$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/982620b6-341a-4cf5-994b-494ca672b45b.roa File: 982620b6-341a-4cf5-994b-494ca672b45b.roa (raw, json) Hash identifier: iBw4845iDLvAPepuJIYQrMrCVh6DX3C2Bjqw6R6DeHU= Subject key identifier: 74:12:75:3C:0D:32:B0:6B:9F:FF:3E:56:AB:99:CC:17:D2:63:93:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B1CE35E531D77B574B5B508275311DC8B666C26 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/982620b6-341a-4cf5-994b-494ca672b45b.roa Signing time: Thu 22 Oct 2026 03:07:16 +0000 ROA not before: Thu 22 Oct 2026 03:07:16 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.238.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1c:e3:5e:53:1d:77:b5:74:b5:b5:08:27:53:11:dc:8b:66:6c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 22 03:07:16 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=123efe9b271bfea156c69910aa9b8d9a1bfe4e7eba601b69b4e732d2eab09e47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:8c:f1:66:35:61:c0:22:ec:62:9b:8f:a4: 47:26:09:51:be:5c:3e:a7:5b:49:61:d7:33:11:9f: e6:7e:4e:fb:fb:f2:d4:dc:0c:72:89:4b:5a:7e:b3: 1c:2c:3e:07:51:d4:55:d2:20:71:d2:19:ea:e4:70: ce:03:15:62:79:33:c4:5e:f6:b6:15:92:23:06:34: 4c:f3:fb:ca:21:12:be:d6:e9:74:76:0c:04:61:ea: 85:05:d9:70:95:df:e4:4f:f1:cb:5a:02:46:83:21: a7:a2:e3:94:c0:a1:cd:18:cb:94:27:6d:7b:90:13: 8b:80:39:82:5d:d8:d3:68:20:81:e3:57:db:ae:ef: dd:ae:14:d3:5d:65:2c:33:50:dc:31:99:b8:c5:6a: 1b:0a:1a:17:4a:d3:0e:27:ad:57:2e:f8:f2:11:45: fc:ab:c4:5d:08:cf:a2:16:3f:8f:b5:c1:d6:3a:aa: d9:69:26:0c:3e:7b:a8:46:93:ae:53:f2:11:6a:c1: 6e:a9:e6:9b:6a:dc:2c:2a:f9:7f:c7:15:16:72:d0: 5e:27:1b:66:c9:19:5a:2a:03:0c:7c:31:bf:15:7a: 12:9d:40:e3:95:bf:f4:92:93:27:39:22:d8:7b:2f: 74:dd:ac:22:9d:20:74:25:a4:f5:a8:84:38:28:f7: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:75:3C:0D:32:B0:6B:9F:FF:3E:56:AB:99:CC:17:D2:63:93:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/982620b6-341a-4cf5-994b-494ca672b45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.238.128.0/17 Signature Algorithm: sha256WithRSAEncryption 93:60:a6:69:f4:31:89:c7:11:42:6a:38:ab:76:24:f4:cb:0c: 16:39:e8:df:19:82:80:42:60:2c:50:aa:c1:e8:bf:4f:78:ad: 1f:53:9e:91:11:77:34:41:5f:11:d5:e3:d6:40:8b:a1:48:bf: 4a:c9:72:07:c9:4d:2a:23:b7:5b:a4:4a:62:e9:4e:fb:31:13: 2a:06:c9:48:68:15:22:8f:18:33:b7:9b:c4:58:3a:7c:e6:ae: dc:df:ec:cc:f0:b0:03:9b:8b:3f:06:d1:dc:8d:bd:cc:ff:c1: 01:84:d6:40:d2:0e:e8:59:b7:88:93:2c:f2:99:34:80:8c:17: a6:06:dc:43:7f:da:73:13:fa:59:7a:d4:1d:fd:ab:f7:57:b8: f3:db:0b:2d:22:be:19:3c:0a:03:59:68:3c:1b:8a:01:2f:24: 47:f2:ec:c7:2d:d2:14:9c:53:d5:16:ef:e6:f0:6b:99:68:6f: 1f:33:e2:8a:39:59:fb:d7:01:92:4c:0c:d3:f2:f3:e1:3e:5f: c1:75:17:62:6e:df:25:4b:cd:e3:db:bf:fd:c3:3c:a6:c9:ce: ef:0f:44:65:d4:60:8f:8e:bd:6a:c5:e0:33:61:06:98:39:5a: 79:97:6c:c7:ae:a3:88:07:47:74:43:94:2d:40:02:00:0d:f2: 88:41:dd:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCxzjXlMdd7V0tbUIJ1MR3ItmbCYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIyMDMwNzE2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjNlZmU5YjI3MWJmZWExNTZjNjk5MTBhYTliOGQ5YTFi ZmU0ZTdlYmE2MDFiNjliNGU3MzJkMmVhYjA5ZTQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEaYzxZjVhwCLsYpuPpEcmCVG+XD6nW0lh1zMRn+Z+Tvv7 8tTcDHKJS1p+sxwsPgdR1FXSIHHSGerkcM4DFWJ5M8Re9rYVkiMGNEzz+8ohEr7W 6XR2DARh6oUF2XCV3+RP8ctaAkaDIaei45TAoc0Yy5QnbXuQE4uAOYJd2NNoIIHj V9uu792uFNNdZSwzUNwxmbjFahsKGhdK0w4nrVcu+PIRRfyrxF0Iz6IWP4+1wdY6 qtlpJgw+e6hGk65T8hFqwW6p5ptq3Cwq+X/HFRZy0F4nG2bJGVoqAwx8Mb8VehKd QOOVv/SSkyc5Ith7L3TdrCKdIHQlpPWohDgo9z3BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdBJ1PA0ysGuf/z5Wq5nMF9Jjk7gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4MjYyMGI2LTM0MWEtNGNmNS05OTRiLTQ5NGNhNjcyYjQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc27oAwDQYJKoZIhvcNAQELBQADggEBAJNgpmn0MYnHEUJqOKt2JPTLDBY5 6N8ZgoBCYCxQqsHov094rR9TnpERdzRBXxHV49ZAi6FIv0rJcgfJTSojt1ukSmLp TvsxEyoGyUhoFSKPGDO3m8RYOnzmrtzf7MzwsAObiz8G0dyNvcz/wQGE1kDSDuhZ t4iTLPKZNICMF6YG3EN/2nMT+ll61B39q/dXuPPbCy0ivhk8CgNZaDwbigEvJEfy 7Mct0hScU9UW7+bwa5lobx8z4oo5WfvXAZJMDNPy8+E+X8F1F2Ju3yVLzePbv/3D PKbJzu8PRGXUYI+OvWrF4DNhBpg5WnmXbMeuo4gHR3RDlC1AAgAN8ohB3YE= -----END CERTIFICATE-----Generated at Sun Nov 8 02:46:43 2026 by rpki-client