$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/512be172-9cd3-4e9e-b29b-a076f5c2d5ba.roa File: 512be172-9cd3-4e9e-b29b-a076f5c2d5ba.roa (raw, json) Hash identifier: 4tuHa88Q2TI0hJfL1l7LzRiVnMnPFAXipxmjSvhSZoU= Subject key identifier: 44:45:3A:32:DF:C6:07:B0:7D:95:AB:86:EA:35:90:66:E9:C3:BB:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D5C60D5EA57AE7432D9BD428E91BF2F1311FA1D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/512be172-9cd3-4e9e-b29b-a076f5c2d5ba.roa Signing time: Thu 15 Oct 2026 01:51:24 +0000 ROA not before: Thu 15 Oct 2026 01:51:24 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.186.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5c:60:d5:ea:57:ae:74:32:d9:bd:42:8e:91:bf:2f:13:11:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 01:51:24 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=fc2444d766e4cbf81948aa70e384b6978541ec37d3440a8aa67b016836565cfd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:03:77:0e:89:aa:17:8c:7a:f3:9e:e8:f8: cc:29:c2:34:5b:17:f5:06:aa:d8:9e:f3:61:e9:f4: 2f:cf:81:1b:43:79:7c:5d:56:ba:6d:e0:0a:1d:72: d2:56:5d:b7:70:dd:e1:f6:cd:db:5f:61:0d:12:e5: bc:d5:af:36:1a:b2:ba:3d:10:7c:45:d3:f7:ab:ae: 02:ca:e1:c9:d8:13:ca:72:10:eb:33:dd:25:af:70: ba:34:a3:d4:f1:db:b8:9b:2e:6f:fc:e3:05:f2:da: 1c:e2:50:0f:53:20:2f:fb:7c:10:fb:29:67:b5:0a: 34:b7:f0:7b:4b:3c:32:80:53:77:e9:32:42:d8:73: 52:42:22:da:07:98:b1:a5:4d:93:73:bb:ea:9a:87: 3e:ea:a5:93:de:0c:3b:78:9e:48:db:37:23:7e:91: fb:8c:1a:2f:4d:ed:0c:98:0d:e7:25:5f:87:a3:92: ad:d3:90:98:97:a5:7d:80:5c:96:1f:2c:fa:cd:80: f1:94:6a:01:9d:48:55:84:3f:c9:19:52:33:e5:91: ef:e4:a7:6c:8b:3a:01:48:50:7d:f0:0c:16:d7:df: 7b:5b:b2:18:0e:c0:3b:9b:22:bc:8d:8b:1d:d7:14: b7:de:39:06:23:92:cb:a5:ee:42:6b:b8:6e:55:67: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:3A:32:DF:C6:07:B0:7D:95:AB:86:EA:35:90:66:E9:C3:BB:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/512be172-9cd3-4e9e-b29b-a076f5c2d5ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.186.0.0/15 Signature Algorithm: sha256WithRSAEncryption 62:fe:99:4c:5c:1f:19:94:5a:4f:70:4a:12:ca:4c:bc:be:90: 26:f4:33:09:54:03:1c:06:e3:d5:48:a9:3f:01:d0:d7:72:a4: 45:d4:51:40:c3:f6:2f:9e:48:6d:08:f9:d2:cc:6a:43:71:7c: 86:48:2c:e8:a1:b4:b9:0c:25:21:b7:26:7c:d9:3d:d5:a7:a0: fb:5e:b0:8c:59:8b:52:dc:10:fa:61:1f:6d:8a:64:04:63:1f: 35:de:88:9d:d7:2e:76:dd:e2:3a:ef:06:c7:18:e9:bd:f0:0e: cc:c5:cc:cb:cf:a6:6b:b2:fb:84:31:84:ca:b8:9d:ec:3d:dc: 13:dd:1d:16:47:87:f9:72:86:11:d0:a7:49:9b:b6:bb:f7:b7: 45:53:77:bb:48:98:b6:13:bd:a8:92:52:02:3a:0b:0f:44:17: b9:08:2c:ac:2d:0c:b4:63:f4:04:c5:c8:10:59:84:07:d1:3c: 6d:03:2e:64:3b:63:a2:44:20:7b:58:a5:a0:16:c1:4e:6e:50: 2a:03:d0:8a:b9:87:0c:22:39:f2:c8:86:b8:d4:bb:6a:92:cc: e8:a2:ac:73:0b:9f:b7:51:d9:54:c8:69:29:e6:56:6e:89:38: 56:8f:87:2e:69:e4:d8:70:43:69:80:07:a1:f5:1b:63:29:cb: 8e:47:ae:d5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDVxg1epXrnQy2b1CjpG/LxMR+h0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDE1MTI0WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzI0NDRkNzY2ZTRjYmY4MTk0OGFhNzBlMzg0YjY5Nzg1 NDFlYzM3ZDM0NDBhOGFhNjdiMDE2ODM2NTY1Y2ZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf4gN3DomqF4x6857o+MwpwjRbF/UGqtie82Hp9C/PgRtD eXxdVrpt4AodctJWXbdw3eH2zdtfYQ0S5bzVrzYasro9EHxF0/errgLK4cnYE8py EOsz3SWvcLo0o9Tx27ibLm/84wXy2hziUA9TIC/7fBD7KWe1CjS38HtLPDKAU3fp MkLYc1JCItoHmLGlTZNzu+qahz7qpZPeDDt4nkjbNyN+kfuMGi9N7QyYDeclX4ej kq3TkJiXpX2AXJYfLPrNgPGUagGdSFWEP8kZUjPlke/kp2yLOgFIUH3wDBbX33tb shgOwDubIryNix3XFLfeOQYjksul7kJruG5VZwkdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUREU6Mt/GB7B9lauG6jWQZunDuyswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxMmJlMTcyLTljZDMtNGU5ZS1iMjliLWEwNzZmNWMyZDViYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2ujANBgkqhkiG9w0BAQsFAAOCAQEAYv6ZTFwfGZRaT3BKEspMvL6QJvQz CVQDHAbj1UipPwHQ13KkRdRRQMP2L55IbQj50sxqQ3F8hkgs6KG0uQwlIbcmfNk9 1aeg+16wjFmLUtwQ+mEfbYpkBGMfNd6Indcudt3iOu8GxxjpvfAOzMXMy8+ma7L7 hDGEyrid7D3cE90dFkeH+XKGEdCnSZu2u/e3RVN3u0iYthO9qJJSAjoLD0QXuQgs rC0MtGP0BMXIEFmEB9E8bQMuZDtjokQge1iloBbBTm5QKgPQirmHDCI58siGuNS7 apLM6KKscwuft1HZVMhpKeZWbok4Vo+HLmnk2HBDaYAHofUbYynLjkeu1Q== -----END CERTIFICATE-----Generated at Sat Oct 17 23:59:36 2026 by rpki-client