$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e2fc2c-0216-4669-8fc2-461eee322916.roa File: c3e2fc2c-0216-4669-8fc2-461eee322916.roa (raw, json) Hash identifier: N+i6085WluK8GKQqCyMSVLzUrs5toVcfvlZ8YNmgDo8= Subject key identifier: E1:D7:42:A4:B1:DD:60:1E:A3:67:9D:3B:30:38:55:F5:3C:22:55:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 248991FDE82AAD066F414B8BFF999B1052AF81FD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e2fc2c-0216-4669-8fc2-461eee322916.roa Signing time: Fri 10 Oct 2025 16:48:52 +0000 ROA not before: Fri 10 Oct 2025 16:48:52 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:89:91:fd:e8:2a:ad:06:6f:41:4b:8b:ff:99:9b:10:52:af:81:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:48:52 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=07e05273fb32f577d5b1ddc6a5c2dc54cd073512c74efdfd9206bd418b3afad0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:53:0f:91:9c:11:46:13:e6:f9:4b:85:b6: 79:f7:63:ae:09:78:6a:9d:55:97:ed:a9:6e:3c:5f: 93:59:0c:2a:12:bb:c0:de:16:c7:bb:58:2c:87:25: 0a:a6:44:a4:a0:d6:d9:4c:df:1c:cf:4f:8d:95:32: 10:90:30:65:06:f1:de:70:42:70:ae:05:a4:44:d9: 1f:d0:be:bd:1b:f7:fd:b7:e8:0f:ad:95:7b:9f:74: 2f:47:e3:b1:bc:ab:c4:41:38:1c:d5:05:33:e1:5b: c9:e0:0d:f5:a2:91:fd:d4:dd:cf:94:ed:9e:a0:e7: 4a:e5:ad:ae:af:d5:86:aa:c3:1e:1b:89:d0:32:d2: 83:1c:84:27:8e:d6:e0:94:13:03:b8:24:b2:7f:d7: c5:1d:a8:66:1c:98:ca:e8:8b:66:70:2e:62:13:ac: a1:29:4b:23:9f:b0:65:77:2e:97:16:85:12:be:a9: 92:64:27:3a:83:67:1e:49:88:52:fe:23:dc:c0:ed: df:ac:10:92:5f:29:d2:60:4e:9d:ed:98:11:21:99: 20:6c:e3:e7:df:a9:ed:b2:74:2a:c5:a6:44:67:c5: 02:8b:ef:d4:75:09:96:84:73:a6:54:db:5d:63:f6: a3:a5:ee:24:2b:ee:5e:95:fb:c5:40:07:aa:cb:30: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D7:42:A4:B1:DD:60:1E:A3:67:9D:3B:30:38:55:F5:3C:22:55:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e2fc2c-0216-4669-8fc2-461eee322916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.56.0/21 Signature Algorithm: sha256WithRSAEncryption ab:b4:12:c9:e6:8f:9f:ea:cb:6c:ab:02:f6:5e:78:f9:48:53: 0d:32:c8:c0:80:49:89:a7:30:f9:88:a9:ea:c3:d5:18:e2:26: ab:9d:fb:87:ac:7a:6c:64:a6:4e:ce:26:33:bf:c6:c5:af:1e: 58:fb:e8:b0:e1:00:83:2d:10:d8:cc:bc:2e:db:98:2d:42:06: d3:bc:5b:aa:cf:24:68:bd:8c:72:6e:1a:4a:ca:cb:b9:e1:bf: c9:e0:af:87:05:d7:91:6a:70:dc:fa:70:37:69:f0:4d:18:67: df:7b:62:06:53:98:84:ef:36:71:7b:80:02:34:2c:86:76:2c: ae:58:32:03:69:73:6d:a1:8c:75:7c:40:cd:0c:aa:ab:32:7b: b4:83:27:e8:90:87:a6:17:7b:d5:6b:84:e5:6e:8a:90:54:39: 1b:33:a4:ea:fd:0d:3e:82:73:98:c1:b8:f7:35:77:a7:42:3e: 95:f0:42:bf:35:20:f0:c3:79:9a:c8:a1:14:6a:dd:ec:7f:e0: a6:6e:a8:f8:44:a0:16:8a:a2:d3:74:4d:7e:c5:39:e9:a2:6f: b6:63:00:15:4e:46:4e:52:6b:c3:a8:6f:d0:c7:df:3b:27:a2: a5:24:8b:d3:df:b3:d7:f5:67:a2:22:97:1c:c3:a2:e1:60:ac: 69:cb:f7:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJImR/egqrQZvQUuL/5mbEFKvgf0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTY0ODUyWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2UwNTI3M2ZiMzJmNTc3ZDViMWRkYzZhNWMyZGM1NGNk MDczNTEyYzc0ZWZkZmQ5MjA2YmQ0MThiM2FmYWQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjMFMPkZwRRhPm+UuFtnn3Y64JeGqdVZftqW48X5NZDCoS u8DeFse7WCyHJQqmRKSg1tlM3xzPT42VMhCQMGUG8d5wQnCuBaRE2R/Qvr0b9/23 6A+tlXufdC9H47G8q8RBOBzVBTPhW8ngDfWikf3U3c+U7Z6g50rlra6v1Yaqwx4b idAy0oMchCeO1uCUEwO4JLJ/18UdqGYcmMroi2ZwLmITrKEpSyOfsGV3LpcWhRK+ qZJkJzqDZx5JiFL+I9zA7d+sEJJfKdJgTp3tmBEhmSBs4+ffqe2ydCrFpkRnxQKL 79R1CZaEc6ZU211j9qOl7iQr7l6V+8VAB6rLMM6DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4ddCpLHdYB6jZ507MDhV9TwiVVowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzZTJmYzJjLTAyMTYtNDY2OS04ZmMyLTQ2MWVlZTMyMjkxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM21jgwDQYJKoZIhvcNAQELBQADggEBAKu0Esnmj5/qy2yrAvZeePlIUw0y yMCASYmnMPmIqerD1RjiJqud+4esemxkpk7OJjO/xsWvHlj76LDhAIMtENjMvC7b mC1CBtO8W6rPJGi9jHJuGkrKy7nhv8ngr4cF15FqcNz6cDdp8E0YZ997YgZTmITv NnF7gAI0LIZ2LK5YMgNpc22hjHV8QM0Mqqsye7SDJ+iQh6YXe9VrhOVuipBUORsz pOr9DT6Cc5jBuPc1d6dCPpXwQr81IPDDeZrIoRRq3ex/4KZuqPhEoBaKotN0TX7F Oemib7ZjABVORk5Sa8Oob9DH3zsnoqUki9Pfs9f1Z6IilxzDouFgrGnL9xQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:21:25 2025 by rpki-client