$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa File: 84c300e0-b200-441e-8084-8448b3947e9a.roa (raw, json) Hash identifier: 2hj9aeU3wQR5W4gq+9WVifnywX8f5Ej0TlDULniNKXE= Subject key identifier: 5C:61:06:22:38:49:86:FB:9D:8A:E4:23:D1:73:28:9B:C2:DC:B6:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C9748C2D59714FF4BAED6DCD1C78C3C084E216C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa Signing time: Wed 21 Oct 2026 00:11:09 +0000 ROA not before: Wed 21 Oct 2026 00:11:09 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.56.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:97:48:c2:d5:97:14:ff:4b:ae:d6:dc:d1:c7:8c:3c:08:4e:21:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:11:09 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=7fd9a0c657cb5f5e0cfab1ca7932a7bba2e55fc26ac3e514e1f46177dfee4e0d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:75:e6:ad:43:d7:b2:3b:94:75:cd:a0:29: f7:e8:91:7c:5b:5e:99:4b:2b:0a:70:5b:b5:f0:ae: 1f:a3:89:31:00:be:cf:13:2f:db:8c:7e:cd:65:76: ab:eb:25:42:ad:a1:4b:7f:1f:ad:60:8a:99:b5:d2: 42:3c:56:db:20:07:4d:e8:5a:4c:10:23:cb:c2:30: 5a:30:56:f4:77:ed:f3:c6:a7:35:e5:6a:f6:a3:8a: 6c:07:eb:d9:d9:87:c2:8b:c7:33:7d:c9:8b:9f:bf: db:8d:5a:14:ca:a8:35:bd:ed:a7:6d:1a:85:04:5b: 0a:ef:09:4d:19:cb:d1:5a:08:0d:29:20:97:81:36: 8b:b5:fc:dc:56:05:89:12:8a:84:88:b6:34:e5:1e: f3:74:a3:1c:2b:4d:c0:ea:25:fe:4a:7c:17:cf:47: e7:c7:de:df:26:76:e4:8e:43:42:b5:66:47:b0:21: ca:41:94:35:0f:17:eb:71:b1:84:09:0b:b0:5a:c9: 1e:fa:66:b7:75:9d:cb:f1:9c:79:ca:f0:ed:2c:1f: 8d:05:f0:41:53:e7:57:be:cd:d8:03:8f:aa:e6:df: 7d:e5:b1:a0:e7:db:14:85:12:58:4f:61:cd:da:60: 12:33:bc:e8:c1:25:bf:29:69:29:77:28:f5:96:62: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:61:06:22:38:49:86:FB:9D:8A:E4:23:D1:73:28:9B:C2:DC:B6:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:c3:1e:dc:08:8f:84:ce:d9:ff:38:c2:69:80:30:9c:ad:c3: b7:ad:ae:51:07:09:8f:89:49:c2:c0:13:60:34:73:24:48:ac: ea:b6:c6:63:bf:1e:4f:51:86:e9:3b:61:24:3d:7e:86:ac:24: e3:ff:9a:79:9e:a8:2a:27:ef:5e:05:70:59:1b:68:ae:34:8d: b3:0c:1a:97:06:93:f6:51:fb:d5:bf:be:aa:3b:7e:a6:c4:cc: 2c:5c:d6:4d:6d:28:64:9a:aa:eb:e6:b2:67:7d:1a:ee:0e:fa: 39:4b:29:b2:02:de:45:f5:40:ec:ff:00:29:c8:19:27:48:e5: ae:3a:6c:ec:17:52:96:5d:e7:43:86:3c:5e:18:1d:05:06:30: 35:92:e6:13:c9:ab:c2:00:e6:f0:ab:93:ed:0f:5a:55:3d:24: b1:3a:bf:e1:4e:8c:50:0a:4f:a6:93:7b:d0:72:49:7b:34:5e: 5b:dd:61:c6:74:e0:a0:55:00:75:3f:99:8c:27:88:65:69:37: 1d:6f:8a:9f:f7:ef:03:d8:f7:a7:8a:5d:4b:b8:7d:0c:f1:1b: 74:cb:fa:69:e1:5c:1d:95:23:f9:51:5d:f5:c4:24:41:91:03: ad:a3:35:61:80:b5:59:12:7b:c7:1c:73:a6:c6:9f:0b:82:85: 54:00:53:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDJdIwtWXFP9Lrtbc0ceMPAhOIWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDAxMTA5WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmQ5YTBjNjU3Y2I1ZjVlMGNmYWIxY2E3OTMyYTdiYmEy ZTU1ZmMyNmFjM2U1MTRlMWY0NjE3N2RmZWU0ZTBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHLXXmrUPXsjuUdc2gKffokXxbXplLKwpwW7Xwrh+jiTEA vs8TL9uMfs1ldqvrJUKtoUt/H61gipm10kI8VtsgB03oWkwQI8vCMFowVvR37fPG pzXlavajimwH69nZh8KLxzN9yYufv9uNWhTKqDW97adtGoUEWwrvCU0Zy9FaCA0p IJeBNou1/NxWBYkSioSItjTlHvN0oxwrTcDqJf5KfBfPR+fH3t8mduSOQ0K1Zkew IcpBlDUPF+txsYQJC7BayR76Zrd1ncvxnHnK8O0sH40F8EFT51e+zdgDj6rm333l saDn2xSFElhPYc3aYBIzvOjBJb8paSl3KPWWYqsXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXGEGIjhJhvudiuQj0XMom8LctiAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YzMwMGUwLWIyMDAtNDQxZS04MDg0LTg0NDhiMzk0N2U5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA0ODANBgkqhkiG9w0BAQsFAAOCAQEAWcMe3AiPhM7Z/zjCaYAwnK3Dt62u UQcJj4lJwsATYDRzJEis6rbGY78eT1GG6TthJD1+hqwk4/+aeZ6oKifvXgVwWRto rjSNswwalwaT9lH71b++qjt+psTMLFzWTW0oZJqq6+ayZ30a7g76OUspsgLeRfVA 7P8AKcgZJ0jlrjps7BdSll3nQ4Y8XhgdBQYwNZLmE8mrwgDm8KuT7Q9aVT0ksTq/ 4U6MUApPppN70HJJezReW91hxnTgoFUAdT+ZjCeIZWk3HW+Kn/fvA9j3p4pdS7h9 DPEbdMv6aeFcHZUj+VFd9cQkQZEDraM1YYC1WRJ7xxxzpsafC4KFVABT+w== -----END CERTIFICATE-----Generated at Sun Nov 8 05:30:22 2026 by rpki-client