$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3f8440-e28a-449a-b9ef-778f39d106c6.roa File: 7d3f8440-e28a-449a-b9ef-778f39d106c6.roa (raw, json) Hash identifier: a2rqIPXwTf5clqjfhNGhGiuXaCzVrbGCK1g6OUrol84= Subject key identifier: E4:1F:CB:98:42:FA:82:10:B8:2A:A6:E0:34:10:6E:7C:0A:3D:FA:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FD1D7CA394578C81B5FC56EADB6C46A1A93E593 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3f8440-e28a-449a-b9ef-778f39d106c6.roa Signing time: Mon 26 Oct 2026 03:10:32 +0000 ROA not before: Mon 26 Oct 2026 03:10:32 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d1:d7:ca:39:45:78:c8:1b:5f:c5:6e:ad:b6:c4:6a:1a:93:e5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 03:10:32 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=d19213115cec2b514fa991facffd760ccca7498ad4e808d6bd4dfbe63b1219f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:fb:50:01:e4:34:0e:f4:ac:02:28:d3:d4: 20:71:9d:d4:dd:d3:5f:f1:6d:f4:17:ff:66:9f:62: 73:d8:84:df:52:ba:50:84:c1:ed:42:73:b4:fb:f7: 42:82:93:6b:27:90:c0:f6:b3:d6:8a:d2:c3:27:48: 0c:65:eb:45:b9:17:f8:c2:11:61:10:28:f1:24:b0: d2:e8:ae:2b:fd:8f:da:39:97:c8:04:15:00:4e:c1: e2:1f:a1:fb:d9:23:4d:9c:c3:aa:be:89:b6:66:65: d6:35:45:4e:55:82:90:43:a0:bf:8f:d0:65:64:c9: f6:30:61:2c:43:ef:a0:60:68:5f:fe:2d:74:30:e1: a2:f5:39:aa:08:c1:0a:4c:bc:78:1d:bb:3c:65:df: bf:cf:75:02:24:ad:1f:df:91:27:42:66:89:84:af: 58:c0:5f:a7:09:f3:8c:20:cd:ec:82:2c:ba:9d:3e: 5c:c5:71:87:32:3d:95:f1:75:53:fe:19:95:32:e3: 6f:6f:c6:aa:a9:7c:84:e0:0f:32:c1:b8:f9:60:7f: 70:f9:5e:81:52:96:b6:16:45:c3:00:48:a9:cd:f9: de:78:79:6b:28:aa:79:73:74:cd:ad:c7:de:71:78: 20:4a:23:20:83:23:76:0d:e4:8a:1f:6a:2c:a7:0b: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1F:CB:98:42:FA:82:10:B8:2A:A6:E0:34:10:6E:7C:0A:3D:FA:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3f8440-e28a-449a-b9ef-778f39d106c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.146.0/24 Signature Algorithm: sha256WithRSAEncryption 56:88:a2:e5:75:10:f8:55:39:c2:41:6f:bf:d5:e8:03:c6:05: d7:11:74:c5:09:df:97:e9:14:1c:7c:d9:53:07:94:17:ab:31: fc:ee:2d:03:5d:a5:e8:ea:04:3a:12:7a:fb:cc:c1:e8:72:16: b2:8c:af:34:7d:ba:d2:cd:22:55:6d:b4:81:ff:3d:87:2b:1b: 42:08:4f:ac:67:6b:a0:13:88:90:61:be:31:82:60:2c:74:08: 35:57:51:33:fa:f0:06:1a:6a:19:84:ae:f9:e4:93:e7:b9:80: 3d:0c:d3:e6:2a:d7:c8:5d:d8:04:dd:a4:d9:7f:75:81:06:11: b0:72:e0:98:3d:7d:6a:a2:ec:76:1b:9c:2b:ca:41:c1:ae:5b: 64:32:2f:70:44:31:18:3a:05:98:ea:19:b3:72:f4:42:86:ef: cd:e3:c1:89:00:af:1b:cc:7c:de:f3:8a:ac:ba:97:a2:db:5c: 10:16:19:6a:85:d7:18:02:ec:dc:ce:ee:21:7c:1f:e6:22:bc: a1:a5:9f:76:05:7d:81:02:ab:53:90:6d:ab:7c:f7:57:75:2f: 4a:01:fa:f1:2b:f9:0c:56:f2:3d:89:73:b9:0a:86:23:68:46: fc:ca:ed:74:d5:40:2f:93:d8:4d:b5:0d:34:ee:8d:2c:b5:ba: 2b:ce:99:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb9HXyjlFeMgbX8VurbbEahqT5ZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDMxMDMyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTkyMTMxMTVjZWMyYjUxNGZhOTkxZmFjZmZkNzYwY2Nj YTc0OThhZDRlODA4ZDZiZDRkZmJlNjNiMTIxOWY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxYPtQAeQ0DvSsAijT1CBxndTd01/xbfQX/2afYnPYhN9S ulCEwe1Cc7T790KCk2snkMD2s9aK0sMnSAxl60W5F/jCEWEQKPEksNLoriv9j9o5 l8gEFQBOweIfofvZI02cw6q+ibZmZdY1RU5VgpBDoL+P0GVkyfYwYSxD76BgaF/+ LXQw4aL1OaoIwQpMvHgduzxl37/PdQIkrR/fkSdCZomEr1jAX6cJ84wgzeyCLLqd PlzFcYcyPZXxdVP+GZUy429vxqqpfITgDzLBuPlgf3D5XoFSlrYWRcMASKnN+d54 eWsoqnlzdM2tx95xeCBKIyCDI3YN5IofaiynC/IxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5B/LmEL6ghC4KqbgNBBufAo9+lYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkM2Y4NDQwLWUyOGEtNDQ5YS1iOWVmLTc3OGYzOWQxMDZjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XpIwDQYJKoZIhvcNAQELBQADggEBAFaIouV1EPhVOcJBb7/V6APGBdcR dMUJ35fpFBx82VMHlBerMfzuLQNdpejqBDoSevvMwehyFrKMrzR9utLNIlVttIH/ PYcrG0IIT6xna6ATiJBhvjGCYCx0CDVXUTP68AYaahmErvnkk+e5gD0M0+Yq18hd 2ATdpNl/dYEGEbBy4Jg9fWqi7HYbnCvKQcGuW2QyL3BEMRg6BZjqGbNy9EKG783j wYkArxvMfN7ziqy6l6LbXBAWGWqF1xgC7NzO7iF8H+YivKGln3YFfYECq1OQbat8 91d1L0oB+vEr+QxW8j2Jc7kKhiNoRvzK7XTVQC+T2E21DTTujSy1uivOmZE= -----END CERTIFICATE-----Generated at Sat Nov 7 19:28:29 2026 by rpki-client