$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/339d31d3-d1fa-4410-a853-88d27ba433c9.roa File: 339d31d3-d1fa-4410-a853-88d27ba433c9.roa (raw, json) Hash identifier: qDrHqDQPonWadAJuHvYc5KhfuErTVpn5/kxHGhID91w= Subject key identifier: 3B:14:0E:79:D8:5A:23:D7:40:A1:E9:D3:53:D7:0B:A2:D0:E9:1D:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 231988C2082CD16D0EFAA951776BA3D890332768 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/339d31d3-d1fa-4410-a853-88d27ba433c9.roa Signing time: Wed 21 Oct 2026 00:50:34 +0000 ROA not before: Wed 21 Oct 2026 00:50:34 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:19:88:c2:08:2c:d1:6d:0e:fa:a9:51:77:6b:a3:d8:90:33:27:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:50:34 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=29e250cc378a1273a5c3febd2b611c2866d7f16e010714d255613b0d1d48033f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:56:7f:51:c5:77:f7:cf:79:45:42:c7:38: 4c:02:85:77:be:69:5b:19:6e:39:26:f8:90:91:3a: 97:eb:15:b3:bd:29:93:cd:37:59:c6:39:a9:cc:d4: ff:01:be:29:08:fd:6f:2f:c7:ee:46:a1:c4:bf:2f: cb:43:24:c5:34:c1:e2:9c:99:b2:c1:e4:34:1b:41: cb:21:b1:f3:7a:71:29:49:23:32:39:6d:83:ef:40: 30:0f:d2:90:ef:3d:ef:6d:61:80:1c:75:09:8e:16: aa:42:e1:22:63:c5:7e:c6:98:13:63:51:62:3d:41: 20:bc:59:8c:4f:46:de:f8:7b:0f:b7:bb:27:90:30: 0a:c4:e4:0a:6d:03:94:03:9b:11:d4:38:ca:36:a5: 5c:6f:01:79:1e:cd:aa:62:05:0f:8a:d5:e3:08:f2: 9c:4b:91:e3:75:bd:b8:f2:1f:6a:22:19:de:f7:6f: 3e:3e:98:7b:e3:9e:71:bf:64:6d:0b:8a:c0:58:a9: 19:07:06:2f:93:6e:37:00:fb:72:67:c3:98:a7:88: 95:7a:8f:39:4e:0e:5e:1d:5c:6b:b6:a3:07:20:f8: 47:a0:cd:e3:86:6b:91:a1:52:c0:d5:29:60:84:20: a0:cd:ba:31:62:ea:45:d4:7c:24:3a:28:da:e9:f1: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:0E:79:D8:5A:23:D7:40:A1:E9:D3:53:D7:0B:A2:D0:E9:1D:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/339d31d3-d1fa-4410-a853-88d27ba433c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.209.0/24 Signature Algorithm: sha256WithRSAEncryption 44:c2:81:a2:e3:37:d1:2d:5d:05:31:cf:8e:92:75:fa:c1:85: 4c:3a:e4:4a:70:9f:24:1c:bc:6e:9b:0a:a4:a2:c1:f0:3a:a4: ab:29:55:be:38:ed:4d:9e:0e:24:7d:56:71:ba:38:5f:ea:e1: 41:51:9b:88:25:fb:9b:32:90:43:73:12:4e:42:44:45:82:d9: e7:60:a5:c2:66:83:38:86:8f:05:c7:81:ee:8e:19:d6:a7:ec: a9:04:a7:4f:c0:df:ff:66:d5:0a:09:f4:c6:3b:69:10:53:1d: 5d:7c:66:c0:35:f2:55:6e:47:3b:cf:82:48:d1:aa:70:34:2b: 14:82:f8:15:e9:fb:97:7f:0f:ee:b0:84:7f:f8:67:8d:a0:ef: 11:e9:e7:23:fc:ef:69:cf:0e:eb:c5:90:be:a8:03:f9:1b:5e: 3b:b1:f8:bc:c8:07:ff:1b:bd:e7:29:ff:32:ed:f2:82:f6:93: c1:fb:2a:b2:ff:47:d5:89:83:69:47:45:30:99:72:17:c7:5b: 45:99:0f:c9:62:0b:a4:39:0f:ff:b7:3e:7f:95:79:bc:bd:81: 08:f0:64:ec:ab:c4:fe:82:b7:fd:8c:91:e9:14:48:39:b7:9e: a0:b7:ca:87:7a:d2:93:b0:bf:16:6c:ed:f3:8e:a9:39:f9:8d: ba:73:75:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIxmIwggs0W0O+qlRd2uj2JAzJ2gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDA1MDM0WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWUyNTBjYzM3OGExMjczYTVjM2ZlYmQyYjYxMWMyODY2 ZDdmMTZlMDEwNzE0ZDI1NTYxM2IwZDFkNDgwMzNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk81Z/UcV39895RULHOEwChXe+aVsZbjkm+JCROpfrFbO9 KZPNN1nGOanM1P8BvikI/W8vx+5GocS/L8tDJMU0weKcmbLB5DQbQcshsfN6cSlJ IzI5bYPvQDAP0pDvPe9tYYAcdQmOFqpC4SJjxX7GmBNjUWI9QSC8WYxPRt74ew+3 uyeQMArE5AptA5QDmxHUOMo2pVxvAXkezapiBQ+K1eMI8pxLkeN1vbjyH2oiGd73 bz4+mHvjnnG/ZG0LisBYqRkHBi+TbjcA+3Jnw5iniJV6jzlODl4dXGu2owcg+Eeg zeOGa5GhUsDVKWCEIKDNujFi6kXUfCQ6KNrp8TqjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOxQOedhaI9dAoenTU9cLotDpHaIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzOWQzMWQzLWQxZmEtNDQxMC1hODUzLTg4ZDI3YmE0MzNjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fNEwDQYJKoZIhvcNAQELBQADggEBAETCgaLjN9EtXQUxz46SdfrBhUw6 5EpwnyQcvG6bCqSiwfA6pKspVb447U2eDiR9VnG6OF/q4UFRm4gl+5sykENzEk5C REWC2edgpcJmgziGjwXHge6OGdan7KkEp0/A3/9m1QoJ9MY7aRBTHV18ZsA18lVu RzvPgkjRqnA0KxSC+BXp+5d/D+6whH/4Z42g7xHp5yP872nPDuvFkL6oA/kbXjux +LzIB/8bvecp/zLt8oL2k8H7KrL/R9WJg2lHRTCZchfHW0WZD8liC6Q5D/+3Pn+V eby9gQjwZOyrxP6Ct/2MkekUSDm3nqC3yod60pOwvxZs7fOOqTn5jbpzdd8= -----END CERTIFICATE-----Generated at Sun Nov 8 04:07:02 2026 by rpki-client