$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa File: 3f2579f5-f2b5-43e8-871b-7d661a802641.roa (raw, json) Hash identifier: hesjiAzTeHYkUHTljj/336erUUAEC03Yr4XRF4bQSyY= Subject key identifier: 58:E6:B7:BC:92:EF:66:05:BF:C6:D8:7A:CC:99:8A:5C:5D:5A:C3:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EB339462940D99DBF2557E5953218D25462405B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa Signing time: Mon 26 Oct 2026 01:50:05 +0000 ROA not before: Mon 26 Oct 2026 01:50:05 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 18.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b3:39:46:29:40:d9:9d:bf:25:57:e5:95:32:18:d2:54:62:40:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:50:05 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=fe5c686442e4fe611c327580d00cee149a3caaa4a5297a8bbbd86dae6926e85d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:58:b6:09:1e:a9:63:b3:e8:b2:31:8d:48: 4f:62:eb:89:89:f6:88:56:66:aa:94:1b:7a:ab:65: 14:dc:e5:c7:d4:e0:70:0a:c9:0f:03:df:98:2a:5c: 5d:4c:18:3d:4b:09:3c:87:b2:ba:0d:8c:f8:ac:1a: 32:1b:9d:a0:85:58:f4:36:6c:b7:1a:f5:e9:fe:2a: e7:c6:69:fe:0a:8e:1e:6c:ce:a9:0b:fe:98:b8:40: 43:3b:31:7f:04:af:72:c7:c8:f4:78:8d:5b:a4:55: 5b:6e:78:d5:3b:bc:fc:92:c8:21:d5:71:78:65:02: 9f:37:23:1b:ba:52:f5:b3:5b:26:c8:ad:be:18:b6: 5a:09:b1:57:a2:aa:70:61:5e:00:fb:4c:90:1e:a0: ae:ca:08:67:1a:c7:0a:35:51:0f:53:af:48:46:af: dd:55:43:e0:23:60:0b:ac:39:ac:ad:86:a4:ca:90: 4c:71:36:86:c7:95:da:98:31:ac:74:6d:54:3e:b4: 60:bb:04:e8:e9:9d:07:69:59:1d:70:05:48:97:7f: 48:dd:9c:99:e1:a1:a1:06:67:59:ee:bf:e6:44:20: ac:7e:f6:35:d6:6c:39:f7:f1:8f:f8:86:ee:c4:2d: 81:3c:bf:38:c9:bf:f0:af:46:35:41:58:7e:59:e4: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:B7:BC:92:EF:66:05:BF:C6:D8:7A:CC:99:8A:5C:5D:5A:C3:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7f:5e:e1:16:67:e2:e9:fb:50:07:90:39:f9:13:53:89:1a:74: 6c:df:63:21:58:9d:17:2e:9e:ed:23:78:98:64:fa:ff:4f:05: b6:68:85:60:80:fb:37:54:54:91:48:62:2f:70:45:04:1c:2c: 91:c8:59:a3:be:59:bb:84:91:fb:76:10:09:80:b4:cc:4a:db: f8:f8:8b:92:27:70:6c:83:55:50:e2:c1:8c:8a:ba:a1:95:a7: 53:1e:a9:58:18:d3:ba:1c:7d:28:ca:7a:95:3e:a5:0d:a3:b4: 6c:41:99:a9:31:ef:8e:88:ff:7a:9d:94:e5:8d:ee:ef:dd:fb: fa:5b:8e:38:a3:1f:92:23:2a:4c:e5:08:20:82:e9:94:78:ca: d2:79:1b:52:1b:11:a4:f2:75:74:90:2a:40:07:03:85:40:ea: 22:d6:c6:48:df:bb:d8:08:0b:90:79:26:c3:40:d0:44:45:ed: b6:98:b3:f7:c5:1c:45:40:15:cd:ee:08:69:4b:96:37:bb:cb: 99:53:52:67:cf:37:ca:c9:82:d0:54:2d:76:a1:f2:58:6a:e2: 77:09:eb:18:7b:53:92:95:14:13:a5:57:78:e9:86:21:dc:b2: 70:fd:9d:6e:3e:5e:bc:36:bb:38:47:ef:e4:2f:4c:94:1b:33: 8f:1d:b2:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPrM5RilA2Z2/JVfllTIY0lRiQFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDE1MDA1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTVjNjg2NDQyZTRmZTYxMWMzMjc1ODBkMDBjZWUxNDlh M2NhYWE0YTUyOTdhOGJiYmQ4NmRhZTY5MjZlODVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjSli2CR6pY7PosjGNSE9i64mJ9ohWZqqUG3qrZRTc5cfU 4HAKyQ8D35gqXF1MGD1LCTyHsroNjPisGjIbnaCFWPQ2bLca9en+KufGaf4Kjh5s zqkL/pi4QEM7MX8Er3LHyPR4jVukVVtueNU7vPySyCHVcXhlAp83Ixu6UvWzWybI rb4YtloJsVeiqnBhXgD7TJAeoK7KCGcaxwo1UQ9Tr0hGr91VQ+AjYAusOaythqTK kExxNobHldqYMax0bVQ+tGC7BOjpnQdpWR1wBUiXf0jdnJnhoaEGZ1nuv+ZEIKx+ 9jXWbDn38Y/4hu7ELYE8vzjJv/CvRjVBWH5Z5OBfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWOa3vJLvZgW/xth6zJmKXF1aw90wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmMjU3OWY1LWYyYjUtNDNlOC04NzFiLTdkNjYxYTgwMjY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcS/YAwDQYJKoZIhvcNAQELBQADggEBAH9e4RZn4un7UAeQOfkTU4kadGzf YyFYnRcunu0jeJhk+v9PBbZohWCA+zdUVJFIYi9wRQQcLJHIWaO+WbuEkft2EAmA tMxK2/j4i5IncGyDVVDiwYyKuqGVp1MeqVgY07ocfSjKepU+pQ2jtGxBmakx746I /3qdlOWN7u/d+/pbjjijH5IjKkzlCCCC6ZR4ytJ5G1IbEaTydXSQKkAHA4VA6iLW xkjfu9gIC5B5JsNA0ERF7baYs/fFHEVAFc3uCGlLlje7y5lTUmfPN8rJgtBULXah 8lhq4ncJ6xh7U5KVFBOlV3jphiHcsnD9nW4+Xrw2uzhH7+QvTJQbM48dsn0= -----END CERTIFICATE-----Generated at Fri Oct 30 14:21:48 2026 by rpki-client