$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa File: 4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa (raw, json) Hash identifier: 48G6mXgejomoSnMHgS6vQUM5yYw8hoKFid4al9mseGw= Subject key identifier: A3:46:45:DA:BB:6F:24:3B:F1:2D:7A:73:6D:78:20:6B:DE:2E:E6:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56D6396618595080F02B7FDED14DB197FD1F573F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa Signing time: Mon 26 Oct 2026 01:20:58 +0000 ROA not before: Mon 26 Oct 2026 01:20:58 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.153.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d6:39:66:18:59:50:80:f0:2b:7f:de:d1:4d:b1:97:fd:1f:57:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:20:58 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=05ff12aecab7dfa8b6ee99520b860c7b5d87550d1550fd238895bed00f8bbf02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:23:e3:ff:6b:0b:4b:04:57:5a:07:b1:13: 44:7d:dc:3e:a2:6a:df:99:df:83:71:10:1c:ef:bb: c5:a3:11:35:c7:14:a3:66:99:e4:20:b5:11:e7:43: ff:2e:d9:2a:77:8d:58:4b:15:cb:2f:63:e8:8f:4f: 71:e8:2e:90:8a:0e:49:47:e0:82:0c:89:4a:39:33: 82:3d:16:28:52:8c:75:06:14:48:10:a6:1b:2b:12: e2:fe:42:69:27:aa:03:e5:84:99:01:c0:28:60:c6: 9e:a5:b5:53:7e:8a:74:11:bc:1f:5a:79:20:68:22: 65:b7:1a:f5:e5:fd:82:49:79:8b:d4:1d:6f:86:34: 62:f0:e7:e8:c2:13:4e:5b:4a:ee:c0:46:8e:28:ec: 6c:33:84:33:dc:b1:ca:2e:51:8a:37:99:47:b2:c5: fa:6f:f4:f5:af:02:76:f0:3b:d8:6f:d3:91:dd:e6: 26:6a:39:56:bc:7e:a8:aa:a6:cf:a6:57:28:a7:d5: 4e:21:73:1f:31:90:b7:85:a7:c9:42:60:fa:8e:a4: 43:4e:63:12:47:4d:6f:2d:47:cd:81:f9:59:cb:e3: 03:e3:9d:be:27:d4:37:df:1e:c9:7b:61:0a:47:b7: 47:b0:db:cc:58:f7:d2:d5:2a:62:3a:52:0a:ed:d2: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:45:DA:BB:6F:24:3B:F1:2D:7A:73:6D:78:20:6B:DE:2E:E6:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.153.40.0/22 Signature Algorithm: sha256WithRSAEncryption 99:f6:1f:20:4f:c5:75:d5:54:fd:77:a7:cc:12:27:47:fe:4e: 1a:a1:8b:f4:e2:2d:27:a7:95:64:dc:39:1e:c2:da:37:df:3f: 7b:07:18:58:b7:17:58:dc:29:bd:5f:b3:74:51:7c:72:80:cf: 0d:af:6f:ab:c0:cd:91:cc:af:94:51:a9:62:b7:ce:0a:2c:f1: b4:d8:50:1e:20:ed:b1:a9:e0:52:ca:74:70:9e:8a:0e:a2:7f: ed:72:5b:4c:18:d6:bb:cb:89:d8:06:63:a8:42:84:8e:d7:83: e7:77:d1:d1:c7:12:3f:be:9d:41:e3:96:e9:4c:87:6e:64:ff: 72:b8:1f:60:c0:15:f8:d2:9c:50:4d:3c:44:d2:72:41:b8:b9: 52:cf:18:74:d1:73:15:6b:98:87:5d:15:36:fe:45:2b:74:db: 33:b5:9c:f0:82:6f:76:6b:3a:08:31:8b:d1:6c:2e:a7:61:2f: ff:60:33:5c:79:2a:2c:bd:e9:18:39:01:f0:7f:77:a6:98:5f: f0:4b:4d:e0:84:c4:5d:4d:5a:9e:a4:dd:e6:d7:34:d3:fa:a6: 36:5b:ff:d3:35:d2:81:36:fe:01:26:b9:e2:e5:47:ed:7d:3c: 59:29:39:c6:ea:28:6a:75:e6:92:fc:36:21:a8:ac:c7:32:b8: f3:5b:d9:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVtY5ZhhZUIDwK3/e0U2xl/0fVz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDEyMDU4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWZmMTJhZWNhYjdkZmE4YjZlZTk5NTIwYjg2MGM3YjVk ODc1NTBkMTU1MGZkMjM4ODk1YmVkMDBmOGJiZjAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnlyPj/2sLSwRXWgexE0R93D6iat+Z34NxEBzvu8WjETXH FKNmmeQgtRHnQ/8u2Sp3jVhLFcsvY+iPT3HoLpCKDklH4IIMiUo5M4I9FihSjHUG FEgQphsrEuL+QmknqgPlhJkBwChgxp6ltVN+inQRvB9aeSBoImW3GvXl/YJJeYvU HW+GNGLw5+jCE05bSu7ARo4o7GwzhDPcscouUYo3mUeyxfpv9PWvAnbwO9hv05Hd 5iZqOVa8fqiqps+mVyin1U4hcx8xkLeFp8lCYPqOpENOYxJHTW8tR82B+VnL4wPj nb4n1DffHsl7YQpHt0ew28xY99LVKmI6Ugrt0sbHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo0ZF2rtvJDvxLXpzbXgga94u5gIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhNDQ2MmJjLTFjYTctNGIwMS05YWQwLTA4OTg4YjYwZDhjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmSgwDQYJKoZIhvcNAQELBQADggEBAJn2HyBPxXXVVP13p8wSJ0f+Thqh i/TiLSenlWTcOR7C2jffP3sHGFi3F1jcKb1fs3RRfHKAzw2vb6vAzZHMr5RRqWK3 zgos8bTYUB4g7bGp4FLKdHCeig6if+1yW0wY1rvLidgGY6hChI7Xg+d30dHHEj++ nUHjlulMh25k/3K4H2DAFfjSnFBNPETSckG4uVLPGHTRcxVrmIddFTb+RSt02zO1 nPCCb3ZrOggxi9FsLqdhL/9gM1x5Kiy96Rg5AfB/d6aYX/BLTeCExF1NWp6k3ebX NNP6pjZb/9M10oE2/gEmueLlR+19PFkpOcbqKGp15pL8NiGorMcyuPNb2VA= -----END CERTIFICATE-----Generated at Sat Nov 7 23:05:09 2026 by rpki-client