$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/876b8c26-c888-478a-a3f7-ab8093e69d27.roa File: 876b8c26-c888-478a-a3f7-ab8093e69d27.roa (raw, json) Hash identifier: IZNqjYO6FGYR7xoA12hpOfkXtzU54cjjc+ZlH2rCy54= Subject key identifier: 12:86:EC:F9:1B:48:0B:45:C2:73:56:82:56:4F:4B:07:60:D5:9E:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CB35ACF6CA9C33DF722D8A06EF1D883CB0E9FC5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/876b8c26-c888-478a-a3f7-ab8093e69d27.roa Signing time: Tue 20 Oct 2026 01:08:16 +0000 ROA not before: Tue 20 Oct 2026 01:08:16 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b3:5a:cf:6c:a9:c3:3d:f7:22:d8:a0:6e:f1:d8:83:cb:0e:9f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 01:08:16 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=621bb959229880698a112748350351e7023fa39afa0fa56dde319ef4fc93f608, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:91:f4:48:12:6b:f3:a9:c0:06:45:75:43: 87:d8:2b:c4:b4:30:d9:14:cd:29:80:b7:fc:e1:14: 6f:fa:d4:20:56:33:ff:e1:76:ae:9c:dd:10:78:e4: e1:2a:be:70:e5:ba:1c:05:01:71:58:49:d3:59:34: b6:f6:dd:f1:b2:3b:90:90:63:64:99:0c:2a:20:69: 49:7a:ac:a1:a8:06:d1:72:1e:b5:8f:ec:9f:f2:3b: f4:0c:fb:a2:31:96:06:b4:27:8b:f6:89:44:db:41: 25:3a:24:34:90:6e:69:75:18:56:df:84:a8:9f:a0: 0d:04:2d:de:ea:00:5b:c6:6f:c4:60:9e:d6:9d:98: 0f:31:58:f3:e1:4c:4c:f7:d1:83:7d:21:02:fe:dc: 08:11:45:d5:12:a2:af:83:fa:a4:75:13:05:56:4e: fb:19:9b:0a:8f:87:fe:c2:00:f7:49:55:4b:13:98: fb:58:35:62:4f:e8:d5:a8:48:3c:ad:2e:44:61:e9: c6:bc:85:47:3b:bf:52:9e:7a:ba:20:ab:9f:b8:b1: 83:a8:5e:38:86:e2:57:eb:e4:13:9f:72:30:a7:3f: da:fb:08:ef:d9:13:16:f7:28:89:ec:71:08:38:72: cb:1b:46:bf:32:8f:41:7b:0f:41:75:3c:c6:f4:44: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:EC:F9:1B:48:0B:45:C2:73:56:82:56:4F:4B:07:60:D5:9E:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/876b8c26-c888-478a-a3f7-ab8093e69d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.66.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:ac:e3:2f:98:49:95:93:da:a1:49:23:32:3c:50:da:07:36: 1a:6d:22:2d:b8:05:43:d3:a5:39:5f:6d:66:80:9a:c6:a8:9a: 9e:89:50:96:ab:23:79:86:f2:8c:54:bc:a5:51:da:48:a3:40: 81:cc:2d:c9:72:4f:58:66:e1:57:79:87:b3:17:24:69:92:cb: 8f:ce:6e:b3:c3:fc:02:81:39:4c:8e:45:17:f7:78:ab:b6:18: 18:6e:23:db:89:fe:88:68:a6:f1:1a:cd:f0:85:ce:e8:a8:40: 59:9d:60:ae:80:d0:02:2f:b1:87:79:47:fe:e4:19:72:fb:fb: 39:3b:df:40:1a:2c:4e:9e:67:2f:30:2b:a4:08:50:a3:ff:70: 49:d1:9c:2b:4b:96:e4:8d:61:88:f5:db:2d:c7:9f:9d:ff:1b: cd:3f:eb:bb:88:20:50:28:8d:ad:bf:b5:50:b2:79:4d:f3:62: 98:20:53:55:42:21:89:39:64:b5:72:60:2a:63:a9:af:ec:7c: f8:83:1e:75:62:45:46:a7:4f:e9:dd:7e:bc:04:de:69:58:55: c3:2d:17:b2:73:5c:22:16:c9:23:3a:05:13:3f:8d:02:b9:25: a5:0f:dd:fa:79:6a:fe:f7:0e:44:40:e7:78:f6:4d:67:bd:aa: cc:f7:7a:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPLNaz2ypwz33ItigbvHYg8sOn8UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIwMDEwODE2WhcNMjcwMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjFiYjk1OTIyOTg4MDY5OGExMTI3NDgzNTAzNTFlNzAy M2ZhMzlhZmEwZmE1NmRkZTMxOWVmNGZjOTNmNjA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIKZH0SBJr86nABkV1Q4fYK8S0MNkUzSmAt/zhFG/61CBW M//hdq6c3RB45OEqvnDluhwFAXFYSdNZNLb23fGyO5CQY2SZDCogaUl6rKGoBtFy HrWP7J/yO/QM+6Ixlga0J4v2iUTbQSU6JDSQbml1GFbfhKifoA0ELd7qAFvGb8Rg ntadmA8xWPPhTEz30YN9IQL+3AgRRdUSoq+D+qR1EwVWTvsZmwqPh/7CAPdJVUsT mPtYNWJP6NWoSDytLkRh6ca8hUc7v1Keerogq5+4sYOoXjiG4lfr5BOfcjCnP9r7 CO/ZExb3KInscQg4cssbRr8yj0F7D0F1PMb0RKvXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEobs+RtIC0XCc1aCVk9LB2DVnjcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3NmI4YzI2LWM4ODgtNDc4YS1hM2Y3LWFiODA5M2U2OWQyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3EIwDQYJKoZIhvcNAQELBQADggEBAI+s4y+YSZWT2qFJIzI8UNoHNhpt Ii24BUPTpTlfbWaAmsaomp6JUJarI3mG8oxUvKVR2kijQIHMLclyT1hm4Vd5h7MX JGmSy4/ObrPD/AKBOUyORRf3eKu2GBhuI9uJ/ohopvEazfCFzuioQFmdYK6A0AIv sYd5R/7kGXL7+zk730AaLE6eZy8wK6QIUKP/cEnRnCtLluSNYYj12y3Hn53/G80/ 67uIIFAoja2/tVCyeU3zYpggU1VCIYk5ZLVyYCpjqa/sfPiDHnViRUanT+ndfrwE 3mlYVcMtF7JzXCIWySM6BRM/jQK5JaUP3fp5av73DkRA53j2TWe9qsz3ejI= -----END CERTIFICATE-----Generated at Tue Oct 20 03:34:40 2026 by rpki-client