$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa File: 5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa (raw, json) Hash identifier: mS0vsMeCXJ+MlRgBayIfkPtnIHyBHMcqW4rcUvKX4o4= Subject key identifier: 3E:26:27:1D:66:7A:95:87:A7:18:C5:DA:88:FA:5F:5F:AA:D3:9C:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4742B8ABEDE68EBBE9B783A12FDE26A396CA3303 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa Signing time: Mon 26 Oct 2026 01:02:49 +0000 ROA not before: Mon 26 Oct 2026 01:02:49 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.153.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:42:b8:ab:ed:e6:8e:bb:e9:b7:83:a1:2f:de:26:a3:96:ca:33:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:02:49 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=757ac82ae2f773a0368279b26c67ad2f0c397f9bf762d5c7ca08b85abe6cba72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:2c:9b:bf:f9:34:98:d0:ec:2a:77:54:83: 12:7a:bf:a0:a0:35:65:84:b3:ac:7e:a2:50:8e:ce: b9:bf:6d:a5:32:64:04:18:9c:dd:03:43:7a:f8:6b: 51:85:ec:70:6a:e6:79:6e:3b:78:71:59:2f:5d:65: a4:18:88:a6:ae:a1:8b:d1:fe:47:2b:12:d2:03:0f: 52:df:ca:a1:36:33:3b:22:dd:55:9a:ad:bc:a9:c2: 0a:f8:eb:85:c0:ec:67:e3:83:1e:43:7e:28:07:9d: 52:2a:a9:d4:0c:36:a9:a5:05:eb:21:7d:a6:5d:4c: a4:11:68:6f:e3:38:79:f7:1b:dd:be:03:32:5c:9d: ed:3d:30:4d:a0:64:a5:99:ee:02:b9:f3:6d:41:29: 15:0c:47:32:99:4e:bc:cc:1d:f2:6f:8e:53:78:b6: 79:fc:6e:20:a2:1e:c8:54:5a:ff:0d:4b:4a:41:d1: 2a:a8:70:fe:8d:ac:ac:4e:7b:4d:74:0f:50:99:40: 19:f8:39:2a:e5:83:7b:32:f1:02:6b:35:a7:23:4f: 36:8e:2e:54:a9:51:36:e8:85:60:b2:80:0a:ec:ad: eb:79:d5:1e:54:dc:19:e6:13:87:55:92:5a:db:ae: 82:c1:f4:ed:91:e8:2d:1b:42:62:98:17:90:ef:bd: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:26:27:1D:66:7A:95:87:A7:18:C5:DA:88:FA:5F:5F:AA:D3:9C:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.153.0.0/22 Signature Algorithm: sha256WithRSAEncryption 89:b1:d8:c8:e1:30:43:be:12:95:6f:11:4b:17:f7:60:1b:c0: f3:53:b5:44:c0:10:9b:a0:3d:5e:6f:58:91:4c:ee:5c:36:1e: e6:c7:92:b6:dc:33:fd:65:bf:ca:20:f4:4c:c2:05:e3:52:6d: a7:3d:8c:16:31:b1:0d:36:5e:f3:5f:80:7b:3e:3a:9b:c0:b6: 08:b5:29:2d:26:cc:3a:4f:bb:aa:62:f4:74:17:04:44:37:f8: ac:a3:cb:47:29:e5:a6:92:7f:2d:8f:2a:72:98:ad:93:26:5c: 39:41:4d:55:57:fa:e5:a2:80:40:b5:33:72:24:99:72:96:88: bb:d7:c5:84:40:fe:a1:db:a1:9b:ab:0e:12:7b:3b:b9:95:d9: 7b:83:59:03:1e:6a:9a:88:7b:5c:37:cb:d1:f6:c3:ba:1f:ca: 4d:78:fb:a5:94:40:a8:e3:b9:5a:fa:84:0d:36:ec:23:77:4d: f0:f1:9b:bd:41:30:19:25:be:e9:e2:d5:00:19:3b:95:cc:68: e9:71:25:72:38:30:ee:a2:d9:47:ee:42:53:27:ed:5a:cb:b3: 09:da:f3:d0:ec:d1:ea:c6:3e:10:dc:bb:34:ff:79:31:e0:d6: 84:09:46:54:f0:16:01:0e:45:4a:cb:97:1f:4e:43:5d:c9:53: 5e:6c:37:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR0K4q+3mjrvpt4OhL94mo5bKMwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDEwMjQ5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTdhYzgyYWUyZjc3M2EwMzY4Mjc5YjI2YzY3YWQyZjBj Mzk3ZjliZjc2MmQ1YzdjYTA4Yjg1YWJlNmNiYTcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvfyybv/k0mNDsKndUgxJ6v6CgNWWEs6x+olCOzrm/baUy ZAQYnN0DQ3r4a1GF7HBq5nluO3hxWS9dZaQYiKauoYvR/kcrEtIDD1LfyqE2Mzsi 3VWarbypwgr464XA7Gfjgx5DfigHnVIqqdQMNqmlBeshfaZdTKQRaG/jOHn3G92+ AzJcne09ME2gZKWZ7gK5821BKRUMRzKZTrzMHfJvjlN4tnn8biCiHshUWv8NS0pB 0SqocP6NrKxOe010D1CZQBn4OSrlg3sy8QJrNacjTzaOLlSpUTbohWCygArsret5 1R5U3BnmE4dVklrbroLB9O2R6C0bQmKYF5DvvclfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPiYnHWZ6lYenGMXaiPpfX6rTnMUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyMjRlMmI3LTJmNmYtNDNkNy05YjBlLWJiY2MzMGM1YWQ2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjmQAwDQYJKoZIhvcNAQELBQADggEBAImx2MjhMEO+EpVvEUsX92AbwPNT tUTAEJugPV5vWJFM7lw2HubHkrbcM/1lv8og9EzCBeNSbac9jBYxsQ02XvNfgHs+ OpvAtgi1KS0mzDpPu6pi9HQXBEQ3+Kyjy0cp5aaSfy2PKnKYrZMmXDlBTVVX+uWi gEC1M3IkmXKWiLvXxYRA/qHboZurDhJ7O7mV2XuDWQMeapqIe1w3y9H2w7ofyk14 +6WUQKjjuVr6hA027CN3TfDxm71BMBklvuni1QAZO5XMaOlxJXI4MO6i2UfuQlMn 7VrLswna89Ds0erGPhDcuzT/eTHg1oQJRlTwFgEORUrLlx9OQ13JU15sNxc= -----END CERTIFICATE-----Generated at Sat Nov 7 18:36:38 2026 by rpki-client