$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca097cde-40d3-4a62-9993-89e364b3bdd3.roa File: ca097cde-40d3-4a62-9993-89e364b3bdd3.roa (raw, json) Hash identifier: wqpMPsUEkhGNu3r+pGZn+zSIvBACh9pZd5w91VOFzIU= Subject key identifier: AD:85:2B:0C:53:A4:6B:58:F0:40:28:D5:28:78:8B:7F:4A:A9:34:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16074078E00F3542A221996D68A9655ED8078AA6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca097cde-40d3-4a62-9993-89e364b3bdd3.roa Signing time: Mon 26 Oct 2026 01:30:29 +0000 ROA not before: Mon 26 Oct 2026 01:30:29 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 6167 IP address blocks: 155.146.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:07:40:78:e0:0f:35:42:a2:21:99:6d:68:a9:65:5e:d8:07:8a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:30:29 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=1214f9892afd0d8b01f19fead844f80bbc9cff6784f0e43addfb84d2bc4e066b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:11:d2:55:ed:c9:77:57:da:4b:60:eb:aa: f3:18:33:7c:9d:0f:77:e7:3d:63:cc:fb:66:a6:53: ae:b1:c9:c5:4c:e3:7f:46:ee:33:c2:39:16:fa:ba: d5:98:a6:aa:b5:18:fe:b7:3f:98:db:a4:4c:d3:27: 2b:62:2a:42:52:1e:42:27:f4:4a:ee:c5:66:a8:6a: cd:5d:40:d7:68:d8:0b:46:a8:9c:d5:e3:f4:ac:61: cb:9f:23:7a:10:6e:66:29:ff:9b:86:bc:8d:c1:59: 5c:af:f4:a5:34:cb:ee:12:c3:a3:13:48:7e:b7:8b: c3:6d:17:0f:20:c1:d3:53:86:93:d0:51:e9:37:7e: 49:ca:fa:78:8f:0d:db:ab:cd:92:f5:ae:3c:dd:5f: cf:8d:81:fe:81:12:97:1a:18:5d:8e:58:8b:57:45: 6f:ef:82:8c:63:4a:ff:a0:ba:b7:d2:9f:9f:14:05: c1:e1:a9:c5:df:6b:7d:ed:64:06:d8:f5:68:42:49: 44:f9:c3:3b:4a:8f:57:c2:a5:ca:bb:2f:f2:77:db: 1c:19:df:d2:1b:a1:12:f6:bc:04:97:cb:ab:1c:8a: 5d:45:cc:61:ea:2d:e8:49:df:23:28:9f:af:d6:5d: 2b:24:ca:87:8c:db:ea:65:25:a5:44:be:da:91:43: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:2B:0C:53:A4:6B:58:F0:40:28:D5:28:78:8B:7F:4A:A9:34:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca097cde-40d3-4a62-9993-89e364b3bdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.146.48.0/20 Signature Algorithm: sha256WithRSAEncryption 33:6c:12:4c:38:f2:71:1c:0e:24:1d:0b:84:f6:f4:b2:1b:a7: e9:09:a3:38:3a:06:ca:1c:a8:e9:ee:a1:e8:e1:e4:fe:48:4f: c7:b6:dd:fa:57:03:5f:ba:f6:fd:14:3b:99:04:36:6f:57:a4: 69:45:fe:4a:50:af:ef:29:b5:82:38:cd:da:a0:c1:5d:a9:f2: 80:3c:e7:45:f5:96:17:02:3d:ac:7a:fe:3e:23:56:2d:d3:47: 56:c5:3a:ce:fb:5f:b3:c4:7d:d3:aa:5e:a2:e0:7a:fa:12:c8: cd:6a:6e:f2:7d:84:a2:10:b6:2b:3d:44:1f:88:93:b7:5a:84: 71:3c:50:bf:38:ac:a8:a0:fe:40:24:6a:49:27:d1:53:d8:2b: 08:e6:03:58:32:29:40:72:61:96:40:4a:99:c9:15:57:2a:40: 1c:36:e1:a5:50:59:f0:25:1f:7c:1e:03:6b:4d:58:70:5f:a8: 86:25:2b:ce:bb:2b:df:57:e1:ef:3f:84:33:8f:00:e1:7e:77: 9b:5e:70:8a:c3:91:83:7e:20:3f:46:e0:bf:9c:75:fa:38:18: f1:a6:16:99:5f:f5:59:ca:06:57:43:41:fb:e0:a0:6d:6d:7f: a9:81:93:19:39:0f:96:b6:f4:68:ef:7d:87:ef:37:30:86:6d: 8c:2a:21:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFgdAeOAPNUKiIZltaKllXtgHiqYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDEzMDI5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjE0Zjk4OTJhZmQwZDhiMDFmMTlmZWFkODQ0ZjgwYmJj OWNmZjY3ODRmMGU0M2FkZGZiODRkMmJjNGUwNjZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvuxHSVe3Jd1faS2DrqvMYM3ydD3fnPWPM+2amU66xycVM 439G7jPCORb6utWYpqq1GP63P5jbpEzTJytiKkJSHkIn9EruxWaoas1dQNdo2AtG qJzV4/SsYcufI3oQbmYp/5uGvI3BWVyv9KU0y+4Sw6MTSH63i8NtFw8gwdNThpPQ Uek3fknK+niPDdurzZL1rjzdX8+Ngf6BEpcaGF2OWItXRW/vgoxjSv+gurfSn58U BcHhqcXfa33tZAbY9WhCSUT5wztKj1fCpcq7L/J32xwZ39IboRL2vASXy6scil1F zGHqLehJ3yMon6/WXSskyoeM2+plJaVEvtqRQ0vHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrYUrDFOka1jwQCjVKHiLf0qpNGowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhMDk3Y2RlLTQwZDMtNGE2Mi05OTkzLTg5ZTM2NGIzYmRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASbkjAwDQYJKoZIhvcNAQELBQADggEBADNsEkw48nEcDiQdC4T29LIbp+kJ ozg6BsocqOnuoejh5P5IT8e23fpXA1+69v0UO5kENm9XpGlF/kpQr+8ptYI4zdqg wV2p8oA850X1lhcCPax6/j4jVi3TR1bFOs77X7PEfdOqXqLgevoSyM1qbvJ9hKIQ tis9RB+Ik7dahHE8UL84rKig/kAkakkn0VPYKwjmA1gyKUByYZZASpnJFVcqQBw2 4aVQWfAlH3weA2tNWHBfqIYlK867K99X4e8/hDOPAOF+d5tecIrDkYN+ID9G4L+c dfo4GPGmFplf9VnKBldDQfvgoG1tf6mBkxk5D5a29GjvfYfvNzCGbYwqIec= -----END CERTIFICATE-----Generated at Sat Nov 7 22:55:45 2026 by rpki-client