$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a38efe-d930-4be7-a182-75db82eefe37.roa File: 48a38efe-d930-4be7-a182-75db82eefe37.roa (raw, json) Hash identifier: Z0YNbZib6o0PO3+TkHUuxAE5iFdzuJJNm2hgrrKFR6o= Subject key identifier: C8:A8:4B:C8:2C:AF:7E:B3:62:77:66:D6:2F:D0:89:9E:89:D6:5D:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28DA0BD10E3761E2D14FC65FB89D97B4A60CA3EC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a38efe-d930-4be7-a182-75db82eefe37.roa Signing time: Sat 18 Oct 2025 05:51:27 +0000 ROA not before: Sat 18 Oct 2025 05:51:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:da:0b:d1:0e:37:61:e2:d1:4f:c6:5f:b8:9d:97:b4:a6:0c:a3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 05:51:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7976799b58dcd5c0e16e0482cdaaef0f17b4cbf13456bc27faac478444ed8f72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:a0:19:dc:ca:5e:99:b6:99:25:9c:4b:96: e7:28:71:60:1d:1b:b7:4d:ef:c8:71:e5:90:c8:0b: 2d:fc:3c:0a:fe:ab:e2:c0:b1:d2:c1:1e:f5:fd:1d: 2f:bb:17:8a:ee:56:e2:d4:df:48:d8:59:42:21:9d: d6:84:40:cb:cb:89:1a:1c:25:82:87:8a:81:9e:99: 0e:e2:4b:a5:34:ed:e3:7c:94:7c:e6:d2:37:ab:fa: 12:d7:f9:f8:ba:59:2c:1c:03:5f:d9:92:29:dd:70: 13:dc:cc:30:b5:30:16:e9:9c:90:22:44:a3:80:df: e2:11:4e:07:dd:c7:8c:ff:0c:fe:0f:5b:33:a6:ed: 1f:d7:4b:09:6f:51:a6:a2:ad:2f:b0:67:26:db:f5: 72:92:a0:62:e4:4b:a5:28:5a:dc:df:94:cb:11:f7: a7:f6:5b:95:58:89:5b:34:da:c5:36:9a:da:b0:44: 83:a9:fa:8d:22:44:04:b4:5b:ca:f0:c3:f1:d7:4b: 0b:58:6f:de:db:35:94:0f:7d:29:94:3d:99:f7:dc: e8:46:36:92:6c:9b:b2:6e:1c:ec:16:81:b3:9a:06: 5d:89:aa:a4:7d:62:d5:b2:a9:c9:be:f4:99:3d:2d: 4a:fb:12:31:39:5b:39:77:74:d8:0a:a4:d5:79:62: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:4B:C8:2C:AF:7E:B3:62:77:66:D6:2F:D0:89:9E:89:D6:5D:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a38efe-d930-4be7-a182-75db82eefe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.62.0/24 Signature Algorithm: sha256WithRSAEncryption 50:e8:27:6b:89:b4:ef:ab:bd:ac:31:2a:ad:c4:fc:86:27:6a: d6:df:4f:1f:8b:cf:fe:a9:e7:ad:a8:19:00:56:a6:a7:2b:3d: 0b:4d:96:51:f0:26:0a:21:87:d2:0e:17:9c:e9:31:1d:5e:69: 5d:4f:e9:bd:3d:e1:25:42:cb:ec:fb:86:19:44:f2:6b:60:fb: d1:b4:b9:cb:8a:2d:93:c3:af:5c:54:c8:94:8f:52:41:50:d3: bb:c1:36:eb:9b:78:2c:ac:67:98:cf:06:7e:99:f8:cd:93:95: 62:07:7a:3c:82:1d:c4:30:ba:01:21:fd:f6:b9:d8:0d:14:2e: ac:d1:87:ab:d8:33:09:9d:37:3f:f8:49:66:a7:ea:f8:0a:44: 32:b8:26:44:90:2a:4b:3c:87:60:f3:41:a9:3e:2d:67:b2:6f: 01:79:c8:bd:51:85:7b:4e:b9:e2:0b:20:af:e2:db:12:74:87: 5e:26:27:77:8f:a6:45:0b:d6:e6:0c:90:73:48:78:a8:38:36: fd:2b:6f:26:98:6e:b5:3c:d0:3f:3a:45:7c:ca:86:0a:0d:7b: 91:82:80:78:fd:50:db:36:ba:a7:c9:54:a2:a5:2f:4c:c5:2b: 44:68:7d:7a:b4:b1:e5:94:4a:de:ca:a4:b2:38:44:94:0d:3c: 27:58:16:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKNoL0Q43YeLRT8ZfuJ2XtKYMo+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDU1MTI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTc2Nzk5YjU4ZGNkNWMwZTE2ZTA0ODJjZGFhZWYwZjE3 YjRjYmYxMzQ1NmJjMjdmYWFjNDc4NDQ0ZWQ4ZjcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7raAZ3MpembaZJZxLlucocWAdG7dN78hx5ZDICy38PAr+ q+LAsdLBHvX9HS+7F4ruVuLU30jYWUIhndaEQMvLiRocJYKHioGemQ7iS6U07eN8 lHzm0jer+hLX+fi6WSwcA1/ZkindcBPczDC1MBbpnJAiRKOA3+IRTgfdx4z/DP4P WzOm7R/XSwlvUaairS+wZybb9XKSoGLkS6UoWtzflMsR96f2W5VYiVs02sU2mtqw RIOp+o0iRAS0W8rww/HXSwtYb97bNZQPfSmUPZn33OhGNpJsm7JuHOwWgbOaBl2J qqR9YtWyqcm+9Jk9LUr7EjE5Wzl3dNgKpNV5YlShAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyKhLyCyvfrNid2bWL9CJnonWXWwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4YTM4ZWZlLWQ5MzAtNGJlNy1hMTgyLTc1ZGI4MmVlZmUzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wD4wDQYJKoZIhvcNAQELBQADggEBAFDoJ2uJtO+rvawxKq3E/IYnatbf Tx+Lz/6p562oGQBWpqcrPQtNllHwJgohh9IOF5zpMR1eaV1P6b094SVCy+z7hhlE 8mtg+9G0ucuKLZPDr1xUyJSPUkFQ07vBNuubeCysZ5jPBn6Z+M2TlWIHejyCHcQw ugEh/fa52A0ULqzRh6vYMwmdNz/4SWan6vgKRDK4JkSQKks8h2DzQak+LWeybwF5 yL1RhXtOueILIK/i2xJ0h14mJ3ePpkUL1uYMkHNIeKg4Nv0rbyaYbrU80D86RXzK hgoNe5GCgHj9UNs2uqfJVKKlL0zFK0RofXq0seWUSt7KpLI4RJQNPCdYFqA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:40 2025 by rpki-client