$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa File: cdf86191-6770-46d1-ad86-96332b6ed7e8.roa (raw, json) Hash identifier: pQs4v8EvZ3TfWSSshdm3DPuE5jPXetKuzD4Ve+TEhbk= Subject key identifier: 30:04:42:FA:2C:F7:34:83:E8:B6:74:5C:D5:9F:B8:1D:7A:1A:7A:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01B73AC770C9359F3FE9E5A3AEE3ED20EAFAFF69 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa Signing time: Thu 15 Oct 2026 01:40:06 +0000 ROA not before: Thu 15 Oct 2026 01:40:06 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b7:3a:c7:70:c9:35:9f:3f:e9:e5:a3:ae:e3:ed:20:ea:fa:ff:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:40:06 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=8a00f3e2e76da55c299847f3731c1d566557b250a72e8230d43730a778a2f49c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:07:82:b4:e1:d5:26:8f:81:c4:8e:8b:78: 20:88:e5:c6:31:23:bd:f0:76:13:0e:43:33:8d:54: 65:7d:3d:e8:f2:af:6d:f3:eb:73:e9:d6:8d:9d:92: 7a:1b:59:dc:27:27:04:88:e9:e0:7e:ef:eb:9e:28: 70:92:5a:56:de:60:63:3f:1b:9a:f9:ca:c9:40:e4: 18:09:3a:4e:50:04:ae:87:d0:f3:ca:cb:77:98:84: 90:6e:50:a8:ff:04:d1:bb:f7:6f:d7:b2:c3:65:ff: 7b:96:aa:00:8b:19:f8:05:f2:a5:cc:d6:fe:b1:7f: 9e:04:cf:af:ee:05:2a:40:30:d4:f6:46:76:a8:16: 1e:86:41:f6:12:bb:84:28:6a:09:a3:62:0c:45:82: 27:91:a0:09:8e:4f:cd:a1:81:a2:4b:da:82:8c:0e: aa:24:4a:a9:c4:32:7f:36:ef:f6:d6:56:a8:d9:39: dc:01:e5:42:00:05:82:67:76:93:07:1f:e2:93:dd: 15:21:4b:5d:27:88:8c:40:85:56:d4:e3:4c:fe:88: 27:02:93:35:9e:f9:fd:36:25:f9:33:24:b2:5b:ee: 40:6d:4c:88:cd:4b:65:9d:a7:5f:a2:3b:5e:f4:77: f0:41:68:a8:35:e7:79:a8:70:e6:39:01:ac:21:4a: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:42:FA:2C:F7:34:83:E8:B6:74:5C:D5:9F:B8:1D:7A:1A:7A:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption b3:e8:7c:e1:45:c9:7c:59:0c:32:92:61:11:61:b5:9d:48:f7: 53:c3:b0:2d:12:7c:91:52:8f:b7:84:cb:eb:c4:9e:27:f0:f1: 9e:a5:4d:ee:4d:15:29:24:a0:0b:51:25:b7:3a:5a:ab:ab:76: 9b:68:ff:c2:95:33:a5:1d:57:e1:8a:c9:43:ec:06:46:b0:81: 1e:58:6a:c0:c3:54:07:57:95:93:ad:66:19:05:3a:2b:65:43: 41:b4:a4:c5:40:3f:1d:bf:23:ba:b1:55:50:bb:8b:69:43:cf: 14:14:66:b7:5a:06:f1:3a:ad:fc:50:56:8f:0c:48:e7:10:aa: 54:c7:41:8a:1e:12:ed:fb:d7:14:b5:05:bf:bc:e6:b4:de:3f: 8d:c2:6b:86:d1:9a:7b:be:ce:ab:01:c8:6b:8f:41:9a:ed:00: 49:42:d0:3d:69:1e:a3:f9:9d:9e:d8:e7:ad:99:96:e0:37:c4: 69:1e:43:03:44:96:ff:c9:7d:2c:12:be:44:f9:43:d9:a2:20: c1:40:11:8b:48:79:be:9b:01:35:f6:f5:22:02:15:4c:7b:51: a9:48:09:51:de:0e:17:27:2d:01:aa:e6:db:54:b1:d6:d9:18: eb:92:a6:69:1a:e1:12:d0:cc:53:7d:c2:29:f8:7c:f8:13:c6: 68:61:88:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAbc6x3DJNZ8/6eWjruPtIOr6/2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDE0MDA2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTAwZjNlMmU3NmRhNTVjMjk5ODQ3ZjM3MzFjMWQ1NjY1 NTdiMjUwYTcyZTgyMzBkNDM3MzBhNzc4YTJmNDljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlUQeCtOHVJo+BxI6LeCCI5cYxI73wdhMOQzONVGV9Pejy r23z63Pp1o2dknobWdwnJwSI6eB+7+ueKHCSWlbeYGM/G5r5yslA5BgJOk5QBK6H 0PPKy3eYhJBuUKj/BNG792/XssNl/3uWqgCLGfgF8qXM1v6xf54Ez6/uBSpAMNT2 RnaoFh6GQfYSu4QoagmjYgxFgieRoAmOT82hgaJL2oKMDqokSqnEMn827/bWVqjZ OdwB5UIABYJndpMHH+KT3RUhS10niIxAhVbU40z+iCcCkzWe+f02JfkzJLJb7kBt TIjNS2Wdp1+iO170d/BBaKg153mocOY5AawhSoiTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMARC+iz3NIPotnRc1Z+4HXoaegkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkZjg2MTkxLTY3NzAtNDZkMS1hZDg2LTk2MzMyYjZlZDdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0E4AwDQYJKoZIhvcNAQELBQADggEBALPofOFFyXxZDDKSYRFhtZ1I91PD sC0SfJFSj7eEy+vEnifw8Z6lTe5NFSkkoAtRJbc6Wqurdpto/8KVM6UdV+GKyUPs BkawgR5YasDDVAdXlZOtZhkFOitlQ0G0pMVAPx2/I7qxVVC7i2lDzxQUZrdaBvE6 rfxQVo8MSOcQqlTHQYoeEu371xS1Bb+85rTeP43Ca4bRmnu+zqsByGuPQZrtAElC 0D1pHqP5nZ7Y562ZluA3xGkeQwNElv/JfSwSvkT5Q9miIMFAEYtIeb6bATX29SIC FUx7UalICVHeDhcnLQGq5ttUsdbZGOuSpmka4RLQzFN9win4fPgTxmhhiBU= -----END CERTIFICATE-----Generated at Sun Nov 8 02:42:47 2026 by rpki-client