$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff5485-cf8f-4e14-82fb-71e066a271cb.roa File: 0cff5485-cf8f-4e14-82fb-71e066a271cb.roa (raw, json) Hash identifier: bnSyKem+ug6kAHYA0Ycp+0Na3oGBk+KENHYudsIlTMk= Subject key identifier: 73:48:41:BC:87:81:B6:C6:2B:F5:DA:A2:3F:5D:F7:FF:56:B9:2F:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DE547D960701B3C94772A91434329D0CEE3B18B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff5485-cf8f-4e14-82fb-71e066a271cb.roa Signing time: Mon 26 Oct 2026 03:03:57 +0000 ROA not before: Mon 26 Oct 2026 03:03:57 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e5:47:d9:60:70:1b:3c:94:77:2a:91:43:43:29:d0:ce:e3:b1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 03:03:57 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=e8b5fde157d5837b1776b49f991b9673277ff518a638269801879ad71a3a6569, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:81:21:ad:d3:16:37:98:4b:39:c8:32:18: 4d:f5:ba:29:0d:55:70:60:bb:ae:ad:5d:24:8f:2e: 0a:0e:6c:ce:9c:35:ba:9d:1a:67:76:5f:c7:4a:d1: e9:cf:0c:4f:b3:9f:36:43:da:e5:09:a1:2c:a2:aa: 03:ea:1d:13:c2:59:48:b9:fb:62:79:a5:08:b0:76: 38:3e:d1:97:05:0b:a3:41:c1:a8:6b:8a:bc:a6:bf: 12:ed:78:60:b2:9b:ac:ff:01:60:86:e0:01:15:d2: a7:44:f1:10:6d:d6:63:d2:dc:a8:74:10:5a:97:0a: 81:c8:1f:ad:ca:d5:8c:a4:60:da:d3:a3:e3:30:f7: 85:87:a9:44:d9:d4:f8:4c:a1:69:fa:34:43:ee:c7: 61:07:50:3a:69:5a:90:47:09:a4:d9:4d:10:c5:44: 74:b1:71:d7:49:c6:52:7f:fe:56:5e:58:58:c5:14: be:da:d3:ee:92:cd:cc:c5:c1:7c:ea:78:81:72:ae: ca:d8:92:e5:85:7f:ae:47:2b:0d:08:90:70:e2:77: d7:4b:42:9c:ca:92:ed:57:54:af:d2:e3:ad:81:e5: f5:e9:21:a7:0d:7e:cf:1a:48:6c:8c:c9:f4:59:49: f7:6c:80:b8:df:8f:dc:94:2f:14:9c:8f:4e:7e:ba: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:48:41:BC:87:81:B6:C6:2B:F5:DA:A2:3F:5D:F7:FF:56:B9:2F:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff5485-cf8f-4e14-82fb-71e066a271cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.244.0/24 Signature Algorithm: sha256WithRSAEncryption 37:b5:e8:87:37:72:52:23:61:27:e5:e3:7c:08:72:6d:60:0d: d3:a5:e2:2e:4b:41:a9:7a:09:3b:cc:11:31:40:18:ae:da:f0: e7:ee:9b:46:10:39:d9:bb:a8:7c:b9:ac:a8:91:ac:5e:84:61: 46:e9:95:98:55:86:22:49:1f:da:f5:f0:f5:89:3f:d7:5b:ed: f6:e5:e2:a0:a4:b2:81:bc:91:38:e8:02:8d:5b:06:1b:f9:50: 29:78:d2:4d:89:34:49:dd:8d:a5:c1:a5:86:95:30:f9:23:51: 04:64:f3:08:be:83:80:d1:dd:ed:93:3b:a8:e1:c9:8f:60:0c: e1:a9:95:ef:7d:40:d9:ed:c0:bf:17:64:29:a9:e8:62:84:e5: e9:ec:78:58:66:9d:e7:6f:e0:eb:f1:5c:02:03:53:9e:2b:b1: 88:aa:ce:53:79:f1:8a:f1:a5:ed:be:39:b3:60:e3:02:84:d9: a9:0a:97:3e:3c:e5:2b:47:5d:ca:45:7a:56:ef:06:50:95:6d: 44:d0:e0:14:4e:98:37:4f:2f:54:d8:cc:e3:9d:a1:13:c3:4c: aa:c9:3b:30:e6:c3:e5:d9:a7:df:62:b2:6b:53:19:76:42:24: 5a:cc:12:7c:44:22:71:a5:c1:d2:4b:95:73:09:fa:18:8f:56: 7d:7d:b1:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULeVH2WBwGzyUdyqRQ0Mp0M7jsYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDMwMzU3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGI1ZmRlMTU3ZDU4MzdiMTc3NmI0OWY5OTFiOTY3MzI3 N2ZmNTE4YTYzODI2OTgwMTg3OWFkNzFhM2E2NTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy2IEhrdMWN5hLOcgyGE31uikNVXBgu66tXSSPLgoObM6c NbqdGmd2X8dK0enPDE+znzZD2uUJoSyiqgPqHRPCWUi5+2J5pQiwdjg+0ZcFC6NB wahrirymvxLteGCym6z/AWCG4AEV0qdE8RBt1mPS3Kh0EFqXCoHIH63K1YykYNrT o+Mw94WHqUTZ1PhMoWn6NEPux2EHUDppWpBHCaTZTRDFRHSxcddJxlJ//lZeWFjF FL7a0+6SzczFwXzqeIFyrsrYkuWFf65HKw0IkHDid9dLQpzKku1XVK/S462B5fXp IacNfs8aSGyMyfRZSfdsgLjfj9yULxScj05+urHVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc0hBvIeBtsYr9dqiP133/1a5L3wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBjZmY1NDg1LWNmOGYtNGUxNC04MmZiLTcxZTA2NmEyNzFjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/QwDQYJKoZIhvcNAQELBQADggEBADe16Ic3clIjYSfl43wIcm1gDdOl 4i5LQal6CTvMETFAGK7a8Ofum0YQOdm7qHy5rKiRrF6EYUbplZhVhiJJH9r18PWJ P9db7fbl4qCksoG8kTjoAo1bBhv5UCl40k2JNEndjaXBpYaVMPkjUQRk8wi+g4DR 3e2TO6jhyY9gDOGple99QNntwL8XZCmp6GKE5enseFhmnedv4OvxXAIDU54rsYiq zlN58Yrxpe2+ObNg4wKE2akKlz485StHXcpFelbvBlCVbUTQ4BROmDdPL1TYzOOd oRPDTKrJOzDmw+XZp99ismtTGXZCJFrMEnxEInGlwdJLlXMJ+hiPVn19sZA= -----END CERTIFICATE-----Generated at Sat Nov 7 18:13:22 2026 by rpki-client