$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3df62c6-a20f-49ca-a426-a681b046cf15.roa File: d3df62c6-a20f-49ca-a426-a681b046cf15.roa (raw, json) Hash identifier: fG/mgyEZYqvF+iL5aXLGTcD5Xwy+A/F/4QeLZ15ej1s= Subject key identifier: A1:8F:1E:03:B2:1D:C8:90:59:47:6D:7C:4D:BE:B3:71:8B:17:8B:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0835EE1F0D2472724DF90E0D277DD8E381C056BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3df62c6-a20f-49ca-a426-a681b046cf15.roa Signing time: Sat 24 Oct 2026 01:40:42 +0000 ROA not before: Sat 24 Oct 2026 01:40:42 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:ee:1f:0d:24:72:72:4d:f9:0e:0d:27:7d:d8:e3:81:c0:56:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:40:42 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=f830097e610e04e19d0384b1c75951b4d0e9f660962b59d8003a9edfa05795c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:30:87:f0:e6:0c:54:01:79:9a:4d:b1:40: 7c:21:b6:02:3f:b6:92:01:b6:bf:0f:75:c9:af:33: 07:a7:8d:9d:2e:df:87:ef:4a:ad:96:d3:c4:be:77: 76:92:6d:5b:de:f3:b5:28:0c:78:4e:98:c0:eb:c4: 9a:3c:d0:38:2d:d7:8a:23:49:0d:97:1b:8a:0a:05: f9:ec:1a:b8:a8:a8:a1:46:b8:3a:56:89:42:5a:9c: b3:3d:56:ed:5c:75:70:df:e0:ca:a1:27:0e:0d:ed: 5b:11:0c:5e:2b:b6:39:a5:e6:76:34:8e:bd:02:cf: a2:39:68:45:c2:6f:9f:5f:be:b5:29:79:b0:ef:1a: 0e:70:0f:47:d7:36:15:2a:8b:25:44:69:32:9b:26: bb:94:7b:72:2c:3a:4a:81:55:b0:4b:77:fa:f8:33: af:43:6c:93:b5:17:66:58:85:71:08:01:16:2e:e3: f6:52:dc:ae:91:98:64:19:20:ae:0c:f8:b4:e5:95: 7e:d5:4a:9e:c0:7a:2e:02:8b:89:11:34:23:81:b6: 15:21:bb:c2:0d:8a:71:ce:21:00:f2:63:a7:ef:b1: a6:21:98:88:f8:7c:18:fe:e0:04:a4:c4:8d:47:5f: 87:79:17:31:67:fb:26:eb:fd:65:a5:c3:ac:b5:03: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:1E:03:B2:1D:C8:90:59:47:6D:7C:4D:BE:B3:71:8B:17:8B:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3df62c6-a20f-49ca-a426-a681b046cf15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.48.0/22 Signature Algorithm: sha256WithRSAEncryption 86:71:88:fb:c6:c4:d3:b2:89:87:7b:ea:65:ef:3f:ea:80:40: d3:f6:72:1d:8f:b2:61:78:12:45:b9:90:5e:4d:f8:7d:f1:b4: d9:59:40:c0:6d:db:4b:ae:7e:38:ee:7c:07:9a:26:b6:8e:71: d9:66:f4:37:de:53:d8:61:3d:d4:89:cf:63:67:a5:97:d0:20: 46:82:8e:86:9e:69:d2:42:9a:5e:d0:96:dd:00:75:d1:9a:d2: b1:67:64:f0:e2:ea:e7:8f:6a:bd:4f:ad:35:45:41:a9:ac:e5: 6c:f6:30:cf:55:c2:35:04:6d:3e:e2:b9:3c:d1:ab:c0:47:c9: c2:25:f5:3f:5f:38:20:8a:ef:7e:26:ec:ce:b0:46:3b:e6:f7: fc:9e:ee:39:fd:3a:92:c6:03:9d:b1:2f:be:85:69:44:ec:b9: 82:79:f1:61:11:23:3e:45:f1:84:d8:81:aa:cf:12:21:ca:62: e1:ef:cc:64:21:8e:62:98:1c:43:b8:6f:0b:2f:cc:c4:16:78: 4f:56:8d:aa:6a:c5:86:1b:73:8c:ea:09:44:ff:f4:48:09:6b: 3c:69:c4:31:d1:bf:53:53:e9:34:bf:0b:61:3b:e6:ca:d9:00: 57:62:f7:0f:52:db:dc:28:ed:bf:c1:c3:4e:bb:1e:18:11:49: fd:e9:29:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCDXuHw0kcnJN+Q4NJ33Y44HAVrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDE0MDQyWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODMwMDk3ZTYxMGUwNGUxOWQwMzg0YjFjNzU5NTFiNGQw ZTlmNjYwOTYyYjU5ZDgwMDNhOWVkZmEwNTc5NWM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoHjCH8OYMVAF5mk2xQHwhtgI/tpIBtr8PdcmvMwenjZ0u 34fvSq2W08S+d3aSbVve87UoDHhOmMDrxJo80Dgt14ojSQ2XG4oKBfnsGrioqKFG uDpWiUJanLM9Vu1cdXDf4MqhJw4N7VsRDF4rtjml5nY0jr0Cz6I5aEXCb59fvrUp ebDvGg5wD0fXNhUqiyVEaTKbJruUe3IsOkqBVbBLd/r4M69DbJO1F2ZYhXEIARYu 4/ZS3K6RmGQZIK4M+LTllX7VSp7Aei4Ci4kRNCOBthUhu8INinHOIQDyY6fvsaYh mIj4fBj+4ASkxI1HX4d5FzFn+ybr/WWlw6y1A9hnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoY8eA7IdyJBZR218Tb6zcYsXi9kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzZGY2MmM2LWEyMGYtNDljYS1hNDI2LWE2ODFiMDQ2Y2YxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI27zAwDQYJKoZIhvcNAQELBQADggEBAIZxiPvGxNOyiYd76mXvP+qAQNP2 ch2PsmF4EkW5kF5N+H3xtNlZQMBt20uufjjufAeaJraOcdlm9DfeU9hhPdSJz2Nn pZfQIEaCjoaeadJCml7Qlt0AddGa0rFnZPDi6uePar1PrTVFQams5Wz2MM9VwjUE bT7iuTzRq8BHycIl9T9fOCCK734m7M6wRjvm9/ye7jn9OpLGA52xL76FaUTsuYJ5 8WERIz5F8YTYgarPEiHKYuHvzGQhjmKYHEO4bwsvzMQWeE9WjapqxYYbc4zqCUT/ 9EgJazxpxDHRv1NT6TS/C2E75srZAFdi9w9S29wo7b/Bw067HhgRSf3pKSM= -----END CERTIFICATE-----Generated at Sun Nov 8 00:55:29 2026 by rpki-client