$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34dbae13-56ec-4718-b81c-4807d9bb2487.roa File: 34dbae13-56ec-4718-b81c-4807d9bb2487.roa (raw, json) Hash identifier: gcDc0UC4r5Cdrk4xW9XNtkUd4AZTqYZsd9pRb2RUokk= Subject key identifier: 07:52:D8:CE:49:D8:01:F4:1C:4C:DF:0C:1A:E7:60:AA:74:15:25:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1948C296F8C60410DF5AF0AA50DEC8CAE896591C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34dbae13-56ec-4718-b81c-4807d9bb2487.roa Signing time: Thu 15 Oct 2026 01:20:05 +0000 ROA not before: Thu 15 Oct 2026 01:20:05 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 3.253.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:48:c2:96:f8:c6:04:10:df:5a:f0:aa:50:de:c8:ca:e8:96:59:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:20:05 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=2ef33a9591b206d98bfbf32d79a3c5083e66dad87856db63868cd0ca003829a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:c5:ca:4f:af:a1:f0:5c:ae:5a:f6:6c:1e: 65:78:d1:95:37:9c:4d:ec:fb:0d:ad:75:fb:36:25: 32:57:17:08:a9:9b:97:27:a0:6b:5c:39:28:19:0f: 82:c4:10:13:b4:bc:3c:03:11:38:e7:1b:b5:b9:71: 95:7e:a8:a2:c4:31:6a:45:82:e2:7e:87:5c:16:38: 81:cd:df:d3:00:ac:6b:d6:a0:f3:a7:22:c3:33:af: 33:ee:13:a4:76:41:f6:2a:1c:9f:99:00:71:21:cf: c8:d0:25:a8:c3:e8:2f:4c:f0:f8:9a:7e:85:a0:98: 84:35:0a:e9:68:07:d3:c8:39:fd:41:d6:45:39:42: c9:fb:72:2a:2b:1f:c7:d2:c6:10:a5:fa:18:d5:23: 59:8b:1a:4c:e5:1d:b6:c0:d7:14:cf:97:eb:38:2b: 52:c3:d7:e7:50:b1:bb:fa:68:07:e3:31:ec:e4:d7: fc:ed:94:43:82:02:74:33:10:4d:3f:57:81:5d:96: 8b:00:21:2a:5d:d7:e8:60:f3:fc:02:4d:a3:8f:9a: cf:e2:de:b5:8a:0d:1c:69:97:fe:38:55:e6:7b:5b: 12:6c:44:a0:53:2c:d0:35:ca:b3:64:84:9f:a3:db: 7e:03:64:96:b6:65:7a:a0:9c:5d:dc:b6:c8:93:ac: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:52:D8:CE:49:D8:01:F4:1C:4C:DF:0C:1A:E7:60:AA:74:15:25:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34dbae13-56ec-4718-b81c-4807d9bb2487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.253.220.0/22 Signature Algorithm: sha256WithRSAEncryption 23:f4:34:f2:a0:a8:32:f0:69:ba:3d:8d:97:a4:9d:af:f0:7f: d0:6c:b5:f3:64:ad:93:5e:15:4c:37:db:a7:57:0d:25:a2:78: be:69:3e:c5:ed:6c:a3:bf:93:40:2f:2d:7b:1a:59:53:b3:cc: 9c:e2:da:31:f4:e1:a7:3e:54:f3:64:32:d3:fd:ca:fa:c1:eb: 87:05:17:fa:d8:a3:3b:40:aa:80:38:95:a4:7e:1e:27:26:e4: 99:84:3b:c7:fc:6a:4d:bc:aa:f2:c2:47:7c:5e:46:97:66:d1: c2:7f:f8:d8:9b:a0:51:da:0c:e6:9d:af:69:d8:05:ba:85:d4: 6f:58:f7:36:89:e9:e5:f6:cb:02:09:ac:fd:dc:4a:f1:b5:37: 12:6a:c2:84:6d:db:f3:9a:77:4c:e8:38:90:93:b9:4b:ce:dd: d9:c1:d6:79:4d:56:70:88:5e:20:21:fd:02:38:1c:31:80:75: ce:3e:1c:6a:dc:94:73:90:2c:ac:b2:1f:21:52:dd:f7:02:f0: fc:72:11:7f:49:5f:b2:7e:a8:27:42:ea:ae:df:97:11:dc:e7: 19:ab:e6:30:fe:9e:54:ff:6c:63:3d:11:d7:c0:9a:91:b3:61: 49:5f:d4:1e:a5:71:dd:8e:32:47:6f:0d:ec:70:e3:a4:d3:32: 4b:30:66:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGUjClvjGBBDfWvCqUN7IyuiWWRwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDEyMDA1WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWYzM2E5NTkxYjIwNmQ5OGJmYmYzMmQ3OWEzYzUwODNl NjZkYWQ4Nzg1NmRiNjM4NjhjZDBjYTAwMzgyOWE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCof8XKT6+h8FyuWvZsHmV40ZU3nE3s+w2tdfs2JTJXFwip m5cnoGtcOSgZD4LEEBO0vDwDETjnG7W5cZV+qKLEMWpFguJ+h1wWOIHN39MArGvW oPOnIsMzrzPuE6R2QfYqHJ+ZAHEhz8jQJajD6C9M8PiafoWgmIQ1CuloB9PIOf1B 1kU5Qsn7ciorH8fSxhCl+hjVI1mLGkzlHbbA1xTPl+s4K1LD1+dQsbv6aAfjMezk 1/ztlEOCAnQzEE0/V4FdlosAISpd1+hg8/wCTaOPms/i3rWKDRxpl/44VeZ7WxJs RKBTLNA1yrNkhJ+j234DZJa2ZXqgnF3ctsiTrLSpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB1LYzknYAfQcTN8MGudgqnQVJQ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0ZGJhZTEzLTU2ZWMtNDcxOC1iODFjLTQ4MDdkOWJiMjQ4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAID/dwwDQYJKoZIhvcNAQELBQADggEBACP0NPKgqDLwabo9jZekna/wf9Bs tfNkrZNeFUw326dXDSWieL5pPsXtbKO/k0AvLXsaWVOzzJzi2jH04ac+VPNkMtP9 yvrB64cFF/rYoztAqoA4laR+Hicm5JmEO8f8ak28qvLCR3xeRpdm0cJ/+NiboFHa DOadr2nYBbqF1G9Y9zaJ6eX2ywIJrP3cSvG1NxJqwoRt2/Oad0zoOJCTuUvO3dnB 1nlNVnCIXiAh/QI4HDGAdc4+HGrclHOQLKyyHyFS3fcC8PxyEX9JX7J+qCdC6q7f lxHc5xmr5jD+nlT/bGM9EdfAmpGzYUlf1B6lcd2OMkdvDexw46TTMkswZrs= -----END CERTIFICATE-----Generated at Sun Oct 18 01:39:16 2026 by rpki-client