$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4371259-183e-4461-aecc-d65c739378ec.roa File: b4371259-183e-4461-aecc-d65c739378ec.roa (raw, json) Hash identifier: uKs9GyRyW/Ze0stxThc0DZN+E4IPsw4KVOsn0m2lsWo= Subject key identifier: CC:F7:AD:AD:64:32:CE:CE:31:7C:DE:15:23:3C:C7:14:33:9C:A3:AA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6575D30FC410F0189409681B8442CA612C2B37D0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4371259-183e-4461-aecc-d65c739378ec.roa Signing time: Fri 26 Sep 2025 17:15:21 +0000 ROA not before: Fri 26 Sep 2025 17:15:21 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:75:d3:0f:c4:10:f0:18:94:09:68:1b:84:42:ca:61:2c:2b:37:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:15:21 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=9962620e3d370bcd449272dacd79b70dff4dacf9615b1ee01fcc9fffb2aa44c1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:fc:eb:bc:59:95:48:56:14:da:49:2d:b1: ce:0a:2c:70:57:88:b1:46:52:4c:fa:85:05:57:dc: 9f:d0:06:64:11:8f:fc:a7:0b:00:5b:99:65:7d:49: 24:a0:e9:29:a9:bf:9e:9a:f5:49:8d:87:46:2b:51: eb:ef:95:aa:63:89:ef:8e:2f:bb:bd:a7:7e:ad:6c: 32:18:85:68:75:10:08:11:ab:2e:6f:9f:a7:85:7a: 59:c2:6c:65:04:2d:8e:45:5e:71:4c:71:9d:72:4e: a7:fb:85:62:20:69:64:a2:7d:84:6c:a4:03:7e:b1: 2e:b7:dd:c7:6d:35:c3:08:7b:86:1e:ae:af:b6:55: 83:f4:b7:c1:82:bd:0d:ca:84:d4:d5:77:d8:e1:ca: 26:8b:05:b1:81:b7:8e:77:05:48:fd:b0:80:9c:59: 96:53:85:7a:29:06:3e:1a:21:c8:19:38:e5:c9:9e: ca:75:52:9d:f5:b7:69:be:f5:06:6e:24:fe:a6:f2: 0e:32:6a:27:e5:a2:26:5b:24:6f:44:4d:c2:37:a5: b5:8d:ea:cf:68:1a:a6:67:31:83:18:8e:0d:60:5e: 10:33:4b:1a:21:c1:23:a7:f8:30:ce:c6:0e:6e:9c: c9:8a:33:75:a6:d7:65:2a:01:db:d0:42:af:ad:43: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F7:AD:AD:64:32:CE:CE:31:7C:DE:15:23:3C:C7:14:33:9C:A3:AA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4371259-183e-4461-aecc-d65c739378ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.103.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:be:86:9f:e0:8e:b4:79:77:e6:1f:83:a7:e5:d0:c6:b1:3a: 8a:c5:e3:f0:6d:e2:1e:87:f1:11:ac:10:55:f2:d7:fa:98:72: 54:82:08:1c:f7:90:86:a1:24:38:33:81:54:d0:92:a6:07:50: d2:b1:48:a4:e2:c4:44:65:85:34:a3:64:73:e1:2c:f0:c0:67: ef:9a:47:23:37:ff:22:75:20:fc:f1:2d:8a:31:15:58:b4:e0: de:9c:08:ae:c8:99:af:c9:2e:6d:67:6f:c6:f7:84:ad:43:04: 72:b8:14:ac:bf:21:21:01:6d:43:cc:9a:54:a1:a6:c6:04:94: 0d:77:6b:ae:47:c9:de:39:7f:99:5d:62:0b:6b:fe:45:b7:4d: 44:bd:79:0e:29:dc:da:a0:c3:42:df:77:67:60:de:63:b1:c2: b6:4a:d9:76:ad:dc:e9:a4:95:ea:f0:7d:36:d1:42:36:35:76: 6a:bd:98:88:da:f9:ad:1d:48:fa:94:d6:55:73:dc:43:34:3f: d9:2f:b5:a6:fa:9c:23:c2:07:45:08:23:a4:bb:db:75:01:71: 15:1b:7d:f5:8f:d7:45:5e:16:cd:80:59:14:2a:c6:cf:1f:1b: 71:ad:d1:8b:d4:af:8d:e2:ba:2b:00:af:22:f8:24:0b:6a:6a: da:0d:87:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZXXTD8QQ8BiUCWgbhELKYSwrN9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcxNTIxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTYyNjIwZTNkMzcwYmNkNDQ5MjcyZGFjZDc5YjcwZGZm NGRhY2Y5NjE1YjFlZTAxZmNjOWZmZmIyYWE0NGMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCocvzrvFmVSFYU2kktsc4KLHBXiLFGUkz6hQVX3J/QBmQR j/ynCwBbmWV9SSSg6Smpv56a9UmNh0YrUevvlapjie+OL7u9p36tbDIYhWh1EAgR qy5vn6eFelnCbGUELY5FXnFMcZ1yTqf7hWIgaWSifYRspAN+sS633cdtNcMIe4Ye rq+2VYP0t8GCvQ3KhNTVd9jhyiaLBbGBt453BUj9sICcWZZThXopBj4aIcgZOOXJ nsp1Up31t2m+9QZuJP6m8g4yaifloiZbJG9ETcI3pbWN6s9oGqZnMYMYjg1gXhAz SxohwSOn+DDOxg5unMmKM3Wm12UqAdvQQq+tQyaPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzPetrWQyzs4xfN4VIzzHFDOco6owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0MzcxMjU5LTE4M2UtNDQ2MS1hZWNjLWQ2NWM3MzkzNzhlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28GcwDQYJKoZIhvcNAQELBQADggEBAD2+hp/gjrR5d+Yfg6fl0MaxOorF 4/Bt4h6H8RGsEFXy1/qYclSCCBz3kIahJDgzgVTQkqYHUNKxSKTixERlhTSjZHPh LPDAZ++aRyM3/yJ1IPzxLYoxFVi04N6cCK7Ima/JLm1nb8b3hK1DBHK4FKy/ISEB bUPMmlShpsYElA13a65Hyd45f5ldYgtr/kW3TUS9eQ4p3Nqgw0Lfd2dg3mOxwrZK 2Xat3OmklerwfTbRQjY1dmq9mIja+a0dSPqU1lVz3EM0P9kvtab6nCPCB0UII6S7 23UBcRUbffWP10VeFs2AWRQqxs8fG3Gt0YvUr43iuisAryL4JAtqatoNhyA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:01:48 2025 by rpki-client