$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/760c3d4f-c848-4ace-a80f-0fcd9c524458.roa File: 760c3d4f-c848-4ace-a80f-0fcd9c524458.roa (raw, json) Hash identifier: KkrpBqgtH3Ole8VccbypcsMAL4dASxsfNQHBQoRbx48= Subject key identifier: 96:D9:E7:91:22:21:A3:24:2E:7F:30:AC:AD:1A:34:06:B4:83:FA:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A49B83F7E4FC4536BD188C2B0D46CA55829F500 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/760c3d4f-c848-4ace-a80f-0fcd9c524458.roa Signing time: Mon 26 Oct 2026 03:20:06 +0000 ROA not before: Mon 26 Oct 2026 03:20:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:49:b8:3f:7e:4f:c4:53:6b:d1:88:c2:b0:d4:6c:a5:58:29:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 03:20:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=472f8d2c5b7bb7d8b6b18e5be2226cd249771f84e0ad06f81dbdaa266a65e9d7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:18:fd:57:8e:e4:fb:10:78:a2:95:b3:80: 95:2c:34:de:98:04:8f:8a:5f:28:4e:91:30:ff:b7: 7c:b8:f8:fe:fb:19:79:52:d4:38:bb:c9:38:bd:7b: 4d:f5:ee:94:4c:b0:90:4c:6b:1f:49:c3:06:50:37: 2a:6c:bb:ce:2b:1a:69:af:f3:c6:26:b0:8c:8c:4d: 6d:bb:60:14:18:ef:81:25:9c:b7:b6:3d:5d:4d:33: b7:87:11:cc:f7:77:07:45:f0:ef:84:e9:81:2a:d4: 96:91:ed:a3:e4:c6:8c:cd:20:2a:d6:fa:ea:e9:55: 09:51:5b:84:15:8f:66:16:02:27:a2:ac:3f:23:e3: 76:79:85:af:4d:4d:0c:df:0d:88:58:8a:45:0a:ae: aa:ef:e5:31:34:8e:32:b6:51:ac:91:c7:74:6f:36: 8a:0f:10:98:b1:61:54:f7:ba:f5:72:73:3b:95:34: b8:f2:7e:0e:5c:d4:f0:fb:05:35:bf:0b:c9:db:d5: 13:fa:36:f0:6f:b7:6b:70:cc:c2:80:0c:6c:bb:38: c8:90:73:17:0d:51:b9:e9:33:cb:e7:e2:89:83:1f: 18:57:a2:e3:f9:77:ed:cf:f8:26:4f:b6:5e:fd:be: 4c:be:cf:a1:9f:58:08:bd:0c:f0:9c:a8:c2:ea:18: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D9:E7:91:22:21:A3:24:2E:7F:30:AC:AD:1A:34:06:B4:83:FA:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/760c3d4f-c848-4ace-a80f-0fcd9c524458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.224.0/22 Signature Algorithm: sha256WithRSAEncryption 31:f5:68:8e:3e:78:36:bd:f2:50:bf:a0:93:21:8c:71:2d:ae: 76:7b:42:c3:3b:41:09:e1:e8:41:0c:f4:fb:24:b5:4f:b3:9e: 24:7b:64:16:83:87:44:0b:f9:ab:65:ef:3e:8e:6b:68:b4:08: b0:d0:46:4c:2c:ea:d6:07:e4:71:ad:98:e5:d2:2e:1a:b5:57: a8:64:6b:37:be:1d:fe:ba:30:f4:35:a8:aa:90:50:67:e7:93: f5:0a:d7:36:5d:2c:0b:d2:5b:71:9d:0c:78:48:42:ca:26:1a: ba:91:b8:ea:b2:53:1a:2f:1f:d9:b7:a9:cc:70:62:aa:71:d1: 34:2b:2f:cc:93:2c:a1:4b:15:a2:67:99:df:b0:b3:25:77:d3: d2:40:5d:28:f3:fd:ed:46:3c:98:aa:7f:be:7e:39:14:f0:7a: e8:5b:98:eb:2f:0c:a5:d8:cd:77:b8:c5:9f:66:93:ea:be:4e: b4:d7:12:77:09:18:fc:f9:a1:24:e5:0c:28:3b:12:ab:2c:e6: d9:e1:b8:a4:94:da:f9:7d:42:52:17:24:64:d6:4b:a1:d4:61: 44:2f:27:07:4e:4a:66:aa:05:66:3f:71:98:6c:ab:5a:68:86: 96:33:88:35:13:63:66:40:06:b6:f9:c4:ba:29:a2:4a:31:8d: ef:f5:0f:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKkm4P35PxFNr0YjCsNRspVgp9QAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDMyMDA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzJmOGQyYzViN2JiN2Q4YjZiMThlNWJlMjIyNmNkMjQ5 NzcxZjg0ZTBhZDA2ZjgxZGJkYWEyNjZhNjVlOWQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9tRj9V47k+xB4opWzgJUsNN6YBI+KXyhOkTD/t3y4+P77 GXlS1Di7yTi9e0317pRMsJBMax9JwwZQNypsu84rGmmv88YmsIyMTW27YBQY74El nLe2PV1NM7eHEcz3dwdF8O+E6YEq1JaR7aPkxozNICrW+urpVQlRW4QVj2YWAiei rD8j43Z5ha9NTQzfDYhYikUKrqrv5TE0jjK2UayRx3RvNooPEJixYVT3uvVyczuV NLjyfg5c1PD7BTW/C8nb1RP6NvBvt2twzMKADGy7OMiQcxcNUbnpM8vn4omDHxhX ouP5d+3P+CZPtl79vky+z6GfWAi9DPCcqMLqGFl3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUltnnkSIhoyQufzCsrRo0BrSD+v0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2MGMzZDRmLWM4NDgtNGFjZS1hODBmLTBmY2Q5YzUyNDQ1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDreAwDQYJKoZIhvcNAQELBQADggEBADH1aI4+eDa98lC/oJMhjHEtrnZ7 QsM7QQnh6EEM9PsktU+zniR7ZBaDh0QL+atl7z6Oa2i0CLDQRkws6tYH5HGtmOXS Lhq1V6hkaze+Hf66MPQ1qKqQUGfnk/UK1zZdLAvSW3GdDHhIQsomGrqRuOqyUxov H9m3qcxwYqpx0TQrL8yTLKFLFaJnmd+wsyV309JAXSjz/e1GPJiqf75+ORTweuhb mOsvDKXYzXe4xZ9mk+q+TrTXEncJGPz5oSTlDCg7Eqss5tnhuKSU2vl9QlIXJGTW S6HUYUQvJwdOSmaqBWY/cZhsq1pohpYziDUTY2ZABrb5xLopokoxje/1D6M= -----END CERTIFICATE-----Generated at Sat Nov 7 18:59:24 2026 by rpki-client