$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f21e32b6-e1ea-4ba8-9e50-0e74512f24dc.roa File: f21e32b6-e1ea-4ba8-9e50-0e74512f24dc.roa (raw, json) Hash identifier: /7k6Z1l3mqg36DGvZP4i9zM/M7xfRFLn8XeU7dO1gdU= Subject key identifier: 36:91:9C:7E:F4:DD:A5:C3:00:C1:1C:C5:4B:3E:BF:29:A0:46:BF:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 41BE1E8E02412560189526609062A9F36C056DF9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f21e32b6-e1ea-4ba8-9e50-0e74512f24dc.roa Signing time: Wed 21 Oct 2026 00:20:12 +0000 ROA not before: Wed 21 Oct 2026 00:20:12 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:be:1e:8e:02:41:25:60:18:95:26:60:90:62:a9:f3:6c:05:6d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:20:12 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=27faa96e34b2a4cc3f295f755a95d2345a760ef9a65d83e8b697ea9dfc6f8142, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:93:83:1f:a0:9d:57:6e:98:85:e3:d4:de: 4a:48:1c:bb:74:8f:19:dc:b0:19:b7:00:86:ad:fb: 26:9f:25:1a:b8:dd:e6:ba:01:1e:b3:31:37:b4:54: f2:7b:c2:1c:12:96:82:90:a2:25:43:3b:2f:d3:c6: 24:0b:c1:e3:8e:2d:5e:9b:52:6e:f1:a0:a4:5c:5f: 08:c6:3b:2e:ed:41:49:df:70:9c:90:68:91:67:e0: 33:70:72:68:8d:f5:fa:1b:bf:3e:43:c7:f4:fe:df: ba:b4:b7:99:00:8e:11:a2:a1:49:c0:ef:0b:9e:40: 90:66:a7:23:c8:ba:bf:4e:fb:89:fe:31:bd:ed:18: 1e:26:5a:20:75:75:2f:d0:13:46:11:0b:4d:8f:01: e1:e5:ef:3a:5d:0c:4b:dc:01:44:1f:e0:64:ad:63: 3e:bd:41:8a:fe:16:c9:d7:55:6e:3a:c5:2c:b8:67: 67:6d:8b:cf:78:45:e4:30:b7:fb:a3:27:c8:ed:22: f8:14:01:09:76:e8:07:a1:8f:61:55:e5:1d:f2:c9: 66:c2:25:76:49:5f:07:1c:7b:73:87:de:f5:6b:4b: ca:6d:bc:77:57:2e:a2:b6:01:6a:dd:16:26:3c:7c: 15:a9:88:dc:5c:13:7a:01:1a:88:44:3d:98:34:98: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:91:9C:7E:F4:DD:A5:C3:00:C1:1C:C5:4B:3E:BF:29:A0:46:BF:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f21e32b6-e1ea-4ba8-9e50-0e74512f24dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.161.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:1c:3c:d7:e4:9d:9a:aa:1f:0c:70:db:1a:00:4e:f2:a1:6d: b5:f9:1a:82:8e:7e:1d:40:06:a7:38:3a:a2:2c:3f:a5:be:72: 4d:20:ae:2d:b3:b7:de:36:0d:2a:36:18:83:b5:38:99:05:7e: 12:93:51:fa:96:9d:fc:8d:0c:66:bf:37:83:90:23:6f:2d:1c: 3c:9f:9c:4c:4c:ed:e5:e4:ae:5a:da:98:29:60:de:f7:b6:97: 9e:c7:70:78:a9:ab:41:a8:1f:32:55:3f:ba:fb:4f:19:fd:47: a4:53:22:68:11:0f:46:78:62:69:49:7a:83:c9:1a:4e:a1:3f: 53:00:24:d6:97:37:58:ee:a9:c8:1d:28:f1:ff:3d:25:00:5d: f4:8a:f5:f1:34:8c:3e:11:33:6c:d8:b1:18:13:3f:06:c6:9a: 15:f5:f5:6a:f6:83:d2:e7:07:6b:a7:bf:c6:82:53:cd:fb:e7: f7:9b:b7:dd:90:90:44:f8:8f:b1:36:3a:46:91:65:6b:68:f5: 60:a6:68:03:37:02:e7:9a:da:d8:5f:6f:f0:b4:44:e4:71:fb: 60:5e:4b:0b:69:41:36:72:06:c4:52:8b:53:32:29:f9:10:29: d9:f7:54:9c:57:83:2d:41:0d:31:ab:4a:a3:50:0c:11:96:fe: 8c:39:72:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQb4ejgJBJWAYlSZgkGKp82wFbfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDAyMDEyWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2ZhYTk2ZTM0YjJhNGNjM2YyOTVmNzU1YTk1ZDIzNDVh NzYwZWY5YTY1ZDgzZThiNjk3ZWE5ZGZjNmY4MTQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC95ODH6CdV26YhePU3kpIHLt0jxncsBm3AIat+yafJRq4 3ea6AR6zMTe0VPJ7whwSloKQoiVDOy/TxiQLweOOLV6bUm7xoKRcXwjGOy7tQUnf cJyQaJFn4DNwcmiN9fobvz5Dx/T+37q0t5kAjhGioUnA7wueQJBmpyPIur9O+4n+ Mb3tGB4mWiB1dS/QE0YRC02PAeHl7zpdDEvcAUQf4GStYz69QYr+FsnXVW46xSy4 Z2dti894ReQwt/ujJ8jtIvgUAQl26Aehj2FV5R3yyWbCJXZJXwcce3OH3vVrS8pt vHdXLqK2AWrdFiY8fBWpiNxcE3oBGohEPZg0mECNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNpGcfvTdpcMAwRzFSz6/KaBGvygwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyMWUzMmI2LWUxZWEtNGJhOC05ZTUwLTBlNzQ1MTJmMjRkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRKEwDQYJKoZIhvcNAQELBQADggEBAA4cPNfknZqqHwxw2xoATvKhbbX5 GoKOfh1ABqc4OqIsP6W+ck0gri2zt942DSo2GIO1OJkFfhKTUfqWnfyNDGa/N4OQ I28tHDyfnExM7eXkrlramClg3ve2l57HcHipq0GoHzJVP7r7Txn9R6RTImgRD0Z4 YmlJeoPJGk6hP1MAJNaXN1juqcgdKPH/PSUAXfSK9fE0jD4RM2zYsRgTPwbGmhX1 9Wr2g9LnB2unv8aCU8375/ebt92QkET4j7E2OkaRZWto9WCmaAM3Auea2thfb/C0 RORx+2BeSwtpQTZyBsRSi1MyKfkQKdn3VJxXgy1BDTGrSqNQDBGW/ow5cug= -----END CERTIFICATE-----Generated at Sat Nov 7 16:22:56 2026 by rpki-client