$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e7928d3-6d79-4f51-80bc-fd6bb08c068a.roa File: 1e7928d3-6d79-4f51-80bc-fd6bb08c068a.roa (raw, json) Hash identifier: T7CwQldxAQ0Ltt32eNHLzycpTzuszq+/gJPmYyhOmrM= Subject key identifier: A4:E1:02:0F:24:DD:31:AE:C1:EC:A9:73:70:34:43:07:C3:25:90:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 047C38DA96C62A4B678553BF0911B92773BFC9FD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e7928d3-6d79-4f51-80bc-fd6bb08c068a.roa Signing time: Mon 26 Oct 2026 02:02:28 +0000 ROA not before: Mon 26 Oct 2026 02:02:28 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7c:38:da:96:c6:2a:4b:67:85:53:bf:09:11:b9:27:73:bf:c9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:02:28 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=d127f6cb7fd3363b334fe58d5e123ba91c3f34c30e0baca23eedd8ac10f2d737, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:c6:03:df:70:57:f6:11:99:5a:b2:df:43: fb:fb:7b:2b:3b:b6:89:2e:d7:48:cc:4c:1b:62:82: b3:94:9f:9b:74:0d:0c:b4:1f:a7:a7:7c:d1:a7:d4: 62:46:e4:53:2a:19:1f:73:46:8f:98:16:8b:0c:8f: 64:99:b8:e2:01:3d:73:07:72:e6:51:3f:82:b7:73: 55:9b:20:ff:13:d7:70:20:a4:89:91:1b:57:1d:33: 14:73:d2:ce:90:23:f5:a5:d4:ba:3b:a7:13:92:6e: ea:d2:bc:3d:45:f1:5a:96:c3:2d:e0:b8:48:5d:be: 0f:0c:e5:d7:ea:d5:0e:75:8e:27:0f:48:14:a1:f2: 69:ad:4d:b5:9f:6c:e4:0c:84:0b:d3:d8:3e:cc:a9: a2:79:aa:a8:14:f7:b8:3e:86:72:ff:6a:a4:b3:8f: c3:60:5a:6f:08:f3:dd:cc:3d:6e:65:e1:b5:14:f3: 2b:d9:25:ed:ca:36:ca:1b:5a:6c:a6:a5:0e:82:9c: 24:05:01:d9:6d:c7:c7:ce:de:bf:2e:6b:ec:5e:f3: e0:da:98:dc:aa:c8:03:f2:10:82:43:6c:37:8a:47: 55:ee:8d:66:ad:48:21:67:6c:d0:4e:53:55:21:99: 07:2d:e7:80:91:3c:31:00:e1:39:25:36:9f:8f:09: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E1:02:0F:24:DD:31:AE:C1:EC:A9:73:70:34:43:07:C3:25:90:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e7928d3-6d79-4f51-80bc-fd6bb08c068a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.32.0/22 Signature Algorithm: sha256WithRSAEncryption 74:10:c8:16:e0:a9:80:5e:5a:82:2c:78:d6:a9:1f:74:73:5e: 86:15:54:5b:cf:34:18:db:b1:ed:18:dc:3e:c2:1b:03:a2:e8: 78:5f:93:5d:c5:0e:ef:72:5c:57:c3:1b:49:b8:17:6c:ac:db: 98:54:9b:7f:f3:03:de:56:4a:8c:0c:e6:bc:c0:d0:63:39:61: 54:7c:8a:83:16:3d:58:14:b1:73:5a:7f:98:dd:c3:c7:80:50: 6d:6c:14:fd:7f:6d:7c:d8:7f:17:5d:46:6a:0f:f0:50:45:33: 04:dd:0c:f5:97:2d:62:98:30:e0:7f:13:36:93:a8:2d:ee:68: 74:ad:fe:00:4f:7b:e7:97:85:47:5e:8b:b4:14:41:6c:3e:e7: 06:11:14:de:d9:01:6d:c7:e5:13:8f:e5:3a:60:0d:a7:89:a4: 84:64:ec:00:10:9c:0c:08:d9:4e:de:7c:33:d9:5b:22:fe:0f: 99:27:12:0c:13:7f:53:7e:b5:7f:28:12:f5:cc:bb:01:a2:9a: 4d:97:1b:dc:55:3f:20:81:bd:da:35:7b:68:b6:2d:20:14:5a: 0f:9b:b3:5a:33:9b:4f:31:30:91:89:ec:3a:8f:86:de:e0:1c: 37:a9:86:20:e8:7d:e1:39:0e:8e:25:c9:f9:cb:81:13:76:6e: 7a:14:6d:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBHw42pbGKktnhVO/CRG5J3O/yf0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIwMjI4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTI3ZjZjYjdmZDMzNjNiMzM0ZmU1OGQ1ZTEyM2JhOTFj M2YzNGMzMGUwYmFjYTIzZWVkZDhhYzEwZjJkNzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgOcYD33BX9hGZWrLfQ/v7eys7toku10jMTBtigrOUn5t0 DQy0H6enfNGn1GJG5FMqGR9zRo+YFosMj2SZuOIBPXMHcuZRP4K3c1WbIP8T13Ag pImRG1cdMxRz0s6QI/Wl1Lo7pxOSburSvD1F8VqWwy3guEhdvg8M5dfq1Q51jicP SBSh8mmtTbWfbOQMhAvT2D7MqaJ5qqgU97g+hnL/aqSzj8NgWm8I893MPW5l4bUU 8yvZJe3KNsobWmympQ6CnCQFAdltx8fO3r8ua+xe8+DamNyqyAPyEIJDbDeKR1Xu jWatSCFnbNBOU1UhmQct54CRPDEA4TklNp+PCYG9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpOECDyTdMa7B7KlzcDRDB8MlkHYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlNzkyOGQzLTZkNzktNGY1MS04MGJjLWZkNmJiMDhjMDY4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI25iAwDQYJKoZIhvcNAQELBQADggEBAHQQyBbgqYBeWoIseNapH3RzXoYV VFvPNBjbse0Y3D7CGwOi6Hhfk13FDu9yXFfDG0m4F2ys25hUm3/zA95WSowM5rzA 0GM5YVR8ioMWPVgUsXNaf5jdw8eAUG1sFP1/bXzYfxddRmoP8FBFMwTdDPWXLWKY MOB/EzaTqC3uaHSt/gBPe+eXhUdei7QUQWw+5wYRFN7ZAW3H5ROP5TpgDaeJpIRk 7AAQnAwI2U7efDPZWyL+D5knEgwTf1N+tX8oEvXMuwGimk2XG9xVPyCBvdo1e2i2 LSAUWg+bs1ozm08xMJGJ7DqPht7gHDephiDofeE5Do4lyfnLgRN2bnoUbcI= -----END CERTIFICATE-----Generated at Sun Nov 8 02:44:20 2026 by rpki-client