$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8f03ae-5994-427d-88ca-0edbd55a71b5.roa File: 7c8f03ae-5994-427d-88ca-0edbd55a71b5.roa (raw, json) Hash identifier: wzEKX/LA+jIclUMCSWAK6TL3ziUtf1PbL2GAXd6Nd5A= Subject key identifier: E0:68:D5:B5:7B:8C:1E:B9:2E:82:D7:B4:B1:2F:FC:69:DC:41:CE:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7440B0DA37B3D6B4C7884757761935022ECA42 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8f03ae-5994-427d-88ca-0edbd55a71b5.roa Signing time: Mon 26 Oct 2026 01:02:25 +0000 ROA not before: Mon 26 Oct 2026 01:02:25 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.138.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:40:b0:da:37:b3:d6:b4:c7:88:47:57:76:19:35:02:2e:ca:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:02:25 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8e08e4ef97b4076b6f97f5b78a2e08781894ccc64e7327f3e5d6c8ddc6190d93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:36:0d:46:5f:53:a9:9e:5b:97:6e:84:ee:32: fd:3a:2c:c0:96:f2:eb:fb:44:31:f6:e2:f6:92:f6: 40:70:2d:b4:58:95:0b:c4:b4:63:00:8c:26:2b:69: 6a:66:39:bc:2f:d8:af:85:10:66:7b:77:04:96:72: 8c:c0:11:f9:e9:bb:d2:0c:f5:9d:5d:47:ba:b7:16: d2:d6:a4:90:99:1b:71:aa:ae:c1:cc:e5:93:7b:1c: 20:91:c7:99:d7:fc:b0:03:44:eb:af:26:15:ed:b3: 05:84:c7:cd:58:fe:5c:50:8a:5a:89:66:76:b5:e1: 96:5a:55:72:aa:f5:86:50:61:a6:22:9d:fd:2f:bf: 49:fa:50:60:ec:8c:76:4a:5f:c1:df:6e:c9:98:3d: 4e:98:ed:6e:5b:46:37:3d:09:3f:ab:9d:a8:ea:42: a9:5a:c0:70:1f:35:e5:5a:6b:d4:e6:bf:fb:54:eb: cd:47:26:19:41:6b:d2:d9:b4:fe:5a:60:08:75:19: 82:5f:6f:f0:f6:98:bd:99:87:f2:50:f9:bf:a9:e3: 62:72:a0:c2:20:29:25:f9:87:03:bd:e4:15:41:bb: a0:c0:b1:7c:a4:ce:b7:0d:89:46:98:e8:78:99:bf: bf:68:97:7b:b4:e4:14:cb:08:19:f1:1a:5c:7d:10: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:D5:B5:7B:8C:1E:B9:2E:82:D7:B4:B1:2F:FC:69:DC:41:CE:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8f03ae-5994-427d-88ca-0edbd55a71b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.138.0.0/15 Signature Algorithm: sha256WithRSAEncryption 99:01:2a:f0:e3:bd:04:4c:3c:c2:f8:65:b6:f0:b1:6a:2f:25: cf:e6:8a:59:19:30:26:75:76:62:2c:c1:44:66:8d:95:43:20: 39:fd:ae:d5:11:44:5e:44:c6:f1:5d:63:e5:a8:23:90:ad:33: 41:19:6c:83:f2:0c:4e:bf:a6:ad:fd:44:80:2b:b6:53:f0:89: 3d:71:de:ea:99:ce:c2:ea:b3:33:c3:37:9c:66:b8:ad:6a:2a: 15:69:b2:5c:55:2c:17:60:e2:81:83:93:20:0a:a1:10:fc:3d: 56:3f:a0:16:7f:4a:88:05:bc:cf:72:19:b5:fe:bc:e3:52:9b: 91:d6:63:f0:ac:a3:73:d0:d4:d5:26:68:9e:d9:2d:fc:2d:e2: e1:b1:0f:a2:ee:51:26:3d:a7:69:c9:dc:9d:ae:59:22:aa:ec: 7f:2e:60:1a:71:fb:5c:68:90:d3:00:3c:64:84:40:65:f4:9b: a3:c0:77:ec:a0:0d:75:c6:86:18:4c:c0:31:f8:5a:bd:41:11: 80:1f:f5:6b:43:30:16:ed:8c:5d:c6:c2:4c:76:71:85:0d:c0: 9e:e0:25:36:b0:60:ea:dd:fa:7b:df:3f:63:2d:fb:49:f5:3d: 75:aa:e7:10:28:c2:a4:21:9c:b3:4c:bf:1f:dd:06:1d:6f:78: b9:e9:ca:31 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITdECw2jez1rTHiEdXdhk1Ai7KQjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNjEwMjYwMTAyMjVaFw0yNzAxMjQyMzU5NTla MHoxSTBHBgNVBAUTQDhlMDhlNGVmOTdiNDA3NmI2Zjk3ZjViNzhhMmUwODc4MTg5 NGNjYzY0ZTczMjdmM2U1ZDZjOGRkYzYxOTBkOTMxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAPY2DUZfU6meW5duhO4y/ToswJby6/tEMfbi9pL2QHAttFiV C8S0YwCMJitpamY5vC/Yr4UQZnt3BJZyjMAR+em70gz1nV1HurcW0takkJkbcaqu wczlk3scIJHHmdf8sANE668mFe2zBYTHzVj+XFCKWolmdrXhllpVcqr1hlBhpiKd /S+/SfpQYOyMdkpfwd9uyZg9TpjtbltGNz0JP6udqOpCqVrAcB815Vpr1Oa/+1Tr zUcmGUFr0tm0/lpgCHUZgl9v8PaYvZmH8lD5v6njYnKgwiApJfmHA73kFUG7oMCx fKTOtw2JRpjoeJm/v2iXe7TkFMsIGfEaXH0QJB0CAwEAAaOCArAwggKsMB0GA1Ud DgQWBBTgaNW1e4weuS6C17SxL/xp3EHOvDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvN2M4ZjAzYWUtNTk5NC00MjdkLTg4Y2EtMGVkYmQ1NWE3MWI1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDARKKMA0GCSqGSIb3DQEBCwUAA4IBAQCZASrw470ETDzC+GW28LFqLyXP5opZ GTAmdXZiLMFEZo2VQyA5/a7VEUReRMbxXWPlqCOQrTNBGWyD8gxOv6at/USAK7ZT 8Ik9cd7qmc7C6rMzwzecZritaioVabJcVSwXYOKBg5MgCqEQ/D1WP6AWf0qIBbzP chm1/rzjUpuR1mPwrKNz0NTVJmie2S38LeLhsQ+i7lEmPadpydydrlkiqux/LmAa cftcaJDTADxkhEBl9JujwHfsoA11xoYYTMAx+Fq9QRGAH/VrQzAW7YxdxsJMdnGF DcCe4CU2sGDq3fp73z9jLftJ9T11qucQKMKkIZyzTL8f3QYdb3i56cox -----END CERTIFICATE-----Generated at Sat Nov 7 19:01:33 2026 by rpki-client