$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa File: a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa (raw, json) Hash identifier: +Z7UuLNpSbAwUnOXtKKQOiAOtoiLUGLO7/s/W3I9etI= Subject key identifier: D8:13:A8:CE:D2:49:B6:91:3C:80:BC:45:42:27:1B:25:D6:33:91:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: ECB22F914FA65884B00A66AC8A00418D7190E4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa Signing time: Thu 01 Oct 2026 00:00:27 +0000 ROA not before: Thu 01 Oct 2026 00:00:27 +0000 ROA not after: Wed 30 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ec:b2:2f:91:4f:a6:58:84:b0:0a:66:ac:8a:00:41:8d:71:90:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 1 00:00:27 2026 GMT Not After : Dec 30 23:59:59 2026 GMT Subject: serialNumber=58fd3f900b17b6f1108750e5019ee7cdf57fbc474b2b5012cc08b9e994b9b2fc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:51:e1:09:4d:48:b6:d0:bd:29:70:7b:b5: e0:b3:79:37:43:e2:12:7f:e6:9c:44:55:30:37:ce: bd:ab:a4:2d:94:e4:78:92:fa:f7:78:af:a9:aa:10: 29:29:41:f9:43:c7:e3:19:5c:7a:bb:2c:dc:8e:79: ad:e9:cb:d8:d6:26:df:84:99:ed:cb:91:a2:fe:ed: b2:5e:91:40:97:57:3d:07:03:be:de:e1:53:6e:af: f1:1e:fc:fc:3f:66:79:a2:15:46:e4:af:04:73:82: a7:f7:34:54:8e:d0:bb:53:c6:be:69:9d:7f:1f:89: 2f:b6:17:f7:f9:45:48:e4:fe:e8:c5:e0:db:6a:fe: 60:08:26:0e:6b:b1:49:6d:0c:e5:fd:5f:00:eb:78: 4b:09:a0:44:e1:63:ea:d6:f1:ba:85:9c:dc:f0:f3: f4:07:25:de:2e:d3:f5:4d:07:46:fe:30:ec:3e:eb: 14:dd:24:c6:c2:ce:72:54:68:f2:91:c1:b2:7b:35: 8d:fb:02:b0:58:8a:72:bb:d2:5f:c3:42:af:f9:ee: 0f:ee:ea:0b:d9:e4:8c:ce:00:d3:59:7e:43:e5:6b: c1:0b:11:ac:45:53:77:d0:fe:38:cb:bd:a7:9a:22: a8:bc:b3:0f:88:bf:77:f8:c8:fc:b8:97:31:9e:39: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:A8:CE:D2:49:B6:91:3C:80:BC:45:42:27:1B:25:D6:33:91:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4f20f22-7153-433f-bb64-c1a9ddb3514f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.128.0/18 Signature Algorithm: sha256WithRSAEncryption 83:bc:c4:91:df:2c:5d:e7:f2:6b:d5:d3:b2:2d:ab:a1:18:48: 1d:e3:65:eb:18:e7:23:35:45:76:92:a3:ec:f6:e8:b3:03:5f: a4:df:6e:a7:83:dd:6e:af:5d:5d:6d:aa:bf:31:2b:25:4f:5c: 3b:d8:13:13:4e:ad:df:69:80:08:22:9d:7d:04:bb:3f:58:5b: 90:7f:06:93:54:69:43:67:13:92:25:d8:77:af:a0:84:c3:35: 71:77:9e:97:6b:58:9f:e9:4c:b6:ed:53:7e:0a:e7:55:03:f5: 73:7a:77:ab:07:3a:39:d7:9d:47:97:b3:51:b8:10:80:94:a0: 8e:90:d0:ab:94:50:8f:45:73:05:1c:66:4d:3d:ac:f0:22:d3: 4a:75:96:e8:00:fd:e4:c5:c0:a5:80:72:15:1e:64:98:d9:cb: 9e:d0:f0:93:48:07:9d:fd:da:09:0c:14:bf:a2:47:cd:f4:c6: 21:02:bf:3e:3b:8e:6d:ed:d6:6f:d4:6b:65:31:f7:3f:23:03: f2:8b:27:61:b8:58:01:48:e9:8b:57:43:8b:f9:b9:5c:7a:c5: 9e:fe:d9:09:02:13:7a:5d:6d:ea:05:60:49:e1:56:ec:08:b3: cd:d9:df:e7:07:88:f3:83:77:de:ce:d6:2b:e6:ba:20:f6:66: 97:a3:41:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAOyyL5FPpliEsApmrIoAQY1xkOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDAxMDAwMDI3WhcNMjYxMjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGZkM2Y5MDBiMTdiNmYxMTA4NzUwZTUwMTllZTdjZGY1 N2ZiYzQ3NGIyYjUwMTJjYzA4YjllOTk0YjliMmZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9GVHhCU1IttC9KXB7teCzeTdD4hJ/5pxEVTA3zr2rpC2U 5HiS+vd4r6mqECkpQflDx+MZXHq7LNyOea3py9jWJt+Eme3LkaL+7bJekUCXVz0H A77e4VNur/Ee/Pw/ZnmiFUbkrwRzgqf3NFSO0LtTxr5pnX8fiS+2F/f5RUjk/ujF 4Ntq/mAIJg5rsUltDOX9XwDreEsJoEThY+rW8bqFnNzw8/QHJd4u0/VNB0b+MOw+ 6xTdJMbCznJUaPKRwbJ7NY37ArBYinK70l/DQq/57g/u6gvZ5IzOANNZfkPla8EL EaxFU3fQ/jjLvaeaIqi8sw+Iv3f4yPy4lzGeOSB9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2BOoztJJtpE8gLxFQicbJdYzkR4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0ZjIwZjIyLTcxNTMtNDMzZi1iYjY0LWMxYTlkZGIzNTE0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY28IAwDQYJKoZIhvcNAQELBQADggEBAIO8xJHfLF3n8mvV07Itq6EYSB3j ZesY5yM1RXaSo+z26LMDX6TfbqeD3W6vXV1tqr8xKyVPXDvYExNOrd9pgAginX0E uz9YW5B/BpNUaUNnE5Il2HevoITDNXF3npdrWJ/pTLbtU34K51UD9XN6d6sHOjnX nUeXs1G4EICUoI6Q0KuUUI9FcwUcZk09rPAi00p1lugA/eTFwKWAchUeZJjZy57Q 8JNIB5392gkMFL+iR830xiECvz47jm3t1m/Ua2Ux9z8jA/KLJ2G4WAFI6YtXQ4v5 uVx6xZ7+2QkCE3pdbeoFYEnhVuwIs83Z3+cHiPODd97O1ivmuiD2ZpejQa4= -----END CERTIFICATE-----Generated at Mon Oct 19 09:31:35 2026 by rpki-client