$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8ddeda-e96d-4d18-8442-14581903274e.roa File: cf8ddeda-e96d-4d18-8442-14581903274e.roa (raw, json) Hash identifier: /MP7bFpO7zzHBzIuqSt8oGYgIw08SpTvtmOVQXHQQiU= Subject key identifier: A7:A2:95:05:E1:76:FF:1D:A8:BB:83:84:FF:49:2E:83:57:44:74:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 477AC6CB56DD279874066DBA90474A898DD402B9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8ddeda-e96d-4d18-8442-14581903274e.roa Signing time: Mon 26 Oct 2026 02:10:09 +0000 ROA not before: Mon 26 Oct 2026 02:10:09 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.202.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7a:c6:cb:56:dd:27:98:74:06:6d:ba:90:47:4a:89:8d:d4:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:10:09 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=b84b5e5764dabe4e070a6bb7668a31a26d071dc2e69629c95155334dd6dcc489, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:9b:14:1d:53:d1:d6:4a:b5:0e:fe:43:f0: dc:29:34:09:b8:2f:51:23:47:1f:fa:a5:12:67:25: e9:2a:a4:39:29:6b:d5:a1:b4:64:aa:f8:0a:2f:33: 7c:89:60:34:08:31:db:df:ed:c1:5e:ff:ba:e2:f3: 75:ff:30:63:3e:1f:f5:c8:e6:e7:6b:64:db:11:97: dc:2d:d5:a1:9e:a6:d2:7b:ff:d5:15:ea:32:7c:3c: ad:4c:db:e8:af:12:33:16:a9:22:f7:4c:eb:e8:93: 05:94:fb:37:a6:4b:f9:50:08:88:be:e3:3b:8d:3b: b0:fd:76:76:bb:aa:f4:d6:bb:c6:29:19:3c:fd:b7: 4a:f7:bd:75:63:4b:01:8a:ac:ca:aa:11:b0:01:f1: 3b:90:68:42:3e:1e:9e:c6:31:3e:2e:cd:92:bf:ac: 45:0c:83:24:0a:46:36:0e:de:88:66:f3:eb:89:da: b3:4b:26:5e:69:c5:f3:fe:68:8d:96:91:bc:aa:46: 3d:5b:28:69:17:fc:87:22:d6:17:d8:d8:37:10:df: c1:c1:88:70:8c:0f:5b:71:77:a9:a8:89:05:6d:71: fb:58:f5:90:90:f0:02:5d:9c:c6:3c:52:f6:de:dd: 8d:95:41:00:06:18:6f:da:40:d0:df:01:b0:83:92: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A2:95:05:E1:76:FF:1D:A8:BB:83:84:FF:49:2E:83:57:44:74:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8ddeda-e96d-4d18-8442-14581903274e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.202.0.0/15 Signature Algorithm: sha256WithRSAEncryption 20:dc:d7:e0:2c:52:56:6a:cb:27:8f:d3:29:1d:71:bf:94:25: ed:5d:0a:db:1b:61:52:21:21:ab:c4:93:fd:46:8c:fd:28:63: a2:0d:29:da:46:1c:c2:9a:54:2c:97:76:fa:66:53:52:6e:2a: 57:f2:40:5e:c4:4b:d8:90:00:fd:c8:0a:e9:8b:6c:fd:18:05: 06:5e:f4:e8:b7:b1:65:5f:b7:5d:3d:de:4c:8c:84:c1:dd:e0: e2:9e:b4:28:a4:8e:83:26:02:57:d8:3c:f5:10:e3:c0:a7:17: 4c:3d:a0:7d:51:17:26:09:0f:31:25:8d:10:02:46:f9:58:8e: 8f:4e:48:ac:0c:14:d6:3b:7c:cf:25:d5:c5:c3:88:6c:5b:9f: 52:f6:44:e7:ed:43:3f:92:e2:26:0d:22:be:30:4e:03:82:00: 9c:93:59:28:db:e0:1d:e8:91:58:a0:56:c1:8f:59:9f:9e:d8: c4:80:9e:21:6f:6a:e5:6d:3f:c8:a9:7d:76:e7:ad:b3:9d:db: 0d:4e:be:6f:90:1b:f9:80:fc:d7:5c:bf:3b:18:27:85:c0:d7: 06:6a:90:aa:45:6d:04:d3:ff:23:dc:19:14:63:0e:40:be:b8: 92:6d:5a:cd:9a:d5:ca:ef:33:7b:1a:d8:96:d0:ee:b5:fd:4b: e8:e2:aa:ce -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR3rGy1bdJ5h0Bm26kEdKiY3UArkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIxMDA5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODRiNWU1NzY0ZGFiZTRlMDcwYTZiYjc2NjhhMzFhMjZk MDcxZGMyZTY5NjI5Yzk1MTU1MzM0ZGQ2ZGNjNDg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVlpsUHVPR1kq1Dv5D8NwpNAm4L1EjRx/6pRJnJekqpDkp a9WhtGSq+AovM3yJYDQIMdvf7cFe/7ri83X/MGM+H/XI5udrZNsRl9wt1aGeptJ7 /9UV6jJ8PK1M2+ivEjMWqSL3TOvokwWU+zemS/lQCIi+4zuNO7D9dna7qvTWu8Yp GTz9t0r3vXVjSwGKrMqqEbAB8TuQaEI+Hp7GMT4uzZK/rEUMgyQKRjYO3ohm8+uJ 2rNLJl5pxfP+aI2WkbyqRj1bKGkX/Ici1hfY2DcQ38HBiHCMD1txd6moiQVtcftY 9ZCQ8AJdnMY8Uvbe3Y2VQQAGGG/aQNDfAbCDkj+bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUp6KVBeF2/x2ou4OE/0kug1dEdGwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmOGRkZWRhLWU5NmQtNGQxOC04NDQyLTE0NTgxOTAzMjc0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESyjANBgkqhkiG9w0BAQsFAAOCAQEAINzX4CxSVmrLJ4/TKR1xv5Ql7V0K 2xthUiEhq8ST/UaM/Shjog0p2kYcwppULJd2+mZTUm4qV/JAXsRL2JAA/cgK6Yts /RgFBl706LexZV+3XT3eTIyEwd3g4p60KKSOgyYCV9g89RDjwKcXTD2gfVEXJgkP MSWNEAJG+ViOj05IrAwU1jt8zyXVxcOIbFufUvZE5+1DP5LiJg0ivjBOA4IAnJNZ KNvgHeiRWKBWwY9Zn57YxICeIW9q5W0/yKl9duets53bDU6+b5Ab+YD811y/Oxgn hcDXBmqQqkVtBNP/I9wZFGMOQL64km1azZrVyu8zexrYltDutf1L6OKqzg== -----END CERTIFICATE-----Generated at Sat Nov 7 18:26:58 2026 by rpki-client