$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35ca07fe-835f-40e2-9b04-18556cb71980.roa File: 35ca07fe-835f-40e2-9b04-18556cb71980.roa (raw, json) Hash identifier: 5kR1fE8CX6lE4bBz5FVzpa+MkkLIMr2vWrLEhDys68g= Subject key identifier: FE:7B:52:67:A9:22:CE:4A:EA:2C:EA:38:CA:2D:B8:AF:E5:54:34:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 15620E4963EFB53D5E962D88B2BFFBC291BC0B6A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35ca07fe-835f-40e2-9b04-18556cb71980.roa Signing time: Mon 26 Oct 2026 01:21:00 +0000 ROA not before: Mon 26 Oct 2026 01:21:00 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.50.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:62:0e:49:63:ef:b5:3d:5e:96:2d:88:b2:bf:fb:c2:91:bc:0b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:21:00 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=797859c7137c2298547a93d57624878c43de1d1bbcf99e8d4bbb07fa0344678c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:3b:e7:86:6c:ab:e1:d2:a6:75:b4:73:c8: 33:08:8b:d4:68:6f:a1:89:3c:1c:f4:fc:56:d4:83: da:1e:79:86:fa:83:5d:80:e9:4f:09:88:6e:2c:fe: 4b:2e:bc:3a:d4:f0:4d:98:dd:a5:13:47:93:1c:f6: fe:fd:ec:40:9d:d2:32:d8:59:1a:3f:90:cd:7f:d4: 38:c9:a4:36:f3:68:0a:fc:5b:09:08:2b:f1:8b:50: e7:56:41:bd:89:c9:2b:43:fc:f1:a9:bd:30:86:7a: c1:15:27:fd:ed:28:f1:cc:48:2e:53:1d:f7:a5:97: 14:70:ae:b4:3b:29:8f:37:c9:54:61:11:96:0d:93: 58:3a:d7:ae:8f:80:10:f5:96:c7:85:93:77:ec:a5: ba:71:0a:16:3c:86:9f:94:a3:b6:72:51:c3:f8:1e: 74:4c:c3:92:13:44:4d:14:b1:c8:c2:29:40:53:b3: 86:57:c5:d1:b8:3a:6a:c5:de:de:ec:dd:ec:15:6a: 47:dc:26:d2:15:ab:e9:46:04:fb:74:f3:0b:82:ac: 9f:ed:4b:e0:42:5b:2e:ca:f8:02:51:2e:fa:bb:1d: 37:74:b2:f5:e7:a5:0a:66:6b:55:2f:de:ef:ec:85: b1:a3:37:a4:73:60:34:6a:62:bb:8f:2d:67:fa:51: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:52:67:A9:22:CE:4A:EA:2C:EA:38:CA:2D:B8:AF:E5:54:34:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35ca07fe-835f-40e2-9b04-18556cb71980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.50.0.0/15 Signature Algorithm: sha256WithRSAEncryption a8:d1:7c:4d:11:73:0e:5b:f7:9d:ac:f8:d3:cd:40:50:a5:c5: 15:7c:73:c8:38:17:66:9c:c5:9e:0c:e1:92:fe:71:9c:48:72: 3f:a1:42:94:c6:05:ff:a6:12:6f:53:9f:69:70:c0:de:2b:2c: 7b:47:95:7b:33:b6:19:3a:80:a7:10:5b:20:01:62:4d:63:5d: fe:87:17:ba:30:02:17:ad:ea:ff:9f:7d:78:2f:89:c8:57:3e: da:54:92:4a:68:4d:d2:57:dc:68:30:e5:3b:9f:76:6e:1a:dd: 6d:a9:2c:e8:e8:ea:f2:06:6a:31:d6:93:91:c8:0a:6d:53:80: f8:80:55:51:39:eb:df:39:90:ef:57:0e:7e:25:1f:6e:af:81: b1:d2:19:a1:a5:c9:61:d4:ab:7f:af:63:18:4a:c6:ab:7b:47: 6f:12:22:58:0f:9f:61:7b:0a:e6:5f:77:53:3b:05:2a:bb:f3: e1:bc:d9:60:06:2d:02:b4:85:be:54:35:1d:d5:c9:0a:aa:31: 97:30:85:c3:b2:64:3b:dd:98:c3:04:03:98:20:5e:38:d8:09: d9:36:1b:3b:e0:c1:52:d0:e3:8d:89:a1:50:50:b4:70:f9:c2: f4:40:13:9d:47:17:33:ce:fd:69:b1:92:19:d9:8f:7a:b5:72: ec:e5:b3:44 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFWIOSWPvtT1eli2Isr/7wpG8C2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDEyMTAwWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTc4NTljNzEzN2MyMjk4NTQ3YTkzZDU3NjI0ODc4YzQz ZGUxZDFiYmNmOTllOGQ0YmJiMDdmYTAzNDQ2NzhjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU2Tvnhmyr4dKmdbRzyDMIi9Rob6GJPBz0/FbUg9oeeYb6 g12A6U8JiG4s/ksuvDrU8E2Y3aUTR5Mc9v797ECd0jLYWRo/kM1/1DjJpDbzaAr8 WwkIK/GLUOdWQb2JyStD/PGpvTCGesEVJ/3tKPHMSC5THfellxRwrrQ7KY83yVRh EZYNk1g6166PgBD1lseFk3fspbpxChY8hp+Uo7ZyUcP4HnRMw5ITRE0UscjCKUBT s4ZXxdG4OmrF3t7s3ewVakfcJtIVq+lGBPt08wuCrJ/tS+BCWy7K+AJRLvq7HTd0 svXnpQpma1Uv3u/shbGjN6RzYDRqYruPLWf6UdLlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/ntSZ6kizkrqLOo4yi24r+VUNKswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1Y2EwN2ZlLTgzNWYtNDBlMi05YjA0LTE4NTU2Y2I3MTk4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESMjANBgkqhkiG9w0BAQsFAAOCAQEAqNF8TRFzDlv3naz4081AUKXFFXxz yDgXZpzFngzhkv5xnEhyP6FClMYF/6YSb1OfaXDA3isse0eVezO2GTqApxBbIAFi TWNd/ocXujACF63q/599eC+JyFc+2lSSSmhN0lfcaDDlO592bhrdbaks6Ojq8gZq MdaTkcgKbVOA+IBVUTnr3zmQ71cOfiUfbq+BsdIZoaXJYdSrf69jGErGq3tHbxIi WA+fYXsK5l93UzsFKrvz4bzZYAYtArSFvlQ1HdXJCqoxlzCFw7JkO92YwwQDmCBe ONgJ2TYbO+DBUtDjjYmhUFC0cPnC9EATnUcXM879abGSGdmPerVy7OWzRA== -----END CERTIFICATE-----Generated at Sun Nov 8 01:40:42 2026 by rpki-client