$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/997dfa70-d881-4a99-bd0b-a631f4df0734.roa File: 997dfa70-d881-4a99-bd0b-a631f4df0734.roa (raw, json) Hash identifier: fK4zVz1PDZsPC9sAyAvxs+Rr00hqMtca6N1TNVb5Uh0= Subject key identifier: E9:5A:8E:B1:03:16:EF:75:89:40:25:5D:E1:C0:30:22:38:39:B0:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35E1F5BACF7814AD3CBA2412AAF9D6F9DBDCF8F1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/997dfa70-d881-4a99-bd0b-a631f4df0734.roa Signing time: Thu 15 Oct 2026 01:10:07 +0000 ROA not before: Thu 15 Oct 2026 01:10:07 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e1:f5:ba:cf:78:14:ad:3c:ba:24:12:aa:f9:d6:f9:db:dc:f8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:10:07 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=472beefb5d9b431628889a1e69954761610dc4bd025a6631de186b302b906619, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:8a:c4:3d:33:97:60:ea:0b:41:d2:8d:23: d6:cd:b9:27:f6:7d:b1:7e:f4:79:21:79:65:07:7b: 91:4c:d0:80:52:47:eb:d7:af:15:ab:ce:26:55:5b: 2d:5e:41:e6:04:66:5e:8a:a1:ff:9b:89:5d:6c:5f: 2f:20:f7:45:ee:b9:9c:ba:2a:15:1c:d5:86:53:6a: e7:75:b0:68:6d:72:7a:db:af:b6:b1:c5:39:29:db: 35:ff:cb:9b:1f:9f:1a:e6:34:af:74:96:50:a7:4a: 00:47:c0:80:a1:f9:a1:c3:b8:9b:e7:0a:8e:92:2d: 7f:89:47:47:5a:24:bd:e8:2c:55:06:45:04:59:fa: 53:51:72:e5:b5:74:c1:f9:81:b2:ae:2d:c4:02:29: ca:ed:a7:ad:a6:33:da:60:40:9b:ad:83:61:b2:86: 43:33:d4:db:ed:26:92:87:f1:d4:8f:d4:91:c7:63: e1:46:7c:3c:23:cf:2c:66:fb:e6:8d:2d:53:16:8d: 2c:1a:6e:bf:ee:11:f4:9c:81:83:c9:16:07:ba:cf: 7f:4b:0f:71:cb:4f:0b:9a:8b:6c:d0:64:c2:c7:b7: 2c:dd:67:77:ec:b4:68:10:4c:a2:f8:3c:c0:f1:57: 00:27:e2:e1:f9:29:ec:75:cd:97:b9:03:27:58:33: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5A:8E:B1:03:16:EF:75:89:40:25:5D:E1:C0:30:22:38:39:B0:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/997dfa70-d881-4a99-bd0b-a631f4df0734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.227.0/24 Signature Algorithm: sha256WithRSAEncryption 48:42:2d:5c:d6:83:5f:97:f5:62:c8:29:7f:bd:4c:09:de:88: 09:6a:4a:9a:3b:0c:8c:f4:97:c0:d1:d7:5b:83:9a:3a:6c:1f: ae:88:04:12:ee:b2:9e:0c:f7:38:df:7c:5d:bc:30:9b:d7:d2: 99:27:b8:39:80:b0:8b:a4:1d:27:6d:fe:9a:a2:45:bf:1f:7a: 54:3b:76:b4:97:b0:b4:8e:67:e7:cf:f7:64:c4:8a:0d:4e:10: 3c:92:71:db:d4:de:6d:b5:a2:64:2d:13:d1:73:73:57:05:3d: d1:67:14:25:5d:b8:bb:50:0a:74:55:43:da:41:bb:f0:d7:4d: 71:78:a6:1d:86:3f:71:f5:f1:26:10:a6:00:49:e9:4d:56:c0: 5a:88:36:08:a9:73:99:c2:41:1e:5c:6c:14:34:e6:41:1f:7e: 88:ff:65:96:ac:32:82:96:05:3f:9d:9d:68:40:e9:ce:77:be: 37:ca:a9:5a:11:ff:51:85:5d:d1:ab:62:92:d7:d2:52:25:79: 5b:5f:07:03:72:30:b1:c3:45:ba:dc:9d:4e:58:88:40:4e:4f: 22:7d:3d:93:c1:23:a7:f6:3b:15:2c:6a:0d:32:66:c8:7d:91: 59:fc:95:b9:83:14:40:2a:90:e8:e3:45:ab:f0:25:6c:cd:17: 4b:41:0a:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNeH1us94FK08uiQSqvnW+dvc+PEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDExMDA3WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzJiZWVmYjVkOWI0MzE2Mjg4ODlhMWU2OTk1NDc2MTYx MGRjNGJkMDI1YTY2MzFkZTE4NmIzMDJiOTA2NjE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqGIrEPTOXYOoLQdKNI9bNuSf2fbF+9HkheWUHe5FM0IBS R+vXrxWrziZVWy1eQeYEZl6Kof+biV1sXy8g90XuuZy6KhUc1YZTaud1sGhtcnrb r7axxTkp2zX/y5sfnxrmNK90llCnSgBHwICh+aHDuJvnCo6SLX+JR0daJL3oLFUG RQRZ+lNRcuW1dMH5gbKuLcQCKcrtp62mM9pgQJutg2GyhkMz1NvtJpKH8dSP1JHH Y+FGfDwjzyxm++aNLVMWjSwabr/uEfScgYPJFge6z39LD3HLTwuai2zQZMLHtyzd Z3fstGgQTKL4PMDxVwAn4uH5Kex1zZe5AydYM8vlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6VqOsQMW73WJQCVd4cAwIjg5sHAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5N2RmYTcwLWQ4ODEtNGE5OS1iZDBiLWE2MzFmNGRmMDczNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3uMwDQYJKoZIhvcNAQELBQADggEBAEhCLVzWg1+X9WLIKX+9TAneiAlq Spo7DIz0l8DR11uDmjpsH66IBBLusp4M9zjffF28MJvX0pknuDmAsIukHSdt/pqi Rb8felQ7drSXsLSOZ+fP92TEig1OEDyScdvU3m21omQtE9Fzc1cFPdFnFCVduLtQ CnRVQ9pBu/DXTXF4ph2GP3H18SYQpgBJ6U1WwFqINgipc5nCQR5cbBQ05kEffoj/ ZZasMoKWBT+dnWhA6c53vjfKqVoR/1GFXdGrYpLX0lIleVtfBwNyMLHDRbrcnU5Y iEBOTyJ9PZPBI6f2OxUsag0yZsh9kVn8lbmDFEAqkOjjRavwJWzNF0tBCoo= -----END CERTIFICATE-----Generated at Tue Oct 20 03:59:48 2026 by rpki-client