$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ac607e2-58f3-49a5-8ba5-942111dd4093.roa File: 3ac607e2-58f3-49a5-8ba5-942111dd4093.roa (raw, json) Hash identifier: +0phUQvHSovVGr7xAw4MOmSsLPZsFzwOqknQWQZaKlo= Subject key identifier: 96:3B:42:B3:C6:58:85:07:28:B7:AD:7C:92:4F:11:1C:77:6D:9D:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EB6335BC8D3A042073C14E23F0C3DAAFF27224D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ac607e2-58f3-49a5-8ba5-942111dd4093.roa Signing time: Fri 09 Oct 2026 01:20:33 +0000 ROA not before: Fri 09 Oct 2026 01:20:33 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b6:33:5b:c8:d3:a0:42:07:3c:14:e2:3f:0c:3d:aa:ff:27:22:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 9 01:20:33 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=2d0d934b285b967eb4727aa030c13e69afffe693619245b5b0ccef3d5071e078, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b7:53:57:c2:85:01:b5:df:5e:8d:4f:83:1d: b4:3f:10:a8:a3:fb:ce:d2:6e:57:95:b5:6d:df:41: cd:31:2a:41:13:a1:82:61:ae:a4:6c:39:4d:86:fe: 25:1e:9f:2c:1b:c5:b1:ab:90:6f:80:fa:e7:91:3d: 52:3b:61:a8:d3:d6:42:28:ff:7c:bb:6f:a8:14:e7: 19:b7:4d:f0:c7:63:38:92:59:96:a1:bd:6a:86:a2: c2:4a:40:20:f7:97:09:b2:48:15:52:5b:86:50:40: 8e:11:5b:e3:44:a8:7a:87:eb:20:ca:f1:37:25:d7: 08:b1:67:e9:af:ec:37:15:f8:90:42:5b:80:20:bb: ba:2d:69:fb:25:6b:fb:23:ad:93:ff:b2:c1:09:b5: 6d:45:0d:5f:45:64:b6:4a:f1:86:92:bf:8d:96:e3: 40:3a:c4:fd:53:ec:b5:7a:db:da:0a:5b:3c:87:b3: 6a:9a:dd:3b:68:b8:46:37:6a:17:cd:d4:04:70:ff: 7d:30:12:8f:7f:c4:05:09:23:05:82:c5:bc:08:45: 8b:e9:f8:a6:9c:d6:fb:e1:5d:26:b3:bb:5e:68:2c: aa:c0:a2:7e:90:fc:bf:95:93:f8:02:59:f6:e0:b8: 9c:eb:aa:fe:75:4e:e3:8c:d6:47:4e:98:5a:ac:d7: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:42:B3:C6:58:85:07:28:B7:AD:7C:92:4F:11:1C:77:6D:9D:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ac607e2-58f3-49a5-8ba5-942111dd4093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.128.0/22 Signature Algorithm: sha256WithRSAEncryption 27:0e:8b:a4:70:5c:d0:13:5f:cd:9a:53:26:66:c5:9e:1b:a2: 8b:56:94:e5:42:96:f4:5a:cc:94:a5:f5:09:99:6d:e3:2c:19: 65:af:1f:ec:1d:96:7e:d2:00:94:ec:09:a4:51:8e:81:d2:a1: 6a:7d:df:a8:49:22:de:4c:14:9c:46:f3:cf:13:16:4f:80:31: 74:99:9c:03:f9:22:18:3c:7f:e4:66:b2:17:32:cc:35:62:fb: 0a:73:53:79:65:1a:56:00:f0:f5:5e:b1:ee:25:30:81:ff:88: cc:f4:97:31:54:73:e4:1b:78:57:c5:21:84:ae:ee:b9:e4:49: f0:12:29:e8:94:0d:7c:1f:1c:d2:c5:c0:5d:f7:00:f3:a2:54: 49:4d:c5:0a:6c:3e:36:c9:f1:62:28:61:53:26:02:50:ff:99: 30:fa:8a:57:ce:97:7d:8c:0d:87:f0:1b:fd:15:c9:c7:05:24: 1d:9d:d2:08:6f:2d:1a:25:60:67:c5:fe:ac:59:53:6c:cf:09: a7:cd:d7:31:06:fd:64:1e:ce:c4:c1:06:13:18:64:b4:79:63: 32:b9:53:9d:c3:22:ee:4d:00:18:c5:0d:5a:0e:c9:f6:ec:73: 0f:b9:b8:2b:67:62:35:07:52:2e:0d:7a:79:c8:a4:04:19:39: 7a:17:c2:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULrYzW8jToEIHPBTiPww9qv8nIk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDA5MDEyMDMzWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDBkOTM0YjI4NWI5NjdlYjQ3MjdhYTAzMGMxM2U2OWFm ZmZlNjkzNjE5MjQ1YjViMGNjZWYzZDUwNzFlMDc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvt1NXwoUBtd9ejU+DHbQ/EKij+87SbleVtW3fQc0xKkET oYJhrqRsOU2G/iUenywbxbGrkG+A+ueRPVI7YajT1kIo/3y7b6gU5xm3TfDHYziS WZahvWqGosJKQCD3lwmySBVSW4ZQQI4RW+NEqHqH6yDK8Tcl1wixZ+mv7DcV+JBC W4Agu7otafsla/sjrZP/ssEJtW1FDV9FZLZK8YaSv42W40A6xP1T7LV629oKWzyH s2qa3TtouEY3ahfN1ARw/30wEo9/xAUJIwWCxbwIRYvp+Kac1vvhXSazu15oLKrA on6Q/L+Vk/gCWfbguJzrqv51TuOM1kdOmFqs1wujAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUljtCs8ZYhQcot618kk8RHHdtnVkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhYzYwN2UyLTU4ZjMtNDlhNS04YmE1LTk0MjExMWRkNDA5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2toAwDQYJKoZIhvcNAQELBQADggEBACcOi6RwXNATX82aUyZmxZ4bootW lOVClvRazJSl9QmZbeMsGWWvH+wdln7SAJTsCaRRjoHSoWp936hJIt5MFJxG888T Fk+AMXSZnAP5Ihg8f+RmshcyzDVi+wpzU3llGlYA8PVese4lMIH/iMz0lzFUc+Qb eFfFIYSu7rnkSfASKeiUDXwfHNLFwF33APOiVElNxQpsPjbJ8WIoYVMmAlD/mTD6 ilfOl32MDYfwG/0VyccFJB2d0ghvLRolYGfF/qxZU2zPCafN1zEG/WQezsTBBhMY ZLR5YzK5U53DIu5NABjFDVoOyfbscw+5uCtnYjUHUi4NennIpAQZOXoXwr4= -----END CERTIFICATE-----Generated at Sun Nov 8 03:31:23 2026 by rpki-client