$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa File: d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa (raw, json) Hash identifier: AqOAca5SiuoReu/fwVqCJ/Kwp2CMZObeadDbIDbZqUA= Subject key identifier: D9:B5:1F:F5:29:66:F5:79:8A:41:28:98:20:9A:98:7C:E1:5A:67:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6140337EDB9B3F54EE23602C65805C46B039E776 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa Signing time: Sat 18 Oct 2025 05:51:29 +0000 ROA not before: Sat 18 Oct 2025 05:51:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.199.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:40:33:7e:db:9b:3f:54:ee:23:60:2c:65:80:5c:46:b0:39:e7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 05:51:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c8bf13f917288ac9a8b2eec1ea32c528bc13d02828302889b3e03fe680934543, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:6f:53:02:21:3c:7e:96:52:71:3e:1a:7c: f8:02:8e:8d:f2:e9:a5:81:c4:74:a8:50:db:53:f0: 9c:07:40:c6:ae:f9:d7:3f:c3:f4:01:f7:aa:77:39: 82:fe:90:1c:5d:c2:e9:07:a4:26:b2:a6:55:4b:28: b5:4f:cf:e6:a5:8c:a2:7f:03:ab:4e:2b:8b:07:b6: e2:8f:75:18:1d:0a:34:2b:77:6a:13:97:cf:5f:08: 30:65:05:27:64:07:93:91:a7:62:36:01:d0:6c:88: 47:ad:29:6f:3a:73:5c:8c:f8:4b:42:41:24:e9:84: ab:eb:0d:30:89:1e:40:e6:d8:64:71:69:42:a8:72: 09:17:d0:b1:e2:0d:66:78:3e:a3:f6:4a:8c:52:a3: 79:90:a3:aa:b0:96:b7:9c:28:a3:39:8f:e7:c8:1e: ec:9e:08:6a:a3:7b:f3:6b:0a:86:70:b6:2e:84:90: 18:cb:3a:d9:94:01:af:eb:33:da:53:00:4c:d5:b0: 9e:d3:bf:53:de:96:b3:de:97:31:61:b8:7e:84:5d: 47:a2:ef:c4:4f:a9:d3:af:a3:cd:fc:f2:6a:5b:b3: 33:91:55:92:af:43:ba:16:60:b0:f8:a5:78:0c:17: d2:1f:88:58:9e:57:54:f1:18:92:64:1b:22:c4:fe: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:1F:F5:29:66:F5:79:8A:41:28:98:20:9A:98:7C:E1:5A:67:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3e8cadb-dd47-4801-8b62-0fb6aa67bbed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.199.128.0/17 Signature Algorithm: sha256WithRSAEncryption a6:99:3a:f9:a2:10:60:4a:3a:1a:39:bb:b4:d3:54:6c:b5:f6: ad:d5:4e:40:77:94:3f:ae:05:46:e2:7e:df:a0:43:dd:79:c8: 65:6e:8c:7f:3a:55:25:7a:03:db:a4:e5:b8:e3:2e:dc:23:ff: b5:65:35:50:d4:47:c6:ef:ce:f9:87:0b:d9:9d:d9:a9:00:b1: b2:78:76:3a:a6:c4:01:5d:18:da:94:16:76:27:6b:d9:ae:f3: 63:89:05:32:60:ea:71:39:93:a3:cd:7f:bf:a3:55:d2:a7:b3: bd:ae:9b:ac:a4:e4:ca:db:f6:3a:ae:78:8a:b9:46:13:67:5d: dc:21:58:47:2e:12:6d:88:ad:5a:d4:f1:1d:a8:b5:94:10:be: 4a:f6:16:80:81:22:c0:d9:c0:b9:1d:59:b8:ba:e6:34:7d:e5: 22:a3:e4:5f:09:7d:94:0d:a1:75:db:0c:b7:f3:39:dc:6d:7e: 8d:d0:e4:1a:d9:de:e7:54:16:2b:9d:d6:6e:0b:fc:05:b4:d3: 47:e1:85:a9:df:f3:2a:b4:f9:88:32:a9:46:63:53:dd:08:8a: ac:ab:e0:56:93:97:00:99:e4:95:40:d0:4d:f7:93:50:56:1b: b2:b2:15:cc:45:3d:5a:5c:6c:c3:0a:ad:b1:4d:29:c0:85:a5: 83:ee:bf:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYUAzftubP1TuI2AsZYBcRrA553YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDU1MTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGJmMTNmOTE3Mjg4YWM5YThiMmVlYzFlYTMyYzUyOGJj MTNkMDI4MjgzMDI4ODliM2UwM2ZlNjgwOTM0NTQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnPm9TAiE8fpZScT4afPgCjo3y6aWBxHSoUNtT8JwHQMau +dc/w/QB96p3OYL+kBxdwukHpCayplVLKLVPz+aljKJ/A6tOK4sHtuKPdRgdCjQr d2oTl89fCDBlBSdkB5ORp2I2AdBsiEetKW86c1yM+EtCQSTphKvrDTCJHkDm2GRx aUKocgkX0LHiDWZ4PqP2SoxSo3mQo6qwlrecKKM5j+fIHuyeCGqje/NrCoZwti6E kBjLOtmUAa/rM9pTAEzVsJ7Tv1PelrPelzFhuH6EXUei78RPqdOvo8388mpbszOR VZKvQ7oWYLD4pXgMF9IfiFieV1TxGJJkGyLE/r6jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2bUf9Slm9XmKQSiYIJqYfOFaZxswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzZThjYWRiLWRkNDctNDgwMS04YjYyLTBmYjZhYTY3YmJlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2x4AwDQYJKoZIhvcNAQELBQADggEBAKaZOvmiEGBKOho5u7TTVGy19q3V TkB3lD+uBUbift+gQ915yGVujH86VSV6A9uk5bjjLtwj/7VlNVDUR8bvzvmHC9md 2akAsbJ4djqmxAFdGNqUFnYna9mu82OJBTJg6nE5k6PNf7+jVdKns72um6yk5Mrb 9jqueIq5RhNnXdwhWEcuEm2IrVrU8R2otZQQvkr2FoCBIsDZwLkdWbi65jR95SKj 5F8JfZQNoXXbDLfzOdxtfo3Q5BrZ3udUFiud1m4L/AW000fhhanf8yq0+YgyqUZj U90Iiqyr4FaTlwCZ5JVA0E33k1BWG7KyFcxFPVpcbMMKrbFNKcCFpYPuv4k= -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:47 2025 by rpki-client