$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5fa8205-30a8-4536-a398-4179516ffe84.roa File: c5fa8205-30a8-4536-a398-4179516ffe84.roa (raw, json) Hash identifier: 9l41BFwMTMesHSRohRPqjKWYSVpXwmz9tFfkrWjV39k= Subject key identifier: 65:49:61:C6:17:7A:A5:8B:D2:1A:E9:E6:0B:BC:D9:F6:86:5B:C9:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 52CADAF79A36D6B153C89E5BCBAABC816C23C99C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5fa8205-30a8-4536-a398-4179516ffe84.roa Signing time: Fri 17 Oct 2025 23:42:42 +0000 ROA not before: Fri 17 Oct 2025 23:42:42 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.250.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ca:da:f7:9a:36:d6:b1:53:c8:9e:5b:cb:aa:bc:81:6c:23:c9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:42:42 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=1c60f34f5f02e08589e741a31632d47ff9638502851dab698dab1d7692d0fb07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:4b:ee:82:97:e0:f2:fd:1b:ab:99:62:31: 17:42:68:79:25:82:ed:1e:ea:aa:50:d1:2d:49:23: 39:7d:a9:55:bc:23:53:f5:63:ea:79:16:b7:cc:c6: 25:a8:02:1b:09:1d:33:50:dc:2c:51:69:2b:81:28: 23:c1:68:fc:b3:e8:7a:fe:1e:83:5e:ad:a7:66:e8: 3e:96:91:f4:0d:2c:09:17:02:83:80:6b:f7:74:d3: a3:23:1b:9e:8e:b1:f3:4e:e6:e6:39:f4:f8:f3:46: 31:21:58:95:3d:b6:e7:2b:0e:2e:7c:8e:98:9b:6d: f7:62:01:7a:eb:ac:fa:86:24:31:6f:53:d1:71:bd: df:99:93:d9:28:be:15:af:0c:db:d5:f5:42:39:15: 04:00:d2:69:c5:29:d1:c5:e5:63:6f:ef:48:0a:94: d0:a9:57:72:8a:2c:fc:9b:20:49:6b:f5:ba:fc:31: dd:f5:ee:07:15:3b:37:dc:5e:ab:24:d5:16:58:d9: 86:5f:1c:dd:73:b4:18:0c:b0:32:e4:8b:f6:63:d2: be:e6:e6:83:a1:8d:b3:66:bb:a1:0c:4b:8e:4b:13: 5e:53:4f:af:75:34:4c:96:b5:a3:5f:19:fb:f1:33: 49:f3:f9:87:5c:e6:b6:18:d0:7a:8c:8e:7c:ff:aa: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:49:61:C6:17:7A:A5:8B:D2:1A:E9:E6:0B:BC:D9:F6:86:5B:C9:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5fa8205-30a8-4536-a398-4179516ffe84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.250.64.0/19 Signature Algorithm: sha256WithRSAEncryption b1:31:f7:1c:f0:bc:7c:30:b2:a1:73:ff:24:3b:e3:fe:10:76: 99:76:e4:64:b6:57:34:57:fd:f7:30:41:c4:cd:cc:95:d6:63: b8:95:c3:7e:f8:b6:86:7c:51:36:32:5d:24:82:36:2c:f9:6f: 38:08:49:1e:2d:d8:9a:6b:4b:6d:67:cf:fd:42:9e:06:f1:00: d6:4f:0a:bc:40:6f:7e:52:fe:3b:c9:16:f7:72:47:fd:6f:2f: 4a:09:6e:63:7b:d3:2a:02:37:e1:f8:ed:64:da:9a:c7:e6:24: 51:65:57:39:4a:44:51:54:e7:ab:2c:5f:45:6e:22:e6:28:20: 9f:f1:6e:52:f8:1c:2b:9e:9d:79:3c:c2:23:f1:bd:69:95:d9: 81:14:fa:40:c2:1a:d5:36:b4:a5:5e:d7:07:46:c4:30:43:a5: 55:ba:84:99:a0:3a:8c:05:32:f8:e6:12:58:61:be:09:cb:ef: 19:51:a4:5d:2d:a6:6d:ee:13:0c:9d:ce:b4:f4:7a:91:1b:32: 8e:2b:6b:e1:46:28:ef:db:13:ad:e8:bf:a4:15:4b:cf:c3:af: 9a:88:7b:44:4c:8f:9f:ee:c5:3c:f7:97:05:3d:00:91:b1:a7: 43:5e:66:db:eb:69:95:d9:ed:b0:99:0b:80:a1:de:25:f3:15: dd:1e:a3:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUsra95o21rFTyJ5by6q8gWwjyZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM0MjQyWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzYwZjM0ZjVmMDJlMDg1ODllNzQxYTMxNjMyZDQ3ZmY5 NjM4NTAyODUxZGFiNjk4ZGFiMWQ3NjkyZDBmYjA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCov0vugpfg8v0bq5liMRdCaHklgu0e6qpQ0S1JIzl9qVW8 I1P1Y+p5FrfMxiWoAhsJHTNQ3CxRaSuBKCPBaPyz6Hr+HoNeradm6D6WkfQNLAkX AoOAa/d006MjG56OsfNO5uY59PjzRjEhWJU9tucrDi58jpibbfdiAXrrrPqGJDFv U9Fxvd+Zk9kovhWvDNvV9UI5FQQA0mnFKdHF5WNv70gKlNCpV3KKLPybIElr9br8 Md317gcVOzfcXqsk1RZY2YZfHN1ztBgMsDLki/Zj0r7m5oOhjbNmu6EMS45LE15T T691NEyWtaNfGfvxM0nz+Ydc5rYY0HqMjnz/qpXbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZUlhxhd6pYvSGunmC7zZ9oZbyXQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1ZmE4MjA1LTMwYTgtNDUzNi1hMzk4LTQxNzk1MTZmZmU4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2+kAwDQYJKoZIhvcNAQELBQADggEBALEx9xzwvHwwsqFz/yQ74/4Qdpl2 5GS2VzRX/fcwQcTNzJXWY7iVw374toZ8UTYyXSSCNiz5bzgISR4t2JprS21nz/1C ngbxANZPCrxAb35S/jvJFvdyR/1vL0oJbmN70yoCN+H47WTamsfmJFFlVzlKRFFU 56ssX0VuIuYoIJ/xblL4HCuenXk8wiPxvWmV2YEU+kDCGtU2tKVe1wdGxDBDpVW6 hJmgOowFMvjmElhhvgnL7xlRpF0tpm3uEwydzrT0epEbMo4ra+FGKO/bE63ov6QV S8/Dr5qIe0RMj5/uxTz3lwU9AJGxp0NeZtvraZXZ7bCZC4Ch3iXzFd0eozM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:44 2025 by rpki-client