$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa File: 6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa (raw, json) Hash identifier: wBZHTdBtNDr6H+2xoN4zBUxlwXf1UdlRuC5ArlGQNio= Subject key identifier: F9:FD:6A:4B:D8:FC:BA:B9:9E:BC:DA:6D:99:CC:31:C6:7D:F0:11:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 698673B3880D570442F7FEEE7F9D770AE1AF3AD7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa Signing time: Thu 15 Oct 2026 02:11:17 +0000 ROA not before: Thu 15 Oct 2026 02:11:17 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:86:73:b3:88:0d:57:04:42:f7:fe:ee:7f:9d:77:0a:e1:af:3a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 15 02:11:17 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=3b481d3f0bcdb89f88080f502d23c0373287c7dfe5fdc77c36403ddb61253803, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:8c:59:a5:d0:7b:05:ca:30:fc:a9:50:4f: b6:09:a1:51:2f:ed:f3:b2:4f:4b:26:f1:a2:bb:5b: d3:81:58:95:89:31:e4:76:da:85:0c:80:d8:40:e2: a1:a6:74:31:03:cd:58:66:26:4e:7b:2b:90:73:b8: cd:3e:bd:a9:67:14:50:43:51:88:66:42:8c:02:fc: 48:76:33:f9:84:0d:6a:9f:0f:d3:d9:f4:14:c3:68: ac:24:87:cf:c8:89:78:5d:4b:17:11:bd:fa:1e:d9: 6b:10:73:84:6c:b1:21:1a:70:c6:44:d4:74:0e:4b: ad:6e:01:b8:f7:1e:dd:96:8b:dd:3d:0e:af:b9:80: 68:d2:9f:e7:d5:ac:39:74:ec:28:6c:8c:0e:bd:d1: b4:49:bb:1c:14:4d:ae:55:45:33:93:a2:b1:4a:39: 24:8b:66:0f:eb:a4:3f:fd:7f:c3:4a:9f:85:82:35: 5b:63:73:1c:dc:31:db:f0:c3:84:8d:28:33:66:af: 14:e8:73:79:3b:f1:c4:44:be:98:d7:98:a8:9f:02: 82:c0:37:0a:95:b9:9e:60:95:12:26:94:7a:45:bd: c8:18:bc:5e:b1:33:b2:f9:00:e7:49:64:f2:55:5c: 44:8f:ea:37:82:55:6a:46:57:af:e8:73:3a:8d:17: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:6A:4B:D8:FC:BA:B9:9E:BC:DA:6D:99:CC:31:C6:7D:F0:11:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.224.0/20 Signature Algorithm: sha256WithRSAEncryption 81:05:c4:14:34:5d:13:5c:c9:9b:66:41:3f:31:8b:d3:e2:dd: 2a:38:0c:a5:59:d9:5f:ac:7c:59:78:cb:53:c5:19:7e:49:9c: 94:20:18:e9:f3:50:79:23:dc:f2:13:77:47:ff:9b:69:d4:f9: 31:04:dc:79:a1:ff:bf:a3:db:8c:e6:7a:04:b5:4a:30:59:ba: 93:96:03:dc:09:76:d1:62:4d:0c:83:f1:4e:c4:14:a2:66:af: 6d:b1:97:8a:9d:e6:2b:e1:2f:95:e1:aa:14:34:b1:fb:9b:1b: e0:c3:99:35:04:be:e7:02:6f:f4:f3:9a:c6:1a:4a:97:6a:64: b8:65:5a:47:18:d7:74:2c:ad:45:0e:f9:29:7a:62:e1:1d:99: f5:52:e0:e2:a1:57:51:5b:3d:62:de:be:84:4b:0d:2c:6f:82: e5:23:13:ac:29:85:c2:a6:bb:34:48:dd:95:f4:ed:c1:94:0f: f2:7d:c2:c3:f9:d8:c4:ff:4a:a2:67:35:44:21:51:30:ff:28: f3:c3:14:bc:5e:6e:17:29:d5:78:57:47:94:c0:92:5f:ff:43: 50:a0:d7:c2:5f:6c:f1:5b:52:21:ea:09:79:8d:01:5a:6a:b3: f9:3d:ed:01:6e:e7:8d:01:7d:74:28:43:08:a7:00:b6:b8:1c: f7:1e:76:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYZzs4gNVwRC9/7uf513CuGvOtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDIxMTE3WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjQ4MWQzZjBiY2RiODlmODgwODBmNTAyZDIzYzAzNzMy ODdjN2RmZTVmZGM3N2MzNjQwM2RkYjYxMjUzODAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6noxZpdB7Bcow/KlQT7YJoVEv7fOyT0sm8aK7W9OBWJWJ MeR22oUMgNhA4qGmdDEDzVhmJk57K5BzuM0+valnFFBDUYhmQowC/Eh2M/mEDWqf D9PZ9BTDaKwkh8/IiXhdSxcRvfoe2WsQc4RssSEacMZE1HQOS61uAbj3Ht2Wi909 Dq+5gGjSn+fVrDl07ChsjA690bRJuxwUTa5VRTOTorFKOSSLZg/rpD/9f8NKn4WC NVtjcxzcMdvww4SNKDNmrxToc3k78cREvpjXmKifAoLANwqVuZ5glRImlHpFvcgY vF6xM7L5AOdJZPJVXESP6jeCVWpGV6/oczqNF75HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+f1qS9j8urmevNptmcwxxn3wEe4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhNGM3NjllLTRiNjctNGUwYy04ZGQ3LTc1MDcwMDZhMDg0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0E+AwDQYJKoZIhvcNAQELBQADggEBAIEFxBQ0XRNcyZtmQT8xi9Pi3So4 DKVZ2V+sfFl4y1PFGX5JnJQgGOnzUHkj3PITd0f/m2nU+TEE3Hmh/7+j24zmegS1 SjBZupOWA9wJdtFiTQyD8U7EFKJmr22xl4qd5ivhL5XhqhQ0sfubG+DDmTUEvucC b/TzmsYaSpdqZLhlWkcY13QsrUUO+Sl6YuEdmfVS4OKhV1FbPWLevoRLDSxvguUj E6wphcKmuzRI3ZX07cGUD/J9wsP52MT/SqJnNUQhUTD/KPPDFLxebhcp1XhXR5TA kl//Q1Cg18JfbPFbUiHqCXmNAVpqs/k97QFu540BfXQoQwinALa4HPcedgA= -----END CERTIFICATE-----Generated at Wed Oct 21 22:44:30 2026 by rpki-client