$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdbbabd2-4043-48c8-b9b1-38fa886e5702.roa File: cdbbabd2-4043-48c8-b9b1-38fa886e5702.roa (raw, json) Hash identifier: KgxrUgb+f4w8eWESKvo7nlZJrZME+1jsa3hAtqha3h0= Subject key identifier: 2C:F9:37:4A:DE:49:F7:19:C0:7F:A8:0D:FB:30:21:AD:27:8E:B7:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5663096DF76E7356A029905093715E972A9F1732 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdbbabd2-4043-48c8-b9b1-38fa886e5702.roa Signing time: Fri 17 Oct 2025 21:30:29 +0000 ROA not before: Fri 17 Oct 2025 21:30:29 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:63:09:6d:f7:6e:73:56:a0:29:90:50:93:71:5e:97:2a:9f:17:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 21:30:29 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=65d78a736efb5b64c33addfcceb05173dbcfa60c731b5b242e50c72ae22fbdf3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:64:b8:ff:20:49:e2:63:2a:ab:aa:64:28: b2:35:4b:bd:0f:00:04:1f:34:51:17:75:57:18:1c: ab:84:6c:55:24:af:c1:50:83:24:69:3f:8f:54:55: 11:01:8a:47:56:4f:84:63:94:93:1a:8b:f9:78:94: 77:d9:5f:9b:04:d0:58:6c:45:5c:99:8f:92:2b:4c: a0:ec:a3:fd:1d:e3:ca:92:fd:f3:d5:ed:35:5d:88: 9d:ce:4f:a3:94:e1:b9:8d:c6:8a:b8:97:26:a2:bd: 8f:9d:8b:26:8b:b7:30:68:8d:7b:c3:d0:17:cd:9c: c8:79:da:dd:62:2b:62:32:c7:cc:e3:c5:7e:5b:d6: a9:fe:f5:7c:50:58:32:c5:d4:6e:1f:ea:03:c5:00: 5a:23:a1:43:46:7d:d1:94:eb:f4:1e:e1:61:4d:92: 59:a6:dd:7e:ed:bb:0b:1e:7f:13:fc:ba:8f:c0:29: 3b:ac:69:ee:7c:14:33:24:d6:fd:25:56:e6:33:26: 29:fa:7d:1c:cc:be:39:fb:4d:3f:0b:1a:78:9a:63: 3d:07:c9:a2:79:a8:15:87:68:6b:fb:33:eb:dc:7f: 1c:19:42:23:df:d9:99:c6:d7:be:27:c4:af:a1:23: 8c:45:71:13:18:6a:7c:43:5a:e7:c9:f2:4e:5e:80: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F9:37:4A:DE:49:F7:19:C0:7F:A8:0D:FB:30:21:AD:27:8E:B7:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdbbabd2-4043-48c8-b9b1-38fa886e5702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.34.0/23 Signature Algorithm: sha256WithRSAEncryption 61:f3:a9:7b:af:c6:8f:e0:09:c3:ff:6c:61:2c:32:68:70:54: a1:97:3b:16:ce:93:3e:d6:af:5b:c9:5d:62:2b:73:7e:84:d8: 5e:b3:74:55:73:88:e1:01:ad:66:05:e7:42:36:57:66:e9:f7: bd:2f:4a:b3:56:69:cb:fa:37:7e:2a:ef:88:83:cd:e9:06:f2: e2:9b:a4:86:3f:b4:6a:b4:29:95:7f:1d:57:fd:42:e6:20:53: 75:cb:ff:fc:f2:0c:3a:76:d2:83:81:da:ae:57:a4:1f:e1:2b: 86:37:91:1a:70:94:dc:c8:90:ec:97:a2:88:fd:8d:e8:11:8c: 1f:78:92:f0:d2:7d:29:06:c0:8d:b3:e2:47:ad:2f:b9:7d:89: e4:81:e2:e6:6b:ee:12:ae:d9:eb:4e:7e:37:e0:ae:4d:1c:8e: 36:fb:b7:fb:b1:8e:03:77:a5:c8:13:83:48:1e:c7:3a:c2:e4: d3:7c:3b:14:51:65:cd:4e:0a:1f:8e:4d:94:9b:a8:2d:33:bc: 59:3b:5e:22:b4:de:60:d0:f4:4f:d8:40:0b:bf:2e:58:aa:a7: d5:e8:b5:3a:03:0e:8c:b8:61:7b:28:be:35:54:b3:a7:6d:53: 5b:e1:be:cd:f4:3d:4d:f1:cd:2d:44:99:9b:ee:1e:07:9e:a1: ad:6b:fc:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVmMJbfduc1agKZBQk3FelyqfFzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjEzMDI5WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWQ3OGE3MzZlZmI1YjY0YzMzYWRkZmNjZWIwNTE3M2Ri Y2ZhNjBjNzMxYjViMjQyZTUwYzcyYWUyMmZiZGYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO8mS4/yBJ4mMqq6pkKLI1S70PAAQfNFEXdVcYHKuEbFUk r8FQgyRpP49UVREBikdWT4RjlJMai/l4lHfZX5sE0FhsRVyZj5IrTKDso/0d48qS /fPV7TVdiJ3OT6OU4bmNxoq4lyaivY+diyaLtzBojXvD0BfNnMh52t1iK2Iyx8zj xX5b1qn+9XxQWDLF1G4f6gPFAFojoUNGfdGU6/Qe4WFNklmm3X7tuwsefxP8uo/A KTusae58FDMk1v0lVuYzJin6fRzMvjn7TT8LGniaYz0HyaJ5qBWHaGv7M+vcfxwZ QiPf2ZnG174nxK+hI4xFcRMYanxDWufJ8k5egFWnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULPk3St5J9xnAf6gN+zAhrSeOtxUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkYmJhYmQyLTQwNDMtNDhjOC1iOWIxLTM4ZmE4ODZlNTcwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2xSIwDQYJKoZIhvcNAQELBQADggEBAGHzqXuvxo/gCcP/bGEsMmhwVKGX OxbOkz7Wr1vJXWIrc36E2F6zdFVziOEBrWYF50I2V2bp970vSrNWacv6N34q74iD zekG8uKbpIY/tGq0KZV/HVf9QuYgU3XL//zyDDp20oOB2q5XpB/hK4Y3kRpwlNzI kOyXooj9jegRjB94kvDSfSkGwI2z4ketL7l9ieSB4uZr7hKu2etOfjfgrk0cjjb7 t/uxjgN3pcgTg0gexzrC5NN8OxRRZc1OCh+OTZSbqC0zvFk7XiK03mDQ9E/YQAu/ Lliqp9XotToDDoy4YXsovjVUs6dtU1vhvs30PU3xzS1EmZvuHgeeoa1r/B0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:12:59 2025 by rpki-client