$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7d74352-c7ba-43d2-a659-fb0dd52fa02d.roa File: d7d74352-c7ba-43d2-a659-fb0dd52fa02d.roa (raw, json) Hash identifier: ZxYea6Se4rCqVw0I04qJkfklpTOjgOBS7SflR/Z+88w= Subject key identifier: DB:8A:F2:2D:F8:15:D6:72:45:39:5C:C7:13:DA:D7:F4:B0:3F:9E:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 41232F1985EEECE79928F6F9EB79E4068C60EBF9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7d74352-c7ba-43d2-a659-fb0dd52fa02d.roa Signing time: Fri 17 Oct 2025 22:12:55 +0000 ROA not before: Fri 17 Oct 2025 22:12:55 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:23:2f:19:85:ee:ec:e7:99:28:f6:f9:eb:79:e4:06:8c:60:eb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:12:55 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=9e3bba12b33999b29fd7180a1bc16018a0a26261c05b408325892beece4ecd8a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:87:6d:db:d4:9b:48:26:33:b5:4c:bd:fd: 1e:51:8e:d7:04:05:5f:a5:31:b8:42:f8:46:19:ec: 52:ac:ca:c8:71:31:14:d0:c8:e0:cc:a1:1b:cb:be: a7:ba:45:a4:b5:cd:45:18:00:61:1a:93:c3:63:a5: 41:74:52:3e:73:04:b9:b8:ed:17:1e:92:80:f4:51: e0:a4:09:27:2d:fd:79:42:cd:fc:5a:25:0c:1c:6d: f3:bd:cc:03:f8:25:9c:00:71:90:c5:1c:d1:de:1c: db:e5:96:0a:70:88:cd:59:a7:9d:f4:c6:b1:79:7c: 8b:73:8a:c6:d0:b6:d2:c6:f1:c5:23:4d:61:2f:9b: 50:95:4b:53:1a:b4:17:dd:2e:e3:b9:af:85:a4:cc: 3b:cf:24:ad:f7:ec:85:c8:d4:f6:c5:e2:e1:18:66: 64:03:47:40:ad:13:07:63:65:32:b1:68:59:e5:e3: 57:44:cb:d0:e1:22:18:a0:1b:5e:36:17:f3:3e:0c: ec:94:89:fc:9f:59:3f:08:ab:72:91:8c:c9:25:57: 33:ae:ee:82:31:58:d5:68:77:91:02:3a:b5:46:9c: b5:64:48:43:b8:aa:3d:9d:42:50:4a:3a:c6:f5:55: 1b:ea:8f:84:e2:37:76:3b:fc:78:63:18:60:54:de: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:F2:2D:F8:15:D6:72:45:39:5C:C7:13:DA:D7:F4:B0:3F:9E:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7d74352-c7ba-43d2-a659-fb0dd52fa02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.189.0/24 Signature Algorithm: sha256WithRSAEncryption a2:51:3f:0b:2f:a6:33:1f:96:ee:a4:5b:dc:70:31:df:68:0f: 91:c3:17:98:fa:28:f5:d2:f0:89:68:1f:ff:aa:cd:ff:9f:2b: 91:2e:33:87:46:13:03:20:1f:de:db:14:d9:59:b5:8d:31:d3: 63:fe:89:75:53:0e:a8:04:2e:64:b2:be:f8:f3:f3:ea:fc:c6: f4:38:6a:6b:1e:00:64:62:00:60:e8:3e:e9:6e:2a:b6:44:e0: 1b:4e:04:64:e8:50:92:11:ac:98:3e:79:66:a3:88:2a:93:47: b7:66:b6:90:00:6c:d3:d2:05:8b:56:4d:85:9e:3e:4b:95:5e: b6:44:20:d3:df:57:f0:a3:9d:68:f8:2b:31:42:dd:e2:9a:df: a9:ca:0e:c7:ba:e4:39:28:ee:5b:85:a2:3e:7e:be:55:cf:b1: d4:dd:39:1b:15:e7:04:72:f0:25:42:8e:1e:77:2e:70:d9:46: a6:c6:c5:30:69:d2:e2:39:96:d7:2d:99:32:52:4c:b1:08:3c: 5e:b2:f7:17:24:f6:36:0c:af:0a:5f:68:f0:34:f5:5a:79:64: 20:7f:82:23:08:5e:5a:38:e2:0a:96:45:22:fe:94:f1:03:6e: 7c:3c:76:c9:64:3a:c3:7e:38:6d:52:85:84:ec:f1:ee:e9:64: 42:f1:fb:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQSMvGYXu7OeZKPb563nkBoxg6/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIxMjU1WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTNiYmExMmIzMzk5OWIyOWZkNzE4MGExYmMxNjAxOGEw YTI2MjYxYzA1YjQwODMyNTg5MmJlZWNlNGVjZDhhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv3Ydt29SbSCYztUy9/R5RjtcEBV+lMbhC+EYZ7FKsyshx MRTQyODMoRvLvqe6RaS1zUUYAGEak8NjpUF0Uj5zBLm47RcekoD0UeCkCSct/XlC zfxaJQwcbfO9zAP4JZwAcZDFHNHeHNvllgpwiM1Zp530xrF5fItzisbQttLG8cUj TWEvm1CVS1MatBfdLuO5r4WkzDvPJK337IXI1PbF4uEYZmQDR0CtEwdjZTKxaFnl 41dEy9DhIhigG142F/M+DOyUifyfWT8Iq3KRjMklVzOu7oIxWNVod5ECOrVGnLVk SEO4qj2dQlBKOsb1VRvqj4TiN3Y7/HhjGGBU3mcBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU24ryLfgV1nJFOVzHE9rX9LA/nuYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q3ZDc0MzUyLWM3YmEtNDNkMi1hNjU5LWZiMGRkNTJmYTAyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28L0wDQYJKoZIhvcNAQELBQADggEBAKJRPwsvpjMflu6kW9xwMd9oD5HD F5j6KPXS8IloH/+qzf+fK5EuM4dGEwMgH97bFNlZtY0x02P+iXVTDqgELmSyvvjz 8+r8xvQ4amseAGRiAGDoPuluKrZE4BtOBGToUJIRrJg+eWajiCqTR7dmtpAAbNPS BYtWTYWePkuVXrZEINPfV/CjnWj4KzFC3eKa36nKDse65Dko7luFoj5+vlXPsdTd ORsV5wRy8CVCjh53LnDZRqbGxTBp0uI5ltctmTJSTLEIPF6y9xck9jYMrwpfaPA0 9Vp5ZCB/giMIXlo44gqWRSL+lPEDbnw8dslkOsN+OG1ShYTs8e7pZELx+2g= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:46 2025 by rpki-client