$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b056336e-4f14-4a00-9814-911875584e16.roa File: b056336e-4f14-4a00-9814-911875584e16.roa (raw, json) Hash identifier: do2gbPFEB2ZgsofCmusX1KCnR3u3ldaf6n2NlLsSVA4= Subject key identifier: 64:FE:50:D8:FB:ED:31:DF:03:7E:D2:DA:BC:28:CA:50:EF:47:15:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29F75D6FEBF9958547397CDF0F75DFDE78E8418D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b056336e-4f14-4a00-9814-911875584e16.roa Signing time: Sat 18 Oct 2025 06:02:15 +0000 ROA not before: Sat 18 Oct 2025 06:02:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f7:5d:6f:eb:f9:95:85:47:39:7c:df:0f:75:df:de:78:e8:41:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:02:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=515c05e48450d7a27cb9954fb903ec19e6b76cbc90cce5597cd3992fa34c2122, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:f4:a8:27:84:3a:86:d4:5b:3b:a0:5a:57: 12:d4:5b:69:b5:96:c8:91:bd:b5:15:58:5c:f9:2f: 9f:71:b9:ab:28:26:00:f6:49:2c:df:56:16:65:15: e9:42:e6:c3:f4:b8:28:05:c5:de:31:70:fc:4f:85: 74:af:65:a9:24:04:e1:92:d0:5a:6c:8d:87:01:33: 3e:83:6b:91:9b:ba:40:f5:12:e2:7a:16:a1:72:26: 3c:57:11:ed:2d:5d:fe:65:79:68:5c:c2:7f:33:b3: 14:87:fd:ac:97:b1:b3:e1:e0:cd:60:8c:f0:b7:db: 24:67:7a:c3:07:90:9d:25:65:bc:57:a2:e6:58:4a: df:84:a1:50:bc:6c:b5:d4:b4:a8:5c:8c:e5:04:9f: 71:26:ec:91:61:df:14:3b:49:f9:4f:66:6c:ab:d2: 8e:43:b7:c3:14:d3:88:39:f8:14:07:24:66:df:31: 09:31:7a:88:e4:bf:54:a3:c5:49:c1:af:3c:89:e2: a0:04:69:9d:c1:81:37:43:38:24:62:6c:9d:c2:36: 2c:c3:d8:18:41:26:74:d4:46:f7:9d:7b:8e:72:9a: 54:0d:57:8a:e9:46:b9:92:a4:1c:85:2a:0e:95:14: 37:6e:d3:05:e3:ea:0b:05:95:c9:f4:af:d2:94:c9: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:50:D8:FB:ED:31:DF:03:7E:D2:DA:BC:28:CA:50:EF:47:15:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b056336e-4f14-4a00-9814-911875584e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.188.0/24 Signature Algorithm: sha256WithRSAEncryption 27:74:ea:2b:df:90:9f:b7:47:af:44:5c:bc:68:84:5c:58:2e: 73:95:fc:38:76:ba:0e:61:ec:27:9f:80:94:0b:f6:65:7a:53: 7d:10:1f:4d:83:64:a1:39:34:26:14:cc:6f:11:12:d4:17:66: 25:28:dd:6a:62:48:3c:8b:8c:24:67:2c:f6:6b:44:ea:bd:81: 35:f7:49:83:c2:26:bb:11:05:0b:d9:fb:90:a4:11:ff:d7:b2: c4:ad:52:36:a7:f6:d1:45:7f:75:e8:87:d8:93:53:24:6a:a4: ca:01:59:55:87:b3:56:f1:2e:80:4b:d2:31:cf:b5:50:2f:7b: 41:1e:ad:d6:90:92:bd:22:d8:5d:fd:60:e8:d8:3d:ba:b7:aa: 74:0e:39:6b:e5:a4:20:9b:9e:80:48:45:0c:75:67:3f:7f:69: 2f:83:b2:8b:ad:77:fe:d0:9b:10:1a:7e:fb:84:6c:4b:90:02: dd:d0:f6:5d:27:63:50:85:69:2c:81:76:0f:6c:82:75:a7:06: 20:52:c2:58:6c:3e:24:53:8d:e1:0d:e9:73:5e:87:f8:17:e7: 42:b5:51:b0:2e:cf:c3:91:f3:85:af:f8:72:cd:23:9a:ce:5e: 6d:74:10:c2:17:b5:7b:3f:b1:32:f5:f4:a7:27:56:20:49:0b: 24:c8:a7:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKfddb+v5lYVHOXzfD3Xf3njoQY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYwMjE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTVjMDVlNDg0NTBkN2EyN2NiOTk1NGZiOTAzZWMxOWU2 Yjc2Y2JjOTBjY2U1NTk3Y2QzOTkyZmEzNGMyMTIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKovSoJ4Q6htRbO6BaVxLUW2m1lsiRvbUVWFz5L59xuaso JgD2SSzfVhZlFelC5sP0uCgFxd4xcPxPhXSvZakkBOGS0FpsjYcBMz6Da5GbukD1 EuJ6FqFyJjxXEe0tXf5leWhcwn8zsxSH/ayXsbPh4M1gjPC32yRnesMHkJ0lZbxX ouZYSt+EoVC8bLXUtKhcjOUEn3Em7JFh3xQ7SflPZmyr0o5Dt8MU04g5+BQHJGbf MQkxeojkv1SjxUnBrzyJ4qAEaZ3BgTdDOCRibJ3CNizD2BhBJnTURvede45ymlQN V4rpRrmSpByFKg6VFDdu0wXj6gsFlcn0r9KUycRVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZP5Q2PvtMd8DftLavCjKUO9HFd8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IwNTYzMzZlLTRmMTQtNGEwMC05ODE0LTkxMTg3NTU4NGUxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wLwwDQYJKoZIhvcNAQELBQADggEBACd06ivfkJ+3R69EXLxohFxYLnOV /Dh2ug5h7CefgJQL9mV6U30QH02DZKE5NCYUzG8REtQXZiUo3WpiSDyLjCRnLPZr ROq9gTX3SYPCJrsRBQvZ+5CkEf/XssStUjan9tFFf3Xoh9iTUyRqpMoBWVWHs1bx LoBL0jHPtVAve0EerdaQkr0i2F39YOjYPbq3qnQOOWvlpCCbnoBIRQx1Zz9/aS+D soutd/7QmxAafvuEbEuQAt3Q9l0nY1CFaSyBdg9sgnWnBiBSwlhsPiRTjeEN6XNe h/gX50K1UbAuz8OR84Wv+HLNI5rOXm10EMIXtXs/sTL19KcnViBJCyTIp1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:33 2025 by rpki-client