$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c63edc97-75d5-4a5b-91e9-27e9aad5ddd2.roa File: c63edc97-75d5-4a5b-91e9-27e9aad5ddd2.roa (raw, json) Hash identifier: oHtnwVG1ULBBSGhTOjdEUDl8jdmKXGKJZMQbtPxiZqk= Subject key identifier: 25:C1:B9:A2:78:9C:75:3C:6F:5A:CC:03:93:A0:32:08:26:AA:30:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EDDB37FC032A682AE80ADD48ABEEB9608D6E7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c63edc97-75d5-4a5b-91e9-27e9aad5ddd2.roa Signing time: Thu 16 Oct 2025 22:47:52 +0000 ROA not before: Thu 16 Oct 2025 22:47:52 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:dd:b3:7f:c0:32:a6:82:ae:80:ad:d4:8a:be:eb:96:08:d6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 22:47:52 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=7ff21dbc45cb73ba7ffca3c4e37d71c7e8b14d1ea91932e18a64b7601debf216, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:57:27:9c:3f:f4:cf:de:12:35:fd:36:b3: d8:22:5c:33:3e:f6:0a:fa:fc:11:4c:e9:97:24:30: c8:64:dd:c7:ed:5d:96:4a:37:df:9f:dc:d4:9a:4c: 5e:5c:77:b1:7d:99:ff:b0:bf:09:02:b9:f1:c1:8e: c2:c0:73:d7:a2:5d:84:51:0f:44:43:5c:f2:dd:e2: a2:f0:8f:1f:81:8c:1b:5f:dd:9b:bc:72:f2:9f:08: b2:cc:6d:dc:ec:bf:4d:5a:c8:23:ca:14:49:5a:26: f2:3b:40:28:a7:98:4a:6f:0f:e7:fd:9a:1b:cf:40: 1b:9e:cd:7e:36:6d:9d:a4:f0:43:91:f5:1e:a6:38: c9:7f:f7:0f:a8:72:ad:c3:74:cc:81:f8:7b:0a:3f: d3:ce:db:bc:a6:c0:4d:85:5a:a5:9a:db:66:d2:39: 56:96:fc:f1:14:62:6b:36:74:7d:23:9b:9c:c9:59: f1:7d:0f:aa:bb:de:2e:42:51:f1:8f:fd:a4:19:1f: 2e:61:03:f6:22:9b:c3:71:55:5f:86:76:4a:ea:13: be:f5:8e:99:7c:e3:46:5b:6f:cc:13:45:6f:31:4e: b8:e5:4f:98:36:71:22:93:fb:05:41:d5:c8:1c:92: b4:a9:53:a1:a0:72:c1:f4:26:d9:49:d0:3d:50:92: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C1:B9:A2:78:9C:75:3C:6F:5A:CC:03:93:A0:32:08:26:AA:30:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c63edc97-75d5-4a5b-91e9-27e9aad5ddd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.16.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:5a:bf:7a:95:ba:f4:eb:34:f4:2d:35:c9:b2:4b:4c:d1:77: 7b:1e:66:e4:84:5c:a2:90:84:c6:d0:f5:61:d9:e5:ca:68:54: ca:6c:0f:41:b6:27:87:3b:49:47:2e:a8:eb:21:d2:8f:05:d4: 08:00:fc:74:d7:09:0d:62:8a:55:15:48:6f:0e:f0:5d:76:ce: be:1e:66:45:21:cf:ab:c0:80:ff:4b:ce:b3:44:3a:50:4a:4b: 7b:0e:e4:e2:ee:b8:38:f3:88:3e:91:6f:a0:0e:96:71:1a:19: c9:40:22:40:0c:b6:1d:75:88:79:f8:ea:ec:8f:11:46:c2:e9: f9:78:40:27:b8:74:bb:0f:b7:89:fd:51:a1:f8:a5:14:bd:6c: 98:57:93:7c:65:5b:9f:90:03:b3:58:04:d7:ed:65:9c:e9:29: f8:0e:a3:0e:37:5d:52:07:28:f7:ec:9f:7f:11:d1:e0:d0:c3: 64:3c:52:09:c7:74:26:a3:77:11:2c:0e:44:38:cc:0e:77:7d: b6:c1:79:f5:73:41:98:e2:12:36:10:3b:99:8d:6a:1c:49:e5: a2:51:34:92:f5:59:dc:cb:f8:22:7d:5a:09:2e:b4:23:b1:02: 54:26:22:bd:39:8e:b2:8a:22:ec:d2:c5:b3:cb:04:9f:da:8c: ba:07:32:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITTt2zf8AypoKugK3Uir7rlgjW5zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTYyMjQ3NTJaFw0yNTExMjAyMzU5NTla MHoxSTBHBgNVBAUTQDdmZjIxZGJjNDVjYjczYmE3ZmZjYTNjNGUzN2Q3MWM3ZThi MTRkMWVhOTE5MzJlMThhNjRiNzYwMWRlYmYyMTYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALYfVyecP/TP3hI1/Taz2CJcMz72Cvr8EUzplyQwyGTdx+1d lko335/c1JpMXlx3sX2Z/7C/CQK58cGOwsBz16JdhFEPRENc8t3iovCPH4GMG1/d m7xy8p8Issxt3Oy/TVrII8oUSVom8jtAKKeYSm8P5/2aG89AG57NfjZtnaTwQ5H1 HqY4yX/3D6hyrcN0zIH4ewo/087bvKbATYVapZrbZtI5Vpb88RRiazZ0fSObnMlZ 8X0PqrveLkJR8Y/9pBkfLmED9iKbw3FVX4Z2SuoTvvWOmXzjRltvzBNFbzFOuOVP mDZxIpP7BUHVyByStKlToaBywfQm2UnQPVCSf+UCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQlwbmieJx1PG9azAOToDIIJqowCjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYzYzZWRjOTctNzVkNS00YTViLTkxZTktMjdlOWFhZDVkZGQyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAja2EDANBgkqhkiG9w0BAQsFAAOCAQEAKlq/epW69Os09C01ybJLTNF3ex5m 5IRcopCExtD1YdnlymhUymwPQbYnhztJRy6o6yHSjwXUCAD8dNcJDWKKVRVIbw7w XXbOvh5mRSHPq8CA/0vOs0Q6UEpLew7k4u64OPOIPpFvoA6WcRoZyUAiQAy2HXWI efjq7I8RRsLp+XhAJ7h0uw+3if1RofilFL1smFeTfGVbn5ADs1gE1+1lnOkp+A6j DjddUgco9+yffxHR4NDDZDxSCcd0JqN3ESwORDjMDnd9tsF59XNBmOISNhA7mY1q HEnlolE0kvVZ3Mv4In1aCS60I7ECVCYivTmOsooi7NLFs8sEn9qMugcy2g== -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:53 2025 by rpki-client