$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de91f2c1-dbef-4da9-b23d-7175e642a9b2.roa File: de91f2c1-dbef-4da9-b23d-7175e642a9b2.roa (raw, json) Hash identifier: do+dClwyoMzUukqJjF37XIqiW5zFzc14bghpRkalK6Y= Subject key identifier: BF:59:8A:90:56:AF:0D:D5:46:D9:D0:17:CA:8D:45:B3:DC:07:71:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A9A3C752EC44717E4C7E12C7E79012A63A1D43B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de91f2c1-dbef-4da9-b23d-7175e642a9b2.roa Signing time: Wed 21 Oct 2026 00:50:08 +0000 ROA not before: Wed 21 Oct 2026 00:50:08 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9a:3c:75:2e:c4:47:17:e4:c7:e1:2c:7e:79:01:2a:63:a1:d4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:50:08 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=6111526a0214774ac74b1efb72869a2675ed2aba98466112d433ae438470efc0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:c2:47:e3:c6:ab:33:3b:fa:af:db:c4:80: ad:48:fb:05:87:8d:82:e2:fe:2d:dd:ed:cf:4d:67: fc:03:57:21:4a:fe:b2:42:23:2e:38:ba:35:9a:97: 63:47:56:e1:8f:44:69:06:10:af:37:92:44:f0:e9: 51:66:3b:04:a5:63:72:b5:c9:c5:9b:d6:d4:30:e0: ce:3c:b3:c2:d0:12:61:86:1e:74:0a:f3:b8:f3:e4: c2:fd:de:91:96:51:44:18:47:08:75:45:6e:da:49: df:91:63:2b:51:28:75:17:a9:8b:90:7b:08:17:0d: 40:76:ad:cd:bc:79:74:e6:8f:fe:97:25:9a:be:a6: d5:e2:a1:02:2d:28:e8:75:00:b7:ab:97:3c:cd:c0: 47:dc:90:2d:41:78:ac:79:a9:ad:61:24:1d:03:1a: c9:db:f3:86:03:99:9b:59:be:ba:12:25:c6:19:1a: 98:04:12:01:09:47:e1:60:db:11:90:bf:ec:9c:d6: a3:b3:d1:ed:17:e2:f3:7d:b6:23:50:c3:41:9a:d8: 54:0e:89:90:b2:a0:74:fc:69:0a:84:40:81:c5:73: 7c:41:43:f5:b9:b1:91:bc:6e:94:d9:83:2f:95:a8: c8:d3:a2:34:a0:79:c6:6e:ae:dc:e9:39:5a:67:d9: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:8A:90:56:AF:0D:D5:46:D9:D0:17:CA:8D:45:B3:DC:07:71:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de91f2c1-dbef-4da9-b23d-7175e642a9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.240.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:a2:9c:81:85:6a:7b:69:0e:8e:fe:39:29:0a:0a:4d:00:e2: 50:86:b7:c3:d4:25:5f:84:af:d5:8f:44:b1:ff:ed:2a:37:b4: 1f:36:05:5c:6c:fe:ae:9e:2d:7d:51:5f:37:22:83:77:14:87: 3e:fe:08:d0:df:af:85:b8:9f:d8:6b:5f:40:9e:dd:89:92:2d: 47:bf:3c:19:8a:c3:19:57:25:86:d1:31:88:c8:6e:9e:98:79: 04:31:eb:21:02:c1:07:98:19:fa:28:42:00:e5:d0:3c:bd:a2: 06:b5:38:3e:d8:eb:88:d7:44:a6:68:0a:82:ca:83:cc:ca:19: 66:d2:ce:60:4b:8a:f0:b5:9f:c6:9e:dd:02:6b:0e:a7:18:e3: 6b:35:5c:9c:fc:73:c1:4d:4d:2a:20:61:5d:67:aa:7e:f7:e4: 0b:96:4c:0c:68:4b:4a:b0:c7:8d:cf:43:d2:8d:bb:81:6b:0d: 5f:c0:a3:42:f6:55:33:c7:46:5f:52:e2:a9:98:b1:a4:04:93: da:1b:84:de:f6:bb:8c:b6:6f:55:a8:1a:89:9b:1f:d9:44:e2: 21:d1:2d:d4:49:44:98:44:81:6f:0d:97:0b:f7:d6:04:f8:88: 98:2c:c1:85:db:38:1b:24:3d:d9:0f:5d:72:6a:a4:d8:53:a3: 34:e5:05:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSpo8dS7ERxfkx+EsfnkBKmOh1DswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDA1MDA4WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTExNTI2YTAyMTQ3NzRhYzc0YjFlZmI3Mjg2OWEyNjc1 ZWQyYWJhOTg0NjYxMTJkNDMzYWU0Mzg0NzBlZmMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOAcJH48arMzv6r9vEgK1I+wWHjYLi/i3d7c9NZ/wDVyFK /rJCIy44ujWal2NHVuGPRGkGEK83kkTw6VFmOwSlY3K1ycWb1tQw4M48s8LQEmGG HnQK87jz5ML93pGWUUQYRwh1RW7aSd+RYytRKHUXqYuQewgXDUB2rc28eXTmj/6X JZq+ptXioQItKOh1ALerlzzNwEfckC1BeKx5qa1hJB0DGsnb84YDmZtZvroSJcYZ GpgEEgEJR+Fg2xGQv+yc1qOz0e0X4vN9tiNQw0Ga2FQOiZCyoHT8aQqEQIHFc3xB Q/W5sZG8bpTZgy+VqMjTojSgecZurtzpOVpn2bcFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv1mKkFavDdVG2dAXyo1Fs9wHcaAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlOTFmMmMxLWRiZWYtNGRhOS1iMjNkLTcxNzVlNjQyYTliMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2wPAwDQYJKoZIhvcNAQELBQADggEBAHyinIGFantpDo7+OSkKCk0A4lCG t8PUJV+Er9WPRLH/7So3tB82BVxs/q6eLX1RXzcig3cUhz7+CNDfr4W4n9hrX0Ce 3YmSLUe/PBmKwxlXJYbRMYjIbp6YeQQx6yECwQeYGfooQgDl0Dy9oga1OD7Y64jX RKZoCoLKg8zKGWbSzmBLivC1n8ae3QJrDqcY42s1XJz8c8FNTSogYV1nqn735AuW TAxoS0qwx43PQ9KNu4FrDV/Ao0L2VTPHRl9S4qmYsaQEk9obhN72u4y2b1WoGomb H9lE4iHRLdRJRJhEgW8Nlwv31gT4iJgswYXbOBskPdkPXXJqpNhTozTlBbU= -----END CERTIFICATE-----Generated at Sat Nov 7 16:17:23 2026 by rpki-client