$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34b5284d-c459-4317-b899-f6ede44d9b9c.roa File: 34b5284d-c459-4317-b899-f6ede44d9b9c.roa (raw, json) Hash identifier: tIM18pE+5YKz0MpBoMi2DBLXyKuAiLtiavBlklzEaeM= Subject key identifier: 56:C5:13:D9:3B:56:1C:E9:AE:6F:1B:FF:5A:C0:04:F9:28:18:BA:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19A31C71459EF034C0D313FD097A0E5762614411 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34b5284d-c459-4317-b899-f6ede44d9b9c.roa Signing time: Mon 26 Oct 2026 02:21:00 +0000 ROA not before: Mon 26 Oct 2026 02:21:00 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 52.94.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a3:1c:71:45:9e:f0:34:c0:d3:13:fd:09:7a:0e:57:62:61:44:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:21:00 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=eb19f02640461d456905125ea9ccf9da29d014d1c125c014ec6a0ed4bfedae27, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:95:ab:ab:56:5c:f5:0a:c1:c5:cb:f7:5c: 06:34:04:02:a6:8d:ff:18:97:8e:34:6c:9d:a9:2e: b4:6e:37:52:4d:1d:b0:69:58:f9:f0:56:66:75:b3: 37:5f:bf:9e:82:35:f9:b3:38:96:6b:72:2d:d1:25: a8:9f:33:19:bc:01:53:c3:7e:d9:45:e4:f5:b2:04: 54:ec:42:db:a6:87:ca:65:3a:3e:c7:3f:28:e5:49: be:28:a4:7e:e2:82:d0:a9:07:e5:f2:62:a5:c2:4a: db:a6:f5:34:d9:7f:52:47:ae:b1:23:e6:15:bb:28: 8e:03:f3:b0:64:e7:5f:41:7e:dd:af:1f:43:66:8e: e5:30:37:a2:17:00:22:10:76:7c:9b:2c:50:7e:74: 65:72:8e:e0:e1:26:50:ec:e7:2b:cc:2c:db:fe:55: 13:0b:71:0d:bb:46:1b:b2:5a:4c:5e:bd:1d:a9:4f: 04:d8:ec:50:f6:e5:31:07:76:81:08:7f:c7:ed:b7: 5c:b1:8c:51:d6:b9:32:b7:53:ea:a7:d9:0e:d4:ca: e5:dd:f8:50:fe:3d:91:f3:17:5a:1a:d6:5b:d7:17: 7f:d1:ea:7a:bd:07:a4:fb:4c:52:6a:4f:54:fd:53: 29:d6:01:73:47:41:5a:3a:d2:2b:cf:aa:20:3f:4d: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:13:D9:3B:56:1C:E9:AE:6F:1B:FF:5A:C0:04:F9:28:18:BA:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34b5284d-c459-4317-b899-f6ede44d9b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.68.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:0a:62:35:b9:1d:ca:5c:82:8d:f9:65:65:79:ea:e4:d7:86: b7:9a:5e:1d:28:94:c8:fc:73:54:ef:17:71:e5:7c:2e:e7:b5: d2:a3:c4:7f:fb:d7:ba:df:a5:f1:10:c2:fd:b9:8d:4e:86:65: 3b:17:11:53:47:80:fd:6f:39:84:1c:32:df:b2:92:19:aa:82: 4b:50:86:0d:2b:05:c8:65:8d:b1:fa:49:77:f7:dd:f0:fb:8f: df:2f:f1:34:58:95:6a:78:7a:20:3e:74:88:97:01:c4:50:12: 7a:f5:3d:2c:89:af:44:4e:fe:63:49:02:a1:61:e1:ed:cd:12: 4d:71:1d:67:38:47:f9:5e:0d:61:9b:a7:f8:88:4b:0f:49:01: 54:dc:0c:90:c6:16:61:05:0f:e7:fb:2a:5e:f2:bf:d4:80:5c: a8:f7:24:60:00:93:32:26:27:4e:54:60:e0:3b:13:49:f7:cb: 57:8e:2e:83:f6:9d:91:ab:d0:ad:b5:97:ce:24:39:af:44:52: 72:ea:e9:b5:f7:f2:ae:0e:fd:17:ca:3d:77:33:bc:cf:ff:8b: 24:1b:a8:c2:79:18:02:ae:78:a0:cc:0f:d9:63:9d:b1:26:b5: ef:36:ce:20:eb:09:b7:72:c8:69:99:8e:20:b1:d5:48:6e:16: 09:78:c9:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGaMccUWe8DTA0xP9CXoOV2JhRBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIyMTAwWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjE5ZjAyNjQwNDYxZDQ1NjkwNTEyNWVhOWNjZjlkYTI5 ZDAxNGQxYzEyNWMwMTRlYzZhMGVkNGJmZWRhZTI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxw5Wrq1Zc9QrBxcv3XAY0BAKmjf8Yl440bJ2pLrRuN1JN HbBpWPnwVmZ1szdfv56CNfmzOJZrci3RJaifMxm8AVPDftlF5PWyBFTsQtumh8pl Oj7HPyjlSb4opH7igtCpB+XyYqXCStum9TTZf1JHrrEj5hW7KI4D87Bk519Bft2v H0NmjuUwN6IXACIQdnybLFB+dGVyjuDhJlDs5yvMLNv+VRMLcQ27RhuyWkxevR2p TwTY7FD25TEHdoEIf8ftt1yxjFHWuTK3U+qn2Q7UyuXd+FD+PZHzF1oa1lvXF3/R 6nq9B6T7TFJqT1T9UynWAXNHQVo60ivPqiA/TSdJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVsUT2TtWHOmubxv/WsAE+SgYuqIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0YjUyODRkLWM0NTktNDMxNy1iODk5LWY2ZWRlNDRkOWI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XkQwDQYJKoZIhvcNAQELBQADggEBAH8KYjW5Hcpcgo35ZWV56uTXhrea Xh0olMj8c1TvF3HlfC7ntdKjxH/717rfpfEQwv25jU6GZTsXEVNHgP1vOYQcMt+y khmqgktQhg0rBchljbH6SXf33fD7j98v8TRYlWp4eiA+dIiXAcRQEnr1PSyJr0RO /mNJAqFh4e3NEk1xHWc4R/leDWGbp/iISw9JAVTcDJDGFmEFD+f7Kl7yv9SAXKj3 JGAAkzImJ05UYOA7E0n3y1eOLoP2nZGr0K21l84kOa9EUnLq6bX38q4O/RfKPXcz vM//iyQbqMJ5GAKueKDMD9ljnbEmte82ziDrCbdyyGmZjiCx1UhuFgl4yak= -----END CERTIFICATE-----Generated at Sun Nov 8 12:10:45 2026 by rpki-client