$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/780becb0-3d04-4fc6-915e-5837ecce7141.roa File: 780becb0-3d04-4fc6-915e-5837ecce7141.roa (raw, json) Hash identifier: 5Y37eZg9EIPKBwgmr1NY9Zl5Xck6WOnAL0jUZPO2GjM= Subject key identifier: 63:36:C5:23:C9:E4:2D:33:17:76:55:93:E6:AF:D0:1A:02:48:91:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18B1C326043688BD6FA64F929A9EF2D4888E007B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/780becb0-3d04-4fc6-915e-5837ecce7141.roa Signing time: Sun 18 Oct 2026 00:40:08 +0000 ROA not before: Sun 18 Oct 2026 00:40:08 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b1:c3:26:04:36:88:bd:6f:a6:4f:92:9a:9e:f2:d4:88:8e:00:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 00:40:08 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=b63ec0aa3df9f4f4d315ec0b2cc62285668f74f4c59a21dd37763e7e116084d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:34:ce:f4:08:77:87:56:60:04:8d:8e:33: 9e:02:2e:60:9d:a0:7b:30:6b:ab:24:9b:e3:14:cc: 49:29:a3:9a:41:78:ba:e3:07:75:65:49:e5:b4:dd: a3:6f:f7:c9:e3:58:16:56:8c:1a:c0:64:5c:6a:4b: 5f:d4:2a:b6:e6:f1:41:46:9c:90:bc:ed:64:e8:c3: ed:46:b9:56:13:07:ea:a8:0c:48:fd:54:86:5b:c6: c3:5c:8d:f3:98:64:fa:8b:14:df:dc:72:85:33:ec: f4:8e:b2:b9:d7:b3:4d:ab:28:7e:db:af:1f:cb:71: 30:41:01:05:f5:5c:ca:2a:19:64:bd:e0:de:38:2d: 34:7c:ba:84:10:2a:cb:53:aa:7a:51:d0:f1:af:e0: 46:42:c2:c3:76:71:ce:76:b3:e1:df:d4:7e:d7:53: 9f:39:ca:d0:3b:33:ba:e4:5c:1c:cd:fa:49:bd:a6: bd:1b:06:ee:a4:e8:e3:2d:23:e8:f6:f5:f0:c9:9d: 10:d9:54:04:07:2c:7a:88:81:38:12:db:b4:05:a2: ad:b4:21:27:3f:6a:f8:68:2b:2a:0c:06:65:25:a3: 49:77:e2:29:74:64:75:41:57:63:f3:85:d2:7e:e0: f8:a1:05:d9:79:f0:91:5c:ad:b4:39:65:83:b2:16: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:36:C5:23:C9:E4:2D:33:17:76:55:93:E6:AF:D0:1A:02:48:91:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/780becb0-3d04-4fc6-915e-5837ecce7141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.128.0/22 Signature Algorithm: sha256WithRSAEncryption b5:1e:5d:98:a2:a0:8e:6b:ad:5e:e6:5f:9e:92:92:a3:24:02: 9f:b2:8a:46:df:74:dd:4b:44:cc:fa:24:3e:15:5f:bb:a1:06: c5:83:90:e5:3b:8b:27:35:5f:8a:27:1a:49:de:2d:42:83:61: 9d:65:43:d2:bd:49:93:19:bb:5b:5b:10:b3:a7:34:a1:f2:59: 8d:19:e0:4c:e7:96:0a:f8:8e:74:7d:0c:ca:e1:87:f4:c2:25: 8b:4a:1f:72:06:37:ee:13:ef:d2:5c:60:4c:19:f1:bc:f2:0e: e0:0d:b5:dc:06:50:25:3e:03:f3:31:a0:6b:61:c3:05:f4:3b: 92:1f:fe:54:ad:2f:3d:52:63:68:b5:bb:0e:93:23:bf:5f:8b: 34:e3:36:b2:5b:2f:35:33:07:1e:5f:de:a2:e4:01:9b:8c:3a: b7:de:8c:4f:45:6f:c7:eb:83:08:b6:33:99:49:fb:d9:13:e3: 51:68:27:9a:91:11:74:f6:99:f5:40:a8:58:34:5b:1d:2e:07: e3:04:b9:8f:bc:04:ab:f8:5a:3a:13:10:5b:9c:61:b6:f0:3b: 3f:c5:c7:c8:ee:64:01:b9:7a:99:3d:59:c7:f4:76:f0:65:d9: 7b:16:2a:05:24:df:c2:b2:a7:08:02:0a:83:26:66:ae:7e:be: 5b:71:09:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGLHDJgQ2iL1vpk+Smp7y1IiOAHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE4MDA0MDA4WhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjNlYzBhYTNkZjlmNGY0ZDMxNWVjMGIyY2M2MjI4NTY2 OGY3NGY0YzU5YTIxZGQzNzc2M2U3ZTExNjA4NGQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcQjTO9Ah3h1ZgBI2OM54CLmCdoHswa6skm+MUzEkpo5pB eLrjB3VlSeW03aNv98njWBZWjBrAZFxqS1/UKrbm8UFGnJC87WTow+1GuVYTB+qo DEj9VIZbxsNcjfOYZPqLFN/ccoUz7PSOsrnXs02rKH7brx/LcTBBAQX1XMoqGWS9 4N44LTR8uoQQKstTqnpR0PGv4EZCwsN2cc52s+Hf1H7XU585ytA7M7rkXBzN+km9 pr0bBu6k6OMtI+j29fDJnRDZVAQHLHqIgTgS27QFoq20ISc/avhoKyoMBmUlo0l3 4il0ZHVBV2PzhdJ+4PihBdl58JFcrbQ5ZYOyFt0pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYzbFI8nkLTMXdlWT5q/QGgJIkREwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4MGJlY2IwLTNkMDQtNGZjNi05MTVlLTU4MzdlY2NlNzE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XoAwDQYJKoZIhvcNAQELBQADggEBALUeXZiioI5rrV7mX56SkqMkAp+y ikbfdN1LRMz6JD4VX7uhBsWDkOU7iyc1X4onGkneLUKDYZ1lQ9K9SZMZu1tbELOn NKHyWY0Z4Eznlgr4jnR9DMrhh/TCJYtKH3IGN+4T79JcYEwZ8bzyDuANtdwGUCU+ A/MxoGthwwX0O5If/lStLz1SY2i1uw6TI79fizTjNrJbLzUzBx5f3qLkAZuMOrfe jE9Fb8frgwi2M5lJ+9kT41FoJ5qREXT2mfVAqFg0Wx0uB+MEuY+8BKv4WjoTEFuc YbbwOz/Fx8juZAG5epk9Wcf0dvBl2XsWKgUk38KypwgCCoMmZq5+vltxCV0= -----END CERTIFICATE-----Generated at Wed Oct 21 01:50:17 2026 by rpki-client