$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7ca7e8e-7968-4cd8-bb34-8c21062b40f7.roa File: f7ca7e8e-7968-4cd8-bb34-8c21062b40f7.roa (raw, json) Hash identifier: x+Vb9C5M3edUHqKweDzrVIe+tMVnZGUpDh2CmPHhWkk= Subject key identifier: 88:E6:F2:77:25:DA:EB:1C:D6:7B:BB:72:4E:F6:10:1C:A7:53:D3:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D1D78A3959F11E041F125DA396F88B258C88881 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7ca7e8e-7968-4cd8-bb34-8c21062b40f7.roa Signing time: Mon 26 Oct 2026 00:50:11 +0000 ROA not before: Mon 26 Oct 2026 00:50:11 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.252.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1d:78:a3:95:9f:11:e0:41:f1:25:da:39:6f:88:b2:58:c8:88:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 00:50:11 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=df0282dc9a64256fb6c53ce23e00ad0cce7ec65282e2e138eb32780e8e493a2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:a1:f9:f5:c4:fb:07:1f:c2:a3:7c:e3:a9: fb:8f:ac:c4:54:83:6d:0c:8f:c0:9f:05:5c:f4:0a: 89:04:de:6a:21:17:c8:21:f5:f8:d1:77:66:f0:58: 97:0c:96:ad:1b:87:a4:18:e7:05:97:b6:7d:c8:7b: 66:22:52:53:0b:80:a8:e2:f1:9b:eb:a8:e4:b9:c9: 38:3c:58:44:3d:88:3f:8d:49:cd:24:5c:73:ee:e6: ae:70:39:1e:f1:17:c0:24:b2:bd:45:41:26:e2:31: 2e:95:02:51:28:38:1c:70:e2:4a:cf:eb:62:d8:4a: 32:29:b7:59:7e:ef:d0:9a:92:22:74:90:6d:02:6b: 30:22:01:e7:49:35:d8:c6:ed:e7:78:7e:6e:b8:b5: 69:40:3b:a2:0b:dd:95:b8:0d:f4:70:95:5a:41:09: d3:e9:4f:ae:33:e5:c2:d2:92:7e:2f:be:4a:f3:05: 70:94:d8:32:3d:57:26:76:4c:90:6f:d1:33:64:d1: 2f:59:a2:d0:b5:25:31:9f:f1:4f:55:0a:d7:0c:90: d1:3d:66:e7:57:46:e4:1c:07:cb:6f:bf:20:4e:95: 2e:b1:1c:6a:cc:4f:1e:36:f0:45:4c:24:73:30:ff: 6b:82:19:12:36:e2:bd:f8:18:85:8d:89:81:cc:61: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E6:F2:77:25:DA:EB:1C:D6:7B:BB:72:4E:F6:10:1C:A7:53:D3:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7ca7e8e-7968-4cd8-bb34-8c21062b40f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6d:fc:72:ca:cf:58:02:b2:20:dd:2d:91:f3:9f:80:ef:bf:11: 94:09:2e:83:fa:19:c3:ba:49:54:fb:67:65:43:07:15:9d:c9: 86:01:6e:ac:f5:29:0c:1c:ae:0e:47:97:0c:ad:5e:f1:af:e9: 9e:76:42:56:e7:cd:83:88:9a:d9:b0:39:22:a9:40:6e:9b:be: 4e:e0:60:9b:ae:8d:bd:4a:90:d1:e6:69:36:7c:b9:03:5f:cd: 3b:ef:ab:70:c5:38:7d:4f:a4:60:99:bc:c5:29:20:90:48:ca: 0b:43:25:a9:6c:28:cb:a3:40:44:4e:3e:f8:42:db:23:0b:85: 7d:b4:6c:34:38:f1:ec:38:d0:23:1a:90:13:95:22:21:dd:d2: 23:00:9c:15:b7:a6:59:6a:e8:69:ce:c8:8e:64:05:e6:27:29: 91:cb:bc:93:3f:e8:0f:65:b8:f1:ae:a5:13:de:5c:b6:d3:9f: 82:b2:1e:b4:29:15:ef:a4:07:63:92:ef:15:26:9b:5b:06:33: 9d:e9:4a:f4:c1:75:92:c8:14:25:66:06:fa:1a:4b:e6:6d:3a: ac:6a:64:80:cc:04:4b:bc:44:96:1c:9c:8d:53:58:91:a8:75: 99:cc:db:c8:7c:be:8c:ef:bb:41:f2:6f:bb:a1:2a:ea:b6:f2: 1c:cf:90:db -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULR14o5WfEeBB8SXaOW+IsljIiIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDA1MDExWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjAyODJkYzlhNjQyNTZmYjZjNTNjZTIzZTAwYWQwY2Nl N2VjNjUyODJlMmUxMzhlYjMyNzgwZThlNDkzYTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSmqH59cT7Bx/Co3zjqfuPrMRUg20Mj8CfBVz0CokE3moh F8gh9fjRd2bwWJcMlq0bh6QY5wWXtn3Ie2YiUlMLgKji8ZvrqOS5yTg8WEQ9iD+N Sc0kXHPu5q5wOR7xF8Aksr1FQSbiMS6VAlEoOBxw4krP62LYSjIpt1l+79CakiJ0 kG0CazAiAedJNdjG7ed4fm64tWlAO6IL3ZW4DfRwlVpBCdPpT64z5cLSkn4vvkrz BXCU2DI9VyZ2TJBv0TNk0S9ZotC1JTGf8U9VCtcMkNE9ZudXRuQcB8tvvyBOlS6x HGrMTx428EVMJHMw/2uCGRI24r34GIWNiYHMYVzzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiObydyXa6xzWe7tyTvYQHKdT03kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3Y2E3ZThlLTc5NjgtNGNkOC1iYjM0LThjMjEwNjJiNDBmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS/DANBgkqhkiG9w0BAQsFAAOCAQEAbfxyys9YArIg3S2R85+A778RlAku g/oZw7pJVPtnZUMHFZ3JhgFurPUpDByuDkeXDK1e8a/pnnZCVufNg4ia2bA5IqlA bpu+TuBgm66NvUqQ0eZpNny5A1/NO++rcMU4fU+kYJm8xSkgkEjKC0MlqWwoy6NA RE4++ELbIwuFfbRsNDjx7DjQIxqQE5UiId3SIwCcFbemWWroac7IjmQF5icpkcu8 kz/oD2W48a6lE95cttOfgrIetCkV76QHY5LvFSabWwYznelK9MF1ksgUJWYG+hpL 5m06rGpkgMwES7xElhycjVNYkah1mczbyHy+jO+7QfJvu6Eq6rbyHM+Q2w== -----END CERTIFICATE-----Generated at Sat Nov 7 18:26:52 2026 by rpki-client