$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21367ddd-c241-44a2-a6e6-1387b1e1fc6f.roa File: 21367ddd-c241-44a2-a6e6-1387b1e1fc6f.roa (raw, json) Hash identifier: ZX1fpVQoshTNmhUjLAqNitZT3jKjMTHzYFBFM4l9fuY= Subject key identifier: A0:B6:97:50:32:DE:4E:4C:BE:39:ED:8A:9B:E7:B6:53:D3:A3:D7:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 576D0A77008E91D35FEAA1EC646E1FA09D4F9340 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21367ddd-c241-44a2-a6e6-1387b1e1fc6f.roa Signing time: Mon 13 Oct 2025 17:55:05 +0000 ROA not before: Mon 13 Oct 2025 17:55:05 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.146.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6d:0a:77:00:8e:91:d3:5f:ea:a1:ec:64:6e:1f:a0:9d:4f:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:55:05 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=071fc1c4cf96eacc688cd6416c157fb5e483614dd92257e5750c36c0014ad4b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:80:7a:1f:fe:d4:f0:d2:d8:e7:89:e7:cb: ee:c7:14:29:87:86:4b:69:ac:b5:ff:a4:97:55:e1: e7:07:0c:e8:7a:07:cf:55:6c:9a:77:37:a5:c1:a1: 57:49:df:84:f4:a5:1f:dc:15:0c:ff:1e:24:b6:47: 08:e4:03:26:a4:4c:f6:a7:6e:48:cc:f1:33:cb:bd: 7d:6b:e3:d5:49:85:4d:fe:9f:91:31:95:a6:5a:13: 89:70:24:c1:ff:93:17:b4:81:ed:bf:e3:f0:7f:c2: d8:48:b6:86:6e:e1:0e:4b:38:e8:91:25:24:48:2c: e4:eb:93:49:76:3b:65:a6:b8:30:fe:e4:9b:4a:9e: 48:2b:ea:3a:2c:1b:c5:45:23:41:fc:94:dd:5b:63: 37:e2:75:34:31:65:65:0c:2b:91:d4:4f:40:c8:92: 17:a3:fd:74:77:df:1c:c3:df:64:66:41:e5:25:43: f1:0d:64:8c:b1:02:fc:59:42:1d:dd:21:b5:8a:66: 24:df:b6:c7:f2:eb:a5:e8:f4:e8:6d:32:b5:42:a0: 37:71:8b:52:72:9a:3a:9e:27:39:0c:0a:6c:10:56: 51:fd:e6:8e:e6:04:fb:fe:95:d3:a0:18:36:d7:36: 0f:b9:88:92:fb:a7:4c:52:1e:4f:0e:cf:7b:14:cd: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:97:50:32:DE:4E:4C:BE:39:ED:8A:9B:E7:B6:53:D3:A3:D7:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21367ddd-c241-44a2-a6e6-1387b1e1fc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.146.96.0/19 Signature Algorithm: sha256WithRSAEncryption 7d:2f:68:ab:7d:d4:4e:07:4f:44:6b:d8:b5:d2:18:fb:95:de: b1:8d:aa:bd:6b:81:48:ed:66:d3:d9:8a:72:8b:16:9a:c3:e2: 19:59:46:5b:27:7d:a1:e9:10:1e:05:a3:af:c0:00:8a:15:23: 1b:bb:57:52:52:6b:f5:a0:50:f6:9f:bf:06:f6:c6:f9:54:0d: 6c:32:22:4f:10:3b:ea:42:b3:d0:f0:43:e6:a1:cc:66:8b:45: 20:0f:2c:66:ec:06:8e:50:43:04:96:a8:1f:09:d1:e5:31:c0: 85:13:b8:f6:49:d6:c7:ff:cf:bb:76:80:8e:2d:35:21:f7:5c: 49:87:c8:dd:4d:f5:cf:6a:13:0a:58:f4:b3:ec:9e:18:b8:41: a4:c4:69:5f:6f:66:b7:27:a1:d6:8f:34:4a:4d:a5:fa:33:c3: 5a:c9:04:8d:bf:06:87:41:c4:a9:f5:24:05:1e:f8:2f:6f:5b: de:67:1e:dd:d8:dd:2e:97:6e:d1:0e:6f:c1:48:02:0f:a7:b1: 69:e5:0b:e9:0b:9d:8f:8d:6e:6e:50:12:ed:11:66:8b:a5:e7: 71:7e:19:41:ee:ca:20:a7:ad:1c:d1:14:85:d2:70:42:a0:5e: b7:5c:24:28:3d:3c:26:b9:c7:6e:94:8f:50:52:0e:68:ae:9b: 46:29:e0:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV20KdwCOkdNf6qHsZG4foJ1Pk0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTc1NTA1WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzFmYzFjNGNmOTZlYWNjNjg4Y2Q2NDE2YzE1N2ZiNWU0 ODM2MTRkZDkyMjU3ZTU3NTBjMzZjMDAxNGFkNGI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6MYB6H/7U8NLY54nny+7HFCmHhktprLX/pJdV4ecHDOh6 B89VbJp3N6XBoVdJ34T0pR/cFQz/HiS2RwjkAyakTPanbkjM8TPLvX1r49VJhU3+ n5ExlaZaE4lwJMH/kxe0ge2/4/B/wthItoZu4Q5LOOiRJSRILOTrk0l2O2WmuDD+ 5JtKnkgr6josG8VFI0H8lN1bYzfidTQxZWUMK5HUT0DIkhej/XR33xzD32RmQeUl Q/ENZIyxAvxZQh3dIbWKZiTftsfy66Xo9OhtMrVCoDdxi1JymjqeJzkMCmwQVlH9 5o7mBPv+ldOgGDbXNg+5iJL7p0xSHk8Oz3sUzcb1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoLaXUDLeTky+Oe2Km+e2U9Oj1/8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxMzY3ZGRkLWMyNDEtNDRhMi1hNmU2LTEzODdiMWUxZmM2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2kmAwDQYJKoZIhvcNAQELBQADggEBAH0vaKt91E4HT0Rr2LXSGPuV3rGN qr1rgUjtZtPZinKLFprD4hlZRlsnfaHpEB4Fo6/AAIoVIxu7V1JSa/WgUPafvwb2 xvlUDWwyIk8QO+pCs9DwQ+ahzGaLRSAPLGbsBo5QQwSWqB8J0eUxwIUTuPZJ1sf/ z7t2gI4tNSH3XEmHyN1N9c9qEwpY9LPsnhi4QaTEaV9vZrcnodaPNEpNpfozw1rJ BI2/BodBxKn1JAUe+C9vW95nHt3Y3S6XbtEOb8FIAg+nsWnlC+kLnY+Nbm5QEu0R Zoul53F+GUHuyiCnrRzRFIXScEKgXrdcJCg9PCa5x26Uj1BSDmium0Yp4PU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:00:39 2025 by rpki-client