$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f346bedb-88f9-4202-adb1-7292d0a527e4.roa File: f346bedb-88f9-4202-adb1-7292d0a527e4.roa (raw, json) Hash identifier: SE3eLZEepeWc1G+5TDt/p7f7FX5ejeneoh2VILVZArg= Subject key identifier: 7D:DB:3A:52:12:07:F0:5B:90:77:EE:AD:EF:F4:09:74:37:18:B5:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B5C83208DA108F93FCFA80CB54B280B7F1680C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f346bedb-88f9-4202-adb1-7292d0a527e4.roa Signing time: Mon 26 Oct 2026 03:10:35 +0000 ROA not before: Mon 26 Oct 2026 03:10:35 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5c:83:20:8d:a1:08:f9:3f:cf:a8:0c:b5:4b:28:0b:7f:16:80:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 03:10:35 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ae57b8c26c9d7e2e7963b9b6ba4b92d4647ca15eebc272c68eab13fbbb2487cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:b5:6c:cf:40:b8:8f:37:37:c2:6d:e8:d2: 9a:26:d0:c2:fb:7e:97:07:c9:6c:6c:42:f5:45:53: d5:53:a4:c7:da:3a:fb:a3:5c:f0:f3:7b:f1:09:99: 92:2b:4c:03:c3:1e:5e:ff:61:db:d0:8d:4e:f9:7e: 6f:76:e3:51:d7:30:a5:4a:86:25:3f:b5:5a:e3:01: 8c:26:99:b0:6f:69:02:5c:ff:41:db:ba:85:7c:2e: 6b:01:f5:62:bd:0e:c4:e8:65:bd:18:b8:6f:c7:ed: a8:9d:a3:8a:aa:9a:05:4b:e8:8e:77:66:53:92:03: 79:db:75:67:65:9b:fd:8d:ba:ac:d3:72:da:61:79: 0b:35:86:e8:54:25:7a:15:a9:f2:ef:2b:d7:4e:4c: 8d:40:f3:d1:57:9d:4f:f9:f8:d5:91:d4:68:5b:b5: 3d:c9:12:1a:9a:5c:fe:3f:6c:d6:f8:48:62:8b:b0: 3a:65:08:ae:e2:b6:52:ff:fa:d5:89:d2:5b:48:6e: 3c:45:8a:09:20:be:2f:1d:3d:1c:e9:19:01:4a:4f: cd:c8:86:5c:b1:41:d3:e8:bb:f2:b6:fc:46:72:5b: 6f:e9:ca:a0:be:ff:8e:53:80:8b:bc:36:8f:fb:4e: 70:ce:b7:b1:c8:a8:dc:dc:34:aa:94:3a:08:89:78: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DB:3A:52:12:07:F0:5B:90:77:EE:AD:EF:F4:09:74:37:18:B5:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f346bedb-88f9-4202-adb1-7292d0a527e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.218.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ab:7c:e8:41:52:26:91:c2:00:d3:69:32:e5:91:cd:32:93: a7:17:1a:a6:d2:01:57:b9:e4:85:8b:a3:93:67:94:1d:a3:5e: 25:a1:ce:e3:c7:9d:8a:73:d7:24:f4:f3:28:85:d6:49:ae:39: 68:fe:97:5a:6e:5e:0f:8b:a9:0c:70:65:4e:54:f0:e5:d8:6b: 40:31:cd:51:7b:ce:1e:a2:a7:59:63:8a:2b:7c:84:dc:e2:0a: 89:ff:49:b8:91:8f:4d:87:46:9a:d6:82:58:c7:64:a2:98:fe: 2a:b9:12:38:ff:6f:d0:5f:6c:9f:da:f5:5e:1a:64:17:40:4a: 5d:e1:e6:74:5b:db:e3:97:86:07:9c:3c:e7:e3:63:43:e3:e3: 90:39:b7:c4:51:bd:38:9d:15:3d:71:0c:ec:40:38:1b:1c:f1: 90:24:c5:9f:84:13:18:18:1d:d3:c8:3d:9b:33:ee:02:88:db: 73:1e:54:72:85:c3:44:c2:22:c9:ec:59:8e:52:f8:69:30:61: 3c:f9:61:34:15:d0:85:a9:0d:d3:83:51:2d:28:70:1d:91:73: 65:dc:f8:0f:a1:4c:c4:2b:9f:a3:96:d5:22:f0:a3:62:6f:df: a9:86:4f:7c:c0:1f:d4:9f:68:63:16:10:49:90:11:c5:ba:b6: 4c:3f:48:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS1yDII2hCPk/z6gMtUsoC38WgMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDMxMDM1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTU3YjhjMjZjOWQ3ZTJlNzk2M2I5YjZiYTRiOTJkNDY0 N2NhMTVlZWJjMjcyYzY4ZWFiMTNmYmJiMjQ4N2NmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSR7Vsz0C4jzc3wm3o0pom0ML7fpcHyWxsQvVFU9VTpMfa OvujXPDze/EJmZIrTAPDHl7/YdvQjU75fm9241HXMKVKhiU/tVrjAYwmmbBvaQJc /0HbuoV8LmsB9WK9DsToZb0YuG/H7aido4qqmgVL6I53ZlOSA3nbdWdlm/2NuqzT ctpheQs1huhUJXoVqfLvK9dOTI1A89FXnU/5+NWR1GhbtT3JEhqaXP4/bNb4SGKL sDplCK7itlL/+tWJ0ltIbjxFigkgvi8dPRzpGQFKT83IhlyxQdPou/K2/EZyW2/p yqC+/45TgIu8No/7TnDOt7HIqNzcNKqUOgiJeNSxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfds6UhIH8FuQd+6t7/QJdDcYtccwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzNDZiZWRiLTg4ZjktNDIwMi1hZGIxLTcyOTJkMGE1MjdlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3towDQYJKoZIhvcNAQELBQADggEBAKirfOhBUiaRwgDTaTLlkc0yk6cX GqbSAVe55IWLo5NnlB2jXiWhzuPHnYpz1yT08yiF1kmuOWj+l1puXg+LqQxwZU5U 8OXYa0AxzVF7zh6ip1ljiit8hNziCon/SbiRj02HRprWgljHZKKY/iq5Ejj/b9Bf bJ/a9V4aZBdASl3h5nRb2+OXhgecPOfjY0Pj45A5t8RRvTidFT1xDOxAOBsc8ZAk xZ+EExgYHdPIPZsz7gKI23MeVHKFw0TCIsnsWY5S+GkwYTz5YTQV0IWpDdODUS0o cB2Rc2Xc+A+hTMQrn6OW1SLwo2Jv36mGT3zAH9SfaGMWEEmQEcW6tkw/SLk= -----END CERTIFICATE-----Generated at Sun Nov 8 04:04:20 2026 by rpki-client