$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ca888bd-bb7d-4010-9380-f607eccd19e6.roa File: 5ca888bd-bb7d-4010-9380-f607eccd19e6.roa (raw, json) Hash identifier: /y5s6KhgqfoKZUVT1ExNj8Q3CUZ9h5ta0RbGl6vo9ZM= Subject key identifier: D2:60:93:57:D3:CF:1F:C7:9B:72:61:58:B6:44:CA:6C:95:38:55:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6432D95AAD880EC708717DEC977DE395F959D17F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ca888bd-bb7d-4010-9380-f607eccd19e6.roa Signing time: Wed 21 Oct 2026 00:20:32 +0000 ROA not before: Wed 21 Oct 2026 00:20:32 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 54.146.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:32:d9:5a:ad:88:0e:c7:08:71:7d:ec:97:7d:e3:95:f9:59:d1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:20:32 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=8291567d27abdbdb833a4db2dfcbd038f059bd9839749575a06b08b3b22c62e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:f4:b1:9d:a1:cc:66:4f:d8:6b:32:7a:76: e3:b4:c0:99:12:ee:69:bb:a5:83:04:87:7b:92:62: 32:4d:30:f8:fe:76:a6:d2:86:eb:e0:b2:e2:ba:0e: 5f:ae:f8:77:99:bd:60:75:ce:c5:ba:b8:e5:f5:18: 3e:a5:e3:3a:4b:98:70:48:b3:a6:7b:67:79:c6:17: 32:af:12:d8:a7:a7:0c:67:68:28:53:37:be:2a:88: 60:f3:78:ca:99:2e:2a:ef:85:4d:9a:db:a8:93:47: 94:b4:95:16:9f:b4:55:10:f4:c8:6c:c7:c4:d1:dc: d1:8e:f1:9e:56:58:a8:d2:01:07:cc:dc:44:6e:8d: 5a:81:b2:ce:6a:d5:e6:59:1e:07:ad:1d:ed:09:7d: d1:b7:7d:5f:76:18:0b:6d:c0:4d:ba:08:46:7e:d0: 25:d8:4d:23:15:8b:2f:4c:ec:f5:e7:a2:ac:6f:e2: 2f:91:65:89:9e:aa:73:e2:74:75:04:53:43:f2:78: 00:da:e2:79:99:a3:1c:e2:c7:dd:50:46:bc:ad:e2: 3a:d5:cc:4a:91:f3:9b:cb:2e:79:1d:10:05:50:6e: 2b:13:b1:1f:94:f3:92:20:65:d5:c3:20:77:ff:42: 2b:8a:a9:1f:d9:1d:54:3c:0a:ac:b8:5c:16:b0:d5: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:60:93:57:D3:CF:1F:C7:9B:72:61:58:B6:44:CA:6C:95:38:55:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ca888bd-bb7d-4010-9380-f607eccd19e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.146.192.0/18 Signature Algorithm: sha256WithRSAEncryption 8c:54:5d:c6:36:6c:76:ef:d6:76:66:66:79:eb:20:e4:97:c7: 6b:95:4e:62:27:d2:bf:1f:0f:48:13:35:13:c0:d6:98:d6:4e: b9:c3:b2:ed:94:bf:ae:b2:9e:7e:5a:5e:72:4c:67:f2:df:e6: 1b:7f:41:16:50:c4:f1:bd:95:6c:c4:68:dd:67:90:c9:d6:51: 7d:44:09:fd:c3:6f:27:15:3c:41:de:4c:6d:cf:4d:75:5c:fc: 39:19:69:1f:73:80:59:a2:a0:c8:dc:eb:80:71:f6:61:a9:bb: 25:41:21:35:e0:44:49:99:5f:11:95:b3:fe:a0:48:d4:85:46: 58:fb:22:fa:26:84:44:d6:cf:74:1b:f6:40:f7:78:84:6f:69: aa:f6:87:f3:27:8a:e4:10:51:d8:3f:b3:a0:7d:49:e6:57:05: 4b:1d:ad:17:11:e1:41:b8:e2:93:3c:26:c1:2e:d1:78:fb:e3: ec:e0:0f:d0:1c:55:15:1f:9a:32:26:dc:c9:65:fc:26:32:ef: 52:84:36:12:57:a1:77:11:be:94:4a:29:e5:29:3b:a3:cf:64: 03:09:9c:87:c6:31:80:c0:dc:45:3e:03:21:aa:7c:c5:31:c4: ed:4b:48:67:0c:96:bc:66:47:4b:ec:d6:5b:e7:7e:ff:b9:9a: b8:fd:d1:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZDLZWq2IDscIcX3sl33jlflZ0X8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDAyMDMyWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjkxNTY3ZDI3YWJkYmRiODMzYTRkYjJkZmNiZDAzOGYw NTliZDk4Mzk3NDk1NzVhMDZiMDhiM2IyMmM2MmU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbzvSxnaHMZk/YazJ6duO0wJkS7mm7pYMEh3uSYjJNMPj+ dqbShuvgsuK6Dl+u+HeZvWB1zsW6uOX1GD6l4zpLmHBIs6Z7Z3nGFzKvEtinpwxn aChTN74qiGDzeMqZLirvhU2a26iTR5S0lRaftFUQ9Mhsx8TR3NGO8Z5WWKjSAQfM 3ERujVqBss5q1eZZHgetHe0JfdG3fV92GAttwE26CEZ+0CXYTSMViy9M7PXnoqxv 4i+RZYmeqnPidHUEU0PyeADa4nmZoxzix91QRryt4jrVzEqR85vLLnkdEAVQbisT sR+U85IgZdXDIHf/QiuKqR/ZHVQ8Cqy4XBaw1Qk9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0mCTV9PPH8ebcmFYtkTKbJU4VSEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjYTg4OGJkLWJiN2QtNDAxMC05MzgwLWY2MDdlY2NkMTllNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2ksAwDQYJKoZIhvcNAQELBQADggEBAIxUXcY2bHbv1nZmZnnrIOSXx2uV TmIn0r8fD0gTNRPA1pjWTrnDsu2Uv66ynn5aXnJMZ/Lf5ht/QRZQxPG9lWzEaN1n kMnWUX1ECf3DbycVPEHeTG3PTXVc/DkZaR9zgFmioMjc64Bx9mGpuyVBITXgREmZ XxGVs/6gSNSFRlj7IvomhETWz3Qb9kD3eIRvaar2h/MniuQQUdg/s6B9SeZXBUsd rRcR4UG44pM8JsEu0Xj74+zgD9AcVRUfmjIm3Mll/CYy71KENhJXoXcRvpRKKeUp O6PPZAMJnIfGMYDA3EU+AyGqfMUxxO1LSGcMlrxmR0vs1lvnfv+5mrj90XY= -----END CERTIFICATE-----Generated at Thu Nov 5 07:17:14 2026 by rpki-client