$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa File: 63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa (raw, json) Hash identifier: 0Nm413IIZypVWfkdMaSJyZ9HmdeE5bLUmMCxNHz1D3E= Subject key identifier: AE:85:49:9E:E9:2C:BC:55:43:E1:78:A4:C9:45:0E:CD:CC:9C:5A:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E436E4C47CABDAEF665F082D26AFCF926BADDF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa Signing time: Thu 15 Oct 2026 01:10:11 +0000 ROA not before: Thu 15 Oct 2026 01:10:11 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 3.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:43:6e:4c:47:ca:bd:ae:f6:65:f0:82:d2:6a:fc:f9:26:ba:dd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:10:11 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=0785d4013d24bf2f3c7ed7ec35adb4d0939a3f2405c15a13db769648290a3f59, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:34:35:ff:81:91:b6:a4:d5:37:0e:71:e4: 9b:4d:15:2d:7e:9c:ba:87:12:11:e3:87:9f:2f:45: 03:c7:3f:49:0b:b4:91:3c:f2:11:07:3e:13:d5:a3: d0:c3:c8:e9:dc:e2:05:3f:ae:a7:81:8f:dc:20:15: e1:a2:bc:06:b7:22:07:8b:60:e2:78:65:b2:9f:94: 4c:3b:84:03:d7:c9:ae:07:26:de:2e:ca:73:14:9f: 6d:73:d9:da:a8:56:a9:89:71:01:50:6d:22:4f:6b: c7:97:de:fc:e8:e0:2d:ca:5e:18:45:4e:78:de:e4: 64:c3:14:19:3f:27:f5:f5:bd:ed:9b:27:90:03:95: d0:03:0d:4c:fa:f1:15:b5:30:8d:d5:f5:d9:bc:45: f4:fc:6e:9f:04:a4:08:0d:62:2b:77:51:10:97:e7: 50:4c:f8:fd:dc:07:3e:75:e2:77:13:9f:22:82:6f: 4c:f2:39:3e:f5:02:2b:e2:4f:a5:af:e5:10:1d:fc: 6e:7a:ae:61:ea:40:8d:87:ca:f7:83:08:20:bd:af: 71:07:74:42:a3:d7:82:ee:13:16:cb:2f:e3:fb:33: fb:19:e1:30:dc:f5:ac:df:d7:66:15:57:62:77:83: 2d:d4:1d:b3:b5:49:66:0d:d0:6f:27:42:90:85:52: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:49:9E:E9:2C:BC:55:43:E1:78:A4:C9:45:0E:CD:CC:9C:5A:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 30:d3:96:bb:b7:d3:c5:3b:6c:21:77:17:ed:1a:ba:c6:6b:32: 5f:8e:89:e7:f1:e5:af:40:0a:80:05:55:a9:77:eb:ca:e4:12: ec:51:01:a9:36:16:83:38:6c:81:38:56:f9:6b:a8:38:f2:19: 30:3a:96:74:86:8b:52:3a:28:71:51:2a:bb:b1:9d:29:5b:e0: 45:48:f8:8c:68:77:60:b3:50:c3:3c:bd:c6:35:bd:fd:86:3d: 8a:ab:61:14:a7:ed:a9:4c:3d:3a:62:f0:50:2f:6a:95:a6:be: 6a:81:ab:11:af:fc:6a:92:34:21:9e:f0:51:6b:fc:d3:52:89: 87:1c:61:47:79:29:2c:83:66:c4:9c:c2:5b:97:b4:24:a3:d4: e6:de:2b:66:37:aa:24:13:cc:73:75:97:a2:bf:16:e0:37:24: 3c:37:f6:d3:3a:42:ab:3b:ef:40:7b:e7:7e:e2:d2:77:34:c8: 50:da:b0:f9:5a:55:31:a8:bb:c1:4d:c2:4d:35:a6:da:2b:21: fd:e4:45:31:30:aa:e0:3b:04:cc:63:65:35:4f:3e:36:d6:f0: c7:3f:6b:29:a9:fc:15:00:30:7c:1f:c3:1b:34:63:7b:f1:e5: e3:cd:c9:11:90:73:ca:18:4c:ff:2f:0b:ba:2d:48:67:be:5f: 7a:4f:75:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHkNuTEfKva72ZfCC0mr8+Sa63fIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDExMDExWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzg1ZDQwMTNkMjRiZjJmM2M3ZWQ3ZWMzNWFkYjRkMDkz OWEzZjI0MDVjMTVhMTNkYjc2OTY0ODI5MGEzZjU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw2TQ1/4GRtqTVNw5x5JtNFS1+nLqHEhHjh58vRQPHP0kL tJE88hEHPhPVo9DDyOnc4gU/rqeBj9wgFeGivAa3IgeLYOJ4ZbKflEw7hAPXya4H Jt4uynMUn21z2dqoVqmJcQFQbSJPa8eX3vzo4C3KXhhFTnje5GTDFBk/J/X1ve2b J5ADldADDUz68RW1MI3V9dm8RfT8bp8EpAgNYit3URCX51BM+P3cBz514ncTnyKC b0zyOT71AiviT6Wv5RAd/G56rmHqQI2HyveDCCC9r3EHdEKj14LuExbLL+P7M/sZ 4TDc9azf12YVV2J3gy3UHbO1SWYN0G8nQpCFUuzjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUroVJnuksvFVD4XikyUUOzcycWoUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzZGEyN2EwLWI1NjktNGEzZS04ZjRmLWJmMmIxMjQ0NWUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADIDANBgkqhkiG9w0BAQsFAAOCAQEAMNOWu7fTxTtsIXcX7Rq6xmsyX46J 5/Hlr0AKgAVVqXfryuQS7FEBqTYWgzhsgThW+WuoOPIZMDqWdIaLUjoocVEqu7Gd KVvgRUj4jGh3YLNQwzy9xjW9/YY9iqthFKftqUw9OmLwUC9qlaa+aoGrEa/8apI0 IZ7wUWv801KJhxxhR3kpLINmxJzCW5e0JKPU5t4rZjeqJBPMc3WXor8W4DckPDf2 0zpCqzvvQHvnfuLSdzTIUNqw+VpVMai7wU3CTTWm2ish/eRFMTCq4DsEzGNlNU8+ Ntbwxz9rKan8FQAwfB/DGzRje/Hl483JEZBzyhhM/y8Lui1IZ75fek91QA== -----END CERTIFICATE-----Generated at Sat Nov 7 19:50:13 2026 by rpki-client