$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa File: ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa (raw, json) Hash identifier: 4gMNtF50gCTLiXIUPxTkzlKwnaaciyTKeP8h3QjM0fk= Subject key identifier: D0:B3:3D:48:C1:2F:EB:0F:79:C3:16:1C:77:F2:D8:75:4F:85:B0:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D0083279EFE390B8B60393E310D956FD93DBAD8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa Signing time: Sat 24 Oct 2026 01:41:02 +0000 ROA not before: Sat 24 Oct 2026 01:41:02 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:00:83:27:9e:fe:39:0b:8b:60:39:3e:31:0d:95:6f:d9:3d:ba:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:41:02 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=24e811eeab8f0efeec48d98281c3fe366a87a7ee9b2070a66e1968d8dae7ec6a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:5c:2b:de:e8:17:c8:a6:90:8b:fd:ac:31: 98:b5:65:e5:3d:d3:a0:f3:27:20:2e:cf:ad:db:5a: e4:c9:97:7b:ae:72:c9:b2:12:b4:ec:b9:1b:e0:48: 96:30:07:34:0f:fa:dc:93:41:e0:b7:c7:23:97:61: fa:4c:80:df:3b:2c:3e:dc:83:82:21:09:58:3b:3b: c4:12:d4:05:2a:bd:d9:64:3f:95:b6:c7:0e:2a:01: 3c:0c:4b:0e:20:81:a5:8b:d6:17:a8:99:57:c0:2d: c9:08:aa:92:fd:3b:0b:2c:11:10:ef:e2:b2:99:20: 1c:fe:fe:ed:d0:3d:a5:fa:64:ae:20:22:e5:6a:ad: d7:47:0e:5c:ed:4b:f1:f0:70:48:2d:9e:95:cd:ca: a2:78:43:32:11:d3:8a:d4:1a:f4:8b:b3:b4:88:24: 8a:47:30:1d:08:5b:98:23:b0:4b:77:2f:8c:ed:26: 96:20:c6:50:a5:db:e0:9b:89:35:15:d1:7e:d9:50: db:df:fc:14:04:e9:16:97:cb:e8:7f:15:ef:95:56: 79:8c:4c:f9:36:df:5b:33:8a:3a:c0:87:b2:ed:76: 50:e5:2c:ee:6e:c8:1c:45:32:90:75:f9:cc:ee:a8: 35:99:9e:e9:57:51:e4:8a:17:a6:33:76:2f:ba:a7: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B3:3D:48:C1:2F:EB:0F:79:C3:16:1C:77:F2:D8:75:4F:85:B0:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:76:f0:2f:d2:11:65:2a:6b:0c:ae:07:76:81:b7:82:d3:1c: c4:b2:ef:ab:2a:e6:a5:73:25:97:f5:43:10:14:f8:c4:e5:5d: f8:15:8d:f8:6f:82:fe:f3:22:34:97:73:3b:62:b2:b9:3a:c6: 5a:27:90:e7:97:22:6a:77:2f:28:6b:2f:a2:6d:63:26:d1:19: 3d:c0:d1:bf:22:42:9f:b1:8a:ad:bb:05:aa:ec:c2:bc:e6:ea: 76:45:ca:7f:98:d2:6b:35:99:93:ab:1b:77:f6:4f:8d:e4:49: e6:59:99:16:74:7a:f8:f5:f8:1d:26:71:ba:cd:b6:ff:1b:6a: d9:39:de:3d:16:53:c3:2d:ff:9f:1e:2b:60:94:e7:cf:99:d5: 9b:10:f1:33:93:07:52:11:a5:8a:c4:82:8d:98:62:b0:43:a0: 1c:83:bf:2e:3f:74:75:1d:b4:da:48:7f:c4:a3:61:69:28:72: c5:a1:47:70:5e:24:e6:a6:5c:78:bd:d6:d9:d1:f8:2a:3b:3d: 32:99:3f:b9:57:28:6b:b2:77:0e:c8:b9:3f:83:22:f5:28:d9: d2:0e:b2:3a:02:03:39:10:0b:2a:7a:8e:b7:c1:e9:b5:cd:93: 9b:ce:82:85:4d:7f:bb:22:1d:f1:86:ad:98:6a:74:ea:34:d1: 1c:7d:da:9f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPQCDJ57+OQuLYDk+MQ2Vb9k9utgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDE0MTAyWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGU4MTFlZWFiOGYwZWZlZWM0OGQ5ODI4MWMzZmUzNjZh ODdhN2VlOWIyMDcwYTY2ZTE5NjhkOGRhZTdlYzZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm9Fwr3ugXyKaQi/2sMZi1ZeU906DzJyAuz63bWuTJl3uu csmyErTsuRvgSJYwBzQP+tyTQeC3xyOXYfpMgN87LD7cg4IhCVg7O8QS1AUqvdlk P5W2xw4qATwMSw4ggaWL1heomVfALckIqpL9OwssERDv4rKZIBz+/u3QPaX6ZK4g IuVqrddHDlztS/HwcEgtnpXNyqJ4QzIR04rUGvSLs7SIJIpHMB0IW5gjsEt3L4zt JpYgxlCl2+CbiTUV0X7ZUNvf/BQE6RaXy+h/Fe+VVnmMTPk231szijrAh7LtdlDl LO5uyBxFMpB1+czuqDWZnulXUeSKF6Yzdi+6p9PTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0LM9SMEv6w95wxYcd/LYdU+FsHYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkZjU3MThjLThjZWMtNGEzNS04ZjRhLWQ0ZGE1NmU5NTgwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASVTANBgkqhkiG9w0BAQsFAAOCAQEAYnbwL9IRZSprDK4HdoG3gtMcxLLv qyrmpXMll/VDEBT4xOVd+BWN+G+C/vMiNJdzO2KyuTrGWieQ55ciancvKGsvom1j JtEZPcDRvyJCn7GKrbsFquzCvObqdkXKf5jSazWZk6sbd/ZPjeRJ5lmZFnR6+PX4 HSZxus22/xtq2TnePRZTwy3/nx4rYJTnz5nVmxDxM5MHUhGlisSCjZhisEOgHIO/ Lj90dR202kh/xKNhaShyxaFHcF4k5qZceL3W2dH4Kjs9Mpk/uVcoa7J3Dsi5P4Mi 9SjZ0g6yOgIDORALKnqOt8Hptc2Tm86ChU1/uyId8YatmGp06jTRHH3anw== -----END CERTIFICATE-----Generated at Sat Nov 7 23:07:47 2026 by rpki-client