$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa File: 281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa (raw, json) Hash identifier: XnsUw5XH85yu9JUet/TRQtrh/64f+rJmDL1g/el1m4k= Subject key identifier: 3C:64:65:F5:1A:87:80:29:2C:0E:94:1C:AD:54:C9:3C:EE:DF:80:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 407F00430569D64A9278CF8B5D7C2B8B05C9A084 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa Signing time: Sun 11 Oct 2026 14:07:10 +0000 ROA not before: Sun 11 Oct 2026 14:07:10 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7f:00:43:05:69:d6:4a:92:78:cf:8b:5d:7c:2b:8b:05:c9:a0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 11 14:07:10 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=6bdec3844fc205e469b7e482e776c502eccda7f73dcda177fbab9bbfaeba24b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:d0:e4:69:24:96:4d:62:d6:0a:e9:5e:db: e6:06:4c:d0:73:09:2e:c4:37:c1:23:17:f6:3c:df: 87:c5:1a:21:86:bc:ed:73:af:c9:49:93:b2:c2:6d: ac:35:ee:ed:1f:85:4e:d9:ae:a3:b8:35:5b:55:f7: 59:2f:f1:3f:3f:c4:eb:c3:6d:7b:bb:42:ae:6f:44: b9:d0:11:ea:a6:d0:23:d1:bc:2a:10:92:d6:b3:90: 9c:1c:2f:0c:f5:bd:5b:65:1c:bc:34:b3:1a:19:ab: 25:ed:95:ff:ba:15:0d:ef:c0:fb:93:6d:f5:4a:d2: 27:4b:5e:a9:20:e7:8f:4e:40:e7:12:ab:1b:79:58: e1:1b:8e:51:26:fa:34:2e:58:6a:67:ff:68:82:fa: 04:c5:f9:89:56:f2:48:6a:d2:c3:b2:3a:63:eb:bd: 89:e3:d9:aa:2a:27:1a:06:49:5f:a1:9a:81:85:39: 3d:73:81:34:fc:ec:a9:57:cf:8d:18:ab:f1:2e:34: 04:6a:06:27:14:83:4b:63:c0:b9:85:8e:2f:f3:d4: 42:20:4b:8c:ad:3e:6c:32:44:3c:16:6c:67:d1:bf: c4:b1:ef:34:f2:44:7c:ab:db:93:45:eb:b3:15:fb: 0e:69:31:22:dc:9f:d0:36:76:b8:87:3f:fb:2f:82: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:65:F5:1A:87:80:29:2C:0E:94:1C:AD:54:C9:3C:EE:DF:80:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.24.0/21 Signature Algorithm: sha256WithRSAEncryption a5:de:02:3b:dc:20:b9:4c:75:d2:e5:c6:46:c8:31:bc:72:2b: 51:b6:2e:09:bb:04:41:24:2e:2f:18:fb:b3:27:b3:ba:6b:24: 20:80:97:cf:d0:8d:12:65:50:2a:1e:dc:44:7f:91:3f:4f:a5: 1d:89:5f:32:be:24:5d:e4:6a:c1:27:f1:dc:db:fa:77:05:7d: c0:43:fb:68:ab:6c:37:d8:5e:4a:54:80:7b:aa:03:bd:b7:8e: dc:9e:b6:d2:92:9c:11:32:04:32:dd:5a:27:55:b0:85:fd:dc: e7:ae:fd:73:11:58:e4:b3:a8:b3:c8:8f:72:f9:6b:ec:1d:a4: a9:bd:7c:05:81:7b:14:cc:f3:03:47:e2:fa:9e:cc:ab:13:6f: 1b:fc:7c:d6:72:57:07:2c:cf:52:f7:20:f6:3a:fc:50:d4:b7: 39:90:3a:0d:2f:06:7c:03:a4:48:55:eb:be:89:f8:af:02:16: fe:d8:ce:07:f9:1d:24:3e:27:45:bf:ba:62:df:5b:72:b6:92: 22:01:ca:e3:f1:25:9f:0f:95:cf:d8:73:1e:91:1d:47:75:d1: 6d:42:b6:e8:35:6f:e8:cc:58:f8:b7:a8:78:cf:31:0b:1e:a4: 31:0b:92:34:08:6b:77:dc:e4:bb:5f:c8:ed:60:7d:51:65:80: 64:81:d0:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQH8AQwVp1kqSeM+LXXwriwXJoIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDExMTQwNzEwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmRlYzM4NDRmYzIwNWU0NjliN2U0ODJlNzc2YzUwMmVj Y2RhN2Y3M2RjZGExNzdmYmFiOWJiZmFlYmEyNGI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9qdDkaSSWTWLWCule2+YGTNBzCS7EN8EjF/Y834fFGiGG vO1zr8lJk7LCbaw17u0fhU7ZrqO4NVtV91kv8T8/xOvDbXu7Qq5vRLnQEeqm0CPR vCoQktazkJwcLwz1vVtlHLw0sxoZqyXtlf+6FQ3vwPuTbfVK0idLXqkg549OQOcS qxt5WOEbjlEm+jQuWGpn/2iC+gTF+YlW8khq0sOyOmPrvYnj2aoqJxoGSV+hmoGF OT1zgTT87KlXz40Yq/EuNARqBicUg0tjwLmFji/z1EIgS4ytPmwyRDwWbGfRv8Sx 7zTyRHyr25NF67MV+w5pMSLcn9A2driHP/svgrDNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPGRl9RqHgCksDpQcrVTJPO7fgDMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4MWQ5MjExLWEzZDEtNDNmNy04YTlmLTI5MWZmNjgzZGM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0XRgwDQYJKoZIhvcNAQELBQADggEBAKXeAjvcILlMddLlxkbIMbxyK1G2 Lgm7BEEkLi8Y+7Mns7prJCCAl8/QjRJlUCoe3ER/kT9PpR2JXzK+JF3kasEn8dzb +ncFfcBD+2irbDfYXkpUgHuqA723jtyettKSnBEyBDLdWidVsIX93Oeu/XMRWOSz qLPIj3L5a+wdpKm9fAWBexTM8wNH4vqezKsTbxv8fNZyVwcsz1L3IPY6/FDUtzmQ Og0vBnwDpEhV676J+K8CFv7Yzgf5HSQ+J0W/umLfW3K2kiIByuPxJZ8Plc/Ycx6R HUd10W1Ctug1b+jMWPi3qHjPMQsepDELkjQIa3fc5LtfyO1gfVFlgGSB0K4= -----END CERTIFICATE-----Generated at Sat Nov 7 22:53:34 2026 by rpki-client