$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46d3d879-82b4-4b47-a49c-ece800ac45d7.roa File: 46d3d879-82b4-4b47-a49c-ece800ac45d7.roa (raw, json) Hash identifier: 86rGUaaqeml7HP8VbvZlAUgcvZKDB8t16SsNc3nP/ro= Subject key identifier: F8:36:BC:54:EE:DB:F1:80:C0:A0:69:CE:5A:3F:49:50:D9:AC:B0:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F8B5F9C80301380972376DD3BBB5E1F0A239E40 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46d3d879-82b4-4b47-a49c-ece800ac45d7.roa Signing time: Sat 19 Sep 2026 00:00:27 +0000 ROA not before: Sat 19 Sep 2026 00:00:27 +0000 ROA not after: Fri 18 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.223.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8b:5f:9c:80:30:13:80:97:23:76:dd:3b:bb:5e:1f:0a:23:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:00:27 2026 GMT Not After : Dec 18 23:59:59 2026 GMT Subject: serialNumber=40a382aaffa5787a8cd28c73752cbb415e12a125aafe173f5a881df28749ecd2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:78:fa:3b:25:00:ad:19:df:8e:bf:9c:68:2f: c0:42:76:d4:70:a9:13:c2:13:d5:d7:3d:e4:f0:12: 33:d8:e4:f3:c1:e0:a3:79:93:93:ce:f9:c4:3b:8b: 96:76:24:7e:25:b4:44:a9:61:cc:30:5d:27:34:39: 29:8a:3f:b8:4d:8e:9f:1d:8e:e0:b7:94:11:87:d5: f8:5d:76:dc:3b:95:5b:18:48:d0:ec:a6:2f:ec:ab: 9c:ee:dc:22:ac:bc:06:fd:c3:05:63:cd:d4:b5:32: 1f:9a:cc:b2:68:7d:d0:e6:e3:50:05:c4:34:ed:79: 27:f2:34:11:61:21:24:85:3d:38:61:55:af:b1:52: 32:cf:ca:4c:9a:65:90:98:91:7c:13:15:2c:2f:69: 2a:26:b6:47:1d:f0:64:26:33:94:2c:4a:9e:d8:97: 06:60:ab:65:71:60:7a:ba:cb:c0:ea:0f:30:1c:e0: 68:2e:a4:d1:2c:3c:4d:32:da:7c:09:0d:52:aa:9b: 7c:57:d0:f3:b2:81:20:e4:2b:bb:f2:16:d9:69:09: a6:0c:4b:2b:7c:94:18:a6:e6:3f:41:fd:0d:db:81: cf:22:4e:86:86:be:9a:3d:6f:c9:1e:fb:2d:52:b2: 02:5a:d1:5c:b2:3f:5d:3c:c2:a8:a6:71:cf:94:ec: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:36:BC:54:EE:DB:F1:80:C0:A0:69:CE:5A:3F:49:50:D9:AC:B0:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46d3d879-82b4-4b47-a49c-ece800ac45d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.223.73.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:2d:a0:7e:5a:f8:98:88:1d:4a:ef:9e:b7:a1:62:b4:c8:6d: 1d:57:e9:d1:5d:00:6c:44:0d:1d:25:e3:f9:08:ae:58:f0:ef: 02:36:47:8a:9c:37:7d:04:3d:dd:46:c3:02:4f:93:e6:26:9f: 90:86:40:22:3d:36:0f:7f:04:74:12:66:a9:7f:d3:56:6d:fa: 26:d5:06:9d:19:24:35:88:87:cc:8b:ad:94:fc:26:30:b7:fe: d7:aa:ba:7f:4f:9f:d6:fe:f8:7c:da:4c:77:c9:24:ad:a6:47: a0:bc:92:95:b7:c9:6e:5e:66:5e:36:7e:bf:e3:99:8e:d9:0f: 49:3a:d0:d8:5f:a7:d1:15:a7:f4:bd:e1:13:b6:a8:6e:7c:dd: 44:79:56:c7:c9:3d:a8:f2:36:b9:22:8d:6f:05:eb:a9:52:b8: c6:1e:4b:21:99:da:d8:36:36:2a:dc:6a:8e:ff:c1:47:a0:11: 83:7a:7d:47:6b:0a:94:08:d6:70:f0:71:f7:f9:a5:3a:6e:32: 53:1a:1a:66:20:47:1a:8b:1c:ce:46:0f:42:85:3e:a1:e4:16: 63:97:78:c4:d0:fe:a0:bf:a9:07:17:32:cb:81:e6:3a:74:97: 42:f6:0c:9e:4d:54:22:30:74:cb:99:5b:ff:e2:df:9c:6c:9e: d5:f1:76:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX4tfnIAwE4CXI3bdO7teHwojnkAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwOTE5MDAwMDI3WhcNMjYxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGEzODJhYWZmYTU3ODdhOGNkMjhjNzM3NTJjYmI0MTVl MTJhMTI1YWFmZTE3M2Y1YTg4MWRmMjg3NDllY2QyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgePo7JQCtGd+Ov5xoL8BCdtRwqRPCE9XXPeTwEjPY5PPB 4KN5k5PO+cQ7i5Z2JH4ltESpYcwwXSc0OSmKP7hNjp8djuC3lBGH1fhddtw7lVsY SNDspi/sq5zu3CKsvAb9wwVjzdS1Mh+azLJofdDm41AFxDTteSfyNBFhISSFPThh Va+xUjLPykyaZZCYkXwTFSwvaSomtkcd8GQmM5QsSp7YlwZgq2VxYHq6y8DqDzAc 4GgupNEsPE0y2nwJDVKqm3xX0POygSDkK7vyFtlpCaYMSyt8lBim5j9B/Q3bgc8i ToaGvpo9b8ke+y1SsgJa0VyyP108wqimcc+U7HsrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+Da8VO7b8YDAoGnOWj9JUNmssNQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2ZDNkODc5LTgyYjQtNGI0Ny1hNDljLWVjZTgwMGFjNDVkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA030kwDQYJKoZIhvcNAQELBQADggEBAFstoH5a+JiIHUrvnrehYrTIbR1X 6dFdAGxEDR0l4/kIrljw7wI2R4qcN30EPd1GwwJPk+Ymn5CGQCI9Ng9/BHQSZql/ 01Zt+ibVBp0ZJDWIh8yLrZT8JjC3/tequn9Pn9b++HzaTHfJJK2mR6C8kpW3yW5e Zl42fr/jmY7ZD0k60Nhfp9EVp/S94RO2qG583UR5VsfJPajyNrkijW8F66lSuMYe SyGZ2tg2Nircao7/wUegEYN6fUdrCpQI1nDwcff5pTpuMlMaGmYgRxqLHM5GD0KF PqHkFmOXeMTQ/qC/qQcXMsuB5jp0l0L2DJ5NVCIwdMuZW//i35xsntXxdmM= -----END CERTIFICATE-----Generated at Sat Sep 19 12:09:37 2026 by rpki-client