$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa File: d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa (raw, json) Hash identifier: rOEMm2fLUm5BA5ieVt1EjoYE1YcnN8059S9jlvFezmQ= Subject key identifier: 76:CE:1E:23:3A:D2:7F:67:56:DC:1F:84:A9:96:87:08:64:81:31:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24DC4E506B3C4CAC835D50F7380A26E56F6C63EF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa Signing time: Fri 23 Oct 2026 02:30:35 +0000 ROA not before: Fri 23 Oct 2026 02:30:35 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.199.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:dc:4e:50:6b:3c:4c:ac:83:5d:50:f7:38:0a:26:e5:6f:6c:63:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 23 02:30:35 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=6dd71bf8cdd97444f3ae10f15b48318ea21ab749eca1e0a0d2c585757eff94c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:11:25:43:46:1c:10:b6:dd:85:7a:e0:c3: bd:27:b0:eb:5d:e4:5b:2b:b3:6e:f5:37:aa:32:0a: 6f:bd:e4:77:ab:a4:4e:a3:5c:ef:36:ad:6d:a8:4d: a3:c7:bc:43:c1:e0:38:23:3b:c3:2f:35:9b:ae:dd: 8e:06:60:b2:04:7b:2a:1e:cb:70:dc:b1:c9:68:95: cc:9d:42:5f:20:31:0c:2a:5a:32:8e:77:2b:30:e2: fc:3e:31:3b:3a:81:73:9b:5e:9d:80:03:be:86:34: 47:26:a2:bd:0d:db:b4:b1:0a:fe:3d:79:ab:f2:c6: b0:45:5e:af:77:fe:c2:e6:b9:b7:1f:c6:16:8b:35: 8f:e0:ca:f8:59:82:30:f8:70:91:0c:1d:35:e0:0e: bc:76:55:5c:18:28:81:03:30:07:5f:2b:29:74:64: 43:96:90:31:97:cb:fd:85:99:43:16:7c:12:99:23: 11:bf:5d:a2:9c:3e:13:8d:f7:bf:c0:73:5f:da:fa: 40:0c:37:23:b4:fe:03:a4:77:94:d4:6e:c7:bf:c6: db:7d:62:0c:c8:a9:5b:47:ff:4f:12:93:fa:23:6b: 8d:25:4f:9c:9b:c6:fb:e7:13:7a:c8:4f:31:b6:aa: 48:ae:cd:73:da:5f:36:1c:60:9e:ee:10:97:f4:d7: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:1E:23:3A:D2:7F:67:56:DC:1F:84:A9:96:87:08:64:81:31:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.199.128.0/17 Signature Algorithm: sha256WithRSAEncryption 07:0b:c4:c9:ae:93:38:6f:bb:fe:21:84:d0:98:1a:a4:b8:cb: 95:49:14:f2:01:09:b1:a2:c7:8b:a4:5d:77:41:ea:48:35:95: 43:06:bd:67:dc:cc:7e:c5:f7:07:ab:0a:13:93:17:69:04:e7: 52:d9:90:33:d3:73:78:de:91:82:75:a0:2a:ed:71:1f:b2:c8: 86:f9:f1:84:fd:bf:e7:8f:33:5b:41:5d:e0:2d:16:7f:17:87: be:af:84:cc:5c:a6:6c:14:2a:b2:a3:d3:73:ac:d9:39:2a:6f: b1:d2:5b:64:90:9f:23:94:19:ac:36:92:65:43:af:03:be:dd: 44:9a:24:3d:5a:ba:5d:83:13:e2:72:78:fe:6d:e9:df:30:27: 69:b4:05:0f:9b:35:70:56:e4:db:c9:b3:e4:0f:13:cf:fa:74: 0e:ec:a7:6f:e6:cd:8f:3f:d0:a9:72:30:6d:4e:36:f6:1d:39: 62:63:cb:2b:b4:3e:df:b6:1a:7f:e7:b1:69:16:71:8e:c8:36: 4f:d1:14:51:57:43:54:c4:76:34:fb:25:74:bd:6d:9c:df:17: e4:22:68:77:a6:f8:3e:83:c6:8c:4d:cd:c7:fa:4b:ce:a4:b8: 87:28:5e:d4:cf:2c:ff:b4:86:c7:f1:de:8b:c5:3c:72:f9:1a: 75:7c:ac:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJNxOUGs8TKyDXVD3OAom5W9sY+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIzMDIzMDM1WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGQ3MWJmOGNkZDk3NDQ0ZjNhZTEwZjE1YjQ4MzE4ZWEy MWFiNzQ5ZWNhMWUwYTBkMmM1ODU3NTdlZmY5NGM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgShElQ0YcELbdhXrgw70nsOtd5Fsrs271N6oyCm+95Her pE6jXO82rW2oTaPHvEPB4DgjO8MvNZuu3Y4GYLIEeyoey3DcsclolcydQl8gMQwq WjKOdysw4vw+MTs6gXObXp2AA76GNEcmor0N27SxCv49eavyxrBFXq93/sLmubcf xhaLNY/gyvhZgjD4cJEMHTXgDrx2VVwYKIEDMAdfKyl0ZEOWkDGXy/2FmUMWfBKZ IxG/XaKcPhON97/Ac1/a+kAMNyO0/gOkd5TUbse/xtt9YgzIqVtH/08Sk/oja40l T5ybxvvnE3rITzG2qkiuzXPaXzYcYJ7uEJf015n9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUds4eIzrSf2dW3B+EqZaHCGSBMQYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzZThjYWRiLWRkNDctNDgwMS04YjYyLTBmYjZhYTY3YmJlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2x4AwDQYJKoZIhvcNAQELBQADggEBAAcLxMmukzhvu/4hhNCYGqS4y5VJ FPIBCbGix4ukXXdB6kg1lUMGvWfczH7F9werChOTF2kE51LZkDPTc3jekYJ1oCrt cR+yyIb58YT9v+ePM1tBXeAtFn8Xh76vhMxcpmwUKrKj03Os2Tkqb7HSW2SQnyOU Gaw2kmVDrwO+3USaJD1aul2DE+JyeP5t6d8wJ2m0BQ+bNXBW5NvJs+QPE8/6dA7s p2/mzY8/0KlyMG1ONvYdOWJjyyu0Pt+2Gn/nsWkWcY7INk/RFFFXQ1TEdjT7JXS9 bZzfF+QiaHem+D6DxoxNzcf6S86kuIcoXtTPLP+0hsfx3ovFPHL5GnV8rEY= -----END CERTIFICATE-----Generated at Sun Nov 8 00:07:01 2026 by rpki-client