$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009f7560-232f-434f-b99f-abd8d7608034.roa File: 009f7560-232f-434f-b99f-abd8d7608034.roa (raw, json) Hash identifier: AOtN9EYKw+sTuqTLaFqSejlYCrLLlSfx3ATfrMbSzaM= Subject key identifier: 1A:8B:96:A0:09:E5:66:D7:51:44:F9:8A:D1:C2:3D:65:8A:A1:A8:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 331ADD840E54F2261B3CA2CDD9BE30A1205A6A73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009f7560-232f-434f-b99f-abd8d7608034.roa Signing time: Mon 26 Oct 2026 01:31:14 +0000 ROA not before: Mon 26 Oct 2026 01:31:14 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.94.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1a:dd:84:0e:54:f2:26:1b:3c:a2:cd:d9:be:30:a1:20:5a:6a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:31:14 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=1d57da6b94b6687cb82fe1eff895eb70ead72ba8642ce3be0b4ccbe5153de369, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:9e:bd:d5:5f:48:ef:21:ce:3d:22:ab:fd: 43:bd:a1:33:82:49:48:c7:af:32:9d:a1:93:94:16: 59:53:fd:73:90:a4:af:7a:c1:54:2e:b0:14:cb:99: 9f:bb:7e:0d:85:46:f1:8b:09:c7:38:ed:f3:fe:e7: 59:93:10:fc:85:00:76:d9:d9:1d:e0:61:a3:fd:4a: 0f:eb:b3:92:74:1f:ed:ab:ce:30:d0:70:71:b0:fa: be:70:21:a1:34:60:11:5a:f4:9c:6d:ca:0a:5d:7b: 5b:ca:a1:09:98:45:a5:17:46:5d:40:9b:12:23:f0: 9b:f9:e1:4c:60:5e:3c:30:c8:48:8a:96:b9:67:99: fa:23:e9:ba:4d:33:cc:3d:d4:fe:90:e3:d1:18:a4: b2:72:13:ca:81:7a:c1:28:95:9f:79:6d:8d:2d:9c: a2:ae:b6:bd:bb:a6:c2:fb:91:0d:23:1d:03:d5:4c: c1:a4:e3:96:19:2f:14:49:0d:78:f2:17:7b:23:68: b2:0e:3f:49:3d:7c:fb:f3:ce:ad:26:4d:16:27:91: ab:dd:15:e0:f1:c7:60:67:69:48:e3:15:45:74:21: 36:a8:f3:5d:17:f4:b2:78:ba:90:55:d3:cf:00:c1: 29:71:06:e5:59:fa:98:76:d1:02:45:6a:78:43:85: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8B:96:A0:09:E5:66:D7:51:44:F9:8A:D1:C2:3D:65:8A:A1:A8:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009f7560-232f-434f-b99f-abd8d7608034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.94.0.0/18 Signature Algorithm: sha256WithRSAEncryption 65:e4:de:95:6f:90:92:a4:2a:4a:52:0d:36:d7:1d:22:59:75: 68:19:85:fc:0f:02:7b:39:e8:e8:9c:63:ba:5d:e0:87:2b:42: 79:aa:2a:d4:d6:b3:8e:ca:91:11:59:f8:00:d0:8f:90:0a:73: dc:d9:d0:23:41:d9:63:c8:a4:23:27:c3:78:e4:4b:b6:00:4a: e1:49:c2:63:36:5d:e1:51:de:84:59:a0:fb:5a:a1:ab:18:c5: 86:1f:c0:77:46:64:47:4b:1f:5e:f7:12:d7:a4:a6:ac:4a:bd: 76:cf:a3:ba:6d:97:f1:77:f8:1a:b1:fc:54:14:d6:15:87:d6: 5b:62:cf:fb:18:51:78:52:05:be:eb:6b:52:2a:7f:40:7a:88: 5d:29:bd:e1:35:83:78:05:04:c2:fd:9d:69:c1:01:c1:ec:f1: a0:28:7d:19:e2:e2:2b:c9:52:6d:af:df:12:c9:39:a0:b4:72: 84:78:61:d2:22:9e:93:16:c8:e7:9a:b7:ac:e4:6b:d9:6e:96: c7:f6:c3:5c:2a:80:11:b1:fb:5e:71:2b:5f:0a:17:de:b4:8f: 4c:0d:c8:e4:b8:4f:f8:26:11:1e:e1:2a:98:0f:a1:cb:6b:cd: a3:ae:67:f5:ab:b5:04:99:fd:d8:32:0e:98:e1:09:90:fe:2d: c4:12:f0:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMxrdhA5U8iYbPKLN2b4woSBaanMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDEzMTE0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDU3ZGE2Yjk0YjY2ODdjYjgyZmUxZWZmODk1ZWI3MGVh ZDcyYmE4NjQyY2UzYmUwYjRjY2JlNTE1M2RlMzY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8Sp691V9I7yHOPSKr/UO9oTOCSUjHrzKdoZOUFllT/XOQ pK96wVQusBTLmZ+7fg2FRvGLCcc47fP+51mTEPyFAHbZ2R3gYaP9Sg/rs5J0H+2r zjDQcHGw+r5wIaE0YBFa9Jxtygpde1vKoQmYRaUXRl1AmxIj8Jv54UxgXjwwyEiK lrlnmfoj6bpNM8w91P6Q49EYpLJyE8qBesEolZ95bY0tnKKutr27psL7kQ0jHQPV TMGk45YZLxRJDXjyF3sjaLIOP0k9fPvzzq0mTRYnkavdFeDxx2BnaUjjFUV0ITao 810X9LJ4upBV088AwSlxBuVZ+ph20QJFanhDhTQXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGouWoAnlZtdRRPmK0cI9ZYqhqJswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwOWY3NTYwLTIzMmYtNDM0Zi1iOTlmLWFiZDhkNzYwODAzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2XgAwDQYJKoZIhvcNAQELBQADggEBAGXk3pVvkJKkKkpSDTbXHSJZdWgZ hfwPAns56OicY7pd4IcrQnmqKtTWs47KkRFZ+ADQj5AKc9zZ0CNB2WPIpCMnw3jk S7YASuFJwmM2XeFR3oRZoPtaoasYxYYfwHdGZEdLH173EtekpqxKvXbPo7ptl/F3 +Bqx/FQU1hWH1ltiz/sYUXhSBb7ra1Iqf0B6iF0pveE1g3gFBML9nWnBAcHs8aAo fRni4ivJUm2v3xLJOaC0coR4YdIinpMWyOeat6zka9lulsf2w1wqgBGx+15xK18K F960j0wNyOS4T/gmER7hKpgPoctrzaOuZ/WrtQSZ/dgyDpjhCZD+LcQS8Dw= -----END CERTIFICATE-----Generated at Sat Nov 7 16:18:28 2026 by rpki-client