$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d8e1-26f9-4f5b-a428-0989b643436b.roa File: cef8d8e1-26f9-4f5b-a428-0989b643436b.roa (raw, json) Hash identifier: xhnVYe7PK6EhdnkoVGRxOKOX9xM0kXsBLPnwd3TRw+Y= Subject key identifier: 79:BE:44:47:92:1D:F7:ED:CC:14:62:B5:7E:88:37:8D:75:82:2E:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 781B6F6D768CBB7F0F155411196AC2833BA0E350 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d8e1-26f9-4f5b-a428-0989b643436b.roa Signing time: Mon 26 Oct 2026 01:20:41 +0000 ROA not before: Mon 26 Oct 2026 01:20:41 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.144.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1b:6f:6d:76:8c:bb:7f:0f:15:54:11:19:6a:c2:83:3b:a0:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 26 01:20:41 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ed6b42097ff8786c3c55627b12888d83d622b62ff5b6333eea0c46238da4e9e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:59:21:00:83:67:37:35:53:73:2e:08:9d: d5:e4:3c:de:00:56:d7:98:c1:1b:41:5d:3d:6d:98: 91:99:74:0c:bd:a4:2c:5f:89:4e:2c:08:f5:f2:f1: 3f:f9:d0:b6:b9:c6:3f:3b:6c:e5:0f:0b:68:fe:01: 25:69:ec:d6:57:91:84:57:86:e0:1b:20:ab:cd:16: 27:e5:b7:aa:07:3d:e5:90:95:b7:e7:13:58:fb:95: 20:35:86:d9:b2:e4:15:0e:9c:b4:99:dd:11:4a:3a: f0:87:6a:fd:76:82:99:22:43:66:7d:cd:06:71:13: 8e:55:ea:7f:6a:50:10:e0:c2:b0:d3:39:cc:2b:ae: f6:d0:16:5a:64:e5:93:6c:c3:0f:f6:76:fd:b8:4e: ac:a9:e2:1e:ca:94:b9:4c:09:d3:18:15:c6:68:7e: 00:1c:66:77:3b:c2:4a:c0:0e:28:83:2b:b5:eb:f9: aa:0c:65:9c:c3:96:6a:0f:9a:ad:52:ac:fb:e7:f7: 01:1e:ab:4c:56:a9:0e:f3:19:52:51:82:2b:b7:75: 0f:c3:fd:ff:b1:d8:03:55:42:2a:74:95:27:6c:9c: 18:10:04:24:19:e4:1e:a9:10:44:d9:64:6f:bd:d4: b6:d1:62:a1:8c:ca:ba:65:35:b3:be:6e:db:5a:79: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:44:47:92:1D:F7:ED:CC:14:62:B5:7E:88:37:8D:75:82:2E:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d8e1-26f9-4f5b-a428-0989b643436b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.144.128.0/17 Signature Algorithm: sha256WithRSAEncryption 36:81:fd:92:8d:82:67:04:50:83:c0:e2:11:a9:8f:33:4d:65: 6f:1c:97:7a:f3:49:1a:8e:bc:f8:a4:72:b6:74:96:50:a7:16: f3:db:d9:c0:e8:d5:52:0e:e5:70:35:d1:80:89:ce:4f:3c:06: 6d:cf:e4:78:08:9c:9d:86:c4:27:e2:ff:1a:83:17:c5:27:01: 71:09:9b:0f:58:2c:0e:b7:aa:95:ca:95:8b:1b:cb:94:46:3e: a3:6a:11:71:9f:e0:da:29:77:e4:8a:03:f4:1f:60:1b:4b:d2: 09:6b:d1:ca:27:ef:aa:76:0b:31:b9:e6:db:ec:92:50:9a:ae: 62:1c:af:db:ba:37:0d:07:c9:c7:ad:f9:b8:42:2d:13:d1:78: a5:79:f0:0f:56:3b:87:e4:bb:80:7d:21:1a:03:69:ce:f1:23: 86:02:c2:03:a6:66:a5:e4:f3:06:05:79:be:3a:c6:b6:fa:1e: e1:6a:95:ec:6f:c3:15:8b:1c:93:1b:d7:81:1f:26:dc:fa:77: 9f:1d:b8:cf:3c:a5:e1:31:9d:76:ae:d8:2f:6a:98:0a:f4:8f: a9:81:24:bf:3b:d1:93:41:af:71:0d:05:98:c3:73:36:57:75: b9:02:87:e8:9c:87:2a:36:0a:b7:38:b8:b3:04:86:d8:20:70: dc:3b:23:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeBtvbXaMu38PFVQRGWrCgzug41AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDEyMDQxWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDZiNDIwOTdmZjg3ODZjM2M1NTYyN2IxMjg4OGQ4M2Q2 MjJiNjJmZjViNjMzM2VlYTBjNDYyMzhkYTRlOWUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBHFkhAINnNzVTcy4IndXkPN4AVteYwRtBXT1tmJGZdAy9 pCxfiU4sCPXy8T/50La5xj87bOUPC2j+ASVp7NZXkYRXhuAbIKvNFiflt6oHPeWQ lbfnE1j7lSA1htmy5BUOnLSZ3RFKOvCHav12gpkiQ2Z9zQZxE45V6n9qUBDgwrDT OcwrrvbQFlpk5ZNsww/2dv24Tqyp4h7KlLlMCdMYFcZofgAcZnc7wkrADiiDK7Xr +aoMZZzDlmoPmq1SrPvn9wEeq0xWqQ7zGVJRgiu3dQ/D/f+x2ANVQip0lSdsnBgQ BCQZ5B6pEETZZG+91LbRYqGMyrplNbO+bttaedjhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeb5ER5Id9+3MFGK1fog3jXWCLqIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlZjhkOGUxLTI2ZjktNGY1Yi1hNDI4LTA5ODliNjQzNDM2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0kIAwDQYJKoZIhvcNAQELBQADggEBADaB/ZKNgmcEUIPA4hGpjzNNZW8c l3rzSRqOvPikcrZ0llCnFvPb2cDo1VIO5XA10YCJzk88Bm3P5HgInJ2GxCfi/xqD F8UnAXEJmw9YLA63qpXKlYsby5RGPqNqEXGf4Nopd+SKA/QfYBtL0glr0con76p2 CzG55tvsklCarmIcr9u6Nw0Hycet+bhCLRPReKV58A9WO4fku4B9IRoDac7xI4YC wgOmZqXk8wYFeb46xrb6HuFqlexvwxWLHJMb14EfJtz6d58duM88peExnXau2C9q mAr0j6mBJL870ZNBr3ENBZjDczZXdbkCh+ichyo2Crc4uLMEhtggcNw7IxA= -----END CERTIFICATE-----Generated at Sun Nov 8 01:05:55 2026 by rpki-client