$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/214e2784-051f-4344-86bd-173485313fe4.roa File: 214e2784-051f-4344-86bd-173485313fe4.roa (raw, json) Hash identifier: u7xKALJiRAhlLLTnnWVtn0okOPyW+95m/Ro7WnY8aDY= Subject key identifier: 19:2E:16:5B:55:95:EC:9E:B1:31:0C:67:C0:B0:F6:1D:94:C6:53:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48A548F5C0DA0872C3D6CA6A812129BB4A03CC0B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/214e2784-051f-4344-86bd-173485313fe4.roa Signing time: Thu 08 Oct 2026 01:10:08 +0000 ROA not before: Thu 08 Oct 2026 01:10:08 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a5:48:f5:c0:da:08:72:c3:d6:ca:6a:81:21:29:bb:4a:03:cc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 8 01:10:08 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=0f37e6bbfac92b01c29fba459dc7dc971f97fe21639e8109ca9fc14542365c88, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:59:bc:e3:f9:2f:b9:0c:3a:eb:99:e1:61: cd:d0:05:6a:db:35:6c:88:f1:9d:41:fa:0e:66:c9: 09:46:7b:95:2f:f4:6b:a9:93:93:eb:31:fd:08:30: eb:cc:53:84:70:89:4e:fb:f3:dd:b7:d2:71:48:ca: 5b:2b:3b:24:2a:bf:24:1f:43:30:aa:39:ec:f3:66: bb:91:91:81:3c:da:22:9a:6e:c2:3d:b7:29:da:d2: bb:3e:f6:f2:b4:ed:db:0b:d8:d3:9f:c0:b0:bd:0d: f9:e9:ee:cc:08:0c:d6:2e:51:65:de:3d:a4:a7:56: d1:8d:5e:22:0c:b1:c0:30:bf:95:41:95:3a:27:26: 85:5c:03:99:8b:3a:08:cb:c8:27:48:eb:a5:56:dd: 42:9c:d7:ab:5c:b8:f9:0c:11:cd:9e:a4:97:41:da: 59:df:b4:4e:b6:7c:85:82:d0:49:35:3a:81:4c:4c: 13:ca:24:93:45:7e:52:10:28:09:ca:f9:8a:54:09: c1:c8:a7:ba:1f:fb:fd:15:dd:4f:a2:8a:d6:3d:bc: fd:37:7f:3d:91:8c:7c:c0:68:34:3f:b4:f9:3c:18: 60:f7:72:a8:c7:82:58:fc:30:1d:ac:7b:5a:08:ff: 6b:07:94:ae:48:1e:54:68:f9:c3:e4:45:3b:4a:15: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:16:5B:55:95:EC:9E:B1:31:0C:67:C0:B0:F6:1D:94:C6:53:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/214e2784-051f-4344-86bd-173485313fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.228.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:1d:4f:c2:58:30:2a:22:15:54:c3:b2:8f:7b:0f:c1:ec:70: 02:1c:33:2e:4b:d4:78:bb:a8:67:49:9e:40:62:8c:97:fd:37: 5c:b3:d0:fe:93:27:6b:40:31:04:d8:86:52:55:77:4e:e8:f6: 07:0c:44:8e:00:ee:ca:f5:67:96:79:8d:a8:c0:16:1d:26:00: 3d:8a:92:47:46:9c:06:07:2e:aa:c6:88:e6:ff:34:68:ac:d4: 77:59:a2:af:2a:0d:61:19:81:67:b7:c7:bb:16:ed:fa:46:5e: d7:ad:5d:08:ff:c5:6b:a0:ae:12:7a:19:97:5d:11:b4:1a:2f: 74:db:38:8e:76:f1:12:5c:00:06:27:df:dd:d4:70:00:f1:96: 28:05:dc:30:1d:e9:90:b4:cc:00:20:f7:bc:b8:09:c3:ff:e1: e8:7d:97:30:57:d0:3e:3d:0e:3c:7c:7c:34:8a:21:88:15:0e: 48:97:38:90:a7:0a:e4:04:96:c8:86:03:15:46:c7:85:7e:45: 5f:48:86:77:e9:68:02:81:c2:c6:9f:e5:3a:6f:81:53:f7:78: 8e:9e:5e:78:07:29:67:c8:db:ad:0e:cb:51:d3:e6:79:e9:a4: 18:a7:70:5a:e9:21:9e:5f:45:2a:f0:1d:de:b9:85:3e:7c:b7: 02:0a:fb:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSKVI9cDaCHLD1spqgSEpu0oDzAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDA4MDExMDA4WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjM3ZTZiYmZhYzkyYjAxYzI5ZmJhNDU5ZGM3ZGM5NzFm OTdmZTIxNjM5ZTgxMDljYTlmYzE0NTQyMzY1Yzg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfMFm84/kvuQw665nhYc3QBWrbNWyI8Z1B+g5myQlGe5Uv 9Gupk5PrMf0IMOvMU4RwiU7789230nFIylsrOyQqvyQfQzCqOezzZruRkYE82iKa bsI9tyna0rs+9vK07dsL2NOfwLC9Dfnp7swIDNYuUWXePaSnVtGNXiIMscAwv5VB lTonJoVcA5mLOgjLyCdI66VW3UKc16tcuPkMEc2epJdB2lnftE62fIWC0Ek1OoFM TBPKJJNFflIQKAnK+YpUCcHIp7of+/0V3U+iitY9vP03fz2RjHzAaDQ/tPk8GGD3 cqjHglj8MB2se1oI/2sHlK5IHlRo+cPkRTtKFc/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGS4WW1WV7J6xMQxnwLD2HZTGU+QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxNGUyNzg0LTA1MWYtNDM0NC04NmJkLTE3MzQ4NTMxM2ZlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASROQwDQYJKoZIhvcNAQELBQADggEBAB4dT8JYMCoiFVTDso97D8HscAIc My5L1Hi7qGdJnkBijJf9N1yz0P6TJ2tAMQTYhlJVd07o9gcMRI4A7sr1Z5Z5jajA Fh0mAD2KkkdGnAYHLqrGiOb/NGis1HdZoq8qDWEZgWe3x7sW7fpGXtetXQj/xWug rhJ6GZddEbQaL3TbOI528RJcAAYn393UcADxligF3DAd6ZC0zAAg97y4CcP/4eh9 lzBX0D49Djx8fDSKIYgVDkiXOJCnCuQElsiGAxVGx4V+RV9IhnfpaAKBwsaf5Tpv gVP3eI6eXngHKWfI260Oy1HT5nnppBincFrpIZ5fRSrwHd65hT58twIK+5k= -----END CERTIFICATE-----Generated at Sun Nov 8 06:56:45 2026 by rpki-client