$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98b62776-00b0-4964-8cb1-a73b3d4d1c41.roa File: 98b62776-00b0-4964-8cb1-a73b3d4d1c41.roa (raw, json) Hash identifier: eUuQdBmAHfoiI90F1eWCg4DumVjyHFlTG35HROC28M4= Subject key identifier: 5D:8E:B7:8F:46:18:5A:B8:AE:14:C8:33:8A:FB:56:39:26:C1:D8:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B4FE89E7C37A80561E89BF2D9D130B66263AD1A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98b62776-00b0-4964-8cb1-a73b3d4d1c41.roa Signing time: Fri 17 Oct 2025 23:20:14 +0000 ROA not before: Fri 17 Oct 2025 23:20:14 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4f:e8:9e:7c:37:a8:05:61:e8:9b:f2:d9:d1:30:b6:62:63:ad:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:20:14 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=fa73de96aaea341b3a824917df2f08d70fdac6b5cd6ac13e07ce4494b738c9cb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:23:9b:2c:89:d5:ba:a3:94:51:07:7a:99: b4:8c:ce:0e:eb:71:ca:71:f6:87:ba:68:90:af:56: 0b:ad:46:e3:de:93:b8:dd:a6:7d:74:7d:22:b3:ff: 14:72:3c:55:3a:d1:e8:f6:c7:24:16:2d:a9:40:b0: ba:f9:3c:5b:5a:14:60:53:f2:20:41:ce:90:3f:4a: 7d:1a:ce:40:40:ee:b6:a0:26:f4:a1:10:08:14:60: a6:1f:2c:80:3e:32:8f:76:35:b0:ae:d2:75:42:fd: 50:a9:55:23:53:28:5f:5d:e1:18:d6:ac:dd:2b:bf: 82:b9:c2:64:90:11:80:37:47:5a:57:03:ea:cc:12: c2:23:28:c2:e6:54:4b:17:25:4b:a1:f6:14:17:b5: 77:64:42:c5:c4:1a:fb:40:9d:3f:3b:9b:88:42:54: 70:f5:fa:0c:fb:72:be:42:5c:bc:44:bc:7e:f2:3e: 10:36:7b:f6:32:6b:05:7f:44:42:16:58:14:a7:b9: f9:55:73:9d:74:04:b1:5d:5e:02:66:c4:b5:a8:fe: 7b:bb:64:0d:26:c3:79:a2:08:bd:61:9a:43:e8:54: 9c:d2:8a:eb:1f:1d:0d:cd:c9:2b:d9:34:96:d2:9d: 7d:85:43:37:bb:e3:d3:3a:3a:20:20:7b:42:d6:f5: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8E:B7:8F:46:18:5A:B8:AE:14:C8:33:8A:FB:56:39:26:C1:D8:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98b62776-00b0-4964-8cb1-a73b3d4d1c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.171.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d7:23:f0:14:ee:a9:75:3f:40:a1:6c:27:6c:06:50:67:c3: 74:c0:a5:31:1f:6a:05:52:fe:cc:09:be:0c:87:2b:82:07:5a: c1:14:86:f1:5a:17:f7:cf:75:6b:e7:8e:37:1a:11:d2:f7:b8: 07:7f:7b:2d:35:98:dc:ee:41:76:d0:15:1d:8e:8d:b3:c2:a1: e1:61:4d:f1:a3:4b:5d:f1:ef:1c:3d:9b:03:06:11:85:5c:b1: 00:0d:0e:7c:52:21:93:55:cf:f8:06:15:d7:2f:8d:55:5e:53: df:ea:0b:d5:d3:02:6c:2a:a5:33:54:18:2a:79:2a:c2:1f:3d: 7d:33:90:7a:08:73:7c:76:e8:63:55:6b:cf:e8:29:e8:cc:00: 43:13:de:ee:b8:73:04:23:8d:88:09:f7:5e:92:34:e9:32:e0: 98:52:3c:10:de:18:4c:39:74:49:77:20:e3:a8:69:7f:3b:e9: 8a:79:08:9c:f0:c5:14:7a:8b:e8:2b:be:96:a1:14:b0:c9:00: a8:cb:a9:f1:bb:3a:92:17:2c:4b:14:48:0a:e8:ca:1f:55:60: 4b:10:7c:d0:9f:42:f5:ef:6c:85:a3:aa:57:c5:0d:e6:47:83: 7e:f4:1b:1c:63:a7:b8:93:df:da:96:32:e8:5e:f1:06:75:55: 94:28:23:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO0/onnw3qAVh6Jvy2dEwtmJjrRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjMyMDE0WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTczZGU5NmFhZWEzNDFiM2E4MjQ5MTdkZjJmMDhkNzBm ZGFjNmI1Y2Q2YWMxM2UwN2NlNDQ5NGI3MzhjOWNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ7SObLInVuqOUUQd6mbSMzg7rccpx9oe6aJCvVgutRuPe k7jdpn10fSKz/xRyPFU60ej2xyQWLalAsLr5PFtaFGBT8iBBzpA/Sn0azkBA7rag JvShEAgUYKYfLIA+Mo92NbCu0nVC/VCpVSNTKF9d4RjWrN0rv4K5wmSQEYA3R1pX A+rMEsIjKMLmVEsXJUuh9hQXtXdkQsXEGvtAnT87m4hCVHD1+gz7cr5CXLxEvH7y PhA2e/YyawV/REIWWBSnuflVc510BLFdXgJmxLWo/nu7ZA0mw3miCL1hmkPoVJzS iusfHQ3NySvZNJbSnX2FQze749M6OiAge0LW9ST5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXY63j0YYWriuFMgzivtWOSbB2MUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4YjYyNzc2LTAwYjAtNDk2NC04Y2IxLWE3M2IzZDRkMWM0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28KswDQYJKoZIhvcNAQELBQADggEBAKjXI/AU7ql1P0ChbCdsBlBnw3TA pTEfagVS/swJvgyHK4IHWsEUhvFaF/fPdWvnjjcaEdL3uAd/ey01mNzuQXbQFR2O jbPCoeFhTfGjS13x7xw9mwMGEYVcsQANDnxSIZNVz/gGFdcvjVVeU9/qC9XTAmwq pTNUGCp5KsIfPX0zkHoIc3x26GNVa8/oKejMAEMT3u64cwQjjYgJ916SNOky4JhS PBDeGEw5dEl3IOOoaX876Yp5CJzwxRR6i+grvpahFLDJAKjLqfG7OpIXLEsUSAro yh9VYEsQfNCfQvXvbIWjqlfFDeZHg370Gxxjp7iT39qWMuhe8QZ1VZQoI2Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:05 2025 by rpki-client