$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bac3047-cf75-4cd2-9ee0-826e0162a6ad.roa File: 1bac3047-cf75-4cd2-9ee0-826e0162a6ad.roa (raw, json) Hash identifier: Ibb9aQ4EwaIXt2mbHWm/hoZwpClRzFDyp6a/Ry5b8Kc= Subject key identifier: AF:EA:37:B7:F4:04:E8:04:12:22:F6:87:4A:69:2E:8B:B8:19:8F:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F4FD11D72C94413ECCD700256FD688779D2BACC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bac3047-cf75-4cd2-9ee0-826e0162a6ad.roa Signing time: Mon 26 Oct 2026 02:41:14 +0000 ROA not before: Mon 26 Oct 2026 02:41:14 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 3.4.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4f:d1:1d:72:c9:44:13:ec:cd:70:02:56:fd:68:87:79:d2:ba:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:41:14 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=182827db57f976862bc8e21e31214d01981444a48b88afb535e540561ea02fad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:1b:04:e3:4f:d2:b9:53:e7:7b:2c:1b:14: 5d:8f:c3:ea:d5:58:28:6e:a9:47:b6:40:6c:fd:20: af:22:6e:27:c5:b2:50:1a:0a:f4:ac:29:f6:24:71: 82:a4:21:20:ac:91:60:e1:dc:f0:d9:28:cb:de:62: 57:58:46:57:c5:05:ec:f2:20:33:52:91:31:9c:e3: dc:06:c9:93:e7:e3:42:f1:97:f6:6e:33:d1:e7:d0: a1:3c:80:3b:f4:ac:f4:fd:88:b0:d8:a5:2a:2c:94: d6:12:a6:05:01:bf:6a:32:f9:89:4b:48:81:ba:8a: 70:a4:31:95:a9:73:bb:5d:8c:ac:7b:eb:b0:6e:17: d9:cd:b1:88:57:42:36:7a:d5:cb:a0:07:b2:83:6e: c9:da:d2:0f:ac:22:bc:fa:77:29:76:b9:8e:09:0f: ee:e4:7a:67:d0:5f:58:a0:30:5e:d4:df:a3:62:d9: 8e:4f:f9:24:42:a3:28:2f:a9:d3:d1:c9:9e:38:a4: 30:bc:91:5a:89:ed:67:e7:67:67:5c:b0:33:df:47: 91:89:bc:06:c9:43:08:0c:2a:05:2c:bd:d4:22:97: e5:84:9a:fa:09:92:86:06:e2:f9:8a:3a:82:0e:8a: 2f:b7:59:a5:a2:39:26:3b:d1:d2:ab:9c:22:50:4b: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:37:B7:F4:04:E8:04:12:22:F6:87:4A:69:2E:8B:B8:19:8F:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bac3047-cf75-4cd2-9ee0-826e0162a6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.10.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:a1:1a:b1:3c:6a:00:1a:e2:1b:6c:72:1f:75:93:ef:ab:cf: d8:19:2c:66:7f:56:ef:d6:52:30:ba:22:08:69:21:59:43:9c: 59:40:d2:15:69:94:c4:20:25:1a:b1:78:1c:a9:f1:bf:27:75: 44:bf:ec:07:ad:0a:38:e7:43:31:1a:f0:fe:09:d6:f1:d1:42: e2:25:c3:c9:d6:eb:3f:45:d8:e6:58:14:dd:8a:4e:df:45:66: e6:fc:fc:59:36:86:30:8b:9a:f4:81:f1:d9:52:bd:fd:70:33: e9:ff:42:29:7e:80:95:99:82:55:17:6e:42:88:de:32:45:9f: aa:dd:88:61:bd:c7:cd:37:98:4b:76:b4:29:9f:76:ae:97:ad: e9:88:fb:4e:21:41:ad:97:c8:46:69:ef:87:35:3c:29:ae:45: 42:fe:31:84:31:af:ee:79:e3:b5:15:88:f9:e7:56:98:94:4e: b1:98:59:b2:9b:b9:0b:f4:8f:95:a6:60:01:ca:47:0d:00:27: 15:6c:d4:82:e1:e4:99:79:0e:af:4f:8f:ec:8e:f8:68:2b:09: 1e:f0:62:f2:f0:b2:c7:d5:c9:c0:88:98:3f:46:87:a5:e4:4e: 58:10:63:53:c2:0c:01:f9:dc:20:18:67:e4:fe:94:1d:9c:df: e1:3a:75:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb0/RHXLJRBPszXACVv1oh3nSuswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDI0MTE0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxODI4MjdkYjU3Zjk3Njg2MmJjOGUyMWUzMTIxNGQwMTk4 MTQ0NGE0OGI4OGFmYjUzNWU1NDA1NjFlYTAyZmFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTcBsE40/SuVPneywbFF2Pw+rVWChuqUe2QGz9IK8ibifF slAaCvSsKfYkcYKkISCskWDh3PDZKMveYldYRlfFBezyIDNSkTGc49wGyZPn40Lx l/ZuM9Hn0KE8gDv0rPT9iLDYpSoslNYSpgUBv2oy+YlLSIG6inCkMZWpc7tdjKx7 67BuF9nNsYhXQjZ61cugB7KDbsna0g+sIrz6dyl2uY4JD+7kemfQX1igMF7U36Ni 2Y5P+SRCoygvqdPRyZ44pDC8kVqJ7WfnZ2dcsDPfR5GJvAbJQwgMKgUsvdQil+WE mvoJkoYG4vmKOoIOii+3WaWiOSY70dKrnCJQS09VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr+o3t/QE6AQSIvaHSmkui7gZj24wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiYWMzMDQ3LWNmNzUtNGNkMi05ZWUwLTgyNmUwMTYyYTZhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADBAowDQYJKoZIhvcNAQELBQADggEBACuhGrE8agAa4htsch91k++rz9gZ LGZ/Vu/WUjC6IghpIVlDnFlA0hVplMQgJRqxeByp8b8ndUS/7AetCjjnQzEa8P4J 1vHRQuIlw8nW6z9F2OZYFN2KTt9FZub8/Fk2hjCLmvSB8dlSvf1wM+n/Qil+gJWZ glUXbkKI3jJFn6rdiGG9x803mEt2tCmfdq6XremI+04hQa2XyEZp74c1PCmuRUL+ MYQxr+5547UViPnnVpiUTrGYWbKbuQv0j5WmYAHKRw0AJxVs1ILh5Jl5Dq9Pj+yO +GgrCR7wYvLwssfVycCImD9Gh6XkTlgQY1PCDAH53CAYZ+T+lB2c3+E6da4= -----END CERTIFICATE-----Generated at Thu Nov 5 08:57:36 2026 by rpki-client