$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa File: 3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa (raw, json) Hash identifier: 09imvSerjkbEKfjaFV+EqoACQ//Ms9EIp+yG8Nw/7pY= Subject key identifier: 39:9A:3F:99:58:41:93:49:E9:95:32:1B:92:11:EE:42:BB:1C:87:F2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 304E7A68586F0253A7CBD9E4AF76562055018CB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa Signing time: Thu 15 Oct 2026 02:20:07 +0000 ROA not before: Thu 15 Oct 2026 02:20:07 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4e:7a:68:58:6f:02:53:a7:cb:d9:e4:af:76:56:20:55:01:8c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 02:20:07 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=9a09df31346c39cfdc88c58650cff36d945f12c37157fd16a3155298f6a878b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:36:0e:2d:31:98:79:63:7b:d8:37:55:49: c4:16:0b:91:24:1c:96:02:92:4e:63:d0:eb:77:0f: 1b:1e:75:d3:85:ae:c5:ec:03:aa:13:1b:1a:2c:f6: 06:87:d1:98:74:d4:18:65:61:16:3a:84:62:24:86: 7c:26:7a:b6:49:ed:31:03:86:cb:fb:a6:e1:f4:40: 3c:1a:5c:00:b1:9e:bf:f3:84:05:3b:41:3e:a2:c0: 59:04:e7:9e:73:a9:64:a0:3a:1a:87:1b:68:0c:7e: 6b:e6:fc:51:87:94:7e:ff:6c:0e:14:65:c6:aa:0e: b7:74:7b:9f:01:46:b2:47:9f:f9:b3:bc:19:e5:3e: 0b:69:68:cb:9f:58:87:c8:ef:4a:ad:6c:e7:da:3b: 98:b7:3c:fe:96:1a:d4:76:ea:88:8a:f6:bf:e6:ec: be:d0:51:28:73:5b:87:eb:97:ea:9d:d1:19:93:d9: 53:33:b8:f7:2f:44:31:67:f3:e8:06:32:ea:20:37: 29:66:f2:7c:4b:eb:2e:57:72:2b:02:d5:88:65:16: 56:1f:90:fc:b7:9d:2b:eb:25:34:46:b5:bf:33:f1: c6:62:71:ae:42:f3:ea:3f:f3:1b:ca:61:09:1a:f6: cb:23:6b:f2:ba:7a:0a:ac:49:fd:eb:48:0a:af:1b: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:3F:99:58:41:93:49:E9:95:32:1B:92:11:EE:42:BB:1C:87:F2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.191.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:52:86:52:bf:c7:a7:ac:9b:f2:4d:e2:fa:3a:6b:a7:3e:a9: 3f:81:a9:15:3b:21:63:07:29:4c:cb:6b:6e:1a:3a:1d:69:2f: 7e:f9:be:fb:4b:66:c3:c8:12:78:49:ff:e5:89:52:63:10:8a: ea:9c:e2:73:09:bd:c9:bc:d1:8f:4e:18:3a:71:dc:7d:19:b0: 53:a7:3d:83:d0:ce:5f:68:6f:08:53:e1:e0:27:b5:f2:61:e7: 90:03:40:74:f4:c2:5d:5f:8d:04:5a:04:08:90:45:3b:64:ec: f3:a0:89:1b:b0:11:11:6e:bb:04:47:18:34:84:02:1f:62:11: 28:5b:f7:dc:e7:0f:18:12:fd:20:c7:aa:89:22:ed:a3:c3:ae: 31:a6:f7:ef:8d:54:cb:7f:2b:e4:ac:b4:46:0a:84:5e:a6:a1: 68:8c:2e:50:41:ab:85:45:35:85:6f:ba:93:8b:96:15:8e:b1: 8c:0d:d7:61:8e:11:ad:46:3a:db:31:76:9f:88:94:d1:4d:14: 0f:10:b6:45:de:70:5e:c3:a0:af:b4:45:c5:0f:d1:a3:88:62: 15:20:6e:ac:ea:33:93:de:1d:c4:01:46:76:df:92:82:7f:3c: 1e:b5:32:da:0a:70:0b:90:21:b3:0d:c8:98:3f:b0:4d:f2:ac: 60:cc:91:a8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUME56aFhvAlOny9nkr3ZWIFUBjLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDIyMDA3WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTA5ZGYzMTM0NmMzOWNmZGM4OGM1ODY1MGNmZjM2ZDk0 NWYxMmMzNzE1N2ZkMTZhMzE1NTI5OGY2YTg3OGI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/HzYOLTGYeWN72DdVScQWC5EkHJYCkk5j0Ot3DxseddOF rsXsA6oTGxos9gaH0Zh01BhlYRY6hGIkhnwmerZJ7TEDhsv7puH0QDwaXACxnr/z hAU7QT6iwFkE555zqWSgOhqHG2gMfmvm/FGHlH7/bA4UZcaqDrd0e58BRrJHn/mz vBnlPgtpaMufWIfI70qtbOfaO5i3PP6WGtR26oiK9r/m7L7QUShzW4frl+qd0RmT 2VMzuPcvRDFn8+gGMuogNylm8nxL6y5XcisC1YhlFlYfkPy3nSvrJTRGtb8z8cZi ca5C8+o/8xvKYQka9ssja/K6egqsSf3rSAqvG3nPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOZo/mVhBk0nplTIbkhHuQrsch/IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkNWFmYTYwLTU5MDEtNDY3ZC1iNDdkLWUxZTJmYzE3NDVlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2vzANBgkqhkiG9w0BAQsFAAOCAQEAYlKGUr/Hp6yb8k3i+jprpz6pP4Gp FTshYwcpTMtrbho6HWkvfvm++0tmw8gSeEn/5YlSYxCK6pzicwm9ybzRj04YOnHc fRmwU6c9g9DOX2hvCFPh4Ce18mHnkANAdPTCXV+NBFoECJBFO2Ts86CJG7AREW67 BEcYNIQCH2IRKFv33OcPGBL9IMeqiSLto8OuMab3741Uy38r5Ky0RgqEXqahaIwu UEGrhUU1hW+6k4uWFY6xjA3XYY4RrUY62zF2n4iU0U0UDxC2Rd5wXsOgr7RFxQ/R o4hiFSBurOozk94dxAFGdt+Sgn88HrUy2gpwC5Ahsw3ImD+wTfKsYMyRqA== -----END CERTIFICATE-----Generated at Sat Oct 17 23:59:25 2026 by rpki-client