$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b55bc95f-3077-4f9f-bb08-c194c8c86f2c.roa File: b55bc95f-3077-4f9f-bb08-c194c8c86f2c.roa (raw, json) Hash identifier: Lw0sLD72l7YIfE8tmlWfNvkl1z6TQQ1dT1xONj/pkUg= Subject key identifier: BD:4A:5C:CB:52:6F:8C:6F:00:E5:52:CF:06:44:3C:F4:61:42:D4:2D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3899095B6DC669F579D515C103D58B148FFFC8D7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b55bc95f-3077-4f9f-bb08-c194c8c86f2c.roa Signing time: Wed 21 Oct 2026 00:50:34 +0000 ROA not before: Wed 21 Oct 2026 00:50:34 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:99:09:5b:6d:c6:69:f5:79:d5:15:c1:03:d5:8b:14:8f:ff:c8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:50:34 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=e37ae52b316c709d144abaf678656632c7744b696e6f33b618a292fbbbcb6dbb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:44:77:06:1e:f3:41:e4:99:d8:97:cf:c3: d1:75:16:a8:cc:d8:00:a7:6f:8a:d0:d5:13:ca:ed: 02:f4:78:33:9a:86:57:79:83:2d:98:ba:09:18:09: 87:2a:f7:d3:8a:ed:f0:41:fd:7a:10:38:4c:5e:72: 7c:d0:15:48:85:93:50:c8:f9:ab:9c:11:43:db:b9: 19:a2:f9:79:c8:d5:6d:05:82:2d:dc:0c:b0:80:2a: 16:2c:16:6f:24:6b:80:ad:1e:8b:e4:d4:39:df:86: 0f:db:3c:e3:fc:5e:be:55:a5:92:ba:44:42:6d:6a: 9d:75:77:60:28:f3:0f:c8:73:21:2a:f5:dc:38:f9: ea:16:d7:33:52:07:76:ef:62:e3:3e:18:c8:de:33: 36:2f:b2:e9:da:f2:76:50:36:60:56:2f:51:bc:b4: 05:c6:df:f6:39:bb:57:b4:ec:30:5d:c0:22:6b:bf: b9:89:5a:73:e5:7a:6f:6b:11:96:ea:02:49:da:ba: 9c:9c:1e:56:40:a6:f0:9f:8d:b2:7a:52:81:43:b3: 8a:63:20:7a:c4:a3:5a:3e:6a:07:4f:db:4e:36:e7: c2:52:89:e5:96:8c:b5:bf:e8:a0:7a:44:8d:d2:6e: 52:ef:62:90:7f:20:19:1f:27:25:c7:35:a6:68:22: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4A:5C:CB:52:6F:8C:6F:00:E5:52:CF:06:44:3C:F4:61:42:D4:2D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b55bc95f-3077-4f9f-bb08-c194c8c86f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.152.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:5e:dc:60:66:19:67:b3:b4:14:7f:6f:9c:80:f6:b2:73:53: 32:e8:03:08:01:4d:2f:5a:5d:7e:b1:cb:fc:ef:ee:9a:9f:8a: 1c:dd:83:d0:f7:c9:38:e8:e4:fb:a2:39:35:55:d8:53:b3:cb: a3:79:21:03:85:9c:b5:c1:13:b3:a1:d0:e3:7a:10:7f:ee:3e: 14:93:2f:b4:7d:44:27:a4:fe:5c:b1:09:3f:7f:09:b0:04:18: 74:09:56:bb:1b:b0:90:40:74:8d:77:be:a9:b1:2f:4d:de:1d: e8:fa:4d:2e:fa:2a:46:1c:50:40:5f:d2:42:6f:b3:32:9f:39: 9c:e9:da:a2:fb:67:2f:8a:e5:63:b0:8a:dd:0a:7a:3e:97:a3: 79:5a:d5:b8:ad:c1:b7:41:89:41:cc:bc:6d:46:90:ba:d0:58: d9:c7:f5:53:ff:39:e6:93:d7:99:6c:e7:6c:98:2c:4e:d6:de: 53:50:b2:19:e7:83:5a:ca:a5:4d:5c:19:2a:dc:4e:c7:16:d5: ac:d9:b5:be:87:42:30:37:52:0c:23:59:10:14:65:28:e2:68: f3:b2:e6:7b:88:dc:6e:71:f6:78:b9:65:26:60:92:30:35:7f: ac:d1:4b:9c:c9:d3:91:0e:7f:3d:74:42:68:35:6c:b1:b4:e3: 10:a0:d0:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOJkJW23GafV51RXBA9WLFI//yNcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDA1MDM0WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzdhZTUyYjMxNmM3MDlkMTQ0YWJhZjY3ODY1NjYzMmM3 NzQ0YjY5NmU2ZjMzYjYxOGEyOTJmYmJiY2I2ZGJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoAER3Bh7zQeSZ2JfPw9F1FqjM2ACnb4rQ1RPK7QL0eDOa hld5gy2YugkYCYcq99OK7fBB/XoQOExecnzQFUiFk1DI+aucEUPbuRmi+XnI1W0F gi3cDLCAKhYsFm8ka4CtHovk1Dnfhg/bPOP8Xr5VpZK6REJtap11d2Ao8w/IcyEq 9dw4+eoW1zNSB3bvYuM+GMjeMzYvsuna8nZQNmBWL1G8tAXG3/Y5u1e07DBdwCJr v7mJWnPlem9rEZbqAknaupycHlZApvCfjbJ6UoFDs4pjIHrEo1o+agdP204258JS ieWWjLW/6KB6RI3SblLvYpB/IBkfJyXHNaZoIkjxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvUpcy1JvjG8A5VLPBkQ89GFC1C0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1NWJjOTVmLTMwNzctNGY5Zi1iYjA4LWMxOTRjOGM4NmYyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fJgwDQYJKoZIhvcNAQELBQADggEBAFxe3GBmGWeztBR/b5yA9rJzUzLo AwgBTS9aXX6xy/zv7pqfihzdg9D3yTjo5PuiOTVV2FOzy6N5IQOFnLXBE7Oh0ON6 EH/uPhSTL7R9RCek/lyxCT9/CbAEGHQJVrsbsJBAdI13vqmxL03eHej6TS76KkYc UEBf0kJvszKfOZzp2qL7Zy+K5WOwit0Kej6Xo3la1bitwbdBiUHMvG1GkLrQWNnH 9VP/OeaT15ls52yYLE7W3lNQshnng1rKpU1cGSrcTscW1azZtb6HQjA3UgwjWRAU ZSjiaPOy5nuI3G5x9ni5ZSZgkjA1f6zRS5zJ05EOfz10Qmg1bLG04xCg0KU= -----END CERTIFICATE-----Generated at Sat Nov 7 22:01:44 2026 by rpki-client