$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b840f17f-0e3d-4081-b2ae-6b6a584f9370.roa File: b840f17f-0e3d-4081-b2ae-6b6a584f9370.roa (raw, json) Hash identifier: +2Icmer0RT4TiWj0smZ8YI4CdOoJWf7m/isDthaVbWk= Subject key identifier: CD:4F:3D:F1:C4:F9:0E:6C:9C:4D:61:F0:67:71:55:58:C9:F5:A1:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3AE568272EB17B26548147FB23A64D18E25BAB6D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b840f17f-0e3d-4081-b2ae-6b6a584f9370.roa Signing time: Thu 08 Oct 2026 01:05:43 +0000 ROA not before: Thu 08 Oct 2026 01:05:43 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e5:68:27:2e:b1:7b:26:54:81:47:fb:23:a6:4d:18:e2:5b:ab:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 8 01:05:43 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=e3693b24533391f4facc9cc9c039ec4be1a64f71845c331346e745a21106d730, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:45:95:de:6a:4c:66:c2:42:8a:78:60:70: d0:b6:fb:32:8d:38:cf:68:fa:16:76:96:5b:8a:e9: b1:38:93:0c:3a:37:9c:03:41:7c:b1:33:cd:e2:49: 46:7a:87:3c:71:02:04:34:92:e2:4b:d2:b2:36:f2: cf:60:00:d4:5c:a8:88:e5:cd:2a:29:a3:88:09:5b: 1b:35:f5:3e:8a:19:f0:23:4c:2d:37:76:fe:1d:b8: a1:8e:a2:a6:8c:a2:de:54:08:d6:9b:6d:42:b9:b1: e6:c7:5f:8c:e3:0c:c8:11:47:41:c8:9d:67:71:44: 79:10:5e:aa:39:6e:ec:8b:37:97:a2:3e:65:84:0b: 31:65:c2:0f:59:b4:30:64:fb:25:b3:17:bd:b8:4d: 7a:18:49:e0:c0:a2:b6:62:8b:0c:c8:c0:43:9f:d3: bb:4d:79:f4:7a:e5:c5:4f:0e:83:ef:16:de:c9:47: 7a:56:24:25:f3:cd:85:c3:63:b1:50:34:e4:cb:26: e7:19:4b:02:57:1d:d2:7a:a6:d1:12:ad:9c:d5:88: db:b4:b5:5c:51:db:da:19:0e:57:45:55:e3:21:67: 56:41:fc:3a:af:10:6f:70:f5:39:c6:22:a2:dd:8c: af:a7:c9:89:ed:4c:93:9d:ad:cb:19:5d:31:63:95: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4F:3D:F1:C4:F9:0E:6C:9C:4D:61:F0:67:71:55:58:C9:F5:A1:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b840f17f-0e3d-4081-b2ae-6b6a584f9370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.65.0/24 Signature Algorithm: sha256WithRSAEncryption a3:1b:14:87:2d:c1:1c:0f:bc:3f:fe:2e:6f:a5:7f:dc:31:b6: fc:ea:00:85:96:ca:ba:26:3a:ab:8a:94:73:dd:ec:52:fc:d1: 5e:3c:fe:1c:e8:c4:7c:6f:1c:79:9a:cc:c5:1a:d7:d4:40:c4: 53:3a:c5:36:50:6a:37:56:01:8c:26:f4:63:1f:e9:79:25:cc: 82:87:fc:c0:38:e8:5a:d3:f1:ac:78:5f:b4:e7:b6:74:bc:11: 52:1c:36:0c:1c:45:f2:f1:ee:d4:4f:1a:fb:83:ec:4e:21:9a: 10:03:3a:22:a3:5d:8c:5d:e4:54:9d:e8:ec:ec:94:d4:1d:50: c9:8d:8c:3e:fa:ef:4b:8d:0a:6e:67:cb:a3:3a:e0:ee:ee:0d: 76:1c:b6:a6:ce:af:bd:30:20:49:1c:41:66:4a:0c:f3:a6:ea: dc:62:bf:bb:35:36:59:f3:21:60:ab:8f:ab:03:95:69:8f:22: a4:4e:64:eb:1b:ab:78:e4:a2:50:87:4d:b9:d3:a8:dd:c2:02: ab:16:ed:cd:d5:c3:1a:bf:3a:bb:c5:81:f6:1e:16:17:fb:4a: e4:e4:7f:6d:c9:0a:71:43:ba:f5:72:78:11:74:66:ff:b8:ab: 7f:ca:f9:f3:26:e2:06:cc:8a:1e:da:17:63:da:65:53:9d:7a: b1:f5:cd:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOuVoJy6xeyZUgUf7I6ZNGOJbq20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDA4MDEwNTQzWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzY5M2IyNDUzMzM5MWY0ZmFjYzljYzljMDM5ZWM0YmUx YTY0ZjcxODQ1YzMzMTM0NmU3NDVhMjExMDZkNzMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE1kWV3mpMZsJCinhgcNC2+zKNOM9o+hZ2lluK6bE4kww6 N5wDQXyxM83iSUZ6hzxxAgQ0kuJL0rI28s9gANRcqIjlzSopo4gJWxs19T6KGfAj TC03dv4duKGOoqaMot5UCNabbUK5sebHX4zjDMgRR0HInWdxRHkQXqo5buyLN5ei PmWECzFlwg9ZtDBk+yWzF724TXoYSeDAorZiiwzIwEOf07tNefR65cVPDoPvFt7J R3pWJCXzzYXDY7FQNOTLJucZSwJXHdJ6ptESrZzViNu0tVxR29oZDldFVeMhZ1ZB /DqvEG9w9TnGIqLdjK+nyYntTJOdrcsZXTFjlVljAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzU898cT5DmycTWHwZ3FVWMn1oRUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4NDBmMTdmLTBlM2QtNDA4MS1iMmFlLTZiNmE1ODRmOTM3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAkEwDQYJKoZIhvcNAQELBQADggEBAKMbFIctwRwPvD/+Lm+lf9wxtvzq AIWWyromOquKlHPd7FL80V48/hzoxHxvHHmazMUa19RAxFM6xTZQajdWAYwm9GMf 6XklzIKH/MA46FrT8ax4X7TntnS8EVIcNgwcRfLx7tRPGvuD7E4hmhADOiKjXYxd 5FSd6OzslNQdUMmNjD7670uNCm5ny6M64O7uDXYctqbOr70wIEkcQWZKDPOm6txi v7s1NlnzIWCrj6sDlWmPIqROZOsbq3jkolCHTbnTqN3CAqsW7c3Vwxq/OrvFgfYe Fhf7SuTkf23JCnFDuvVyeBF0Zv+4q3/K+fMm4gbMih7aF2PaZVOderH1zQ0= -----END CERTIFICATE-----Generated at Sun Nov 8 04:50:15 2026 by rpki-client