$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc86195f-4393-4665-9232-e7dc0946eacd.roa File: cc86195f-4393-4665-9232-e7dc0946eacd.roa (raw, json) Hash identifier: jkh8VyCVHPJaM/qmG/x/yZRUCRtJBaKxnqSh7/TKGqM= Subject key identifier: D2:DC:1B:E3:51:99:3E:F3:75:6F:04:A6:3B:A6:42:FF:80:01:59:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51A50C0CCD5852AD9A09ABB4DD2921A3EFEEF604 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc86195f-4393-4665-9232-e7dc0946eacd.roa Signing time: Wed 21 Oct 2026 01:30:15 +0000 ROA not before: Wed 21 Oct 2026 01:30:15 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a5:0c:0c:cd:58:52:ad:9a:09:ab:b4:dd:29:21:a3:ef:ee:f6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 01:30:15 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=8302eae5bd2cb155d3b01b6b69fda15c8d2ba5e5d799511488fe491b12f70019, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:d6:ca:05:c9:03:86:b5:14:5b:1d:2d:c6: ef:ee:46:28:ab:8b:1e:8c:b6:e8:e1:35:81:13:93: f8:62:d9:96:69:bc:83:36:6c:ec:77:25:08:da:93: 89:49:18:f3:91:9a:0f:e7:12:b1:93:7d:a4:eb:1a: e7:b0:99:4f:a8:eb:ae:b6:07:32:bf:ab:6f:d5:95: f9:20:31:c1:bd:e8:93:81:8f:cb:25:e1:42:4c:b7: 01:0c:b3:5c:80:1a:0f:c1:94:c5:ad:78:02:32:e8: a4:0a:0e:96:83:f1:a5:13:ea:c4:54:be:43:11:28: 11:46:5e:27:e9:30:c4:21:6f:08:05:6d:7f:9d:fe: 0e:cc:82:ab:53:00:ef:50:c4:22:7f:44:18:5c:ba: a0:6a:4e:66:09:38:e3:1b:76:11:a9:85:22:4f:db: d4:ed:92:1f:1c:d3:4f:34:f0:92:80:3d:91:02:1c: ee:f2:44:b8:3e:c9:08:a6:09:1c:b4:6f:48:bc:4c: a6:0f:f6:c0:9f:7d:b2:0f:37:cc:e5:6c:62:d4:e9: 1d:d7:63:b3:d8:b7:0b:3e:ec:1d:e6:1d:ab:23:39: d1:02:0d:1e:11:64:d8:1b:54:c5:e8:cb:e0:11:c8: 45:5a:b7:18:bd:e6:1d:a7:73:70:55:34:ff:79:01: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:1B:E3:51:99:3E:F3:75:6F:04:A6:3B:A6:42:FF:80:01:59:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc86195f-4393-4665-9232-e7dc0946eacd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.253.0/24 Signature Algorithm: sha256WithRSAEncryption 69:a0:23:95:34:5a:11:3e:0e:9b:a9:68:c3:9a:e5:03:7e:95: 8b:21:c8:ff:b3:18:d6:1e:82:18:9b:21:12:ad:50:c3:71:da: bf:e0:7b:68:26:28:32:d2:bb:56:ff:76:76:eb:36:a4:ad:73: 88:73:e0:f7:84:db:0d:5e:06:47:4c:d2:1d:c1:83:6a:c0:2e: 67:25:97:e6:be:60:45:3f:7c:00:90:d9:d2:4d:82:e3:e6:6a: 19:18:4e:db:cf:71:23:1d:af:2a:d9:c6:4a:4f:de:96:6e:be: b2:a2:45:7d:0e:ac:cd:f7:ea:50:32:a0:e5:e7:82:f3:e7:d9: 9a:2d:ba:52:85:46:76:9f:f7:87:41:ab:69:33:ff:35:a4:a4: 22:21:c4:fe:43:8a:ad:be:83:d0:ca:4c:7a:df:f3:74:3c:a6: ea:96:97:c0:b6:78:85:17:11:a6:a0:4b:19:e3:af:ea:a1:66: ee:77:5c:60:88:8f:7c:e1:c4:91:ab:88:67:6e:92:2b:6b:69: 43:03:0d:64:3a:f2:8f:1a:ba:c9:e4:14:ff:12:dd:d6:e3:09: 57:ba:2b:3f:e9:4d:18:c5:5a:11:ef:c9:c2:47:c9:47:d6:9a: 80:32:cf:12:30:7a:78:9e:7a:bc:bc:9c:98:4f:d1:75:53:e6: 1e:ca:80:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUaUMDM1YUq2aCau03Skho+/u9gQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDEzMDE1WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzAyZWFlNWJkMmNiMTU1ZDNiMDFiNmI2OWZkYTE1Yzhk MmJhNWU1ZDc5OTUxMTQ4OGZlNDkxYjEyZjcwMDE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfBNbKBckDhrUUWx0txu/uRiirix6MtujhNYETk/hi2ZZp vIM2bOx3JQjak4lJGPORmg/nErGTfaTrGuewmU+o6662BzK/q2/VlfkgMcG96JOB j8sl4UJMtwEMs1yAGg/BlMWteAIy6KQKDpaD8aUT6sRUvkMRKBFGXifpMMQhbwgF bX+d/g7MgqtTAO9QxCJ/RBhcuqBqTmYJOOMbdhGphSJP29Ttkh8c00808JKAPZEC HO7yRLg+yQimCRy0b0i8TKYP9sCffbIPN8zlbGLU6R3XY7PYtws+7B3mHasjOdEC DR4RZNgbVMXoy+ARyEVatxi95h2nc3BVNP95AU+FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0twb41GZPvN1bwSmO6ZC/4ABWQ8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjODYxOTVmLTQzOTMtNDY2NS05MjMyLWU3ZGMwOTQ2ZWFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fP0wDQYJKoZIhvcNAQELBQADggEBAGmgI5U0WhE+DpupaMOa5QN+lYsh yP+zGNYeghibIRKtUMNx2r/ge2gmKDLSu1b/dnbrNqStc4hz4PeE2w1eBkdM0h3B g2rALmcll+a+YEU/fACQ2dJNguPmahkYTtvPcSMdryrZxkpP3pZuvrKiRX0OrM33 6lAyoOXngvPn2ZotulKFRnaf94dBq2kz/zWkpCIhxP5Diq2+g9DKTHrf83Q8puqW l8C2eIUXEaagSxnjr+qhZu53XGCIj3zhxJGriGdukitraUMDDWQ68o8ausnkFP8S 3dbjCVe6Kz/pTRjFWhHvycJHyUfWmoAyzxIwenieery8nJhP0XVT5h7KgHg= -----END CERTIFICATE-----Generated at Sat Nov 7 17:08:54 2026 by rpki-client