$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4615e61-d476-459e-a1c0-ba780d645b1f.roa File: e4615e61-d476-459e-a1c0-ba780d645b1f.roa (raw, json) Hash identifier: Cir6kjb54IUb0PZ3KABzs9kt39+L6aTYkQXBMilwPtA= Subject key identifier: 30:D0:9F:F0:C6:F1:82:EB:CE:4C:BF:0A:D6:F3:96:59:59:87:84:B6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62CB980FD2993DC81BC76F7D7057CFACD477693D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4615e61-d476-459e-a1c0-ba780d645b1f.roa Signing time: Tue 13 Oct 2026 00:50:10 +0000 ROA not before: Tue 13 Oct 2026 00:50:10 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.60.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cb:98:0f:d2:99:3d:c8:1b:c7:6f:7d:70:57:cf:ac:d4:77:69:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 00:50:10 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=d491bf970225ed6ce2e49cc750a8ffcfdf27944c54f8f67733782c01b5879c4b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:98:20:bb:eb:d8:84:f6:26:63:a5:2a:8b: b3:3a:e4:76:4c:8b:70:64:83:fb:21:cd:8b:43:a0: 74:92:b5:8b:00:8b:52:49:77:bf:89:f7:9b:35:89: a2:d0:27:c6:6b:aa:9f:b9:93:bc:d5:56:15:e8:90: 6e:32:d3:db:49:39:c5:4a:59:cb:fb:bf:0c:19:a8: 54:9f:b5:4d:88:a9:9d:b8:2f:3c:35:ff:ba:1f:29: 48:8b:88:97:86:a7:50:33:b8:db:a9:c5:cc:21:2b: 62:fb:e4:80:27:1d:ee:12:b3:f7:30:d9:34:82:b9: 21:e8:38:ea:98:d0:f5:3e:b1:e5:a2:d7:82:e9:47: a1:3a:bc:83:a2:f8:b4:fd:39:26:6d:64:51:1e:de: 52:19:19:b3:ba:49:90:ea:3f:25:b8:3e:19:b4:1f: ab:3d:d4:c0:e9:82:8e:10:e3:ed:ee:9d:64:a4:95: a6:3e:00:e8:75:63:91:22:22:6e:1d:f3:80:a2:9a: 23:a7:a9:cd:ae:8d:a4:47:cf:13:42:58:60:9a:98: f9:03:00:47:d2:f2:bd:07:cf:f8:dd:ac:01:ac:fa: c7:a9:1f:fb:9c:3b:c8:aa:74:79:d3:85:e0:b0:5d: db:f6:33:b0:e7:0e:96:8d:bf:61:fa:e5:f4:e3:b8: 70:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:9F:F0:C6:F1:82:EB:CE:4C:BF:0A:D6:F3:96:59:59:87:84:B6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4615e61-d476-459e-a1c0-ba780d645b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.60.76.0/23 Signature Algorithm: sha256WithRSAEncryption 52:49:a0:74:66:a6:53:9c:ab:5f:9d:1a:16:cf:bb:b0:be:fa: 13:3c:63:4e:9c:98:3b:ea:cd:cc:03:d5:fe:88:19:a1:8e:50: 9c:5d:3a:2f:b1:07:c6:82:56:c2:0c:4e:8e:15:7a:4f:9e:84: 01:e7:1d:56:d2:e1:bb:5c:d4:e8:28:7f:0c:ca:43:52:8a:15: ae:8d:ba:1b:57:0e:65:a2:86:58:d7:48:d0:46:8c:d3:3e:32: 3e:cd:e3:10:97:b5:4a:b5:cb:80:7e:22:c1:97:28:91:52:dd: cf:42:06:25:ab:65:e1:90:50:ce:91:26:f8:17:bc:93:ca:52: d8:73:19:c2:46:2f:7b:33:1f:a8:c2:7f:01:ad:99:46:89:75: 2e:6b:99:59:4c:25:10:86:79:98:99:d2:02:4d:29:38:3c:5b: 52:d3:9b:a5:64:34:71:79:9f:3a:d2:c0:0d:cf:06:64:0c:1e: 9c:55:98:4f:40:9b:72:a8:2f:73:1d:e6:86:05:61:d3:b3:6b: 73:6f:d4:66:77:9b:94:8c:34:f9:95:90:24:2a:d9:dc:c8:fc: a0:a8:15:06:78:5a:88:3e:73:0b:ef:5f:8c:6b:58:4e:c8:79: 31:97:bf:b0:09:60:02:e9:0b:75:20:cf:1e:f3:7a:20:00:0c: 69:1c:10:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYsuYD9KZPcgbx299cFfPrNR3aT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDEzMDA1MDEwWhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDkxYmY5NzAyMjVlZDZjZTJlNDljYzc1MGE4ZmZjZmRm Mjc5NDRjNTRmOGY2NzczMzc4MmMwMWI1ODc5YzRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Wpggu+vYhPYmY6Uqi7M65HZMi3Bkg/shzYtDoHSStYsA i1JJd7+J95s1iaLQJ8Zrqp+5k7zVVhXokG4y09tJOcVKWcv7vwwZqFSftU2IqZ24 Lzw1/7ofKUiLiJeGp1AzuNupxcwhK2L75IAnHe4Ss/cw2TSCuSHoOOqY0PU+seWi 14LpR6E6vIOi+LT9OSZtZFEe3lIZGbO6SZDqPyW4Phm0H6s91MDpgo4Q4+3unWSk laY+AOh1Y5EiIm4d84CimiOnqc2ujaRHzxNCWGCamPkDAEfS8r0Hz/jdrAGs+sep H/ucO8iqdHnTheCwXdv2M7DnDpaNv2H65fTjuHBDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMNCf8MbxguvOTL8K1vOWWVmHhLYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0NjE1ZTYxLWQ0NzYtNDU5ZS1hMWMwLWJhNzgwZDY0NWIxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESPEwwDQYJKoZIhvcNAQELBQADggEBAFJJoHRmplOcq1+dGhbPu7C++hM8 Y06cmDvqzcwD1f6IGaGOUJxdOi+xB8aCVsIMTo4Vek+ehAHnHVbS4btc1OgofwzK Q1KKFa6NuhtXDmWihljXSNBGjNM+Mj7N4xCXtUq1y4B+IsGXKJFS3c9CBiWrZeGQ UM6RJvgXvJPKUthzGcJGL3szH6jCfwGtmUaJdS5rmVlMJRCGeZiZ0gJNKTg8W1LT m6VkNHF5nzrSwA3PBmQMHpxVmE9Am3KoL3Md5oYFYdOza3Nv1GZ3m5SMNPmVkCQq 2dzI/KCoFQZ4Wog+cwvvX4xrWE7IeTGXv7AJYALpC3Ugzx7zeiAADGkcEGo= -----END CERTIFICATE-----Generated at Sun Nov 8 01:01:56 2026 by rpki-client