$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd6ba133-317d-4331-bd93-2eabe2658e7d.roa File: cd6ba133-317d-4331-bd93-2eabe2658e7d.roa (raw, json) Hash identifier: wTArB8GUQzbXn9W511knkO0SaK9uSdVwevLcdOeNM3g= Subject key identifier: 3F:9D:A1:76:CE:9A:3F:8E:D9:63:39:18:62:7A:23:DC:06:79:15:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4ACDF827FF48548852096169AC7FDA6ABC10E211 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd6ba133-317d-4331-bd93-2eabe2658e7d.roa Signing time: Thu 16 Oct 2025 19:50:46 +0000 ROA not before: Thu 16 Oct 2025 19:50:46 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.150.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:f8:27:ff:48:54:88:52:09:61:69:ac:7f:da:6a:bc:10:e2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:50:46 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=bf06f02b91861510578a8cd3b6f651f5b396014d58954b99fd4d9ec488111a59, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:54:fd:02:c0:f2:27:47:e7:e2:39:0f:e9: 09:cd:01:44:e8:2b:46:69:60:72:45:58:e9:b7:ae: 04:c7:e5:82:6a:67:d2:66:82:9f:2b:84:8d:38:17: 87:16:7b:94:bc:63:cb:2e:8c:d6:bd:f0:16:1c:4d: 09:54:2e:6b:35:95:4c:3a:29:fa:86:45:31:eb:55: 9e:4d:62:6f:8b:b9:5c:ef:b8:31:e6:9a:57:3a:3d: bf:05:e2:05:58:c8:51:06:8a:b4:10:31:e2:47:b3: 6c:4f:38:91:b0:ce:e2:03:06:57:39:96:1b:fc:00: be:56:25:f2:c8:5f:e8:a3:81:6d:48:cf:50:ac:f6: 99:d8:05:18:46:fc:51:85:e4:24:2b:24:3e:93:df: 79:08:e3:3d:78:03:36:07:e5:fb:02:71:f5:7a:4b: 36:29:62:60:0f:c6:9c:2d:51:49:84:aa:67:42:6a: 6a:83:0d:39:2d:13:ac:2b:04:f5:7b:29:ae:78:f4: 2f:ae:37:00:ac:e9:6e:03:04:90:83:47:4b:f0:2c: aa:d8:cf:f2:4f:a1:76:fb:8a:ad:20:0e:1a:62:19: 29:0e:64:c5:db:41:87:8c:66:b9:42:11:ab:fd:09: 6c:10:bf:65:4a:ef:1f:55:69:3e:3a:ab:0e:30:c3: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:A1:76:CE:9A:3F:8E:D9:63:39:18:62:7A:23:DC:06:79:15:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd6ba133-317d-4331-bd93-2eabe2658e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.150.192.0/18 Signature Algorithm: sha256WithRSAEncryption 93:1e:84:d6:6d:b5:f4:a4:88:01:4c:c4:59:6b:86:32:d2:89: 8f:06:39:1e:cc:0d:12:8a:9e:8d:84:d1:ab:59:15:40:e4:d2: 2f:cf:8d:8b:06:d3:d5:a3:1f:26:d7:6c:d0:b0:7d:6a:38:b4: ce:a2:e3:37:e3:36:ad:9d:93:60:41:2e:6d:42:78:c8:0d:7a: 66:eb:7e:6f:61:11:99:44:2b:44:72:fb:b9:ef:9e:b4:83:39: 99:f6:53:51:b8:7d:49:32:7f:8a:d4:63:b7:a1:16:51:3d:3f: 47:dc:91:9a:b2:c0:09:e2:15:65:e8:46:a4:a6:dd:5b:73:a5: 97:86:59:e6:02:a7:f7:3e:ad:fe:b2:24:26:75:66:2a:5c:ac: e5:2d:70:f8:77:38:fc:ca:d8:22:00:d2:cf:cf:8c:93:87:ac: 3e:17:88:d4:68:60:04:d3:c4:00:49:3a:dd:cc:a4:71:1f:aa: c5:de:f0:92:96:da:77:58:a1:99:c3:ff:d9:78:79:75:98:6b: b4:73:43:ad:59:7f:da:fa:4f:56:21:6a:41:30:44:e9:2b:2e: 3c:78:fd:eb:47:81:96:2e:20:f5:d2:a1:07:43:b4:26:c7:05: 71:91:64:15:3c:9b:0e:6c:a8:61:62:29:51:83:c9:04:1e:f5: b1:be:e9:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSs34J/9IVIhSCWFprH/aarwQ4hEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTk1MDQ2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjA2ZjAyYjkxODYxNTEwNTc4YThjZDNiNmY2NTFmNWIz OTYwMTRkNTg5NTRiOTlmZDRkOWVjNDg4MTExYTU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5i1T9AsDyJ0fn4jkP6QnNAUToK0ZpYHJFWOm3rgTH5YJq Z9Jmgp8rhI04F4cWe5S8Y8sujNa98BYcTQlULms1lUw6KfqGRTHrVZ5NYm+LuVzv uDHmmlc6Pb8F4gVYyFEGirQQMeJHs2xPOJGwzuIDBlc5lhv8AL5WJfLIX+ijgW1I z1Cs9pnYBRhG/FGF5CQrJD6T33kI4z14AzYH5fsCcfV6SzYpYmAPxpwtUUmEqmdC amqDDTktE6wrBPV7Ka549C+uNwCs6W4DBJCDR0vwLKrYz/JPoXb7iq0gDhpiGSkO ZMXbQYeMZrlCEav9CWwQv2VK7x9VaT46qw4wwxDbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP52hds6aP47ZYzkYYnoj3AZ5FX4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkNmJhMTMzLTMxN2QtNDMzMS1iZDkzLTJlYWJlMjY1OGU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2lsAwDQYJKoZIhvcNAQELBQADggEBAJMehNZttfSkiAFMxFlrhjLSiY8G OR7MDRKKno2E0atZFUDk0i/PjYsG09WjHybXbNCwfWo4tM6i4zfjNq2dk2BBLm1C eMgNembrfm9hEZlEK0Ry+7nvnrSDOZn2U1G4fUkyf4rUY7ehFlE9P0fckZqywAni FWXoRqSm3VtzpZeGWeYCp/c+rf6yJCZ1ZipcrOUtcPh3OPzK2CIA0s/PjJOHrD4X iNRoYATTxABJOt3MpHEfqsXe8JKW2ndYoZnD/9l4eXWYa7RzQ61Zf9r6T1YhakEw ROkrLjx4/etHgZYuIPXSoQdDtCbHBXGRZBU8mw5sqGFiKVGDyQQe9bG+6XI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:56:29 2025 by rpki-client