$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c77ddf1c-0d2f-45fe-92ab-cb1e45ae4b8a.roa File: c77ddf1c-0d2f-45fe-92ab-cb1e45ae4b8a.roa (raw, json) Hash identifier: R75elvL6W01BHtarxtJ3ICqe4bmm3NG1BHMPx1Rsnv8= Subject key identifier: B3:6F:D5:4E:43:64:6B:08:EE:C7:ED:9B:E9:D7:10:67:E3:D4:49:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72FBE5E5439533A1FF76F403F1E2E0F280126D95 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c77ddf1c-0d2f-45fe-92ab-cb1e45ae4b8a.roa Signing time: Mon 26 Oct 2026 02:20:05 +0000 ROA not before: Mon 26 Oct 2026 02:20:05 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fb:e5:e5:43:95:33:a1:ff:76:f4:03:f1:e2:e0:f2:80:12:6d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 02:20:05 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=bf33fe75a068808db6d43e6db3c8e6090eafb2bd107da70c18e707d480605137, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:ca:36:8b:2f:1c:a5:9c:e6:56:63:87:d1: c0:86:09:6b:1b:6c:42:c3:90:6c:f8:cd:3a:ee:6d: 77:24:4f:1b:e7:af:56:ab:0f:92:45:31:92:09:42: 1f:24:28:97:44:45:80:07:2f:19:bd:b6:1d:21:9c: ea:f3:73:ac:77:95:38:1f:89:04:98:25:37:1e:32: 2f:83:e6:5d:b3:52:b8:22:b7:08:6e:af:15:6f:69: 8f:fc:21:d8:bc:8b:bc:d3:51:cb:19:66:f2:90:b0: b1:5f:e3:1d:69:ff:d6:68:ae:3d:67:3f:46:62:de: ae:8f:b1:4e:c7:d5:77:38:2e:35:b5:7c:97:b7:ce: 8b:00:1b:73:8f:2f:4e:76:7f:b5:4c:c5:07:08:2a: bb:1f:9a:cb:11:c7:c3:12:a7:b0:23:d4:d5:d6:95: 8e:d2:e1:da:f1:d4:1d:7b:e7:07:76:16:36:02:0e: d1:21:0a:34:7d:2b:1a:d2:cf:ba:42:d4:07:11:ca: b4:21:ec:0b:5d:1f:01:11:b8:51:11:08:ae:90:24: 92:db:e6:f1:4c:1e:9c:11:97:67:02:e1:5d:a5:66: 71:76:f7:54:69:bb:dc:21:d1:8c:34:74:41:4d:2d: 84:ad:13:cf:f2:e4:a2:e7:67:1a:4c:6d:93:2a:e1: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6F:D5:4E:43:64:6B:08:EE:C7:ED:9B:E9:D7:10:67:E3:D4:49:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c77ddf1c-0d2f-45fe-92ab-cb1e45ae4b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.128.0/19 Signature Algorithm: sha256WithRSAEncryption 09:ea:2c:de:b0:c2:26:e6:f3:66:79:03:57:b1:ef:57:22:8c: 32:24:eb:ce:ee:ec:16:3b:3d:72:d6:36:8b:86:dc:24:e0:10: 29:6d:1a:52:d1:01:b5:f7:b6:dc:1a:12:6f:7d:23:84:b4:5c: 04:3e:99:ae:5e:e5:4e:25:65:43:fc:82:57:06:80:94:8c:dc: bc:37:d2:79:be:fa:29:c6:5d:14:dc:cf:43:44:96:c9:32:68: fb:48:ae:63:89:39:32:31:81:59:83:84:85:a1:b0:cf:80:52: 7a:9e:42:7f:79:bf:58:b1:65:65:55:01:e4:9f:13:6f:1b:8c: f6:ef:f6:d2:4f:07:d0:b6:bf:90:30:bf:a2:6a:8a:9d:95:c7: 09:7f:c1:d4:01:d4:ec:ba:fe:fa:5b:6d:cf:b4:53:fe:89:7b: cd:bf:3e:9b:a6:97:48:f5:f5:25:cd:fc:8b:bd:f7:7d:78:45: 96:29:d7:c8:17:9d:4a:9a:a3:0d:2c:a7:f4:bd:a8:fa:30:26: c7:3d:3f:b0:78:39:b6:4a:55:38:bf:b4:4a:c0:1f:fd:58:22: c5:f1:7f:95:d4:a2:47:fd:e4:7f:bb:da:81:11:15:bb:f5:76: e0:2b:ff:71:17:f4:d8:e9:c4:43:c7:ef:01:58:12:ff:43:b9: 55:6d:14:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcvvl5UOVM6H/dvQD8eLg8oASbZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDIyMDA1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjMzZmU3NWEwNjg4MDhkYjZkNDNlNmRiM2M4ZTYwOTBl YWZiMmJkMTA3ZGE3MGMxOGU3MDdkNDgwNjA1MTM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC648o2iy8cpZzmVmOH0cCGCWsbbELDkGz4zTrubXckTxvn r1arD5JFMZIJQh8kKJdERYAHLxm9th0hnOrzc6x3lTgfiQSYJTceMi+D5l2zUrgi twhurxVvaY/8Idi8i7zTUcsZZvKQsLFf4x1p/9Zorj1nP0Zi3q6PsU7H1Xc4LjW1 fJe3zosAG3OPL052f7VMxQcIKrsfmssRx8MSp7Aj1NXWlY7S4drx1B175wd2FjYC DtEhCjR9KxrSz7pC1AcRyrQh7AtdHwERuFERCK6QJJLb5vFMHpwRl2cC4V2lZnF2 91Rpu9wh0Yw0dEFNLYStE8/y5KLnZxpMbZMq4bsBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs2/VTkNkawjux+2b6dcQZ+PUSRMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3N2RkZjFjLTBkMmYtNDVmZS05MmFiLWNiMWU0NWFlNGI4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU0LoAwDQYJKoZIhvcNAQELBQADggEBAAnqLN6wwibm82Z5A1ex71cijDIk 687u7BY7PXLWNouG3CTgECltGlLRAbX3ttwaEm99I4S0XAQ+ma5e5U4lZUP8glcG gJSM3Lw30nm++inGXRTcz0NElskyaPtIrmOJOTIxgVmDhIWhsM+AUnqeQn95v1ix ZWVVAeSfE28bjPbv9tJPB9C2v5Awv6Jqip2Vxwl/wdQB1Oy6/vpbbc+0U/6Je82/ Ppuml0j19SXN/Iu99314RZYp18gXnUqaow0sp/S9qPowJsc9P7B4ObZKVTi/tErA H/1YIsXxf5XUokf95H+72oERFbv1duAr/3EX9NjpxEPH7wFYEv9DuVVtFIo= -----END CERTIFICATE-----Generated at Sat Nov 7 16:14:22 2026 by rpki-client