$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa File: d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa (raw, json) Hash identifier: vHh0/jK6MoOyK443eBleZoM6Ev6qRo00sAmPhC0J54Y= Subject key identifier: 60:8B:9D:D2:46:7D:33:5B:EE:36:C0:42:3A:59:97:F8:1B:29:61:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26F9B82A8B72C741BD67FC8635637B4972D28552 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa Signing time: Sun 18 Oct 2026 00:50:35 +0000 ROA not before: Sun 18 Oct 2026 00:50:35 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f9:b8:2a:8b:72:c7:41:bd:67:fc:86:35:63:7b:49:72:d2:85:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 00:50:35 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=c843173681a47ec20053d9be183983ef0269caf4bd00040a09e6d5a4f595bd79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:e5:0c:3f:11:3f:e0:7a:17:cc:c1:68:2a: 16:c3:13:e8:7f:de:98:d7:ea:e9:13:86:aa:7b:65: 4c:e0:31:5a:81:74:92:f3:d6:f1:2c:f7:12:76:61: 01:fd:40:32:3a:bf:17:14:a0:38:49:0b:c5:e3:9a: 6b:04:ce:56:07:49:1d:c1:c5:2c:2a:0e:7b:f4:95: f7:f0:a1:d0:a8:0a:b5:42:de:c9:4f:df:96:58:2b: d3:c2:0f:c3:30:f3:fe:b1:0f:4f:4d:d7:24:1a:c8: 70:e4:d9:ab:65:e6:e0:7e:6b:94:50:e2:5c:14:80: 17:b9:d7:26:fb:62:ba:6e:bc:47:a3:57:f2:0d:98: 8a:2f:e2:ee:cb:8c:84:ea:5d:4e:a4:bf:05:39:d7: a3:f9:2d:11:72:f4:6b:78:40:60:75:e7:24:8a:d9: d9:05:a3:d4:fc:75:e9:55:90:9f:45:ca:e4:95:0f: 75:a5:6d:df:9c:28:45:8a:e0:e0:2b:5a:9b:b2:7a: 80:09:04:5d:4d:ea:32:18:6a:a1:bb:17:11:9b:7d: 27:f2:c9:fd:a1:3c:b7:ae:00:79:79:9e:ed:06:c8: df:33:bc:16:36:a6:d3:91:b4:8b:72:07:2e:ed:c2: 71:90:99:01:80:9d:b5:7f:6b:eb:d2:c3:9f:9d:67: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:9D:D2:46:7D:33:5B:EE:36:C0:42:3A:59:97:F8:1B:29:61:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.52.0/22 Signature Algorithm: sha256WithRSAEncryption a4:0f:61:6e:ed:3c:40:b8:20:d1:f8:1c:64:ed:08:73:72:67: 68:80:c8:64:1b:b6:c9:01:1c:22:da:f8:92:40:bb:36:5d:8c: 99:94:11:17:68:fa:12:7f:27:0c:5f:ec:fe:6a:f1:3c:26:3d: 94:b5:5d:c2:41:83:d5:0e:e7:16:4a:50:3e:59:55:01:dc:ac: fb:00:77:95:2a:25:5a:2e:47:96:92:d4:af:d3:ef:9d:87:77: c0:e7:17:cb:1e:42:06:5f:de:cd:0a:3a:b4:0d:75:1e:95:98: 22:af:ed:2f:ef:1b:5c:22:e0:c2:08:07:97:42:ea:7f:00:a8: 84:7d:0c:fa:34:b2:da:ac:07:83:4e:68:cf:bc:f9:e4:9d:34: 25:58:68:7e:2e:30:12:b0:1d:ee:86:2b:10:b0:db:f4:67:81: 1c:fd:1e:53:3c:93:a1:6d:8e:3e:d9:48:bd:a5:c3:8f:db:8b: b6:58:db:73:19:eb:77:3a:a8:33:4f:f3:af:a0:0b:3c:7b:11: 43:76:c4:66:d2:2d:ea:d7:f2:fe:b4:21:9b:83:b7:06:8f:95: 40:e2:a3:4e:46:96:34:91:27:1e:77:14:8e:ab:bf:5a:d9:d6: c0:7a:80:61:cf:fa:89:d6:cc:fd:c4:ca:b0:52:b4:29:57:65: 2e:bf:12:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJvm4Kotyx0G9Z/yGNWN7SXLShVIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE4MDA1MDM1WhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODQzMTczNjgxYTQ3ZWMyMDA1M2Q5YmUxODM5ODNlZjAy NjljYWY0YmQwMDA0MGEwOWU2ZDVhNGY1OTViZDc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJs+UMPxE/4HoXzMFoKhbDE+h/3pjX6ukThqp7ZUzgMVqB dJLz1vEs9xJ2YQH9QDI6vxcUoDhJC8XjmmsEzlYHSR3BxSwqDnv0lffwodCoCrVC 3slP35ZYK9PCD8Mw8/6xD09N1yQayHDk2atl5uB+a5RQ4lwUgBe51yb7YrpuvEej V/INmIov4u7LjITqXU6kvwU516P5LRFy9Gt4QGB15ySK2dkFo9T8delVkJ9FyuSV D3Wlbd+cKEWK4OArWpuyeoAJBF1N6jIYaqG7FxGbfSfyyf2hPLeuAHl5nu0GyN8z vBY2ptORtItyBy7twnGQmQGAnbV/a+vSw5+dZ28DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYIud0kZ9M1vuNsBCOlmX+BspYZUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4NjY0ZGY2LTFhMjAtNDFmMi05ODNmLWQ3YWNjNzdhNmY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XzQwDQYJKoZIhvcNAQELBQADggEBAKQPYW7tPEC4INH4HGTtCHNyZ2iA yGQbtskBHCLa+JJAuzZdjJmUERdo+hJ/Jwxf7P5q8TwmPZS1XcJBg9UO5xZKUD5Z VQHcrPsAd5UqJVouR5aS1K/T752Hd8DnF8seQgZf3s0KOrQNdR6VmCKv7S/vG1wi 4MIIB5dC6n8AqIR9DPo0stqsB4NOaM+8+eSdNCVYaH4uMBKwHe6GKxCw2/RngRz9 HlM8k6Ftjj7ZSL2lw4/bi7ZY23MZ63c6qDNP86+gCzx7EUN2xGbSLerX8v60IZuD twaPlUDio05GljSRJx53FI6rv1rZ1sB6gGHP+onWzP3EyrBStClXZS6/EpQ= -----END CERTIFICATE-----Generated at Sat Nov 7 22:02:52 2026 by rpki-client