$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/071bfc3f-7852-4f76-88e4-3a7522ae131f.roa File: 071bfc3f-7852-4f76-88e4-3a7522ae131f.roa (raw, json) Hash identifier: lb1xNr2LMHrNl0oGc8FnZGJ5FfV1nhWwuirkvS4gFH8= Subject key identifier: D1:B5:77:5F:5D:48:94:26:A0:26:53:D3:1B:82:B9:B2:30:96:CB:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B638A3B38E8F32AA178959B74B4BF85F9AFBEE6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/071bfc3f-7852-4f76-88e4-3a7522ae131f.roa Signing time: Sat 18 Oct 2025 05:40:09 +0000 ROA not before: Sat 18 Oct 2025 05:40:09 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:63:8a:3b:38:e8:f3:2a:a1:78:95:9b:74:b4:bf:85:f9:af:be:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 05:40:09 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7e5e88f3cfc8685bdcc08ceadd0116507c116faee0316b767be0efc89f08b4c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:65:8a:ca:3b:d9:63:0d:ae:15:7b:73:dc: ed:05:2a:14:f5:20:99:c1:ce:05:69:2a:2a:97:74: 4b:de:2d:b8:94:03:e8:c9:ab:d7:c0:7c:5f:f7:e1: e9:98:19:ef:74:d4:a6:c7:f5:01:e9:ab:b1:72:86: ae:3e:5f:cb:42:8d:45:02:49:25:73:12:b7:73:dc: 42:a1:7e:55:77:2a:41:5b:0f:84:94:d7:bf:e7:f0: 34:4b:b7:2e:63:73:00:e6:62:14:69:bc:50:24:a9: 91:05:81:70:fe:0d:2e:65:51:50:a2:c0:16:4a:e5: 02:97:dc:40:03:91:ad:aa:cc:71:f6:59:24:8a:d9: a8:2a:8c:07:18:28:d1:49:99:7b:35:21:a6:13:07: e1:c4:ba:60:83:b3:4f:6c:50:e0:5f:25:df:4e:59: 2c:d4:d1:4c:71:5e:a7:f0:c4:fa:b0:1f:ab:87:16: 7f:80:97:bb:c8:e2:06:a8:1f:31:25:27:01:a4:28: 2b:dc:a5:50:2d:8c:d0:c3:6f:ca:f4:2a:d8:88:c1: d0:01:32:0a:51:56:b7:7f:ae:5f:0e:a6:2e:cb:37: c8:d4:fa:f8:6b:13:7e:c1:26:25:5a:70:c2:4e:18: 64:c8:47:1c:9a:b8:24:ac:9b:9e:d2:60:ad:5b:6a: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:77:5F:5D:48:94:26:A0:26:53:D3:1B:82:B9:B2:30:96:CB:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/071bfc3f-7852-4f76-88e4-3a7522ae131f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.124.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ea:14:63:cd:e8:2b:7e:30:52:7b:4c:40:1a:a6:c7:95:9a: 6f:fa:ae:09:48:2e:5b:f5:6a:27:75:f7:b0:d8:87:18:6c:90: 30:17:36:cc:a0:5a:06:7e:cc:fe:db:a4:bc:75:8c:5a:0a:e3: 4e:8a:14:5f:74:9c:33:20:cd:c9:9c:6e:e0:67:d5:25:50:35: 8b:a0:7a:a8:0c:74:87:ed:a6:3e:66:1c:c3:ff:ee:6c:0f:ae: 93:6f:f1:91:6f:74:2b:41:b3:cc:50:33:2e:86:58:8f:b1:aa: 24:62:a2:75:46:49:f0:2b:53:2e:90:42:76:28:c8:c4:34:a2: de:71:49:05:7d:00:53:c4:0c:7f:4d:e1:49:92:ee:d0:58:7e: 5f:21:2e:84:47:f1:d6:22:90:16:77:86:16:4a:46:5e:b3:56: 89:98:09:83:c3:45:1c:9a:8f:41:f4:4c:d0:95:eb:cc:84:24: a6:de:48:09:ed:d0:03:5e:d1:17:38:fe:80:c4:ba:b9:40:ee: 25:c0:b1:e9:cb:50:60:54:0c:c4:1c:66:5a:71:3d:74:12:f9: f9:90:e2:74:e1:a4:5b:e2:35:7d:58:d5:5f:ef:1b:f0:92:80: ea:c7:4c:07:c3:48:34:22:a3:b4:b3:13:91:de:5d:2c:b5:9c: 10:ed:98:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW2OKOzjo8yqheJWbdLS/hfmvvuYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDU0MDA5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTVlODhmM2NmYzg2ODViZGNjMDhjZWFkZDAxMTY1MDdj MTE2ZmFlZTAzMTZiNzY3YmUwZWZjODlmMDhiNGM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjZWWKyjvZYw2uFXtz3O0FKhT1IJnBzgVpKiqXdEveLbiU A+jJq9fAfF/34emYGe901KbH9QHpq7Fyhq4+X8tCjUUCSSVzErdz3EKhflV3KkFb D4SU17/n8DRLty5jcwDmYhRpvFAkqZEFgXD+DS5lUVCiwBZK5QKX3EADka2qzHH2 WSSK2agqjAcYKNFJmXs1IaYTB+HEumCDs09sUOBfJd9OWSzU0UxxXqfwxPqwH6uH Fn+Al7vI4gaoHzElJwGkKCvcpVAtjNDDb8r0KtiIwdABMgpRVrd/rl8Opi7LN8jU +vhrE37BJiVacMJOGGTIRxyauCSsm57SYK1bas6vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0bV3X11IlCagJlPTG4K5sjCWy1kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3MWJmYzNmLTc4NTItNGY3Ni04OGU0LTNhNzUyMmFlMTMxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wHwwDQYJKoZIhvcNAQELBQADggEBAF/qFGPN6Ct+MFJ7TEAapseVmm/6 rglILlv1aid197DYhxhskDAXNsygWgZ+zP7bpLx1jFoK406KFF90nDMgzcmcbuBn 1SVQNYugeqgMdIftpj5mHMP/7mwPrpNv8ZFvdCtBs8xQMy6GWI+xqiRionVGSfAr Uy6QQnYoyMQ0ot5xSQV9AFPEDH9N4UmS7tBYfl8hLoRH8dYikBZ3hhZKRl6zVomY CYPDRRyaj0H0TNCV68yEJKbeSAnt0ANe0Rc4/oDEurlA7iXAsenLUGBUDMQcZlpx PXQS+fmQ4nThpFviNX1Y1V/vG/CSgOrHTAfDSDQio7SzE5HeXSy1nBDtmLY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:29 2025 by rpki-client