$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa File: 805aa163-38ec-4123-b4c1-55955c809e8a.roa (raw, json) Hash identifier: T4J/ruKVOU3whigVb9S0wOcKW6jUMkWJiVJlqUXlRZs= Subject key identifier: 85:4C:1C:C2:88:DE:CF:6B:FE:44:A5:6C:8A:13:1A:A1:A8:35:B0:3B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 407671B32DF268E9082EAB29BC88FE211BA8E58B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa Signing time: Mon 26 Oct 2026 02:10:29 +0000 ROA not before: Mon 26 Oct 2026 02:10:29 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 18.253.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:76:71:b3:2d:f2:68:e9:08:2e:ab:29:bc:88:fe:21:1b:a8:e5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:10:29 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=9aaa6f93f274ffd9862966c3c8ad1fc5d030ae7dfba1de9299df2d75bde2c5af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:d7:6d:c2:d9:8e:53:df:5f:80:c3:bc:2a: 0f:84:7d:31:d6:1c:df:39:cc:0f:cd:70:9b:12:a0: a3:85:36:de:3e:a2:81:49:3b:e6:67:5c:29:c0:25: 29:c6:13:98:96:f0:88:e6:ff:bd:07:f2:c1:9a:47: 0d:47:83:55:81:5b:76:60:bd:a8:dc:27:fd:b1:f3: db:73:87:28:b4:0a:e5:14:46:9a:48:a1:48:64:0f: c4:ff:33:53:23:f7:30:17:8e:a8:7b:c3:5a:66:d5: 2b:b0:5f:50:83:a9:b8:b5:32:87:00:9c:02:c7:94: 08:20:d5:0d:3a:35:9c:b0:2c:8f:c0:5d:68:fc:6b: 09:0f:bf:37:aa:96:91:8d:37:e2:ef:6a:90:a0:1e: 60:7e:6c:e3:28:77:67:4d:4f:59:3d:db:d0:ce:54: 29:08:75:88:d5:20:26:e9:c4:0c:87:cf:4a:a6:93: 90:87:f8:bf:91:69:55:30:99:14:60:78:1c:ef:2f: 0c:cb:03:95:1f:77:ec:5e:59:c4:e1:f9:f5:78:88: 6d:88:bb:cd:54:cf:7c:0d:2f:06:87:d6:e2:30:2f: 63:55:ef:c2:f7:4f:98:5a:d7:7a:a8:8e:8b:5c:48: 14:cd:73:06:50:a0:5c:33:fa:9d:02:ab:d0:f5:c2: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:1C:C2:88:DE:CF:6B:FE:44:A5:6C:8A:13:1A:A1:A8:35:B0:3B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.0.0/24 Signature Algorithm: sha256WithRSAEncryption 73:c0:f1:58:61:5c:66:60:22:17:b8:61:40:c7:82:57:07:04: 96:83:c1:e0:5e:0b:e8:3a:88:3e:ce:49:79:d5:d7:8e:c3:55: b6:98:05:1d:7e:d4:3c:a5:b7:b4:49:93:6f:bd:fd:b6:5a:39: 4b:68:a4:7f:4f:fc:e4:cc:b9:e2:2a:b6:0d:63:f9:28:60:45: 80:85:f8:51:b8:92:c3:8e:78:80:70:f6:8a:d6:f4:e6:ae:c0: 3b:e3:14:00:ab:85:3f:8c:c1:ea:0d:15:83:37:30:6b:36:31: 10:7d:50:7d:09:2d:d7:af:38:07:49:b3:84:2b:be:f7:1b:76: 8c:c6:78:f9:ca:fa:e1:5c:77:32:dd:b7:9c:bb:a6:15:d9:46: 39:06:d5:d6:01:f7:e6:a2:e6:53:62:35:f3:73:44:0b:80:6a: 2c:cc:3d:a9:63:b1:8b:08:c6:6b:01:86:8f:21:da:22:c7:c3: 4f:d3:98:59:f4:3d:e1:4b:22:0a:05:15:17:68:4c:f4:b5:1f: cc:d2:37:1e:be:c0:b6:99:d8:5b:ee:79:d4:14:fa:91:e1:96: 17:3a:6d:29:d2:76:c1:80:18:d7:91:d5:2f:df:61:7b:33:e8: 4d:66:d3:ae:37:b6:73:e3:cc:90:51:56:ba:fd:0b:a8:fb:8b: 83:51:df:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQHZxsy3yaOkILqspvIj+IRuo5YswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIxMDI5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWFhNmY5M2YyNzRmZmQ5ODYyOTY2YzNjOGFkMWZjNWQw MzBhZTdkZmJhMWRlOTI5OWRmMmQ3NWJkZTJjNWFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBA9dtwtmOU99fgMO8Kg+EfTHWHN85zA/NcJsSoKOFNt4+ ooFJO+ZnXCnAJSnGE5iW8Ijm/70H8sGaRw1Hg1WBW3ZgvajcJ/2x89tzhyi0CuUU RppIoUhkD8T/M1Mj9zAXjqh7w1pm1SuwX1CDqbi1MocAnALHlAgg1Q06NZywLI/A XWj8awkPvzeqlpGNN+LvapCgHmB+bOMod2dNT1k929DOVCkIdYjVICbpxAyHz0qm k5CH+L+RaVUwmRRgeBzvLwzLA5Ufd+xeWcTh+fV4iG2Iu81Uz3wNLwaH1uIwL2NV 78L3T5ha13qojotcSBTNcwZQoFwz+p0Cq9D1wi5xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhUwcwojez2v+RKVsihMaoag1sDswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwNWFhMTYzLTM4ZWMtNDEyMy1iNGMxLTU1OTU1YzgwOWU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS/QAwDQYJKoZIhvcNAQELBQADggEBAHPA8VhhXGZgIhe4YUDHglcHBJaD weBeC+g6iD7OSXnV147DVbaYBR1+1Dylt7RJk2+9/bZaOUtopH9P/OTMueIqtg1j +ShgRYCF+FG4ksOOeIBw9orW9OauwDvjFACrhT+MweoNFYM3MGs2MRB9UH0JLdev OAdJs4QrvvcbdozGePnK+uFcdzLdt5y7phXZRjkG1dYB9+ai5lNiNfNzRAuAaizM PaljsYsIxmsBho8h2iLHw0/TmFn0PeFLIgoFFRdoTPS1H8zSNx6+wLaZ2FvuedQU +pHhlhc6bSnSdsGAGNeR1S/fYXsz6E1m0643tnPjzJBRVrr9C6j7i4NR330= -----END CERTIFICATE-----Generated at Sun Nov 8 03:26:25 2026 by rpki-client