$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd00143d-babc-43ea-9c97-c3db522d3563.roa File: bd00143d-babc-43ea-9c97-c3db522d3563.roa (raw, json) Hash identifier: mPFpW0nTyh9goeRz9Nv5djkekwebzjthf38bJIQ0TKE= Subject key identifier: 0F:B8:C5:10:90:0A:0E:A6:AD:D0:EE:90:61:D7:85:7D:FD:93:C1:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E61E88BCC6B945D20C7433A4E3E64F3A5FFB477 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd00143d-babc-43ea-9c97-c3db522d3563.roa Signing time: Mon 26 Oct 2026 02:50:47 +0000 ROA not before: Mon 26 Oct 2026 02:50:47 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 54.90.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:61:e8:8b:cc:6b:94:5d:20:c7:43:3a:4e:3e:64:f3:a5:ff:b4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:50:47 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ef2d759ee8c34c8cf390febde259aadaea4837da052c0b050d7b240adf4d5e0e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:8c:5e:8c:e2:96:dd:6d:4c:92:87:0c:d4: fb:28:11:48:05:09:59:e8:42:15:9b:16:24:11:f5: 62:79:2d:c9:91:ef:c2:23:76:23:dd:9a:bd:98:20: f4:fa:2a:7f:f0:f7:e0:86:c4:8a:39:1b:8a:cc:f9: af:1a:23:22:82:9d:0a:43:fc:71:1a:06:16:39:e2: ea:52:5e:98:00:2a:4f:8c:65:01:9a:0d:02:82:9f: 8e:5e:6c:35:01:e5:0c:0a:61:3c:09:07:34:0f:a6: 5d:71:79:37:89:21:01:91:a0:86:4f:7e:36:3c:ea: b5:28:d9:eb:dc:83:46:63:b6:61:ed:ca:d0:d7:d4: 0b:63:f9:07:89:2f:44:db:6a:5c:9f:e2:2d:de:50: ee:f1:22:1a:4d:60:b9:a0:46:e2:16:ab:89:4c:e5: 4c:6d:7b:5f:e7:5c:99:b2:b7:2b:97:a6:0b:6e:33: 04:17:69:5b:dc:3f:58:82:0e:94:ab:96:17:c3:3b: 45:d1:23:ab:33:8f:0c:70:fa:b1:2f:ef:46:47:06: f0:ab:55:a2:c7:03:cb:a9:2d:98:45:05:02:f6:9b: 4f:d5:45:85:52:bb:25:4f:e7:64:e6:e5:dc:0a:40: 43:13:9f:4e:e0:d1:69:f0:a6:b2:09:d1:c3:0b:16: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B8:C5:10:90:0A:0E:A6:AD:D0:EE:90:61:D7:85:7D:FD:93:C1:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd00143d-babc-43ea-9c97-c3db522d3563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.90.128.0/17 Signature Algorithm: sha256WithRSAEncryption 56:59:71:0c:94:56:67:2e:13:86:12:d1:43:e4:56:2c:d8:4b: f0:62:e8:01:a0:37:79:3c:a0:9c:12:ff:c0:88:3d:ae:47:f6: 44:f7:c1:b2:df:eb:de:b3:79:3a:cc:6f:ce:b6:c7:96:f5:d4: 7b:00:de:4a:76:1e:35:7a:b1:b1:ba:aa:64:65:72:d4:0a:eb: e0:f3:1d:05:9c:8d:55:e7:8c:98:26:54:63:31:1d:2d:47:a5: d2:f3:07:49:d1:b6:05:3e:09:41:e9:b5:f7:68:c1:55:df:d6: c2:c1:cd:93:07:cb:17:a6:7a:29:97:59:a0:49:1f:20:0a:d1: 51:0d:f1:3d:e1:86:a1:b0:c5:3f:fb:a0:d8:b0:37:4d:f1:29: c4:9c:b8:96:49:fd:6d:b6:17:cb:de:ed:fc:1f:73:2f:9b:dd: ed:02:06:a9:33:b7:3d:17:fc:c7:7e:d5:2c:c7:97:2a:d5:bb: 91:8e:3c:8a:f4:17:24:1e:81:4c:7e:23:58:e5:12:19:9e:6f: a5:95:b7:dd:72:12:47:53:85:d7:07:04:98:4f:ca:13:66:33: 9a:1d:49:79:e2:65:62:17:a4:df:20:ad:a4:f8:8b:86:bd:d5: 94:33:de:71:15:3a:4d:c0:fc:86:81:1e:2c:7e:d1:f0:fe:75: 9a:c4:e9:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfmHoi8xrlF0gx0M6Tj5k86X/tHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDI1MDQ3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjJkNzU5ZWU4YzM0YzhjZjM5MGZlYmRlMjU5YWFkYWVh NDgzN2RhMDUyYzBiMDUwZDdiMjQwYWRmNGQ1ZTBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWm4xejOKW3W1MkocM1PsoEUgFCVnoQhWbFiQR9WJ5LcmR 78IjdiPdmr2YIPT6Kn/w9+CGxIo5G4rM+a8aIyKCnQpD/HEaBhY54upSXpgAKk+M ZQGaDQKCn45ebDUB5QwKYTwJBzQPpl1xeTeJIQGRoIZPfjY86rUo2evcg0ZjtmHt ytDX1Atj+QeJL0Tbalyf4i3eUO7xIhpNYLmgRuIWq4lM5Uxte1/nXJmytyuXpgtu MwQXaVvcP1iCDpSrlhfDO0XRI6szjwxw+rEv70ZHBvCrVaLHA8upLZhFBQL2m0/V RYVSuyVP52Tm5dwKQEMTn07g0WnwprIJ0cMLFtcbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD7jFEJAKDqat0O6QYdeFff2TwSswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkMDAxNDNkLWJhYmMtNDNlYS05Yzk3LWMzZGI1MjJkMzU2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2WoAwDQYJKoZIhvcNAQELBQADggEBAFZZcQyUVmcuE4YS0UPkVizYS/Bi 6AGgN3k8oJwS/8CIPa5H9kT3wbLf696zeTrMb862x5b11HsA3kp2HjV6sbG6qmRl ctQK6+DzHQWcjVXnjJgmVGMxHS1HpdLzB0nRtgU+CUHptfdowVXf1sLBzZMHyxem eimXWaBJHyAK0VEN8T3hhqGwxT/7oNiwN03xKcScuJZJ/W22F8ve7fwfcy+b3e0C Bqkztz0X/Md+1SzHlyrVu5GOPIr0FyQegUx+I1jlEhmeb6WVt91yEkdThdcHBJhP yhNmM5odSXniZWIXpN8graT4i4a91ZQz3nEVOk3A/IaBHix+0fD+dZrE6c0= -----END CERTIFICATE-----Generated at Sat Nov 7 18:01:12 2026 by rpki-client