$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca29012c-cd81-46ed-aac7-4db499a1ac9b.roa File: ca29012c-cd81-46ed-aac7-4db499a1ac9b.roa (raw, json) Hash identifier: c2zWKsHeysLow8OEFGupDWBHA5bvbTYcSr9efhwrrE8= Subject key identifier: 86:B7:78:6A:3C:4A:DE:C4:E7:BC:B6:81:6B:2D:FD:9D:A8:12:A1:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51EC2293DA55A19335782C7EAFADF7DD7E94F362 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca29012c-cd81-46ed-aac7-4db499a1ac9b.roa Signing time: Fri 17 Oct 2025 21:50:16 +0000 ROA not before: Fri 17 Oct 2025 21:50:16 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ec:22:93:da:55:a1:93:35:78:2c:7e:af:ad:f7:dd:7e:94:f3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 21:50:16 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=6216dd7065ecca7b291b274e0baabf59b43dda915dfcbc15671e7b783c573cba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:33:52:e9:36:32:bc:9f:af:f2:bf:8c:0f: 7e:8c:7f:cd:52:c8:9f:19:2d:be:3c:40:2d:d8:c1: 87:ee:d7:0a:cb:09:68:c0:22:26:30:ad:fc:3d:52: 0a:e7:c8:93:6b:3a:7c:24:98:65:fd:78:10:67:e2: 1d:58:41:db:68:c1:f8:71:8c:97:a3:b9:9b:0f:2e: c3:12:82:62:d2:cc:a1:8e:e7:58:4c:8d:96:b4:d8: 8b:19:5a:3e:88:1c:18:09:87:44:57:de:b5:9e:fa: f8:10:00:9a:9f:08:a0:78:0d:0d:4d:3b:e1:02:48: 70:a1:24:e5:56:22:6d:9c:fc:20:24:c6:14:e5:54: 34:72:03:c6:96:19:42:82:20:63:9e:d8:8c:43:ca: 9e:bc:1c:66:8a:65:00:d6:f8:4b:87:82:fe:1e:2e: e0:a7:97:3d:bc:64:4f:b7:96:34:73:e7:71:09:80: cc:d6:ec:bd:c1:7a:52:17:42:2f:c1:38:ae:c7:8b: e7:8d:31:2e:7c:51:9a:93:45:a6:f6:2c:6a:0b:49: 12:94:90:8e:e5:69:98:a7:d6:01:a5:17:6e:0c:e9: 31:02:47:d5:48:3e:6d:f8:dd:83:73:d5:84:02:e7: bf:95:f5:71:3d:e8:e1:9c:22:48:09:5c:45:1c:6b: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B7:78:6A:3C:4A:DE:C4:E7:BC:B6:81:6B:2D:FD:9D:A8:12:A1:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca29012c-cd81-46ed-aac7-4db499a1ac9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.175.0/24 Signature Algorithm: sha256WithRSAEncryption 69:5d:45:1a:91:b5:9e:dc:62:0c:9d:07:ad:fb:cf:59:aa:52: 90:d2:ce:ae:41:38:42:1f:31:c8:48:9d:c4:97:31:57:83:8e: 5f:9b:43:0b:e6:3b:e3:a5:e1:3f:ba:a7:c8:84:ad:10:dc:6e: bd:c0:29:fa:e6:42:73:b1:8d:b6:cf:24:2e:b3:36:c3:1e:86: e0:cf:68:da:da:27:4c:91:de:c9:e0:0e:99:25:f4:54:be:ba: d0:57:31:70:ff:58:93:ae:6e:df:a4:2b:67:75:4b:60:8b:04: 7f:71:63:2f:b8:67:90:40:11:fb:0a:bb:0a:58:88:a2:76:62: 8c:24:b7:a4:20:37:01:76:5a:e3:9e:65:74:b7:73:9f:49:0d: ba:8c:3d:6d:8c:df:28:aa:4d:94:a6:b1:13:0a:b0:af:22:0e: af:e5:c3:d2:6d:f1:29:9b:d6:95:c7:4d:dd:36:a1:ca:f6:d1: db:98:82:13:32:4d:9b:33:94:bf:e1:eb:24:64:f3:a0:72:c0: 8b:8f:11:10:07:1a:7b:ce:94:2f:51:e4:eb:c4:2e:1d:b4:c8: 73:1f:e6:2c:9f:a5:93:37:98:c0:4b:dc:d1:79:8f:ca:6e:9f: 3b:b4:f8:bd:34:9b:32:b4:12:41:25:b8:32:e3:59:55:f8:32: b7:24:3d:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUewik9pVoZM1eCx+r6333X6U82IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjE1MDE2WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjE2ZGQ3MDY1ZWNjYTdiMjkxYjI3NGUwYmFhYmY1OWI0 M2RkYTkxNWRmY2JjMTU2NzFlN2I3ODNjNTczY2JhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIVjNS6TYyvJ+v8r+MD36Mf81SyJ8ZLb48QC3YwYfu1wrL CWjAIiYwrfw9UgrnyJNrOnwkmGX9eBBn4h1YQdtowfhxjJejuZsPLsMSgmLSzKGO 51hMjZa02IsZWj6IHBgJh0RX3rWe+vgQAJqfCKB4DQ1NO+ECSHChJOVWIm2c/CAk xhTlVDRyA8aWGUKCIGOe2IxDyp68HGaKZQDW+EuHgv4eLuCnlz28ZE+3ljRz53EJ gMzW7L3BelIXQi/BOK7Hi+eNMS58UZqTRab2LGoLSRKUkI7laZin1gGlF24M6TEC R9VIPm343YNz1YQC57+V9XE96OGcIkgJXEUca6SlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhrd4ajxK3sTnvLaBay39nagSobUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhMjkwMTJjLWNkODEtNDZlZC1hYWM3LTRkYjQ5OWExYWM5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28K8wDQYJKoZIhvcNAQELBQADggEBAGldRRqRtZ7cYgydB637z1mqUpDS zq5BOEIfMchIncSXMVeDjl+bQwvmO+Ol4T+6p8iErRDcbr3AKfrmQnOxjbbPJC6z NsMehuDPaNraJ0yR3sngDpkl9FS+utBXMXD/WJOubt+kK2d1S2CLBH9xYy+4Z5BA EfsKuwpYiKJ2Yowkt6QgNwF2WuOeZXS3c59JDbqMPW2M3yiqTZSmsRMKsK8iDq/l w9Jt8Smb1pXHTd02ocr20duYghMyTZszlL/h6yRk86BywIuPERAHGnvOlC9R5OvE Lh20yHMf5iyfpZM3mMBL3NF5j8punzu0+L00mzK0EkEluDLjWVX4MrckPVs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:52 2025 by rpki-client