$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87c185ae-9dbb-4e48-818e-6a611c8874e1.roa File: 87c185ae-9dbb-4e48-818e-6a611c8874e1.roa (raw, json) Hash identifier: 6z9DbI2w6tF73bSRcEzOStsf6YWUAFeha35xwfVYqJU= Subject key identifier: 13:02:E5:B5:6D:9D:5C:B9:CE:02:C7:B8:E9:FC:3B:12:79:0A:E2:5E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08D362DA7CAE2059124C7717CFD4925DCA0E0056 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87c185ae-9dbb-4e48-818e-6a611c8874e1.roa Signing time: Mon 26 Oct 2026 02:30:42 +0000 ROA not before: Mon 26 Oct 2026 02:30:42 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 54.240.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d3:62:da:7c:ae:20:59:12:4c:77:17:cf:d4:92:5d:ca:0e:00:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:30:42 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=03bc97cdeb631a16f0c5c76187dffc5a8dca984f7e18fbd62196dc6cc3ee5167, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:3b:5d:3f:f5:e1:fa:9c:e1:68:0e:74:7a: 21:3a:48:32:32:82:6f:1d:f7:e6:54:3e:f5:d3:29: dd:a5:60:3e:80:b6:b1:77:ab:dc:3a:56:07:81:e1: 8e:ef:7d:fe:30:83:3d:33:26:4c:24:3a:89:c7:24: 22:be:3e:7d:15:74:0b:48:a9:da:43:74:f1:75:be: 7a:38:83:87:2b:40:9a:ed:59:85:0e:82:2c:24:a5: 17:c9:3f:3e:ad:bf:6c:9e:91:fe:c7:81:79:76:6e: 34:b5:a8:7b:b3:3c:df:bf:ca:c7:7c:09:03:f4:49: 62:1b:dc:c4:09:1c:f4:ef:85:9f:14:c5:f6:8e:8d: 2d:2b:57:0d:6a:87:94:74:b9:50:0e:37:09:70:5a: 22:5c:1c:14:13:a9:23:1b:73:d5:9d:6a:2c:77:e4: f9:69:cd:c8:08:82:82:07:d7:31:13:50:61:23:45: 1a:dd:ae:98:85:68:4c:e1:1c:55:fb:a7:e7:08:8f: cd:74:03:f2:7f:73:54:a1:ee:0b:aa:92:84:1e:ef: aa:55:4d:56:93:e1:96:42:d2:1e:d4:9a:2a:99:f6: f6:2c:a8:c3:e6:c7:97:2e:9c:1a:1e:04:b7:50:6d: f2:ea:dc:9a:f5:08:41:fb:c2:ee:f1:d5:f0:7b:40: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:E5:B5:6D:9D:5C:B9:CE:02:C7:B8:E9:FC:3B:12:79:0A:E2:5E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87c185ae-9dbb-4e48-818e-6a611c8874e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.64.0/20 Signature Algorithm: sha256WithRSAEncryption 06:9c:fc:eb:5e:7c:9f:48:b6:ba:04:31:85:66:db:d1:5a:4a: 59:51:8b:1a:cc:f2:d7:19:af:12:8e:af:c6:b0:33:bd:26:ee: 79:37:f2:11:90:5a:34:bc:f7:87:8c:ff:4b:63:29:0f:21:e3: 6a:9d:ef:fc:dc:64:ee:9f:ce:2e:a3:a7:cb:6b:84:af:c5:ce: 95:62:08:8f:cf:fb:73:0b:8d:a8:b5:ac:07:42:54:b4:ef:7f: 2c:4d:51:03:b4:5f:79:ce:b0:73:cb:5c:82:3c:84:69:c0:49: c6:13:00:d5:ab:5f:1d:ac:43:48:dd:d1:4e:3e:f2:55:2a:8f: 03:7a:f4:38:55:22:32:02:98:8b:ac:c6:8f:89:56:de:32:3a: a1:2f:25:96:45:0a:8d:9e:7c:85:a1:fc:da:f4:20:2e:10:15: 4f:c1:ba:ff:f9:90:34:87:78:e9:09:3c:6f:85:fc:8a:52:b5: 2d:f9:9a:62:0d:fd:65:90:aa:0e:5e:e6:2e:ac:fd:92:7d:18: 29:80:48:aa:8a:6e:3e:52:cf:f4:a7:3e:46:33:e2:1f:6b:a5: 5c:69:ee:3d:72:f6:ba:15:68:5a:3a:e7:29:2a:4d:cb:95:1b: ea:33:24:b2:1f:51:49:dc:b0:d0:1f:b2:bb:dd:c6:1d:6d:ce: ee:d3:55:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCNNi2nyuIFkSTHcXz9SSXcoOAFYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIzMDQyWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2JjOTdjZGViNjMxYTE2ZjBjNWM3NjE4N2RmZmM1YThk Y2E5ODRmN2UxOGZiZDYyMTk2ZGM2Y2MzZWU1MTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj1TtdP/Xh+pzhaA50eiE6SDIygm8d9+ZUPvXTKd2lYD6A trF3q9w6VgeB4Y7vff4wgz0zJkwkOonHJCK+Pn0VdAtIqdpDdPF1vno4g4crQJrt WYUOgiwkpRfJPz6tv2yekf7HgXl2bjS1qHuzPN+/ysd8CQP0SWIb3MQJHPTvhZ8U xfaOjS0rVw1qh5R0uVAONwlwWiJcHBQTqSMbc9Wdaix35PlpzcgIgoIH1zETUGEj RRrdrpiFaEzhHFX7p+cIj810A/J/c1Sh7guqkoQe76pVTVaT4ZZC0h7UmiqZ9vYs qMPmx5cunBoeBLdQbfLq3Jr1CEH7wu7x1fB7QEBbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEwLltW2dXLnOAse46fw7EnkK4l4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3YzE4NWFlLTlkYmItNGU0OC04MThlLTZhNjExYzg4NzRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ28EAwDQYJKoZIhvcNAQELBQADggEBAAac/OtefJ9ItroEMYVm29FaSllR ixrM8tcZrxKOr8awM70m7nk38hGQWjS894eM/0tjKQ8h42qd7/zcZO6fzi6jp8tr hK/FzpViCI/P+3MLjai1rAdCVLTvfyxNUQO0X3nOsHPLXII8hGnAScYTANWrXx2s Q0jd0U4+8lUqjwN69DhVIjICmIusxo+JVt4yOqEvJZZFCo2efIWh/Nr0IC4QFU/B uv/5kDSHeOkJPG+F/IpStS35mmIN/WWQqg5e5i6s/ZJ9GCmASKqKbj5Sz/SnPkYz 4h9rpVxp7j1y9roVaFo65ykqTcuVG+ozJLIfUUncsNAfsrvdxh1tzu7TVcE= -----END CERTIFICATE-----Generated at Sat Nov 7 19:07:15 2026 by rpki-client