$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c76a49a6-88a8-465b-9475-bfbdcbb991fa.roa File: c76a49a6-88a8-465b-9475-bfbdcbb991fa.roa (raw, json) Hash identifier: HpfI1jyflHGWRDSZv6j8CpN6tE+bWpsGG904szSnP58= Subject key identifier: 63:59:F4:24:26:9F:72:82:33:1F:45:44:3A:D5:20:32:BE:16:DF:B7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AA5BE99F492F9433CB60F780BA9296591A5C6B8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c76a49a6-88a8-465b-9475-bfbdcbb991fa.roa Signing time: Thu 16 Oct 2025 20:58:36 +0000 ROA not before: Thu 16 Oct 2025 20:58:36 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a5:be:99:f4:92:f9:43:3c:b6:0f:78:0b:a9:29:65:91:a5:c6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 20:58:36 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=e08be5a7dce94c3ca1ffb21f532c91dd640e98dd2e46dbc1ad39e1135a9569fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:73:2f:5b:43:ba:93:f6:6f:67:94:34:7e: 54:8b:89:dc:64:79:2e:c9:0e:31:6e:4d:6f:0d:04: 9a:46:a0:8b:04:8c:1d:d2:d0:da:16:4a:59:88:58: 03:91:5a:f5:16:c8:29:d2:6e:81:c3:76:30:a3:77: 94:91:fd:1e:d8:bf:dc:04:15:66:cd:0e:f1:b3:0a: d0:ce:d7:6a:9e:a2:bc:5b:8c:b0:c4:21:bf:22:1d: 7e:fd:4a:9b:33:ac:88:39:e8:6b:ff:8b:b9:88:89: 11:a7:30:af:26:f1:fc:8c:8f:b4:49:1a:03:9d:19: d0:18:f1:14:9b:e0:ed:a8:0a:0c:75:37:36:f1:93: e8:bf:1f:0a:26:9b:71:ac:38:07:ff:5f:87:ad:67: 68:0a:4f:19:41:5a:d3:e4:22:d8:e5:d3:c5:8f:73: 7e:63:16:f8:19:bb:c3:17:d1:07:92:c4:68:67:a9: c6:eb:3f:f4:b5:1a:e4:bf:cc:d6:cb:ca:9d:fa:16: e4:7d:90:49:34:f9:4a:11:37:59:23:09:82:8b:0f: 2e:92:5d:7b:f2:59:14:9b:02:8b:b3:21:60:d3:92: 49:de:5d:fa:c8:32:39:3c:6b:fd:29:24:c6:82:f7: 88:42:7b:ab:6d:89:ce:11:b8:68:98:69:37:fe:7e: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:59:F4:24:26:9F:72:82:33:1F:45:44:3A:D5:20:32:BE:16:DF:B7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c76a49a6-88a8-465b-9475-bfbdcbb991fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.192.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:9a:0d:b2:f8:06:7a:58:f9:b7:b1:1e:01:00:38:2f:89:d1: 9d:73:91:e0:b0:37:7d:8e:ff:7f:6f:40:82:e8:44:6f:c5:5f: 21:dd:70:33:f5:b6:1a:fb:71:86:21:28:4e:d8:a8:64:4b:e7: 23:91:cc:fc:03:b1:d3:fb:9e:17:e1:12:5c:2d:27:59:ac:c3: d4:c8:d5:fb:28:4e:a6:d5:9e:f9:89:99:14:92:8e:b0:13:84: 00:4e:36:f3:bc:8a:37:5f:d3:76:ca:48:69:f7:5d:bb:5f:7d: fb:3d:2e:d9:ed:52:77:df:cb:86:d5:0c:02:ae:e7:d1:92:d2: e6:02:9d:66:71:86:47:ab:4d:5f:98:df:d6:e1:8e:75:8f:87: 4e:a9:db:07:95:38:0a:76:b5:26:3f:c4:f3:47:5c:8e:28:4f: df:6f:70:3b:22:7a:92:4a:09:ea:e5:90:8a:ec:a0:2e:39:e6: e5:d4:36:5a:ac:5d:ba:e9:ba:5d:4e:38:82:49:32:3e:8c:2b: d4:fb:a2:54:f2:5a:6f:80:9c:c8:82:91:c9:04:dd:49:3f:b5: 86:f2:f0:8d:52:48:51:06:da:81:1f:50:2b:5a:de:77:85:53: f5:c3:f3:de:f2:9a:34:6b:e0:b1:ce:26:42:a9:3b:fe:e6:c8: e1:07:54:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKqW+mfSS+UM8tg94C6kpZZGlxrgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjA1ODM2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDhiZTVhN2RjZTk0YzNjYTFmZmIyMWY1MzJjOTFkZDY0 MGU5OGRkMmU0NmRiYzFhZDM5ZTExMzVhOTU2OWZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvTnMvW0O6k/ZvZ5Q0flSLidxkeS7JDjFuTW8NBJpGoIsE jB3S0NoWSlmIWAORWvUWyCnSboHDdjCjd5SR/R7Yv9wEFWbNDvGzCtDO12qeorxb jLDEIb8iHX79SpszrIg56Gv/i7mIiRGnMK8m8fyMj7RJGgOdGdAY8RSb4O2oCgx1 Nzbxk+i/Hwomm3GsOAf/X4etZ2gKTxlBWtPkItjl08WPc35jFvgZu8MX0QeSxGhn qcbrP/S1GuS/zNbLyp36FuR9kEk0+UoRN1kjCYKLDy6SXXvyWRSbAouzIWDTkkne XfrIMjk8a/0pJMaC94hCe6ttic4RuGiYaTf+fnlzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY1n0JCafcoIzH0VEOtUgMr4W37cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3NmE0OWE2LTg4YTgtNDY1Yi05NDc1LWJmYmRjYmI5OTFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2tsAwDQYJKoZIhvcNAQELBQADggEBAFuaDbL4BnpY+bexHgEAOC+J0Z1z keCwN32O/39vQILoRG/FXyHdcDP1thr7cYYhKE7YqGRL5yORzPwDsdP7nhfhElwt J1msw9TI1fsoTqbVnvmJmRSSjrAThABONvO8ijdf03bKSGn3Xbtfffs9LtntUnff y4bVDAKu59GS0uYCnWZxhkerTV+Y39bhjnWPh06p2weVOAp2tSY/xPNHXI4oT99v cDsiepJKCerlkIrsoC455uXUNlqsXbrpul1OOIJJMj6MK9T7olTyWm+AnMiCkckE 3Uk/tYby8I1SSFEG2oEfUCta3neFU/XD897ymjRr4LHOJkKpO/7myOEHVH0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:51 2025 by rpki-client