$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b97fe0cb-4337-4657-a74b-fdfda6db45b2.roa File: b97fe0cb-4337-4657-a74b-fdfda6db45b2.roa (raw, json) Hash identifier: REk6lV4dN+lTKSjxjSj6mnUzuCQAtWRTrmPQXW+0NpY= Subject key identifier: 6E:7F:D2:A7:94:F6:78:47:0E:CC:27:FE:E8:65:7A:A1:20:04:BD:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 431F304B62C977DBAF44A71FF74527D9A1B5FB60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b97fe0cb-4337-4657-a74b-fdfda6db45b2.roa Signing time: Fri 17 Oct 2025 23:42:42 +0000 ROA not before: Fri 17 Oct 2025 23:42:42 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:30:4b:62:c9:77:db:af:44:a7:1f:f7:45:27:d9:a1:b5:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:42:42 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=5a7d3d4a99499945029d0afeab3777185cca30a9523b8dcfa051d95c4e864fc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:67:b0:11:17:27:b6:ae:65:ae:97:e1:ad: 17:1b:13:5e:c4:5f:00:ad:a4:73:cc:e5:54:ae:bf: 27:c2:85:12:fb:ba:36:2b:27:ba:c9:36:3d:40:d4: 7c:c3:01:fd:c3:ca:b1:a6:63:8c:29:01:f5:d0:27: c4:86:c5:68:5b:3e:c7:b9:58:00:50:dc:3c:37:19: cb:46:38:75:66:46:f2:2c:03:5d:7a:02:33:a6:7b: ae:8b:13:ef:56:7f:6b:19:4c:5c:a0:7a:70:d9:3b: 44:f8:01:d0:2c:51:1d:6c:a8:4b:c4:be:df:58:e2: b7:26:2c:15:44:1b:07:84:3c:c0:d6:4b:0b:83:2a: 75:94:5b:b8:b3:a6:53:a9:5c:08:42:2a:86:7f:b9: 0a:5a:6b:99:22:5d:e0:24:3b:ce:1a:8e:0c:3a:c4: 95:dc:93:e6:32:91:16:0d:f8:6b:aa:49:da:37:88: b3:e4:01:0e:d1:9b:be:4d:22:25:77:ff:73:6a:5b: 9f:80:e0:1d:bb:70:bd:13:c8:c4:c0:63:ec:4b:0c: d6:3a:ce:af:30:bd:08:04:03:c2:f1:d6:bc:d4:50: 6b:b6:86:ef:f2:2d:32:0c:ec:5f:81:75:e2:e8:65: e2:8c:b5:20:0d:54:b0:ba:1e:5f:82:b5:0b:18:98: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:D2:A7:94:F6:78:47:0E:CC:27:FE:E8:65:7A:A1:20:04:BD:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b97fe0cb-4337-4657-a74b-fdfda6db45b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.58.0/23 Signature Algorithm: sha256WithRSAEncryption 12:71:82:8d:86:91:8a:6f:94:71:d7:96:88:44:03:dd:fd:26: 4a:a2:95:63:be:2e:d7:c9:07:48:fe:4f:6b:d1:8f:e9:af:32: 42:a5:ad:3d:b1:e1:34:64:70:c6:25:37:6f:b6:59:6e:26:24: 8e:be:34:c8:4e:1b:05:9c:0c:45:5a:78:5c:dd:46:8c:5e:08: 86:23:e1:aa:14:2d:1d:3c:09:1c:d5:87:ad:38:8d:16:46:60: 65:11:b5:fe:c4:e7:ae:4b:c5:9c:24:0e:06:c1:f9:9d:c2:bb: 62:89:19:49:cd:2b:ce:71:c2:29:ef:21:f8:9a:3a:aa:f5:78: 63:82:58:74:71:8a:32:f1:5b:6f:a1:12:77:be:8d:d8:6b:57: b9:f8:ab:07:47:0f:c9:ca:eb:c5:f6:f3:68:f6:02:d1:d8:47: 7b:56:8f:27:91:a2:5e:9f:bd:b3:27:b1:11:be:25:0a:6d:5a: 88:94:8b:81:d7:7c:97:bd:91:96:47:cf:cd:38:57:a3:3d:80: c7:2b:27:1f:14:e0:1c:a8:81:84:a4:77:d5:93:e2:ae:7a:d5: eb:54:7a:bd:4e:71:b1:f2:24:7c:36:8c:68:ef:f0:74:31:50: 76:df:a6:3c:ec:1c:32:db:61:e4:13:e0:a1:ba:0b:6e:ba:ec: be:cf:bc:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQx8wS2LJd9uvRKcf90Un2aG1+2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM0MjQyWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTdkM2Q0YTk5NDk5OTQ1MDI5ZDBhZmVhYjM3NzcxODVj Y2EzMGE5NTIzYjhkY2ZhMDUxZDk1YzRlODY0ZmM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrAmewERcntq5lrpfhrRcbE17EXwCtpHPM5VSuvyfChRL7 ujYrJ7rJNj1A1HzDAf3DyrGmY4wpAfXQJ8SGxWhbPse5WABQ3Dw3GctGOHVmRvIs A116AjOme66LE+9Wf2sZTFygenDZO0T4AdAsUR1sqEvEvt9Y4rcmLBVEGweEPMDW SwuDKnWUW7izplOpXAhCKoZ/uQpaa5kiXeAkO84ajgw6xJXck+YykRYN+GuqSdo3 iLPkAQ7Rm75NIiV3/3NqW5+A4B27cL0TyMTAY+xLDNY6zq8wvQgEA8Lx1rzUUGu2 hu/yLTIM7F+BdeLoZeKMtSANVLC6Hl+CtQsYmJTzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbn/Sp5T2eEcOzCf+6GV6oSAEvaswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I5N2ZlMGNiLTQzMzctNDY1Ny1hNzRiLWZkZmRhNmRiNDViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28DowDQYJKoZIhvcNAQELBQADggEBABJxgo2GkYpvlHHXlohEA939Jkqi lWO+LtfJB0j+T2vRj+mvMkKlrT2x4TRkcMYlN2+2WW4mJI6+NMhOGwWcDEVaeFzd RoxeCIYj4aoULR08CRzVh604jRZGYGURtf7E565LxZwkDgbB+Z3Cu2KJGUnNK85x winvIfiaOqr1eGOCWHRxijLxW2+hEne+jdhrV7n4qwdHD8nK68X282j2AtHYR3tW jyeRol6fvbMnsRG+JQptWoiUi4HXfJe9kZZHz804V6M9gMcrJx8U4ByogYSkd9WT 4q561etUer1OcbHyJHw2jGjv8HQxUHbfpjzsHDLbYeQT4KG6C2667L7PvAw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:03:29 2025 by rpki-client