$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa File: 5177b928-5de6-4c30-97fe-987774456daf.roa (raw, json) Hash identifier: AGoxUzw3pbD3DbgjjfTH+J1P7Ezz/q9d4Oqoy5D/lpw= Subject key identifier: 8E:3F:D0:E2:16:8C:A6:60:B2:83:52:F2:3D:6F:D6:12:A6:E3:26:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7235E9942F05F5DE87D79E99FF16F1AA655C4303 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa Signing time: Wed 21 Oct 2026 01:40:40 +0000 ROA not before: Wed 21 Oct 2026 01:40:40 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:35:e9:94:2f:05:f5:de:87:d7:9e:99:ff:16:f1:aa:65:5c:43:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 01:40:40 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=867f868cec87e4043d16720d3fc4e5ea859de2aa4123eadb0e30a1eaff9d9923, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:ce:fe:3d:20:6e:99:8c:a6:6a:46:44:0a: 21:4e:50:1b:75:8d:8e:1e:78:f0:ec:1a:a3:ff:40: e0:66:78:43:86:03:35:e4:de:f6:26:4a:ea:73:61: c2:ac:7c:ed:27:41:65:35:6c:77:ae:e4:15:f2:7d: 4e:09:30:71:f5:5f:be:3c:8a:81:b6:e0:41:99:23: 45:79:ec:2e:12:0f:ba:66:d2:9f:27:d9:14:8e:84: 7e:af:e8:97:a9:a2:d7:85:8a:a6:88:11:ae:e1:8f: e8:97:18:67:36:67:43:13:0d:21:91:7e:32:41:84: 63:dd:d6:bd:20:15:35:75:f3:e1:9a:9d:45:19:df: a1:d6:cd:25:38:82:5f:bf:74:f5:c1:da:af:8d:aa: e5:cc:59:0f:b2:7c:f6:31:91:49:71:35:96:13:ac: c7:ba:26:59:67:d6:1f:2e:4c:2f:ee:f0:0e:c4:03: 21:ba:89:bc:95:4f:8d:69:1d:21:a0:b7:b3:af:06: 51:1e:8a:99:3f:99:ab:0b:fa:c5:a5:95:46:5d:da: ad:86:e6:13:39:8d:f6:c9:15:b3:94:09:46:93:f2: 34:35:7d:ec:13:4e:3b:0b:9e:be:5e:cb:e8:bb:99: 32:c2:33:79:35:6e:ab:2e:ae:74:2c:b6:39:b3:33: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:D0:E2:16:8C:A6:60:B2:83:52:F2:3D:6F:D6:12:A6:E3:26:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.25.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:84:c1:c6:70:f1:d7:58:5a:4b:1e:d2:ae:12:6f:ab:6c:de: 37:69:8b:bb:0e:31:fc:d0:4b:72:ec:36:56:be:b5:6e:81:25: 15:eb:33:72:53:36:d1:36:13:1c:ec:b8:26:9b:5d:46:06:e4: 77:7a:bc:88:06:9a:8a:88:fe:d4:fc:aa:ab:d0:48:29:5f:d2: c9:c7:55:dd:b0:43:58:2e:ea:45:91:d7:21:95:cb:ba:73:93: 78:ab:72:40:8d:42:e1:16:e6:c5:46:f9:c9:47:b7:82:76:79: 09:95:c5:a0:f2:34:97:5f:aa:05:4b:16:d8:78:bf:7d:96:78: 52:27:69:e9:1e:2c:5b:cd:b0:9d:26:2a:a7:af:b2:c1:6e:24: e1:fe:8e:52:c7:b3:e3:12:24:46:5e:c2:3b:16:2d:ae:66:b0: d5:9a:81:9a:16:8c:fa:fe:ad:fa:8a:66:06:aa:f1:26:18:94: c5:4d:b2:3b:75:37:5b:07:28:fa:51:57:be:ea:a4:7d:9a:b3: 17:5f:e3:20:ca:90:b5:ed:df:45:69:ea:dd:98:b3:a6:56:63: ab:f9:bc:8d:14:0c:8d:d8:93:a3:c4:c2:7b:d8:09:c0:b3:b9: f8:58:bf:e5:d4:fe:43:aa:84:a8:07:4a:c4:39:e4:75:a5:56: 7f:d1:89:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcjXplC8F9d6H156Z/xbxqmVcQwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDE0MDQwWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjdmODY4Y2VjODdlNDA0M2QxNjcyMGQzZmM0ZTVlYTg1 OWRlMmFhNDEyM2VhZGIwZTMwYTFlYWZmOWQ5OTIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBNM7+PSBumYymakZECiFOUBt1jY4eePDsGqP/QOBmeEOG AzXk3vYmSupzYcKsfO0nQWU1bHeu5BXyfU4JMHH1X748ioG24EGZI0V57C4SD7pm 0p8n2RSOhH6v6JepoteFiqaIEa7hj+iXGGc2Z0MTDSGRfjJBhGPd1r0gFTV18+Ga nUUZ36HWzSU4gl+/dPXB2q+NquXMWQ+yfPYxkUlxNZYTrMe6Jlln1h8uTC/u8A7E AyG6ibyVT41pHSGgt7OvBlEeipk/masL+sWllUZd2q2G5hM5jfbJFbOUCUaT8jQ1 fewTTjsLnr5ey+i7mTLCM3k1bqsurnQstjmzM9bLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjj/Q4haMpmCyg1LyPW/WEqbjJt8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxNzdiOTI4LTVkZTYtNGMzMC05N2ZlLTk4Nzc3NDQ1NmRhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3BkwDQYJKoZIhvcNAQELBQADggEBAFqEwcZw8ddYWkse0q4Sb6ts3jdp i7sOMfzQS3LsNla+tW6BJRXrM3JTNtE2ExzsuCabXUYG5Hd6vIgGmoqI/tT8qqvQ SClf0snHVd2wQ1gu6kWR1yGVy7pzk3irckCNQuEW5sVG+clHt4J2eQmVxaDyNJdf qgVLFth4v32WeFInaekeLFvNsJ0mKqevssFuJOH+jlLHs+MSJEZewjsWLa5msNWa gZoWjPr+rfqKZgaq8SYYlMVNsjt1N1sHKPpRV77qpH2asxdf4yDKkLXt30Vp6t2Y s6ZWY6v5vI0UDI3Yk6PEwnvYCcCzufhYv+XU/kOqhKgHSsQ55HWlVn/Rics= -----END CERTIFICATE-----Generated at Sun Nov 8 05:59:52 2026 by rpki-client