$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9837bfa2-7cbe-4129-8b26-e0489a030240.roa File: 9837bfa2-7cbe-4129-8b26-e0489a030240.roa (raw, json) Hash identifier: EzJCn5Omp26qz+nOKg0Fma8yY9+rOvJzTgU42RwTR3Q= Subject key identifier: 5B:4D:F9:68:ED:E0:43:FA:40:89:CF:10:77:3A:32:1E:D2:21:6B:AA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E68AC3C78E29941228B3E8F2F7AC27F020E360A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9837bfa2-7cbe-4129-8b26-e0489a030240.roa Signing time: Wed 21 Oct 2026 00:21:21 +0000 ROA not before: Wed 21 Oct 2026 00:21:21 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.204.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:68:ac:3c:78:e2:99:41:22:8b:3e:8f:2f:7a:c2:7f:02:0e:36:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:21:21 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=11f46639447b4d399a6f1c1ce15e6f1bb77524b3aeaee2275a21270fe6efab37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:f9:d0:53:a0:bf:3e:e1:43:d7:2b:f8:a4: e5:ce:b2:d5:08:d0:e5:72:4c:61:3b:ad:cb:37:10: 4f:69:2a:88:d4:8d:97:0e:d8:9d:3c:bf:ad:8d:44: f6:be:81:ee:e3:9e:e0:2a:91:f7:ca:2a:6d:e7:5a: b6:ac:3f:47:98:dc:bf:b5:e2:c4:81:7c:ba:ec:ea: bc:54:7e:dd:71:d5:2f:87:2e:8e:c3:11:87:00:33: 71:bb:4f:62:00:6e:0d:52:25:1e:5a:dc:cb:2c:2e: a8:ec:dd:e6:49:3e:48:cf:66:e3:8d:ce:df:d6:ce: 65:32:28:92:13:c7:96:39:2f:77:88:b0:61:64:8b: 1a:ea:90:c6:76:63:48:9d:7d:58:07:6a:0c:7a:53: 9b:0b:f9:cd:0c:82:a3:0c:e1:e3:c6:03:9c:2d:a7: ba:99:d3:71:35:8f:1f:5b:97:da:f3:a0:b7:1e:a4: 4f:ff:91:a0:15:8f:61:dd:af:ba:97:a3:80:c2:c5: 41:86:b0:50:81:aa:73:77:8a:5c:c8:95:50:f1:b1: f5:56:84:24:cb:a8:6e:a6:5a:5c:fa:43:f7:5f:1f: 5b:41:10:ee:c5:76:49:a2:c4:a3:3b:f7:1c:31:0c: cc:84:3b:21:20:13:1f:a1:50:ac:92:91:14:50:30: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:F9:68:ED:E0:43:FA:40:89:CF:10:77:3A:32:1E:D2:21:6B:AA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9837bfa2-7cbe-4129-8b26-e0489a030240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.204.48.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:cf:fd:09:6a:d2:db:a4:4e:27:54:4d:42:6b:69:70:73:3f: 4e:0a:1c:91:94:a1:d4:9b:0c:57:3a:06:cb:64:9b:5c:98:46: 7b:ca:06:e8:28:7d:b0:1f:29:4a:7a:61:4e:44:4f:0b:3a:9c: f3:b9:ca:95:8f:a1:6e:32:5a:0c:68:5e:7f:52:c7:db:2d:36: 04:4c:96:4c:ff:7d:a1:30:3d:7c:7f:58:a1:b3:d3:45:16:c2: 3f:a5:8a:e4:33:5b:f0:d6:17:ef:66:e5:a3:dc:b7:da:75:1d: 12:3f:74:4c:0b:45:0a:90:a7:97:53:38:e8:68:1d:99:a6:5c: 45:d7:b1:26:9c:5b:69:48:9d:27:77:40:7f:5a:2a:2d:b0:8a: c9:86:56:8e:35:4a:be:a9:57:95:24:c0:98:62:3a:9e:60:23: af:fd:e6:a9:46:2d:c4:19:26:71:0f:a4:20:37:07:d9:5a:25: 2d:de:6f:8d:76:17:9c:20:ac:bb:57:57:31:73:d6:88:5a:bf: b7:79:42:74:8b:56:cc:88:9f:be:e9:0a:79:20:47:22:27:7b: 2b:90:63:7e:de:6d:08:ba:8a:22:a7:c0:40:d4:2f:04:37:ae: c2:90:41:d8:e3:b1:b4:6d:3c:af:fc:f7:42:0c:ca:84:2c:8b: 3b:1e:2f:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPmisPHjimUEiiz6PL3rCfwIONgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDAyMTIxWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWY0NjYzOTQ0N2I0ZDM5OWE2ZjFjMWNlMTVlNmYxYmI3 NzUyNGIzYWVhZWUyMjc1YTIxMjcwZmU2ZWZhYjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClsvnQU6C/PuFD1yv4pOXOstUI0OVyTGE7rcs3EE9pKojU jZcO2J08v62NRPa+ge7jnuAqkffKKm3nWrasP0eY3L+14sSBfLrs6rxUft1x1S+H Lo7DEYcAM3G7T2IAbg1SJR5a3MssLqjs3eZJPkjPZuONzt/WzmUyKJITx5Y5L3eI sGFkixrqkMZ2Y0idfVgHagx6U5sL+c0MgqMM4ePGA5wtp7qZ03E1jx9bl9rzoLce pE//kaAVj2Hdr7qXo4DCxUGGsFCBqnN3ilzIlVDxsfVWhCTLqG6mWlz6Q/dfH1tB EO7FdkmixKM79xwxDMyEOyEgEx+hUKySkRRQMOOjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW035aO3gQ/pAic8QdzoyHtIha6owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4MzdiZmEyLTdjYmUtNDEyOS04YjI2LWUwNDg5YTAzMDI0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2zDAwDQYJKoZIhvcNAQELBQADggEBAA3P/Qlq0tukTidUTUJraXBzP04K HJGUodSbDFc6Bstkm1yYRnvKBugofbAfKUp6YU5ETws6nPO5ypWPoW4yWgxoXn9S x9stNgRMlkz/faEwPXx/WKGz00UWwj+liuQzW/DWF+9m5aPct9p1HRI/dEwLRQqQ p5dTOOhoHZmmXEXXsSacW2lInSd3QH9aKi2wismGVo41Sr6pV5UkwJhiOp5gI6/9 5qlGLcQZJnEPpCA3B9laJS3eb412F5wgrLtXVzFz1ohav7d5QnSLVsyIn77pCnkg RyIneyuQY37ebQi6iiKnwEDULwQ3rsKQQdjjsbRtPK/890IMyoQsizseL1A= -----END CERTIFICATE-----Generated at Sat Nov 7 20:07:52 2026 by rpki-client