$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa4e7e2-25a4-4405-a449-5fdc0aeb00f2.roa File: aaa4e7e2-25a4-4405-a449-5fdc0aeb00f2.roa (raw, json) Hash identifier: 3UmMZcc7iA+KY0WArs32cgUqzRVQXuF+eI7pwPBws0A= Subject key identifier: E1:4D:E4:8B:F3:85:AC:63:5C:26:F2:03:D8:2B:BE:8F:06:84:2D:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CF76EBBA9187736F2BDBA6BF6A29196173BA1F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa4e7e2-25a4-4405-a449-5fdc0aeb00f2.roa Signing time: Sat 18 Oct 2025 06:01:11 +0000 ROA not before: Sat 18 Oct 2025 06:01:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f7:6e:bb:a9:18:77:36:f2:bd:ba:6b:f6:a2:91:96:17:3b:a1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:01:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=2e73fd9dc577031468f68be8d84940d16eb5a8ea09d21dc8336569d2e981bab8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:65:46:19:ec:01:c6:ea:ea:ec:b4:1f:4f: a2:ae:52:34:78:ee:e4:d6:29:ae:ce:a0:3f:70:f7: 3b:ad:c9:a8:71:69:c5:92:50:e8:5b:a0:d7:7a:52: d6:98:3a:73:70:4c:9b:b1:c3:fe:67:6f:1a:e8:7a: 13:25:d5:20:94:da:51:3b:1c:42:2a:3e:be:02:07: a4:5c:ae:d6:28:79:eb:72:f8:25:9a:3a:7d:dc:8b: a4:8a:c3:b7:c2:a8:d1:bc:43:fb:a2:ee:e5:37:9b: ff:ed:6a:dd:1f:df:25:d8:37:65:f8:3b:95:4b:b9: 32:38:be:86:dd:e6:e1:96:57:dd:72:d0:ae:48:f1: 03:46:47:0c:f2:b3:85:47:0c:34:c5:80:3c:ed:8f: c3:3e:ba:d3:94:37:d6:c0:ae:dd:46:5d:db:1d:b1: a5:dd:05:4d:66:98:f6:61:26:df:a3:c9:7e:a4:f9: f2:8f:54:64:be:00:e5:ab:4e:73:44:1c:65:ca:c2: f9:bb:6b:10:dc:08:1d:32:99:bc:52:bf:d8:e9:40: 3d:be:ad:01:e3:d3:47:de:7e:ca:ac:aa:40:4e:9c: b2:45:b4:59:60:0d:7f:c5:c2:02:9b:11:6d:c7:e0: be:81:a1:ea:9b:ce:85:81:db:a3:54:f5:86:1a:68: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4D:E4:8B:F3:85:AC:63:5C:26:F2:03:D8:2B:BE:8F:06:84:2D:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa4e7e2-25a4-4405-a449-5fdc0aeb00f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.251.0/24 Signature Algorithm: sha256WithRSAEncryption 34:56:54:3f:fc:a2:88:5c:a2:d0:28:5e:1c:27:9a:c4:b8:bf: 54:a7:94:a6:b3:2b:2a:68:0c:95:36:88:15:0a:86:1c:11:9f: 94:f8:34:23:e6:d1:3f:b0:ef:27:0c:4c:d3:40:60:d2:dd:bb: e9:a6:a5:7f:5e:7d:30:95:24:03:41:42:37:67:ae:0e:c6:c4: 16:ec:aa:4d:f8:ca:2e:d6:b4:bf:01:7d:33:cf:a4:e7:fd:12: dc:2c:26:ee:d5:78:f0:43:9f:d7:45:64:1c:1c:95:98:3b:2e: b6:9a:76:3e:e1:a4:d2:2b:2c:20:20:a3:a5:c4:2b:35:c6:f4: 22:ac:a6:1f:53:3b:90:48:6a:9a:f4:60:59:ec:80:ac:50:24: 83:e1:8d:9a:1c:23:ff:2d:18:1d:79:86:97:82:54:e2:e2:27: 03:fe:8f:14:59:4f:dd:c6:48:ef:4b:a2:8e:b4:2f:44:2d:c5: a2:bb:4e:c0:6b:40:3d:66:b1:67:85:94:e2:85:39:60:a3:bf: 9e:b9:f4:69:25:4b:d7:97:94:ce:24:b7:9d:9e:85:be:82:3e: fc:e4:e2:14:f6:20:5a:d7:6a:d7:5d:a8:89:63:9f:b5:cb:c8: 3f:58:b5:a3:8b:1f:00:26:e0:09:27:40:1a:f6:b0:ae:28:29: 6e:86:94:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULPduu6kYdzbyvbpr9qKRlhc7ofcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYwMTExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTczZmQ5ZGM1NzcwMzE0NjhmNjhiZThkODQ5NDBkMTZl YjVhOGVhMDlkMjFkYzgzMzY1NjlkMmU5ODFiYWI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwsWVGGewBxurq7LQfT6KuUjR47uTWKa7OoD9w9zutyahx acWSUOhboNd6UtaYOnNwTJuxw/5nbxroehMl1SCU2lE7HEIqPr4CB6RcrtYoeety +CWaOn3ci6SKw7fCqNG8Q/ui7uU3m//tat0f3yXYN2X4O5VLuTI4vobd5uGWV91y 0K5I8QNGRwzys4VHDDTFgDztj8M+utOUN9bArt1GXdsdsaXdBU1mmPZhJt+jyX6k +fKPVGS+AOWrTnNEHGXKwvm7axDcCB0ymbxSv9jpQD2+rQHj00fefsqsqkBOnLJF tFlgDX/FwgKbEW3H4L6BoeqbzoWB26NU9YYaaGZRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4U3ki/OFrGNcJvID2Cu+jwaELeIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhYTRlN2UyLTI1YTQtNDQwNS1hNDQ5LTVmZGMwYWViMDBmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wPswDQYJKoZIhvcNAQELBQADggEBADRWVD/8oohcotAoXhwnmsS4v1Sn lKazKypoDJU2iBUKhhwRn5T4NCPm0T+w7ycMTNNAYNLdu+mmpX9efTCVJANBQjdn rg7GxBbsqk34yi7WtL8BfTPPpOf9EtwsJu7VePBDn9dFZBwclZg7Lraadj7hpNIr LCAgo6XEKzXG9CKsph9TO5BIapr0YFnsgKxQJIPhjZocI/8tGB15hpeCVOLiJwP+ jxRZT93GSO9Loo60L0QtxaK7TsBrQD1msWeFlOKFOWCjv5659GklS9eXlM4kt52e hb6CPvzk4hT2IFrXatddqIljn7XLyD9YtaOLHwAm4AknQBr2sK4oKW6GlAo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:42 2025 by rpki-client