7jk1UasrX li4+w2kwzYzeO6+kOf7N8bCuYZ7SoR5yJALKO209muSCyofj42RNxCPQ+enh2raJ G4Yzptf54uytUkkWXEX1wQ40cDdJlnKqCd4XlC1VQUXxddM73O/vqq8037bnvWTh TXoK4ij4yTtni8uQj8jYuC9WwBzWsjkraFWwji8xElkW4rtUOl2cwfauYLDbQmPN DelEOJdJwJwjz1fxwV55YfM+b4Oupwmtw9KKaqZHZyacsuT8Vjkcjl19+MAcZaqF 8/ucHVnex26iCXuDcDKpz07b3QpUhF87+vFLYAA3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHEFSU3lKYTvY+bXV5tYtuTZlWYUwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzFmZWNmZWIxLTY3MTYtNGRiYS04ZjkzLTQxNzc0YTIyMDgyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgfwAwDQYJKoZIhvcNAQELBQADggEBAFt0d0w07wBCxDuD3e0nMqdvr2aS ua3fOELD7PRPDuadt/Jg3FCTqGz8+0byNjyOkD2dDNzkEuzf/1Ll/kCbgyFU93h4 akOmjLq6NcDAwb+V4z7V1fsPHHbb0ryj2cqJIvSPlU25FWR2XT7lppPgdkTW1oCI vZ2mPYDXFlqmgGalg4j8fjfQrOjPUYGGwgHcsNwjm9WUXxe6Pp2btjSzujB9zvcA EPkSCcrJytV11l2gigBOP3PoxffMqJACyHCAy6Pr2+tvAn8x36GMKobmvn85j8YU PDVf6QVAcwVI4n31VAYnrHBASTWPdqLW22BNK46fbntFlCk7SRNObA6LH8A= -----END CERTIFICATE-----Generated at Tue Nov 10 04:09:03 2026 by rpki-client