$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa File: 163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa (raw, json) Hash identifier: 7EOVOrZ6DInOWymg0H6i0P70jp7FueCC9nXDT2it4iE= Subject key identifier: E4:67:D4:B5:0D:48:9E:3B:8C:AC:25:7D:63:33:E5:C3:79:C7:2A:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24780288ACD372BC5DA1A129869C0A6C4708BDB9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa Signing time: Mon 26 Oct 2026 03:40:05 +0000 ROA not before: Mon 26 Oct 2026 03:40:05 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:78:02:88:ac:d3:72:bc:5d:a1:a1:29:86:9c:0a:6c:47:08:bd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 03:40:05 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=818e5ae85285b7c0da71859064266af95b23062f50800d12f3be044a598501c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:47:57:04:69:76:99:07:2a:92:9f:39:fc: e7:99:bd:62:fa:b0:91:6e:12:98:cf:0c:1d:53:23: 0c:df:4e:d9:fd:30:83:c7:b5:6d:3a:87:58:61:2a: ca:9a:3e:a2:57:f5:df:44:ae:01:c2:a4:72:77:94: f9:81:16:7c:02:03:ed:1c:6c:0c:4b:ee:1e:3d:f5: 3d:09:37:57:3a:e2:c5:75:0d:bd:6e:c3:e6:37:21: ff:cc:62:d4:c6:e6:88:a5:f6:3c:77:99:65:4a:cf: 20:a7:7f:b1:58:d3:ab:93:c2:95:37:8a:5c:0b:a7: 41:ef:1d:0d:9c:0d:e9:f2:55:63:e2:1a:53:70:75: 87:9b:10:d9:d6:5e:88:a1:29:e6:d2:ab:53:b4:0b: 32:b3:7a:61:30:59:97:c4:4c:43:9b:5b:1f:83:74: 77:5a:77:e3:2e:9d:a2:00:b8:54:51:0d:53:98:cd: 86:8c:b2:c1:79:58:0d:54:f2:20:df:51:09:a6:c7: f1:28:88:8c:d9:3f:b4:a5:45:7b:35:02:2e:29:89: 71:5c:41:a6:57:ac:08:98:c8:95:ce:42:68:9b:b1: bc:31:43:1f:34:42:65:d4:5b:3f:4e:a7:90:45:e0: eb:bb:17:f9:93:4f:95:64:b5:15:c2:2a:7d:b1:72: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:D4:B5:0D:48:9E:3B:8C:AC:25:7D:63:33:E5:C3:79:C7:2A:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.80.0/20 Signature Algorithm: sha256WithRSAEncryption 24:62:c6:4c:6e:e2:53:e8:83:32:b3:ef:71:a7:df:5d:dd:a7: b5:8d:48:7f:e9:15:a8:09:c9:7f:3f:9f:80:2b:9b:6c:86:cc: 9a:83:90:1d:c0:8c:cf:5f:c3:11:63:55:2a:da:2b:e0:e7:a7: bc:db:ee:3d:fe:5a:34:dd:3f:91:9a:ef:a5:fe:ee:f8:a2:a9: 35:7a:bd:9f:77:60:b3:4d:c7:bb:47:02:c4:28:42:2f:28:d7: 15:a1:ea:bb:29:28:81:a3:2a:b7:38:d4:f8:f9:79:45:4f:40: f6:14:5a:ce:73:e1:75:5d:e2:cc:66:ba:cd:2d:a8:e9:c7:a0: d1:48:61:8a:e1:84:96:b9:e8:56:fc:25:ea:00:c1:12:63:42: cb:e5:03:58:fa:9c:b3:24:4f:db:be:c0:b7:74:e0:a9:bd:f6: 71:6d:1b:48:61:be:ca:3e:02:df:73:24:fb:fc:b8:4b:f9:cd: ad:e9:45:44:fb:f3:70:80:fe:d7:70:72:f6:3a:ee:68:5a:a8: a4:ee:6c:59:0a:b6:0c:c7:c9:dd:ba:f4:2a:63:eb:3d:af:00: 0b:8c:d7:4a:c4:19:db:b3:11:f9:e1:87:83:9b:12:23:29:cb: 76:f0:70:cb:c4:e6:9b:de:0e:d5:43:5d:8d:a6:41:07:75:89: e9:3e:f0:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJHgCiKzTcrxdoaEphpwKbEcIvbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDM0MDA1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MThlNWFlODUyODViN2MwZGE3MTg1OTA2NDI2NmFmOTVi MjMwNjJmNTA4MDBkMTJmM2JlMDQ0YTU5ODUwMWM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtgEdXBGl2mQcqkp85/OeZvWL6sJFuEpjPDB1TIwzfTtn9 MIPHtW06h1hhKsqaPqJX9d9ErgHCpHJ3lPmBFnwCA+0cbAxL7h499T0JN1c64sV1 Db1uw+Y3If/MYtTG5oil9jx3mWVKzyCnf7FY06uTwpU3ilwLp0HvHQ2cDenyVWPi GlNwdYebENnWXoihKebSq1O0CzKzemEwWZfETEObWx+DdHdad+MunaIAuFRRDVOY zYaMssF5WA1U8iDfUQmmx/EoiIzZP7SlRXs1Ai4piXFcQaZXrAiYyJXOQmibsbwx Qx80QmXUWz9Op5BF4Ou7F/mTT5VktRXCKn2xcjOHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5GfUtQ1InjuMrCV9YzPlw3nHKq0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2MzI4OWI2LTIzMjMtNDljYi1hZjhkLTViNWE5ZWU5ZjBmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0X1AwDQYJKoZIhvcNAQELBQADggEBACRixkxu4lPogzKz73Gn313dp7WN SH/pFagJyX8/n4Arm2yGzJqDkB3AjM9fwxFjVSraK+Dnp7zb7j3+WjTdP5Ga76X+ 7viiqTV6vZ93YLNNx7tHAsQoQi8o1xWh6rspKIGjKrc41Pj5eUVPQPYUWs5z4XVd 4sxmus0tqOnHoNFIYYrhhJa56Fb8JeoAwRJjQsvlA1j6nLMkT9u+wLd04Km99nFt G0hhvso+At9zJPv8uEv5za3pRUT783CA/tdwcvY67mhaqKTubFkKtgzHyd269Cpj 6z2vAAuM10rEGduzEfnhh4ObEiMpy3bwcMvE5pveDtVDXY2mQQd1iek+8D8= -----END CERTIFICATE-----Generated at Sun Nov 8 04:00:39 2026 by rpki-client