$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa File: cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa (raw, json) Hash identifier: a3Mk2ueSuHhjojuZPIkMBg5FhrycV28GQnS+phghALs= Subject key identifier: B6:68:E9:40:66:E3:F1:2A:2A:67:51:6E:F1:9A:AA:A0:50:15:FD:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 52CAD43FB2E28B22ED4214D820C9ED66B53D6A1B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa Signing time: Mon 13 Oct 2025 17:48:31 +0000 ROA not before: Mon 13 Oct 2025 17:48:31 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.149.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ca:d4:3f:b2:e2:8b:22:ed:42:14:d8:20:c9:ed:66:b5:3d:6a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:48:31 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=2455d4101bda9acf77f850c2cd6bc972bc7d4ba2d63bc2636b6df9691ca0decb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:77:9e:20:80:4d:28:7f:90:b0:12:e9:17: 0c:4c:c7:a1:e9:bd:ad:02:86:c6:4d:86:c1:8d:40: 91:68:90:6f:cf:78:d6:8b:65:15:cf:7b:eb:08:62: 9c:bb:72:44:e9:5a:e3:3e:a2:a0:93:a5:20:aa:33: 4c:b0:d9:8c:30:61:f8:51:c9:af:21:0a:fd:b3:cd: e9:35:d7:18:e5:20:b2:91:e6:d6:7d:36:40:9a:44: 6b:1d:60:af:93:52:87:4c:bc:72:d7:e9:78:db:75: 44:9d:3c:9e:22:b2:65:08:8b:5a:c6:d7:cb:8a:c5: 2e:6b:e0:d9:d9:44:91:ce:c4:36:67:b9:6d:b9:a9: ab:0c:c5:80:94:2f:0d:91:01:40:d1:df:b3:62:11: c1:8e:51:e3:64:b5:c0:d2:9b:d3:d5:8b:38:e1:68: 87:86:42:0f:b7:f3:b4:65:d7:29:b8:de:e0:6e:50: 29:40:4b:8e:43:30:7e:e5:bc:f8:a7:f7:ea:3a:68: 5d:f0:da:3a:82:e7:12:55:a8:0c:18:30:5c:f8:6b: 93:f9:10:36:07:38:ab:47:6e:57:ee:04:b1:b9:95: 1d:2c:31:1f:39:01:41:85:a8:08:c8:2d:9c:53:3c: 5d:7f:ab:23:1f:66:49:19:31:01:a3:cc:99:3b:0b: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:68:E9:40:66:E3:F1:2A:2A:67:51:6E:F1:9A:AA:A0:50:15:FD:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.149.10.0/24 Signature Algorithm: sha256WithRSAEncryption 45:2a:2a:76:84:2d:53:22:a1:cc:f7:65:3c:a6:70:8e:c2:b3: c0:dd:9c:63:94:25:8e:4e:39:39:e8:ac:ea:03:b2:18:f9:bb: 01:21:5e:ec:99:9f:cd:a3:d9:e4:ff:d5:dc:ca:c2:65:05:50: b9:be:44:8f:55:08:a3:73:04:4c:47:19:db:b5:a9:f8:ce:2f: 80:04:b3:24:70:76:13:b2:25:b6:03:bc:93:6a:9e:67:2d:a4: 7e:7f:01:5e:b8:82:5e:53:89:cd:81:f3:cd:66:42:a6:48:ee: 15:d5:78:0c:39:6d:a1:16:38:ca:b8:dc:c1:1e:66:41:9e:80: 89:a4:2d:47:b4:5d:ed:d5:6e:10:66:75:de:53:ef:a7:a9:06: e0:74:e0:ed:d9:cd:4c:59:bc:1a:9f:d2:07:5a:22:72:52:a1: 4f:41:47:a4:ac:06:72:77:d7:20:51:cd:4b:9e:1b:48:e3:bc: fe:f9:ff:7c:8d:42:37:93:82:ee:e1:82:d3:60:11:37:5d:79: 2b:e2:fb:44:6c:01:31:f8:26:10:41:ba:a4:98:00:08:1b:93: 3e:cb:e6:eb:34:da:b7:cf:0a:f4:99:31:16:37:a5:e0:8a:e8: fa:80:a6:2f:f7:92:25:71:3f:13:c5:ca:72:ff:70:c5:7b:1b: 3f:e4:3b:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUsrUP7LiiyLtQhTYIMntZrU9ahswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTc0ODMxWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDU1ZDQxMDFiZGE5YWNmNzdmODUwYzJjZDZiYzk3MmJj N2Q0YmEyZDYzYmMyNjM2YjZkZjk2OTFjYTBkZWNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9nXeeIIBNKH+QsBLpFwxMx6Hpva0ChsZNhsGNQJFokG/P eNaLZRXPe+sIYpy7ckTpWuM+oqCTpSCqM0yw2YwwYfhRya8hCv2zzek11xjlILKR 5tZ9NkCaRGsdYK+TUodMvHLX6XjbdUSdPJ4ismUIi1rG18uKxS5r4NnZRJHOxDZn uW25qasMxYCULw2RAUDR37NiEcGOUeNktcDSm9PVizjhaIeGQg+387Rl1ym43uBu UClAS45DMH7lvPin9+o6aF3w2jqC5xJVqAwYMFz4a5P5EDYHOKtHblfuBLG5lR0s MR85AUGFqAjILZxTPF1/qyMfZkkZMQGjzJk7C/izAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtmjpQGbj8SoqZ1Fu8ZqqoFAV/RowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmNjBiOGQ0LWRhYmUtNGE5NS05YjZhLTlmMmIxMzY2MWM1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2lQowDQYJKoZIhvcNAQELBQADggEBAEUqKnaELVMiocz3ZTymcI7Cs8Dd nGOUJY5OOTnorOoDshj5uwEhXuyZn82j2eT/1dzKwmUFULm+RI9VCKNzBExHGdu1 qfjOL4AEsyRwdhOyJbYDvJNqnmctpH5/AV64gl5Tic2B881mQqZI7hXVeAw5baEW OMq43MEeZkGegImkLUe0Xe3VbhBmdd5T76epBuB04O3ZzUxZvBqf0gdaInJSoU9B R6SsBnJ31yBRzUueG0jjvP75/3yNQjeTgu7hgtNgETddeSvi+0RsATH4JhBBuqSY AAgbkz7L5us02rfPCvSZMRY3peCK6PqApi/3kiVxPxPFynL/cMV7Gz/kO2o= -----END CERTIFICATE-----Generated at Mon Oct 20 05:56:38 2025 by rpki-client