$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/022351db-67fe-459a-b04b-accb8d5021a9.roa File: 022351db-67fe-459a-b04b-accb8d5021a9.roa (raw, json) Hash identifier: 3PKGSNFG2IxjzFzgm9fRodCA6/dw5O8qIpbr0wNXjYM= Subject key identifier: BB:21:33:68:C5:32:76:48:42:6F:1E:A2:5B:35:F2:10:BD:CC:5C:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 035E7E620965BE6C46324B49346B34FD982E3FF1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/022351db-67fe-459a-b04b-accb8d5021a9.roa Signing time: Fri 17 Oct 2025 23:02:33 +0000 ROA not before: Fri 17 Oct 2025 23:02:33 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5e:7e:62:09:65:be:6c:46:32:4b:49:34:6b:34:fd:98:2e:3f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:02:33 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=b75e53a713b29f034aa230967219a512d000e57bf6edc8a1f8001ca062dbebb7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:c9:ee:34:35:c7:30:c2:5a:90:ac:1b:5d: 7b:0f:ba:e3:76:b8:dc:88:3e:2a:72:32:ef:e0:a8: 7e:82:8b:c8:9f:9d:84:b3:d5:8a:b7:2a:5a:ad:ce: 1c:e3:f7:af:36:e6:5a:15:4a:2a:d7:eb:95:d4:93: 9b:a4:99:e8:16:33:95:bc:46:2b:45:c6:f3:b9:37: f2:c3:83:47:4f:fb:cc:2f:ba:4a:81:c8:55:fc:d0: ca:3e:8d:bd:f8:13:d9:74:ee:94:88:a3:e8:23:c7: 0a:7c:cd:95:0a:5c:2e:a6:d5:26:20:23:7a:b1:17: dc:ca:03:4c:8f:b3:4d:cf:18:8f:ac:95:96:f0:78: 44:00:f0:69:d0:4f:10:09:01:77:e5:96:f4:57:51: c6:9b:d1:9f:d1:95:57:62:d8:f5:cd:7c:a2:f7:72: 70:79:ce:4d:4c:aa:a3:d9:9c:45:a0:8a:f1:a2:91: 6b:74:f4:53:af:c4:21:2a:a0:04:b7:db:32:f1:0d: 59:61:84:d8:f6:5d:0a:8c:97:ca:b9:46:d3:1e:0b: 6f:c0:42:2c:a1:81:a9:bc:6b:c2:ee:fb:d8:ea:3b: f0:e6:0c:de:6b:1c:7c:11:53:1a:7a:24:e8:c8:f8: 7a:83:fd:59:ff:7c:3a:ca:7a:7a:10:a5:75:c1:24: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:21:33:68:C5:32:76:48:42:6F:1E:A2:5B:35:F2:10:BD:CC:5C:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/022351db-67fe-459a-b04b-accb8d5021a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.144.0/24 Signature Algorithm: sha256WithRSAEncryption 65:d1:37:8b:0e:2e:18:fd:41:1a:6a:87:6a:84:e3:98:96:b4: 53:b1:b4:ea:75:b9:fb:98:ed:93:01:16:d7:6a:1e:29:96:ce: 6e:ed:7a:76:09:ba:79:4d:db:9d:9e:55:fd:47:32:00:6a:74: 6f:a1:89:37:e2:73:a0:24:98:a1:9c:21:d7:5f:13:96:eb:f8: 4c:68:48:e5:2a:71:ea:9b:ec:fd:39:bc:0a:05:a0:29:47:f9: 8b:3d:29:86:f0:60:78:19:c4:fa:45:f3:ff:bd:ab:b6:26:e7: 9f:de:92:c7:6b:c2:78:4e:7b:4a:4f:cb:30:b1:00:54:52:fa: 3a:d7:24:ee:59:77:8e:23:8e:80:86:d1:f7:5d:f3:6f:08:3a: 4f:87:eb:fd:78:b2:5d:c4:a5:ad:1c:13:6c:7c:93:5b:9b:00: 83:a3:12:76:f9:3a:f9:43:ff:66:0f:3f:d7:13:04:2d:dd:9d: a0:c8:a6:ea:09:6d:2b:a2:79:47:f6:ef:93:de:3a:57:81:0d: d2:92:b1:8a:c7:c6:8c:5c:0d:57:d1:8f:63:69:5b:a3:c2:c3: 46:f6:ed:fa:da:aa:d7:3a:ef:58:d2:aa:02:41:be:28:af:6d: 49:05:4f:ce:4a:72:24:92:e9:04:77:d9:ea:82:2d:dc:cf:a4: 97:51:45:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA15+YgllvmxGMktJNGs0/ZguP/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjMwMjMzWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzVlNTNhNzEzYjI5ZjAzNGFhMjMwOTY3MjE5YTUxMmQw MDBlNTdiZjZlZGM4YTFmODAwMWNhMDYyZGJlYmI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2UcnuNDXHMMJakKwbXXsPuuN2uNyIPipyMu/gqH6Ci8if nYSz1Yq3Klqtzhzj96825loVSirX65XUk5ukmegWM5W8RitFxvO5N/LDg0dP+8wv ukqByFX80Mo+jb34E9l07pSIo+gjxwp8zZUKXC6m1SYgI3qxF9zKA0yPs03PGI+s lZbweEQA8GnQTxAJAXfllvRXUcab0Z/RlVdi2PXNfKL3cnB5zk1MqqPZnEWgivGi kWt09FOvxCEqoAS32zLxDVlhhNj2XQqMl8q5RtMeC2/AQiyhgam8a8Lu+9jqO/Dm DN5rHHwRUxp6JOjI+HqD/Vn/fDrKenoQpXXBJF4/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuyEzaMUydkhCbx6iWzXyEL3MXM0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyMjM1MWRiLTY3ZmUtNDU5YS1iMDRiLWFjY2I4ZDUwMjFhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wJAwDQYJKoZIhvcNAQELBQADggEBAGXRN4sOLhj9QRpqh2qE45iWtFOx tOp1ufuY7ZMBFtdqHimWzm7tenYJunlN252eVf1HMgBqdG+hiTfic6AkmKGcIddf E5br+ExoSOUqceqb7P05vAoFoClH+Ys9KYbwYHgZxPpF8/+9q7Ym55/eksdrwnhO e0pPyzCxAFRS+jrXJO5Zd44jjoCG0fdd828IOk+H6/14sl3Epa0cE2x8k1ubAIOj Enb5OvlD/2YPP9cTBC3dnaDIpuoJbSuieUf275PeOleBDdKSsYrHxoxcDVfRj2Np W6PCw0b27fraqtc671jSqgJBviivbUkFT85KciSS6QR32eqCLdzPpJdRRV8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:46 2025 by rpki-client