$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4679e4f3-c822-4e65-b583-4a9167d4ab18.roa File: 4679e4f3-c822-4e65-b583-4a9167d4ab18.roa (raw, json) Hash identifier: 3kgEAEv9Zf6u4AWT9kMMQR9ZlvrZ8xsWkV6ZFGLwM4A= Subject key identifier: A3:E8:2B:0B:E0:5B:45:CF:70:C5:50:32:9F:85:B3:F3:27:6D:92:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CF5A833F5297A8BF10AE763739A8C77E9DED61C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4679e4f3-c822-4e65-b583-4a9167d4ab18.roa Signing time: Sat 24 Oct 2026 01:41:04 +0000 ROA not before: Sat 24 Oct 2026 01:41:04 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f5:a8:33:f5:29:7a:8b:f1:0a:e7:63:73:9a:8c:77:e9:de:d6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:41:04 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=76f4a71119d966563aec51367c9ede76dcac7fafa27c8c4dcd1b7399ce7078f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:c5:d7:a6:25:52:bb:aa:9d:dd:8d:69:0c: 5d:6b:07:a4:93:f6:99:99:c4:26:3a:eb:6a:87:85: 72:39:ad:53:61:32:d0:25:6c:27:a7:42:ff:ba:5f: 2d:e6:67:1d:93:22:bf:35:e6:fc:7c:ad:c8:9e:4b: b5:19:b2:57:73:b6:94:d3:2f:de:94:be:b4:f9:87: 7f:aa:fe:52:53:f3:94:80:31:67:ff:e5:c4:9a:da: 4b:1e:eb:5c:7c:1c:15:e4:23:30:80:f0:a2:00:01: b0:d9:d2:9a:45:f8:37:cd:e7:41:72:74:ba:2d:aa: fd:3e:e1:48:73:77:be:4a:03:c8:19:04:1b:48:52: a9:a1:0b:be:91:06:a7:ab:b5:ff:c8:e1:1d:4a:71: 01:6e:a4:c3:8d:50:c7:5f:bc:98:fd:f1:f1:d6:f8: d5:09:8a:4c:98:3a:87:b3:ef:df:28:f9:26:e0:47: 54:5e:7f:1c:5f:80:e9:10:3b:17:ff:26:5b:1c:d8: c5:71:c5:ed:25:f2:d3:be:15:31:7d:25:ff:bc:77: 74:46:a9:db:3b:f3:f6:ee:d8:08:57:79:ea:72:09: 08:07:86:0a:6f:65:6b:28:b7:33:0d:36:5c:81:9f: 3b:f2:39:99:9d:b7:e2:91:bb:1c:42:fa:21:f0:ec: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E8:2B:0B:E0:5B:45:CF:70:C5:50:32:9F:85:B3:F3:27:6D:92:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4679e4f3-c822-4e65-b583-4a9167d4ab18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.128.0/17 Signature Algorithm: sha256WithRSAEncryption 69:2c:b1:5b:a9:8a:08:e2:a7:d7:e9:3f:58:b0:bd:55:23:a1: 38:5a:05:54:6f:43:a3:a3:1d:70:7a:7d:7b:3b:b5:a4:c2:3e: a4:5d:4c:93:10:48:9c:55:c4:8c:b5:9b:67:7a:70:fa:ab:70: 60:92:56:f7:63:81:1f:f2:a6:1b:b4:53:d5:22:2d:d1:d2:0d: d9:bb:01:46:f9:c5:6a:e4:af:e1:06:d1:42:52:14:40:e3:41: 5e:24:d0:d1:fc:cb:8f:12:b4:d4:cf:99:14:26:e5:a6:43:17: ff:c9:51:7b:3a:d9:c5:a9:62:f9:a5:aa:7b:d2:22:90:14:90: 0e:2d:f1:7f:ef:6d:0b:43:6b:83:0b:4d:c6:45:ed:d7:34:e0: 78:77:f3:0b:b5:a8:01:3e:5e:0a:1a:68:08:1e:88:95:88:b0: 60:30:eb:e2:bd:af:4a:bc:dc:82:19:47:70:17:b7:76:7a:b0: 60:6e:24:bd:a4:87:ff:76:64:32:e4:f9:6b:85:5b:2a:7f:98: 46:31:70:fa:92:89:bc:85:85:f3:7c:2e:15:c5:59:11:61:b0: 7f:42:33:39:29:c2:14:57:8d:3e:c2:e2:d4:16:60:69:f2:83: 8b:f6:a8:ac:31:2b:41:10:41:a4:67:60:c7:71:cc:0f:47:b6: 43:40:77:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXPWoM/UpeovxCudjc5qMd+ne1hwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDE0MTA0WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmY0YTcxMTE5ZDk2NjU2M2FlYzUxMzY3YzllZGU3NmRj YWM3ZmFmYTI3YzhjNGRjZDFiNzM5OWNlNzA3OGY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSU8XXpiVSu6qd3Y1pDF1rB6ST9pmZxCY662qHhXI5rVNh MtAlbCenQv+6Xy3mZx2TIr815vx8rcieS7UZsldztpTTL96UvrT5h3+q/lJT85SA MWf/5cSa2kse61x8HBXkIzCA8KIAAbDZ0ppF+DfN50FydLotqv0+4Uhzd75KA8gZ BBtIUqmhC76RBqertf/I4R1KcQFupMONUMdfvJj98fHW+NUJikyYOoez798o+Sbg R1RefxxfgOkQOxf/Jlsc2MVxxe0l8tO+FTF9Jf+8d3RGqds78/bu2AhXeepyCQgH hgpvZWsotzMNNlyBnzvyOZmdt+KRuxxC+iHw7Ml/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo+grC+BbRc9wxVAyn4Wz8ydtkigwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2NzllNGYzLWM4MjItNGU2NS1iNTgzLTRhOTE2N2Q0YWIxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0VIAwDQYJKoZIhvcNAQELBQADggEBAGkssVupigjip9fpP1iwvVUjoTha BVRvQ6OjHXB6fXs7taTCPqRdTJMQSJxVxIy1m2d6cPqrcGCSVvdjgR/yphu0U9Ui LdHSDdm7AUb5xWrkr+EG0UJSFEDjQV4k0NH8y48StNTPmRQm5aZDF//JUXs62cWp YvmlqnvSIpAUkA4t8X/vbQtDa4MLTcZF7dc04Hh38wu1qAE+XgoaaAgeiJWIsGAw 6+K9r0q83IIZR3AXt3Z6sGBuJL2kh/92ZDLk+WuFWyp/mEYxcPqSibyFhfN8LhXF WRFhsH9CMzkpwhRXjT7C4tQWYGnyg4v2qKwxK0EQQaRnYMdxzA9HtkNAdxA= -----END CERTIFICATE-----Generated at Sat Nov 7 18:23:30 2026 by rpki-client