$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a994db7b-043a-413c-b956-e90ad9b48ed7.roa File: a994db7b-043a-413c-b956-e90ad9b48ed7.roa (raw, json) Hash identifier: eOVvXqTbmDqrLfUDYGz1RgY485V0VGyHXFmI7FZ/5aY= Subject key identifier: 40:3B:B9:32:3C:BB:80:F6:99:0E:18:E8:FA:AD:3C:33:7A:6B:42:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E0BFEEC9056B103539490DBDE5373342A7C18DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a994db7b-043a-413c-b956-e90ad9b48ed7.roa Signing time: Fri 17 Oct 2025 23:50:08 +0000 ROA not before: Fri 17 Oct 2025 23:50:08 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0b:fe:ec:90:56:b1:03:53:94:90:db:de:53:73:34:2a:7c:18:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:50:08 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=aeba8a7f8159a029818adbe41f59a1e0965b39b155edaa4166fa23e48ce39713, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:95:76:64:be:4c:59:ac:1e:5d:a8:8b:38: f2:99:00:14:f1:c7:f0:46:f5:e6:2e:ef:58:77:a4: c2:72:df:b7:43:cd:db:42:19:33:f2:1c:c6:12:e0: e5:3a:1f:ff:99:10:00:58:ae:a1:51:d0:5c:ab:18: 95:24:9e:b3:e1:ad:d9:c1:c0:2d:5a:25:14:37:0a: 47:d5:47:bd:c0:41:03:d1:af:fc:eb:14:da:c8:1b: 33:7e:48:b9:8f:0b:26:bc:79:a4:05:ac:31:d6:ff: 45:77:4b:b9:8a:4b:79:25:f8:34:19:85:c9:87:f9: 39:91:c6:b5:07:17:37:96:11:ac:20:e0:c0:be:fc: 1e:a4:8c:4d:eb:1c:1a:34:3b:b7:78:e5:66:ae:d6: 77:15:ed:52:7a:f6:fb:90:a3:6d:89:5e:54:bb:a3: 86:23:03:72:43:16:66:08:89:2a:58:60:71:74:0e: 69:9b:de:63:af:78:9c:eb:01:1a:1d:b5:62:5e:dc: 3b:02:07:6c:40:8c:16:a1:ac:c6:19:ca:24:f1:da: 53:eb:9a:f0:12:2c:38:93:27:92:e0:96:86:c7:c5: b7:f4:e2:b9:8c:dc:e3:0f:5b:bf:d4:36:44:5a:38: a5:ea:2d:0b:82:19:24:9f:44:ff:fc:2d:88:12:45: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:B9:32:3C:BB:80:F6:99:0E:18:E8:FA:AD:3C:33:7A:6B:42:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a994db7b-043a-413c-b956-e90ad9b48ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.184.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:08:77:50:cb:39:8f:20:50:0c:8d:a0:84:d8:42:7c:35:6b: f7:0a:fb:43:0f:05:90:7f:b3:5d:48:52:47:3d:a7:55:04:8c: 60:ad:66:4d:b3:44:49:7f:5b:8f:da:e1:ed:61:0b:e1:e9:04: 4e:a3:ac:b0:4d:89:ae:65:bb:0c:d1:c5:f9:75:96:6e:9f:42: e4:37:b0:0a:02:16:15:32:34:f4:d8:9b:11:8e:7e:f5:c8:f7: 94:00:b7:d0:bc:68:3f:4c:f6:64:7e:23:4f:56:e9:5e:b2:b3: 0f:4c:8c:50:d4:1c:87:68:55:24:7e:3e:85:cf:ec:2c:84:a1: 46:77:43:32:93:18:a2:2a:78:64:c9:55:36:7b:79:36:dd:f1: 6b:f4:68:1f:a3:b7:55:d0:36:f6:1d:a8:e4:ec:8d:11:82:6c: 9b:e9:95:74:ff:d3:e6:0e:82:6b:f3:8e:b0:4a:ff:26:cc:89: e9:1f:ed:73:95:c5:94:d2:af:f9:2e:f3:80:db:b7:8a:05:83: b8:ba:1d:2c:65:34:b4:e3:4e:9b:e9:66:88:f2:22:e4:7a:22: 81:94:66:2b:ee:81:a5:4b:8f:9e:8b:c2:ea:d5:9b:95:57:41: 48:e7:fa:c8:c1:2c:46:25:d7:6b:b3:a7:3a:01:7f:5a:0c:56: 82:f0:7e:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULgv+7JBWsQNTlJDb3lNzNCp8GNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM1MDA4WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWJhOGE3ZjgxNTlhMDI5ODE4YWRiZTQxZjU5YTFlMDk2 NWIzOWIxNTVlZGFhNDE2NmZhMjNlNDhjZTM5NzEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnWJV2ZL5MWaweXaiLOPKZABTxx/BG9eYu71h3pMJy37dD zdtCGTPyHMYS4OU6H/+ZEABYrqFR0FyrGJUknrPhrdnBwC1aJRQ3CkfVR73AQQPR r/zrFNrIGzN+SLmPCya8eaQFrDHW/0V3S7mKS3kl+DQZhcmH+TmRxrUHFzeWEawg 4MC+/B6kjE3rHBo0O7d45Wau1ncV7VJ69vuQo22JXlS7o4YjA3JDFmYIiSpYYHF0 Dmmb3mOveJzrARodtWJe3DsCB2xAjBahrMYZyiTx2lPrmvASLDiTJ5LglobHxbf0 4rmM3OMPW7/UNkRaOKXqLQuCGSSfRP/8LYgSRX+hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQDu5Mjy7gPaZDhjo+q08M3prQiMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5OTRkYjdiLTA0M2EtNDEzYy1iOTU2LWU5MGFkOWI0OGVkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wLgwDQYJKoZIhvcNAQELBQADggEBAA0Id1DLOY8gUAyNoITYQnw1a/cK +0MPBZB/s11IUkc9p1UEjGCtZk2zREl/W4/a4e1hC+HpBE6jrLBNia5luwzRxfl1 lm6fQuQ3sAoCFhUyNPTYmxGOfvXI95QAt9C8aD9M9mR+I09W6V6ysw9MjFDUHIdo VSR+PoXP7CyEoUZ3QzKTGKIqeGTJVTZ7eTbd8Wv0aB+jt1XQNvYdqOTsjRGCbJvp lXT/0+YOgmvzjrBK/ybMiekf7XOVxZTSr/ku84Dbt4oFg7i6HSxlNLTjTpvpZojy IuR6IoGUZivugaVLj56LwurVm5VXQUjn+sjBLEYl12uzpzoBf1oMVoLwfgM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:53 2025 by rpki-client