$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa File: ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa (raw, json) Hash identifier: VaXbxCh7agfSJhaBsFYDA0f0uxnQW/fAIcDjPOeLCco= Subject key identifier: D5:F5:57:05:1C:64:DB:96:24:42:EC:FB:0B:74:96:CE:C7:C4:06:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0EF84231541EA6196A10C5F7B8F1E326C27AD4CF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa Signing time: Thu 22 Oct 2026 03:21:36 +0000 ROA not before: Thu 22 Oct 2026 03:21:36 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.238.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f8:42:31:54:1e:a6:19:6a:10:c5:f7:b8:f1:e3:26:c2:7a:d4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 22 03:21:36 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=e72f776ad84147ebf3566c56fb48b0009451fc2256b2a2adafa7b44f839231a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:8e:06:48:cc:86:d3:84:59:9c:28:63:e6: 46:7a:a3:e4:57:70:3a:58:88:82:62:9f:69:2b:ab: f3:16:5e:70:88:b9:54:ac:ce:90:64:4b:3d:51:60: e3:d6:5b:ec:0e:ed:df:90:e9:8a:2a:33:65:08:c3: e9:eb:8d:df:65:33:b5:ba:d1:c5:45:64:29:a1:c1: 13:65:be:35:b0:03:e2:71:31:82:e1:65:78:98:43: 36:15:cf:38:72:87:a1:cc:46:3f:0a:8e:e4:02:f8: a6:8a:8f:e5:98:12:2d:2e:36:75:f6:11:d8:92:f6: 97:17:8a:a2:2c:b1:c2:50:07:81:10:41:79:14:a3: e8:f3:0f:16:3e:18:49:b4:08:4a:d1:54:03:cf:1d: 89:5c:94:58:db:8b:92:48:1c:97:25:d9:04:64:a6: c5:ea:08:60:0d:e7:e4:b5:d5:06:20:dc:81:df:15: f4:e4:01:20:b7:7d:b0:24:b2:69:48:bb:7c:6e:04: 5c:a4:0e:5e:2f:fc:a4:8e:41:28:3a:ee:ea:cc:a5: 04:d6:d7:c4:5c:fd:bb:b7:d3:1a:0e:44:ac:96:87: 0a:7b:0e:7e:fa:e0:00:35:9c:6f:aa:17:fb:7f:22: 43:8a:e3:b6:ba:84:ed:6f:39:10:5f:08:83:ac:65: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F5:57:05:1C:64:DB:96:24:42:EC:FB:0B:74:96:CE:C7:C4:06:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.238.120.0/22 Signature Algorithm: sha256WithRSAEncryption 65:2f:22:2f:2f:e8:19:60:bd:ae:89:0b:f3:92:f0:07:84:c9: a6:1d:ee:12:fc:31:f2:a8:49:7d:69:3a:fb:a2:53:b5:1e:98: 40:fc:ad:ab:29:13:9d:c5:03:82:da:47:a0:25:d9:eb:4a:ff: fd:c4:f1:81:ef:4b:d1:f9:2c:37:ff:b2:f6:7d:b3:74:33:81: 22:bf:94:6f:52:db:1a:1a:32:5c:02:04:fb:f5:a1:2d:b1:a2: 9d:9b:78:63:b4:fc:47:bb:86:1e:13:5c:bb:b2:23:55:51:23: 61:6d:14:81:78:c7:e1:e9:da:45:eb:85:0d:b3:8d:70:fd:51: 0e:90:14:19:45:e7:28:be:cd:ec:ce:30:e5:33:23:cf:f8:f6: 9d:6b:bd:8d:73:5c:b5:4e:a0:53:2c:09:4d:6d:94:ba:12:27: 6f:27:7a:f4:94:8b:d3:eb:1e:a9:59:aa:0c:b3:9b:d8:3c:1a: 3f:f7:24:e4:b2:cb:c7:c8:6a:e5:c1:c1:f7:f4:97:18:5e:37: f9:8a:1f:8d:cb:ac:f2:78:25:41:25:9f:73:9c:a8:1f:dd:d4: 26:68:fd:b8:c6:ea:dc:21:f2:7a:ab:00:a9:fd:84:25:8b:6f: c5:4b:67:fd:5d:55:7c:bc:cb:c1:9d:82:cc:bf:9d:73:75:0a: a8:1b:59:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDvhCMVQephlqEMX3uPHjJsJ61M8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIyMDMyMTM2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzJmNzc2YWQ4NDE0N2ViZjM1NjZjNTZmYjQ4YjAwMDk0 NTFmYzIyNTZiMmEyYWRhZmE3YjQ0ZjgzOTIzMWE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgaY4GSMyG04RZnChj5kZ6o+RXcDpYiIJin2krq/MWXnCI uVSszpBkSz1RYOPWW+wO7d+Q6YoqM2UIw+nrjd9lM7W60cVFZCmhwRNlvjWwA+Jx MYLhZXiYQzYVzzhyh6HMRj8KjuQC+KaKj+WYEi0uNnX2EdiS9pcXiqIsscJQB4EQ QXkUo+jzDxY+GEm0CErRVAPPHYlclFjbi5JIHJcl2QRkpsXqCGAN5+S11QYg3IHf FfTkASC3fbAksmlIu3xuBFykDl4v/KSOQSg67urMpQTW18Rc/bu30xoORKyWhwp7 Dn764AA1nG+qF/t/IkOK47a6hO1vORBfCIOsZSoJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1fVXBRxk25YkQuz7C3SWzsfEBtAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmMzAwYzBiLWY1YTItNGM4OC1iODJkLWM2MGM1YmQ4YzhmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI27ngwDQYJKoZIhvcNAQELBQADggEBAGUvIi8v6Blgva6JC/OS8AeEyaYd 7hL8MfKoSX1pOvuiU7UemED8raspE53FA4LaR6Al2etK//3E8YHvS9H5LDf/svZ9 s3QzgSK/lG9S2xoaMlwCBPv1oS2xop2beGO0/Ee7hh4TXLuyI1VRI2FtFIF4x+Hp 2kXrhQ2zjXD9UQ6QFBlF5yi+zezOMOUzI8/49p1rvY1zXLVOoFMsCU1tlLoSJ28n evSUi9PrHqlZqgyzm9g8Gj/3JOSyy8fIauXBwff0lxheN/mKH43LrPJ4JUEln3Oc qB/d1CZo/bjG6twh8nqrAKn9hCWLb8VLZ/1dVXy8y8Gdgsy/nXN1CqgbWUI= -----END CERTIFICATE-----Generated at Sun Nov 8 02:45:19 2026 by rpki-client