$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa File: cdf86191-6770-46d1-ad86-96332b6ed7e8.roa (raw, json) Hash identifier: YQFktd9cGJZer/bsgz4EdE8jDrdYcQeUdwKEE5zrzew= Subject key identifier: 9F:E6:A7:47:AD:99:88:82:74:1F:E3:8E:C5:5F:C9:6E:2C:56:31:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44ED8E5B857CBFE6E6EF16E5B219AC67E6C5DEC8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa Signing time: Mon 27 Jul 2026 01:40:49 +0000 ROA not before: Mon 27 Jul 2026 01:40:49 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ed:8e:5b:85:7c:bf:e6:e6:ef:16:e5:b2:19:ac:67:e6:c5:de:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 27 01:40:49 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=2afa10491d909365c59557821c9d7216cc75e1c5e96c7cda8b4ef86a7e8ce02a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:8a:c2:77:01:8f:f7:c1:d8:74:f2:28:6a: 2d:23:32:f5:60:d5:97:6d:4f:5d:02:70:e8:4b:62: 5d:a7:2c:f2:21:84:cc:d0:b2:87:68:26:08:80:46: f1:e4:4c:1a:6e:bb:cf:9b:d3:37:fd:2d:27:9a:a3: 20:ce:43:a4:1c:a3:2e:74:19:30:25:83:81:72:ca: c2:c5:f7:f1:39:1a:2b:7a:2c:86:55:44:64:5f:28: ee:e2:04:9f:6d:f4:9f:14:9b:72:a2:ab:f3:1a:4d: 02:bf:55:4f:6a:74:91:6a:b4:83:65:6f:b8:92:4f: ab:7c:54:33:09:fa:d0:60:93:c7:91:25:b0:db:ba: 22:4b:a4:7f:54:d3:7a:f2:fb:4f:d7:5b:b0:37:1a: cb:66:9e:d5:bb:ea:52:1e:ad:35:90:a1:7a:39:07: 98:2e:47:31:e0:ab:03:64:98:bf:96:19:2c:86:c5: be:0c:14:8d:df:e6:ec:3d:49:e3:42:ce:c0:0c:e7: af:20:9b:e5:ca:f4:e9:59:42:dd:23:9d:5d:ed:4d: bc:b6:fd:70:0a:ff:de:78:b6:65:4a:18:90:14:17: 5f:9b:34:c5:6d:04:7a:9b:e5:de:ad:a3:ff:64:e1: df:57:15:c8:eb:71:03:29:63:4f:8a:32:b0:a0:c0: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:A7:47:AD:99:88:82:74:1F:E3:8E:C5:5F:C9:6E:2C:56:31:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption 22:92:43:47:fc:1f:20:3f:bf:60:9f:6c:b4:9d:90:ef:58:fe: 10:01:9a:ef:93:cf:ea:a3:c7:cd:57:cf:d4:1c:c7:20:9a:81: 41:5f:57:98:41:66:e1:c3:47:fe:3c:e5:3a:cb:89:76:06:07: 44:c8:75:62:b7:3c:84:69:b7:7b:c2:26:4e:7d:a5:78:da:e5: 21:20:be:38:e1:19:ae:90:f7:71:35:42:a2:e4:28:20:24:03: af:cb:2a:56:f9:70:d4:5b:8c:3b:6d:83:5f:42:cd:e7:eb:1b: 04:d9:bd:a6:f3:9e:b0:e6:9b:a7:bf:5f:38:57:61:aa:09:52: 48:36:cf:bd:ed:a2:fc:d1:0a:fb:b6:47:f3:b4:02:94:e0:36: 91:f6:0c:08:1b:be:66:1f:7e:48:ac:9b:ec:9d:9f:77:45:69: 43:36:7c:c1:9b:e9:95:8a:f9:0e:46:0f:4c:e3:34:7c:d6:99: 33:f3:63:16:5f:e0:9e:e6:74:c1:10:95:fa:ab:8f:71:56:15: 8b:9c:c4:f6:d8:4c:0c:0a:9d:19:2d:21:a4:76:9a:45:49:71: 47:24:87:35:c0:fd:74:0a:a8:2a:5f:0a:ff:27:f4:3c:4b:c5: ca:5f:7c:ae:71:4c:f8:b0:7d:64:a2:90:b5:a3:2b:47:01:71: 3f:13:f0:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURO2OW4V8v+bm7xblshmsZ+bF3sgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDE0MDQ5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWZhMTA0OTFkOTA5MzY1YzU5NTU3ODIxYzlkNzIxNmNj NzVlMWM1ZTk2YzdjZGE4YjRlZjg2YTdlOGNlMDJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu2orCdwGP98HYdPIoai0jMvVg1ZdtT10CcOhLYl2nLPIh hMzQsodoJgiARvHkTBpuu8+b0zf9LSeaoyDOQ6Qcoy50GTAlg4FyysLF9/E5Git6 LIZVRGRfKO7iBJ9t9J8Um3Kiq/MaTQK/VU9qdJFqtINlb7iST6t8VDMJ+tBgk8eR JbDbuiJLpH9U03ry+0/XW7A3GstmntW76lIerTWQoXo5B5guRzHgqwNkmL+WGSyG xb4MFI3f5uw9SeNCzsAM568gm+XK9OlZQt0jnV3tTby2/XAK/954tmVKGJAUF1+b NMVtBHqb5d6to/9k4d9XFcjrcQMpY0+KMrCgwHsZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn+anR62ZiIJ0H+OOxV/JbixWMUQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkZjg2MTkxLTY3NzAtNDZkMS1hZDg2LTk2MzMyYjZlZDdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0E4AwDQYJKoZIhvcNAQELBQADggEBACKSQ0f8HyA/v2CfbLSdkO9Y/hAB mu+Tz+qjx81Xz9QcxyCagUFfV5hBZuHDR/485TrLiXYGB0TIdWK3PIRpt3vCJk59 pXja5SEgvjjhGa6Q93E1QqLkKCAkA6/LKlb5cNRbjDttg19CzefrGwTZvabznrDm m6e/XzhXYaoJUkg2z73tovzRCvu2R/O0ApTgNpH2DAgbvmYffkism+ydn3dFaUM2 fMGb6ZWK+Q5GD0zjNHzWmTPzYxZf4J7mdMEQlfqrj3FWFYucxPbYTAwKnRktIaR2 mkVJcUckhzXA/XQKqCpfCv8n9DxLxcpffK5xTPiwfWSikLWjK0cBcT8T8Eg= -----END CERTIFICATE-----Generated at Sat Sep 19 13:01:16 2026 by rpki-client