$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3251318-3602-4171-8f40-3b6d4c778d45.roa File: e3251318-3602-4171-8f40-3b6d4c778d45.roa (raw, json) Hash identifier: FKC4176VJ6PsOemStrx1XccXqREuTHf8UlUV73hmd2k= Subject key identifier: 60:1F:A4:7A:EC:E4:13:36:19:50:F9:77:58:2A:17:13:24:69:63:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 372D9187D092BB504053A3AD2097D46880C67837 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3251318-3602-4171-8f40-3b6d4c778d45.roa Signing time: Sat 24 Oct 2026 01:50:04 +0000 ROA not before: Sat 24 Oct 2026 01:50:04 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2d:91:87:d0:92:bb:50:40:53:a3:ad:20:97:d4:68:80:c6:78:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:50:04 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=790b8807a7a8c5a31c2d10285c4ed3c04e77cbdd7e20b14482c91879cb38aaaa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:eb:37:5c:de:62:53:b9:fa:f4:39:bd:75: b3:72:8d:04:06:74:04:ae:2a:7a:65:89:1f:0c:b6: 6a:88:a2:46:c6:66:d5:1f:44:1d:ce:83:08:db:15: d4:ff:0a:e4:0d:56:a3:98:e6:d7:9f:fb:5d:3e:81: 7f:49:51:c8:f8:f4:ad:80:c6:19:1d:96:c3:15:e5: ed:91:5c:48:1d:ce:5e:85:69:b4:de:12:4e:db:35: f1:f2:4c:19:a5:9a:2e:b1:88:c6:aa:af:3f:a8:3c: 9f:03:5c:c7:ed:9d:8f:eb:0a:7b:da:ed:72:bb:cf: 05:38:2f:72:63:06:97:a9:39:18:ab:a3:b6:01:af: 17:10:18:0c:3b:af:12:b3:c1:5b:37:43:2d:1c:57: 7d:03:29:08:6c:f7:f2:14:ff:9a:3a:03:9e:6a:a9: 74:c3:d7:ba:51:84:38:45:f0:3c:bc:dc:c7:23:b6: b5:24:5d:95:76:0f:af:df:9e:38:f4:9f:6e:75:13: 5d:3e:11:07:8f:51:4e:88:75:d7:76:40:fd:96:2e: 7f:61:57:fb:01:77:67:20:68:8b:c0:2e:60:93:d9: ab:70:a1:d6:11:a6:69:a8:81:85:3b:5a:c0:a9:53: 5b:2b:a9:02:ff:e5:e6:23:1e:be:be:83:28:7c:77: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:A4:7A:EC:E4:13:36:19:50:F9:77:58:2A:17:13:24:69:63:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3251318-3602-4171-8f40-3b6d4c778d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.240.0/21 Signature Algorithm: sha256WithRSAEncryption 3f:f8:11:be:c1:37:d3:61:c8:a0:e5:af:2b:51:fb:8d:35:86: 86:e4:75:bb:bd:cd:8d:bd:97:e2:b8:83:24:06:8e:18:ff:2f: 11:1e:47:f1:36:a9:bf:06:f2:23:32:5a:c7:26:e6:73:c9:f4: 6a:51:79:aa:88:e9:e1:b0:c9:10:ae:2c:ee:fa:a6:0f:23:28: a8:6f:2b:e3:65:3a:50:9b:e6:c4:e1:46:30:3d:e9:35:7a:11: 94:2e:c5:9b:27:e6:a7:bd:cb:b6:b3:b2:46:04:d8:b4:3f:4b: 33:eb:8d:9e:1b:dc:68:20:28:db:eb:9e:7a:cf:4d:06:9f:64: 00:58:5c:38:15:d1:d5:f6:13:cd:c1:8d:27:2d:43:46:ef:b9: 47:9e:2d:0d:57:64:80:42:74:19:02:1b:bc:64:5c:2a:f2:7c: 98:dd:ee:03:ee:a5:ec:c4:f6:da:ad:72:71:0a:37:58:36:59: 34:8d:ae:3d:bd:14:12:f7:07:3c:a7:b3:da:b7:59:3e:41:68: f1:ee:d0:83:6a:48:4f:05:ec:6d:a7:69:ba:5f:4c:0d:c8:0e: a7:06:78:d2:06:c6:61:40:fc:ae:2f:9b:7e:39:46:ce:a8:fb: d7:25:66:54:a7:77:2f:16:75:8c:73:c7:fa:88:b6:d1:40:8f: 09:20:f0:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNy2Rh9CSu1BAU6OtIJfUaIDGeDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDE1MDA0WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTBiODgwN2E3YThjNWEzMWMyZDEwMjg1YzRlZDNjMDRl NzdjYmRkN2UyMGIxNDQ4MmM5MTg3OWNiMzhhYWFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDDOs3XN5iU7n69Dm9dbNyjQQGdASuKnpliR8MtmqIokbG ZtUfRB3OgwjbFdT/CuQNVqOY5tef+10+gX9JUcj49K2AxhkdlsMV5e2RXEgdzl6F abTeEk7bNfHyTBmlmi6xiMaqrz+oPJ8DXMftnY/rCnva7XK7zwU4L3JjBpepORir o7YBrxcQGAw7rxKzwVs3Qy0cV30DKQhs9/IU/5o6A55qqXTD17pRhDhF8Dy83Mcj trUkXZV2D6/fnjj0n251E10+EQePUU6Iddd2QP2WLn9hV/sBd2cgaIvALmCT2atw odYRpmmogYU7WsCpU1srqQL/5eYjHr6+gyh8d8nTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYB+keuzkEzYZUPl3WCoXEyRpY4cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzMjUxMzE4LTM2MDItNDE3MS04ZjQwLTNiNmQ0Yzc3OGQ0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS9fAwDQYJKoZIhvcNAQELBQADggEBAD/4Eb7BN9NhyKDlrytR+401hobk dbu9zY29l+K4gyQGjhj/LxEeR/E2qb8G8iMyWscm5nPJ9GpReaqI6eGwyRCuLO76 pg8jKKhvK+NlOlCb5sThRjA96TV6EZQuxZsn5qe9y7azskYE2LQ/SzPrjZ4b3Ggg KNvrnnrPTQafZABYXDgV0dX2E83BjSctQ0bvuUeeLQ1XZIBCdBkCG7xkXCryfJjd 7gPupezE9tqtcnEKN1g2WTSNrj29FBL3Bzyns9q3WT5BaPHu0INqSE8F7G2nabpf TA3IDqcGeNIGxmFA/K4vm345Rs6o+9clZlSndy8WdYxzx/qIttFAjwkg8MY= -----END CERTIFICATE-----Generated at Sun Nov 8 05:27:32 2026 by rpki-client