$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cf4e052-bd76-40d7-aeb0-4b6653f6b546.roa File: 4cf4e052-bd76-40d7-aeb0-4b6653f6b546.roa (raw, json) Hash identifier: 6lsbF+Rp8AjhhhSz2eEvFnzQVtK3BNXDEm8y1Nj+cXk= Subject key identifier: A2:7F:B5:57:14:C3:E7:38:CE:91:2D:42:46:12:E4:D7:46:5B:55:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A7EC87E26188B957E47EE7D9CDDD3B45DB32ED1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cf4e052-bd76-40d7-aeb0-4b6653f6b546.roa Signing time: Sat 18 Oct 2025 06:03:22 +0000 ROA not before: Sat 18 Oct 2025 06:03:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.248.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7e:c8:7e:26:18:8b:95:7e:47:ee:7d:9c:dd:d3:b4:5d:b3:2e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:03:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ace7a394d9ed83571b8e30076f0c70eb883b362716571a56ec52b620aa59564e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:af:26:5b:0f:cb:5f:e1:cd:d5:03:ca:1d: 99:a9:1b:31:40:96:f5:18:29:96:26:4f:31:6a:b2: 80:9c:75:d9:31:50:5d:b2:e1:4d:e2:d8:7c:44:bb: dc:2a:11:ad:6f:d7:ed:f3:cc:86:2f:1f:83:78:9a: 7d:33:c7:c6:07:cd:0f:93:af:2a:f0:77:15:69:c9: 07:24:41:a8:d3:e2:3e:38:31:23:df:49:81:ca:1c: c0:c0:bd:6c:d9:38:1e:a6:ca:90:14:c3:e3:d8:1f: 63:9d:17:8c:df:cd:4d:da:29:36:03:44:82:e5:6c: d7:70:9f:fd:03:0e:f2:8d:aa:99:7f:39:98:b8:1b: f7:ef:12:74:35:11:f7:83:d7:6e:14:83:ea:f7:08: 41:cc:c7:87:90:20:b7:52:ec:b7:51:ec:e5:ad:9a: 89:b4:00:2b:e9:ce:1b:13:05:88:ee:04:32:23:da: 28:00:75:d2:a2:af:35:d1:42:6d:21:dd:26:aa:37: 1d:9f:d0:45:a5:a1:11:5a:17:50:bf:fb:11:a2:01: 9f:a8:21:52:d0:57:65:05:27:16:67:ff:57:12:8c: 75:7a:90:40:75:bd:8b:8c:2d:49:d8:15:4c:f6:ff: 69:a2:2d:74:20:61:fc:6a:18:45:ba:93:8a:58:d1: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7F:B5:57:14:C3:E7:38:CE:91:2D:42:46:12:E4:D7:46:5B:55:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cf4e052-bd76-40d7-aeb0-4b6653f6b546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.248.0.0/18 Signature Algorithm: sha256WithRSAEncryption 8d:5f:72:69:10:2e:e3:fc:c8:38:0f:c9:d4:53:ed:27:fc:a2: 6d:72:ff:5a:24:00:44:36:49:f7:1d:89:e9:71:85:a0:64:0b: 10:9e:30:f8:a2:2c:fb:83:8a:ba:0b:fb:af:27:40:0d:8c:4f: 0b:b3:09:73:61:2f:d5:08:9d:f8:97:ba:f0:ca:0b:13:e2:a3: c3:6b:80:fb:af:5c:15:eb:c5:5e:3a:bd:07:a4:69:10:1a:2f: 7e:3b:50:71:9f:ab:21:dd:1b:50:ba:d1:f7:57:3d:8a:84:91: 49:78:12:f5:0b:a9:27:ab:a8:aa:df:e0:2f:63:e4:ff:8e:f6: e2:15:bf:9d:1b:97:23:15:b3:4a:8f:0b:e7:4a:f9:f0:91:ca: 8c:4a:27:e1:a2:86:82:f6:70:71:c8:15:a6:51:0a:66:e5:a7: 9e:85:27:e8:c3:16:31:d6:d1:df:3f:29:7c:6a:04:9c:1a:db: 60:ea:ee:b2:da:2b:b9:25:54:d4:63:e9:36:f6:13:ff:5d:7b: fd:18:9f:6d:bd:56:dc:30:82:a8:84:17:14:11:2a:dc:fb:a2: cb:d4:5b:f5:2f:8c:65:de:be:79:75:9d:22:27:47:b0:0b:9d: b2:6a:6a:51:3b:8a:4c:1a:16:ed:0c:e2:7b:e9:8c:a8:48:65: 29:e2:fe:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWn7IfiYYi5V+R+59nN3TtF2zLtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYwMzIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2U3YTM5NGQ5ZWQ4MzU3MWI4ZTMwMDc2ZjBjNzBlYjg4 M2IzNjI3MTY1NzFhNTZlYzUyYjYyMGFhNTk1NjRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCM+a8mWw/LX+HN1QPKHZmpGzFAlvUYKZYmTzFqsoCcddkx UF2y4U3i2HxEu9wqEa1v1+3zzIYvH4N4mn0zx8YHzQ+TryrwdxVpyQckQajT4j44 MSPfSYHKHMDAvWzZOB6mypAUw+PYH2OdF4zfzU3aKTYDRILlbNdwn/0DDvKNqpl/ OZi4G/fvEnQ1EfeD124Ug+r3CEHMx4eQILdS7LdR7OWtmom0ACvpzhsTBYjuBDIj 2igAddKirzXRQm0h3SaqNx2f0EWloRFaF1C/+xGiAZ+oIVLQV2UFJxZn/1cSjHV6 kEB1vYuMLUnYFUz2/2miLXQgYfxqGEW6k4pY0VzZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUon+1VxTD5zjOkS1CRhLk10ZbVZgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjZjRlMDUyLWJkNzYtNDBkNy1hZWIwLTRiNjY1M2Y2YjU0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2+AAwDQYJKoZIhvcNAQELBQADggEBAI1fcmkQLuP8yDgPydRT7Sf8om1y /1okAEQ2SfcdielxhaBkCxCeMPiiLPuDiroL+68nQA2MTwuzCXNhL9UInfiXuvDK CxPio8NrgPuvXBXrxV46vQekaRAaL347UHGfqyHdG1C60fdXPYqEkUl4EvULqSer qKrf4C9j5P+O9uIVv50blyMVs0qPC+dK+fCRyoxKJ+GihoL2cHHIFaZRCmblp56F J+jDFjHW0d8/KXxqBJwa22Dq7rLaK7klVNRj6Tb2E/9de/0Yn229VtwwgqiEFxQR Ktz7osvUW/UvjGXevnl1nSInR7ALnbJqalE7ikwaFu0M4nvpjKhIZSni/t4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:05 2025 by rpki-client