$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0a1e81c-a927-4e6c-8e5b-c5daabc54665.roa File: f0a1e81c-a927-4e6c-8e5b-c5daabc54665.roa (raw, json) Hash identifier: qfg2b2+8OAtp8yzm3QIc6LkgMBV06nzXiXbgzyHR0lA= Subject key identifier: 69:AC:09:49:2D:71:4E:6B:96:E8:4B:C9:05:99:26:9A:F0:1D:6C:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6BFAD8425C163E2BBA2673FEEEDE486A71A773F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0a1e81c-a927-4e6c-8e5b-c5daabc54665.roa Signing time: Thu 22 Oct 2026 03:20:38 +0000 ROA not before: Thu 22 Oct 2026 03:20:38 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.235.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fa:d8:42:5c:16:3e:2b:ba:26:73:fe:ee:de:48:6a:71:a7:73:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 22 03:20:38 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=d5c97a7a2889fbad2d6efcd2d4ea970de44cc03903c8aabc31aefe584cce372b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:01:58:66:f5:0d:39:05:0a:92:32:5d:45: 80:86:37:15:08:f5:84:3b:75:10:9d:b5:45:2d:6f: b9:43:14:8c:4d:a7:0e:fb:cd:e1:f9:65:fc:ea:1d: 94:7b:56:ab:7e:84:ad:df:25:5c:c2:3f:ed:8d:5a: 4a:1f:17:7a:46:d7:99:32:c1:c8:64:7f:99:25:cd: 6a:13:f2:e5:a9:1e:7a:7f:8b:60:6b:9f:22:4f:44: e8:ad:35:ca:cc:9c:8d:ae:3d:7e:99:1d:ee:6f:0e: 5c:f0:e4:a4:36:6b:d1:24:d9:a3:d2:73:03:a2:8f: a0:3a:29:59:88:ac:0f:18:3e:42:44:93:d8:65:b2: 34:e5:e7:09:b9:2f:11:53:5c:fd:00:e2:66:1a:c8: 65:9c:ab:4c:42:18:0e:98:09:41:43:74:82:22:45: c5:5b:76:32:77:3f:90:38:c3:71:6f:ce:a9:c5:0b: c8:3a:12:fe:c4:95:bf:a3:5e:4e:1a:9e:0c:a1:f7: 0d:54:9a:50:73:83:ab:5d:90:ec:54:ff:81:ab:33: 5b:e7:b4:e8:56:a6:11:68:55:7b:47:65:aa:ca:cd: ff:1f:f3:73:df:93:1c:a8:b6:a5:f9:55:be:e5:58: 88:cf:c0:0a:b8:d7:cb:18:d5:80:35:12:69:ab:b0: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:09:49:2D:71:4E:6B:96:E8:4B:C9:05:99:26:9A:F0:1D:6C:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0a1e81c-a927-4e6c-8e5b-c5daabc54665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.235.64.0/18 Signature Algorithm: sha256WithRSAEncryption 21:5a:79:ca:4f:b1:7c:c6:4b:49:f2:cd:ca:d1:af:74:ae:46: d7:bf:b5:95:db:35:71:4c:a7:d7:20:08:d8:1b:9f:27:b9:6d: c9:26:61:60:13:a8:ae:4d:7a:3a:a5:f7:04:e7:04:ac:2d:bd: 2a:15:7f:a2:c1:a0:ac:f4:85:ff:39:52:9f:50:cf:02:7d:b7: 6b:1a:c2:10:b6:c9:d0:ec:e5:7c:ab:2d:2f:5a:c1:d2:45:47: b7:84:d2:65:9b:47:d4:7f:5e:81:d8:f3:7a:13:be:c1:c3:fe: 43:1c:46:77:a3:63:70:2b:c1:83:9c:72:ba:20:b1:4a:22:81: ad:79:41:52:df:f9:53:dc:a1:b0:ca:eb:4b:06:37:0c:89:33: f9:51:f5:3c:4c:ea:c9:1c:41:ed:b7:fa:d3:c8:ed:ba:7e:c6: 3e:25:54:2b:54:06:34:a7:21:7d:fb:45:a5:74:56:d3:40:86: 55:0b:a5:fb:d9:eb:93:c7:26:6b:1e:07:01:3f:1d:9e:52:5b: 72:1c:54:db:64:08:ed:64:89:78:26:f2:f5:76:fb:dd:fc:b7: 61:3b:25:40:ef:8e:ae:32:e4:18:93:db:9b:07:23:9d:d5:d6: e5:0d:61:b8:f8:e5:34:76:0f:62:ef:02:f1:5f:f8:10:41:17: 35:44:d6:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa/rYQlwWPiu6JnP+7t5IanGnc/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIyMDMyMDM4WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWM5N2E3YTI4ODlmYmFkMmQ2ZWZjZDJkNGVhOTcwZGU0 NGNjMDM5MDNjOGFhYmMzMWFlZmU1ODRjY2UzNzJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/HAFYZvUNOQUKkjJdRYCGNxUI9YQ7dRCdtUUtb7lDFIxN pw77zeH5ZfzqHZR7Vqt+hK3fJVzCP+2NWkofF3pG15kywchkf5klzWoT8uWpHnp/ i2BrnyJPROitNcrMnI2uPX6ZHe5vDlzw5KQ2a9Ek2aPScwOij6A6KVmIrA8YPkJE k9hlsjTl5wm5LxFTXP0A4mYayGWcq0xCGA6YCUFDdIIiRcVbdjJ3P5A4w3FvzqnF C8g6Ev7Elb+jXk4angyh9w1UmlBzg6tdkOxU/4GrM1vntOhWphFoVXtHZarKzf8f 83PfkxyotqX5Vb7lWIjPwAq418sY1YA1EmmrsLndAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaawJSS1xTmuW6EvJBZkmmvAdbKswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwYTFlODFjLWE5MjctNGU2Yy04ZTViLWM1ZGFhYmM1NDY2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY260AwDQYJKoZIhvcNAQELBQADggEBACFaecpPsXzGS0nyzcrRr3SuRte/ tZXbNXFMp9cgCNgbnye5bckmYWATqK5Nejql9wTnBKwtvSoVf6LBoKz0hf85Up9Q zwJ9t2sawhC2ydDs5XyrLS9awdJFR7eE0mWbR9R/XoHY83oTvsHD/kMcRnejY3Ar wYOccrogsUoiga15QVLf+VPcobDK60sGNwyJM/lR9TxM6skcQe23+tPI7bp+xj4l VCtUBjSnIX37RaV0VtNAhlULpfvZ65PHJmseBwE/HZ5SW3IcVNtkCO1kiXgm8vV2 +938t2E7JUDvjq4y5BiT25sHI53V1uUNYbj45TR2D2LvAvFf+BBBFzVE1lw= -----END CERTIFICATE-----Generated at Sat Nov 7 18:17:41 2026 by rpki-client