$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2011ffc-3660-4473-82ae-f07e9df5c160.roa File: c2011ffc-3660-4473-82ae-f07e9df5c160.roa (raw, json) Hash identifier: fx810u69apHmlWDuxXW3ctrCl8WTkwhrgCVx77ci7jg= Subject key identifier: 45:E0:77:FB:35:8F:99:92:1A:FC:7F:33:DE:5F:33:A3:04:C1:26:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AEA27F339EDB9D25E7254DA11BB0DECAE884EC2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2011ffc-3660-4473-82ae-f07e9df5c160.roa Signing time: Thu 15 Oct 2026 02:50:32 +0000 ROA not before: Thu 15 Oct 2026 02:50:32 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ea:27:f3:39:ed:b9:d2:5e:72:54:da:11:bb:0d:ec:ae:88:4e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 02:50:32 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=286ba2e0f484991ce46685fae7b342affe17b58378cce1f66010a4fd2b702edc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:df:50:98:f1:f0:1f:a0:98:06:10:ef:73: 32:8e:8c:41:86:2f:a2:ad:4e:1a:e8:d7:ee:b4:d1: 0a:51:a7:58:bf:5d:f2:93:94:7c:b0:02:6c:c8:25: a1:b9:47:d5:89:53:7a:ca:7b:5c:0b:71:dc:9e:5b: 60:5a:4a:5f:7e:54:1e:c1:ea:33:c1:d8:0f:47:01: 80:2d:a1:92:85:87:d5:c0:e8:93:a5:45:0a:73:b0: 46:5c:01:96:6a:f0:7e:98:6c:b8:6e:2e:94:45:3c: 83:b1:6d:26:a8:19:e4:9c:f7:1e:fc:ff:35:1d:18: 5f:16:5b:70:df:52:ec:59:cb:7d:7b:b6:94:e3:e5: b2:c4:9d:45:10:4f:f0:50:bd:04:0f:2f:74:fc:55: 1b:c0:53:39:85:49:00:71:f6:81:52:2b:02:a0:3a: 3c:a3:27:5a:87:b7:b5:1f:06:a9:39:bf:fe:d9:1e: b4:b0:53:99:7d:49:c3:f4:c9:86:41:4e:3a:b6:1c: fe:0f:c6:8d:dd:be:00:d2:ca:d8:b2:ae:35:44:d5: dd:70:bf:60:14:8e:fe:7d:db:cd:78:43:0d:15:2d: 91:7f:4a:71:1e:06:cd:01:4d:24:e6:c1:ba:fd:d2: 32:4d:20:a2:ab:44:59:e3:eb:cf:24:25:80:3f:c9: c6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E0:77:FB:35:8F:99:92:1A:FC:7F:33:DE:5F:33:A3:04:C1:26:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2011ffc-3660-4473-82ae-f07e9df5c160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9c:a7:9c:07:97:ed:6f:da:9f:2a:ed:ab:44:41:bf:4d:cc:c3: 73:13:6a:b8:9f:4b:2c:4f:b1:e6:5a:3c:d2:0d:1d:1a:42:62: ce:20:fb:40:ba:ac:b4:af:32:26:31:6c:f3:f2:d4:03:42:6a: 1b:f9:7d:0b:7a:59:9a:7d:a1:eb:80:6b:53:a5:fa:b5:eb:c6: 78:b6:6d:74:0c:d4:5b:87:69:9f:72:9b:10:e3:06:ec:9f:08: 6a:df:fa:5a:6e:70:e8:74:f9:ca:e1:be:e0:9e:17:4a:75:37: 12:66:77:2e:aa:5d:52:17:31:b4:75:08:2b:7b:a0:d2:c4:41: 9b:d6:5d:ce:dd:7f:d9:3e:d0:14:10:c5:75:d8:51:d7:4c:49: b8:d7:9b:e3:bb:5e:d3:51:2f:a4:93:1f:a6:a3:6c:b1:61:fb: b8:49:86:4c:7a:49:b3:54:ba:ea:d0:cf:0f:68:04:d4:be:71: 60:51:89:b0:b3:53:08:43:ea:ca:fa:9d:41:73:a2:f0:46:3f: 74:f6:ad:39:e4:57:c4:95:85:23:bc:a5:47:ba:e9:bc:a1:48: 77:40:a3:03:d3:5f:c6:6d:f4:bc:88:20:40:bf:7c:f8:b2:cb: 79:6a:e6:0d:b7:a8:d5:ab:92:dd:5c:54:41:2a:d3:e4:72:80: f3:29:11:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGuon8zntudJeclTaEbsN7K6ITsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDI1MDMyWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODZiYTJlMGY0ODQ5OTFjZTQ2Njg1ZmFlN2IzNDJhZmZl MTdiNTgzNzhjY2UxZjY2MDEwYTRmZDJiNzAyZWRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSd99QmPHwH6CYBhDvczKOjEGGL6KtThro1+600QpRp1i/ XfKTlHywAmzIJaG5R9WJU3rKe1wLcdyeW2BaSl9+VB7B6jPB2A9HAYAtoZKFh9XA 6JOlRQpzsEZcAZZq8H6YbLhuLpRFPIOxbSaoGeSc9x78/zUdGF8WW3DfUuxZy317 tpTj5bLEnUUQT/BQvQQPL3T8VRvAUzmFSQBx9oFSKwKgOjyjJ1qHt7UfBqk5v/7Z HrSwU5l9ScP0yYZBTjq2HP4Pxo3dvgDSytiyrjVE1d1wv2AUjv592814Qw0VLZF/ SnEeBs0BTSTmwbr90jJNIKKrRFnj688kJYA/ycaNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUReB3+zWPmZIa/H8z3l8zowTBJtkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyMDExZmZjLTM2NjAtNDQ3My04MmFlLWYwN2U5ZGY1YzE2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA21jANBgkqhkiG9w0BAQsFAAOCAQEAnKecB5ftb9qfKu2rREG/TczDcxNq uJ9LLE+x5lo80g0dGkJiziD7QLqstK8yJjFs8/LUA0JqG/l9C3pZmn2h64BrU6X6 tevGeLZtdAzUW4dpn3KbEOMG7J8Iat/6Wm5w6HT5yuG+4J4XSnU3EmZ3LqpdUhcx tHUIK3ug0sRBm9Zdzt1/2T7QFBDFddhR10xJuNeb47te01EvpJMfpqNssWH7uEmG THpJs1S66tDPD2gE1L5xYFGJsLNTCEPqyvqdQXOi8EY/dPatOeRXxJWFI7ylR7rp vKFId0CjA9Nfxm30vIggQL98+LLLeWrmDbeo1auS3VxUQSrT5HKA8ykRDQ== -----END CERTIFICATE-----Generated at Sun Nov 8 06:03:55 2026 by rpki-client