$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37b4b041-cf50-4073-8d74-5ddbaafbcacd.roa File: 37b4b041-cf50-4073-8d74-5ddbaafbcacd.roa (raw, json) Hash identifier: SsNLmUeKyMZBE3sRgZ93yPwgUx9YXztwDp8+1sVrtYw= Subject key identifier: 8C:E8:32:4B:E0:A3:BD:75:B2:01:50:D7:D3:EC:02:C0:87:34:5F:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30FEBDBB982FBCE612B61537F125BCEB15256A4D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37b4b041-cf50-4073-8d74-5ddbaafbcacd.roa Signing time: Sat 24 Oct 2026 01:30:34 +0000 ROA not before: Sat 24 Oct 2026 01:30:34 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 398378 IP address blocks: 161.188.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fe:bd:bb:98:2f:bc:e6:12:b6:15:37:f1:25:bc:eb:15:25:6a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:30:34 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=a13ba699eb3422440ae29d591d053d1d80031209dc89e74db18d36f76f8b857c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:a1:83:15:25:7a:a7:1f:63:42:07:37:f9: 1e:6c:45:30:81:0e:43:86:3b:07:65:36:6b:8b:53: 3a:ca:22:b5:60:f7:34:5f:60:fc:1a:fa:a1:f7:30: 66:9a:e3:72:1c:f4:74:13:48:59:e7:15:e7:b7:d7: 29:a2:20:38:4e:57:86:5f:09:f1:17:81:9e:b4:f8: 7d:d0:df:15:24:fb:53:c3:ef:aa:33:c7:e2:96:d9: ca:2e:36:0e:b2:0b:7f:16:87:2f:3d:c9:5f:a5:7e: 98:db:0f:67:16:f6:08:bf:91:69:a2:6b:26:72:75: a1:cf:d3:d1:33:fe:00:2d:ab:df:28:65:ab:e7:5f: 4f:b7:d0:f8:b8:13:69:9f:4a:39:47:f3:87:79:39: 59:87:82:ff:e6:2d:5e:fb:8b:b3:ef:5b:a8:e5:c7: 5e:b3:f9:83:43:bb:cc:50:a7:3a:44:61:e1:4f:a8: 2c:47:41:c5:ab:40:37:b6:1f:f9:0b:91:15:73:41: 78:97:f5:a3:d3:ea:82:8c:d2:77:fe:a7:de:1f:46: a0:8f:b1:11:92:23:aa:dd:43:6b:b6:c4:14:2d:61: bd:a8:04:24:bc:dd:e6:ac:94:1e:f1:5f:5e:d5:5b: 56:4f:17:27:fa:05:5d:c4:12:13:df:24:1b:01:a8: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:32:4B:E0:A3:BD:75:B2:01:50:D7:D3:EC:02:C0:87:34:5F:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37b4b041-cf50-4073-8d74-5ddbaafbcacd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.130.0/23 Signature Algorithm: sha256WithRSAEncryption 69:31:91:f5:29:67:9d:ec:d8:ee:76:33:73:5b:b4:ad:18:35: 0f:0e:2f:f4:08:3a:cf:a5:8d:ce:8f:5b:4d:bb:b8:88:7f:98: 31:c8:c8:bb:d6:bc:6d:e4:4d:d9:2d:9b:e5:cb:1e:97:9b:52: 1d:d0:74:c6:d5:98:fa:cc:63:ae:a0:90:87:41:a4:70:e5:d7: ff:e9:57:36:4c:d4:bd:2f:0c:05:be:87:52:8e:a0:7e:6d:78: c3:48:a6:42:79:9d:68:d0:c4:d8:5e:0e:3c:5b:c9:ce:7b:3b: 57:ee:8d:48:eb:0f:98:d2:17:06:21:f2:39:c4:8b:38:8a:7f: 4d:fb:62:23:e1:21:a4:d8:f3:11:8d:68:8f:58:f9:98:58:c6: c0:ac:a4:2f:c6:9a:a0:b7:77:67:1a:f6:a9:b6:83:73:e4:24: 2a:6e:9a:d4:6e:cb:f3:d4:0e:4e:c9:30:89:ab:29:14:0d:21: 68:cc:cd:89:e1:57:2e:b5:1f:d1:e9:2a:ed:0f:c4:b4:bc:bc: b2:9f:27:59:cf:7e:e4:6d:3f:58:98:37:b1:09:42:c0:d4:d5: 87:73:57:a1:d5:02:cb:d8:d6:9f:51:98:f8:ce:41:60:04:64: 16:21:57:51:88:be:3a:64:1d:21:98:c8:d2:6f:c2:58:ad:d2: cb:58:b5:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMP69u5gvvOYSthU38SW86xUlak0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDEzMDM0WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTNiYTY5OWViMzQyMjQ0MGFlMjlkNTkxZDA1M2QxZDgw MDMxMjA5ZGM4OWU3NGRiMThkMzZmNzZmOGI4NTdjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+UaGDFSV6px9jQgc3+R5sRTCBDkOGOwdlNmuLUzrKIrVg 9zRfYPwa+qH3MGaa43Ic9HQTSFnnFee31ymiIDhOV4ZfCfEXgZ60+H3Q3xUk+1PD 76ozx+KW2couNg6yC38Why89yV+lfpjbD2cW9gi/kWmiayZydaHP09Ez/gAtq98o ZavnX0+30Pi4E2mfSjlH84d5OVmHgv/mLV77i7PvW6jlx16z+YNDu8xQpzpEYeFP qCxHQcWrQDe2H/kLkRVzQXiX9aPT6oKM0nf+p94fRqCPsRGSI6rdQ2u2xBQtYb2o BCS83easlB7xX17VW1ZPFyf6BV3EEhPfJBsBqNq/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjOgyS+CjvXWyAVDX0+wCwIc0X9IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3YjRiMDQxLWNmNTAtNDA3My04ZDc0LTVkZGJhYWZiY2FjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIIwDQYJKoZIhvcNAQELBQADggEBAGkxkfUpZ53s2O52M3NbtK0YNQ8O L/QIOs+ljc6PW027uIh/mDHIyLvWvG3kTdktm+XLHpebUh3QdMbVmPrMY66gkIdB pHDl1//pVzZM1L0vDAW+h1KOoH5teMNIpkJ5nWjQxNheDjxbyc57O1fujUjrD5jS FwYh8jnEiziKf037YiPhIaTY8xGNaI9Y+ZhYxsCspC/GmqC3d2ca9qm2g3PkJCpu mtRuy/PUDk7JMImrKRQNIWjMzYnhVy61H9HpKu0PxLS8vLKfJ1nPfuRtP1iYN7EJ QsDU1YdzV6HVAsvY1p9RmPjOQWAEZBYhV1GIvjpkHSGYyNJvwlit0stYtQk= -----END CERTIFICATE-----Generated at Sat Nov 7 20:09:08 2026 by rpki-client