$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c464e88d-804b-4470-8c1e-6638daf2606c.roa File: c464e88d-804b-4470-8c1e-6638daf2606c.roa (raw, json) Hash identifier: 9dZ4jEUZoOynraSydAW6FbtFEiUZ+T33CuMkZiC2fJ0= Subject key identifier: 2D:58:1A:1B:AB:BE:73:66:74:8C:A2:99:B4:40:CF:0D:8C:44:36:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56EA9F5706BCD2A45ECB90BA3FFBCEA2F644E2DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c464e88d-804b-4470-8c1e-6638daf2606c.roa Signing time: Fri 17 Oct 2025 21:51:37 +0000 ROA not before: Fri 17 Oct 2025 21:51:37 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ea:9f:57:06:bc:d2:a4:5e:cb:90:ba:3f:fb:ce:a2:f6:44:e2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 21:51:37 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=57cf2bd157b957ebc38ef44c32491b24b6aa4416160a0d9af6511e5ffdd9b6f3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:58:4a:c2:9f:3e:10:2e:17:c1:0e:1e:59: b1:f4:aa:0c:bd:9c:a2:16:e7:91:e3:48:dc:cc:30: a1:c2:ec:a0:e3:c4:e5:6b:e4:01:f8:02:8c:db:ba: 5e:56:01:39:15:1e:85:c9:0a:d5:55:ac:48:90:57: f0:bf:cd:2b:2c:c4:40:21:c6:00:b6:b0:f1:13:10: 8d:1b:46:be:f9:dc:8d:2a:b5:6b:f1:54:98:e6:ce: d1:00:d5:08:90:a0:d8:6f:d0:ef:73:d3:db:3b:4e: ae:80:04:c7:b6:10:e2:bd:f2:7b:71:fe:7f:c3:2c: 43:bb:be:b0:1c:b8:e8:38:84:11:49:41:ac:f1:ca: 18:34:40:dc:71:98:6b:a7:89:6d:be:14:19:2b:5e: 0f:d4:07:49:d1:92:a5:d0:8c:cb:84:78:6a:87:2e: 9e:a6:15:c4:fd:0d:64:3d:5f:c5:19:52:66:d0:c2: 96:7d:91:24:c5:2d:ac:06:fb:db:c2:2e:e1:e4:2d: 4b:48:05:f0:ab:18:e5:4b:a8:8d:24:40:8a:f8:8b: d9:56:1e:cc:1b:66:3d:d4:68:65:8b:9e:67:1c:22: a5:d5:ee:b5:d6:e9:9f:b3:af:ac:d0:81:45:ea:f1: 5b:60:3a:de:c8:81:8f:5d:15:1f:b9:53:86:42:8e: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:58:1A:1B:AB:BE:73:66:74:8C:A2:99:B4:40:CF:0D:8C:44:36:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c464e88d-804b-4470-8c1e-6638daf2606c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.176.0/20 Signature Algorithm: sha256WithRSAEncryption b1:cb:ca:3e:53:45:da:45:fc:49:15:de:18:73:6a:91:bb:98: 93:02:e1:7c:39:14:cf:77:b0:08:78:1c:20:4d:1e:e9:8c:13: c3:4d:85:c5:8f:56:01:40:82:24:85:f4:54:38:1b:5d:7a:17: ff:fd:a6:ba:c1:6e:4d:18:d9:8a:f4:92:2a:81:34:87:76:7a: 25:5c:ed:90:8a:1f:11:8b:f8:fa:16:60:07:76:ff:d3:aa:ec: de:48:1a:69:51:9d:a0:0b:1e:86:9a:75:80:10:a1:1c:16:d9: 0f:af:69:fa:25:61:7b:d3:a6:ab:9c:d0:b8:02:3c:35:87:d0: da:e0:6c:da:85:48:13:17:73:13:3c:ff:81:6f:eb:7a:ba:fb: fb:1c:f3:4d:39:d8:fa:b3:ba:d8:40:69:80:22:6c:29:03:f6: a0:32:d9:57:e3:73:87:76:eb:30:83:ab:79:da:58:ce:a0:56: f1:e5:a5:30:c7:4e:d0:e7:8e:6d:02:87:d5:af:31:d4:83:1a: 33:20:de:6a:69:db:36:d1:e4:89:52:3a:d1:95:ed:d9:c6:76: 16:19:dc:57:e0:d2:56:08:12:39:e1:a0:c0:48:9a:0f:ca:31: fd:2a:76:a6:9f:aa:ca:5c:88:19:dd:b8:40:e2:68:75:a0:ae: 00:17:b8:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVuqfVwa80qRey5C6P/vOovZE4towDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjE1MTM3WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2NmMmJkMTU3Yjk1N2ViYzM4ZWY0NGMzMjQ5MWIyNGI2 YWE0NDE2MTYwYTBkOWFmNjUxMWU1ZmZkZDliNmYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVGFhKwp8+EC4XwQ4eWbH0qgy9nKIW55HjSNzMMKHC7KDj xOVr5AH4Aozbul5WATkVHoXJCtVVrEiQV/C/zSssxEAhxgC2sPETEI0bRr753I0q tWvxVJjmztEA1QiQoNhv0O9z09s7Tq6ABMe2EOK98ntx/n/DLEO7vrAcuOg4hBFJ Qazxyhg0QNxxmGuniW2+FBkrXg/UB0nRkqXQjMuEeGqHLp6mFcT9DWQ9X8UZUmbQ wpZ9kSTFLawG+9vCLuHkLUtIBfCrGOVLqI0kQIr4i9lWHswbZj3UaGWLnmccIqXV 7rXW6Z+zr6zQgUXq8VtgOt7IgY9dFR+5U4ZCjvlDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULVgaG6u+c2Z0jKKZtEDPDYxENh4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M0NjRlODhkLTgwNGItNDQ3MC04YzFlLTY2MzhkYWYyNjA2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ28LAwDQYJKoZIhvcNAQELBQADggEBALHLyj5TRdpF/EkV3hhzapG7mJMC 4Xw5FM93sAh4HCBNHumME8NNhcWPVgFAgiSF9FQ4G116F//9prrBbk0Y2Yr0kiqB NId2eiVc7ZCKHxGL+PoWYAd2/9Oq7N5IGmlRnaALHoaadYAQoRwW2Q+vafolYXvT pquc0LgCPDWH0NrgbNqFSBMXcxM8/4Fv63q6+/sc80052PqzuthAaYAibCkD9qAy 2Vfjc4d26zCDq3naWM6gVvHlpTDHTtDnjm0Ch9WvMdSDGjMg3mpp2zbR5IlSOtGV 7dnGdhYZ3Ffg0lYIEjnhoMBImg/KMf0qdqafqspciBnduEDiaHWgrgAXuMU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:46 2025 by rpki-client