$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa File: 36f11e82-bc71-442c-ab59-243123ca3029.roa (raw, json) Hash identifier: SufgP21yvW7BtmzJynKb3xH02g0LQJuHxR/mtxurZMM= Subject key identifier: 7A:AB:33:70:F0:CF:FC:34:13:2D:A4:CC:34:2D:FA:88:B4:68:54:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C855DDCF1D60A63C131EE87724F28200E61F035 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa Signing time: Mon 26 Oct 2026 02:30:14 +0000 ROA not before: Mon 26 Oct 2026 02:30:14 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 47.128.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:85:5d:dc:f1:d6:0a:63:c1:31:ee:87:72:4f:28:20:0e:61:f0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:30:14 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=4128f7e76e0bbe41026a40be35b37b9356edc2f4f0bddd51d09ead9699d3c931, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:24:e8:07:82:07:6b:81:f7:13:f6:d0:99: b0:67:d6:e5:8b:bc:37:8f:a2:3e:e4:66:c6:c4:3f: f0:89:c7:00:5f:f8:36:6c:da:11:a4:5a:3f:4e:10: cd:ad:4c:e6:c4:85:f5:a6:fd:7e:88:9f:09:17:93: 9f:72:f7:43:46:54:ca:d3:42:4b:ef:0a:ea:3c:2d: 51:81:7e:0e:f1:f2:20:7d:5f:67:be:9a:59:48:30: 03:48:aa:83:59:e5:1b:a7:7a:ad:91:7a:a2:83:45: e6:27:00:16:ed:c3:2b:69:11:a6:6b:b5:97:fd:1f: 52:67:d9:68:79:fb:5a:6a:73:79:63:c3:44:a4:a5: 70:c9:58:a9:99:8e:e4:b3:b2:0d:0e:04:53:02:a9: 0f:16:b0:79:93:2b:4c:39:b8:cc:e0:b5:f1:6f:00: f4:8d:b4:33:32:d2:f0:8c:9c:32:e4:37:22:7f:bf: 27:30:80:3c:f6:c7:64:3f:b5:a9:3b:24:44:8b:19: d2:10:a3:9c:b1:aa:e2:20:d9:4a:50:ad:f0:df:fe: ee:f5:84:ce:e7:2c:f9:ef:2a:47:e7:bb:d0:80:e5: ee:b8:ae:eb:eb:e8:e8:ba:75:0a:f3:52:02:f7:a3: 8c:e1:4d:d4:fd:2d:e2:70:e0:19:88:e0:11:0f:47: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AB:33:70:F0:CF:FC:34:13:2D:A4:CC:34:2D:FA:88:B4:68:54:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.128.8.0/23 Signature Algorithm: sha256WithRSAEncryption 62:94:b3:43:c3:66:a1:45:fc:36:c0:ec:8f:33:d6:4c:60:c9: 44:4b:18:f8:e6:19:1d:5e:d2:db:eb:7e:f3:c7:f8:32:3f:d9: 88:de:4f:29:ac:0d:69:6b:33:1a:55:97:c6:6d:68:6e:1a:49: af:53:44:31:89:b5:85:d3:bd:38:e7:92:da:56:0d:30:e0:06: 18:eb:8b:b8:35:ab:a4:08:9a:1d:93:31:0c:27:03:89:83:d5: ec:6f:e6:48:d0:84:eb:05:f1:af:ad:8b:b3:69:a8:3b:4a:51: 02:56:61:ea:4f:13:c2:48:8a:8c:00:39:3f:4b:bf:27:d8:95: 03:d1:57:ab:78:27:78:f0:0d:7e:79:58:96:74:60:37:b1:c4: d3:cf:27:2e:59:6b:3d:0d:16:6d:92:45:52:0d:16:46:7f:26: a2:a6:b2:c9:78:e3:da:50:13:31:08:a4:37:5c:ae:ff:22:c7: b7:9c:7c:70:a4:db:86:a9:fa:36:e7:ab:f7:1d:e2:c0:3b:97: 92:cb:91:51:41:78:e5:74:d5:66:d5:89:d0:79:17:a8:37:1e: 6b:20:ec:af:33:ef:01:38:b1:01:d9:28:e4:86:1c:28:ae:90: 6d:86:4b:49:ea:34:65:bc:5b:d3:1c:7a:c7:3d:12:f8:a4:40: e0:de:b2:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXIVd3PHWCmPBMe6Hck8oIA5h8DUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIzMDE0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTI4ZjdlNzZlMGJiZTQxMDI2YTQwYmUzNWIzN2I5MzU2 ZWRjMmY0ZjBiZGRkNTFkMDllYWQ5Njk5ZDNjOTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCavyToB4IHa4H3E/bQmbBn1uWLvDePoj7kZsbEP/CJxwBf +DZs2hGkWj9OEM2tTObEhfWm/X6InwkXk59y90NGVMrTQkvvCuo8LVGBfg7x8iB9 X2e+mllIMANIqoNZ5Runeq2ReqKDReYnABbtwytpEaZrtZf9H1Jn2Wh5+1pqc3lj w0SkpXDJWKmZjuSzsg0OBFMCqQ8WsHmTK0w5uMzgtfFvAPSNtDMy0vCMnDLkNyJ/ vycwgDz2x2Q/tak7JESLGdIQo5yxquIg2UpQrfDf/u71hM7nLPnvKkfnu9CA5e64 ruvr6Oi6dQrzUgL3o4zhTdT9LeJw4BmI4BEPR5TTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeqszcPDP/DQTLaTMNC36iLRoVOwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2ZjExZTgyLWJjNzEtNDQyYy1hYjU5LTI0MzEyM2NhMzAyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEvgAgwDQYJKoZIhvcNAQELBQADggEBAGKUs0PDZqFF/DbA7I8z1kxgyURL GPjmGR1e0tvrfvPH+DI/2YjeTymsDWlrMxpVl8ZtaG4aSa9TRDGJtYXTvTjnktpW DTDgBhjri7g1q6QImh2TMQwnA4mD1exv5kjQhOsF8a+ti7NpqDtKUQJWYepPE8JI iowAOT9LvyfYlQPRV6t4J3jwDX55WJZ0YDexxNPPJy5Zaz0NFm2SRVINFkZ/JqKm ssl449pQEzEIpDdcrv8ix7ecfHCk24ap+jbnq/cd4sA7l5LLkVFBeOV01WbVidB5 F6g3Hmsg7K8z7wE4sQHZKOSGHCiukG2GS0nqNGW8W9Mcesc9EvikQODesoc= -----END CERTIFICATE-----Generated at Sun Nov 8 03:36:21 2026 by rpki-client