$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa File: d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa (raw, json) Hash identifier: T/XzzU3q/y9PC1EH4Sgx2qb9UDxUvK8IpL6aUOrfTE8= Subject key identifier: F0:98:93:67:75:26:A7:28:8F:D2:F7:3E:A7:8B:3B:61:97:82:6B:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6463253E19D41A42519ADA8A13090820D4C42489 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa Signing time: Thu 15 Oct 2026 00:50:07 +0000 ROA not before: Thu 15 Oct 2026 00:50:07 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 54.172.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:63:25:3e:19:d4:1a:42:51:9a:da:8a:13:09:08:20:d4:c4:24:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 00:50:07 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=d601d940e4f7e75582202576d2322753397c90b4bc13d0bdef555c3e4f4e3286, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:1e:5b:09:8f:bc:12:04:b1:cd:cf:fa:4d: e1:ad:c6:0d:e6:9e:fc:86:fd:bc:54:4d:b1:96:e5: 40:41:7b:cf:88:a1:14:83:95:2c:d4:05:9d:8c:fe: 1d:16:08:85:ad:6f:eb:5c:ad:4c:9e:6a:8a:f6:55: 2d:0d:fe:19:9a:30:bd:dc:f6:f1:81:dc:f6:83:c7: 3e:06:44:86:af:91:44:a5:7c:09:e3:88:63:43:87: e7:b4:e4:ce:2d:af:a7:10:83:85:b6:8c:cb:93:91: 1d:a8:00:27:eb:01:c4:42:64:75:c5:c1:33:ec:ca: dd:19:66:27:2d:f4:c8:eb:95:39:c9:81:9a:80:1c: 03:82:89:39:d5:d6:09:ec:ed:12:9a:7d:e5:85:eb: b8:7c:3c:c8:9d:25:b7:31:08:d5:9e:50:cd:82:60: d7:d8:97:cd:4d:f8:29:28:29:b0:ae:f7:44:f4:3b: cc:f6:66:e6:3e:29:2a:42:e6:6e:b5:5d:b4:dd:c0: aa:3f:e9:94:a5:a3:98:54:11:29:f9:df:15:38:eb: 15:7a:f6:c1:aa:10:63:3d:05:21:6c:f6:ff:04:22: dd:2a:cd:10:83:11:0f:60:8c:a5:91:b2:6b:fb:4e: fd:02:26:a0:c2:73:c4:d8:35:2c:6a:c4:fc:51:3c: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:98:93:67:75:26:A7:28:8F:D2:F7:3E:A7:8B:3B:61:97:82:6B:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.172.0.0/15 Signature Algorithm: sha256WithRSAEncryption b3:8f:62:69:40:00:1d:b5:6d:33:9b:63:74:61:43:b4:96:52: 84:04:2f:f1:50:93:4d:24:2c:ae:00:63:02:90:4b:58:0a:41: 7a:2d:bc:ff:7c:13:88:b8:ba:21:22:a2:62:eb:91:ca:28:3d: 82:a8:00:02:a5:08:fa:79:8a:0f:93:f6:34:9a:9d:8c:d9:45: c1:2a:72:57:d3:77:dd:a4:af:41:aa:a1:fb:97:75:6d:2f:28: d8:6f:5c:bc:2f:8f:37:7c:60:b0:5d:85:1e:74:b2:db:48:53: 0f:7f:35:a0:d4:3f:c7:9b:e8:2d:d3:04:ca:01:00:e2:d4:8a: 31:c0:6d:97:0a:df:65:ea:48:03:8f:e8:bd:00:86:d9:81:7a: 66:2e:52:d4:32:f8:c8:94:ce:05:3f:c9:2e:03:ac:74:46:66: 42:87:54:ca:ad:a0:69:fd:c9:56:85:ba:f1:d7:26:b9:f5:c4: d8:44:c5:e6:e0:16:06:1d:ff:ab:09:87:c5:aa:51:58:d0:22: 29:29:f3:a9:c6:1d:90:0d:e0:da:cd:aa:46:7d:55:53:e1:1f: 8e:33:bb:46:90:6b:d6:c8:e4:0d:f6:be:3a:d0:ea:46:9f:ec: 97:ec:f8:76:55:b9:d4:e9:3f:de:55:c7:6a:67:74:9a:83:da: f2:ab:aa:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZGMlPhnUGkJRmtqKEwkIINTEJIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDA1MDA3WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjAxZDk0MGU0ZjdlNzU1ODIyMDI1NzZkMjMyMjc1MzM5 N2M5MGI0YmMxM2QwYmRlZjU1NWMzZTRmNGUzMjg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMmB5bCY+8EgSxzc/6TeGtxg3mnvyG/bxUTbGW5UBBe8+I oRSDlSzUBZ2M/h0WCIWtb+tcrUyeaor2VS0N/hmaML3c9vGB3PaDxz4GRIavkUSl fAnjiGNDh+e05M4tr6cQg4W2jMuTkR2oACfrAcRCZHXFwTPsyt0ZZict9MjrlTnJ gZqAHAOCiTnV1gns7RKafeWF67h8PMidJbcxCNWeUM2CYNfYl81N+CkoKbCu90T0 O8z2ZuY+KSpC5m61XbTdwKo/6ZSlo5hUESn53xU46xV69sGqEGM9BSFs9v8EIt0q zRCDEQ9gjKWRsmv7Tv0CJqDCc8TYNSxqxPxRPCQBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8JiTZ3UmpyiP0vc+p4s7YZeCa4YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2OTdjM2EzLTIxZTQtNGZmOS04ZjhhLTc3NTE4N2JiZTIwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2rDANBgkqhkiG9w0BAQsFAAOCAQEAs49iaUAAHbVtM5tjdGFDtJZShAQv 8VCTTSQsrgBjApBLWApBei28/3wTiLi6ISKiYuuRyig9gqgAAqUI+nmKD5P2NJqd jNlFwSpyV9N33aSvQaqh+5d1bS8o2G9cvC+PN3xgsF2FHnSy20hTD381oNQ/x5vo LdMEygEA4tSKMcBtlwrfZepIA4/ovQCG2YF6Zi5S1DL4yJTOBT/JLgOsdEZmQodU yq2gaf3JVoW68dcmufXE2ETF5uAWBh3/qwmHxapRWNAiKSnzqcYdkA3g2s2qRn1V U+EfjjO7RpBr1sjkDfa+OtDqRp/sl+z4dlW51Ok/3lXHamd0moPa8quq4Q== -----END CERTIFICATE-----Generated at Thu Nov 5 04:49:44 2026 by rpki-client