$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db42514a-d93d-4ebd-9aa6-021cda8e65e9.roa File: db42514a-d93d-4ebd-9aa6-021cda8e65e9.roa (raw, json) Hash identifier: 6tlgvMfFLBfFXTfsjXuYAvussVKtIYmo5wfMy56XkRE= Subject key identifier: 67:E7:6C:B8:F8:87:28:DC:6A:7B:AE:C7:4F:FC:3C:BC:D7:F2:D0:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23074FFD484D75E7E41283ACCED708B473298EF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db42514a-d93d-4ebd-9aa6-021cda8e65e9.roa Signing time: Sat 18 Oct 2025 05:51:24 +0000 ROA not before: Sat 18 Oct 2025 05:51:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:07:4f:fd:48:4d:75:e7:e4:12:83:ac:ce:d7:08:b4:73:29:8e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 05:51:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7b06da2f49b015d15621cbb8abd25496a411e58da50e281a12c243d704e14a63, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:0b:0c:fe:4d:5e:93:bd:d2:7a:3a:92:ef: 61:e4:66:02:db:67:6e:37:e9:fb:56:b4:9a:73:7b: e5:8b:96:3c:b9:5a:bf:13:42:12:51:74:11:b7:c6: 0d:ab:d7:17:9d:42:37:74:53:6e:bf:c8:a6:52:29: 80:ec:43:26:cb:32:af:64:f2:6a:18:54:69:b7:49: 56:f0:dc:25:a0:85:13:69:b0:a0:2f:95:44:8b:28: c2:ee:38:ce:42:21:7d:61:2e:6e:eb:b9:3e:9c:de: c8:7a:a8:e8:86:12:86:0f:5d:04:cd:7e:a5:41:b9: 90:a8:06:6c:d4:45:e6:75:ff:74:9b:2a:31:b5:ef: e2:c5:bf:99:fd:5d:13:5b:43:15:26:42:5f:fd:9b: 12:b5:aa:a7:01:b2:d1:ce:a3:77:ac:80:a6:a5:4e: 65:dd:83:77:b2:ab:c9:2e:89:43:25:9b:38:54:f2: 7e:88:b1:62:93:8b:df:d7:0d:c1:4c:69:5a:a3:b8: 97:a8:61:b2:fc:ae:f8:bd:b9:34:ee:69:67:fa:7d: 02:62:63:a3:ba:d4:a3:a1:aa:74:31:34:62:df:90: 6e:e0:e6:91:45:86:a0:f6:cc:63:a8:1c:78:e6:78: 0f:cd:69:8e:e7:3f:a6:50:00:fc:e2:97:9f:1d:87: 72:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E7:6C:B8:F8:87:28:DC:6A:7B:AE:C7:4F:FC:3C:BC:D7:F2:D0:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db42514a-d93d-4ebd-9aa6-021cda8e65e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.128.0/24 Signature Algorithm: sha256WithRSAEncryption 72:46:6e:c5:d1:b6:67:37:00:1c:bd:60:58:58:d4:57:fa:49: e0:2b:a3:9d:89:e5:4d:08:33:87:89:52:b6:27:81:7a:0a:ea: 86:92:db:01:cb:00:c1:4c:46:07:ff:e8:cf:a0:8a:89:48:6f: 0c:08:5c:54:d3:fe:5c:62:c2:07:8d:d8:96:70:37:99:72:7a: 52:a3:16:f2:d1:b1:f3:3b:d8:03:86:dc:25:7a:ab:59:45:66: 65:5c:15:73:42:bc:78:85:1f:fb:fb:fe:93:d2:65:4a:a8:48: f7:f9:30:c0:cb:f1:de:c3:08:a1:99:72:84:b2:3b:0f:a1:75: 6a:1e:23:92:c6:fe:8e:51:20:e6:64:f7:2a:1c:1a:ae:69:b1: f1:f1:9b:52:4c:18:a2:30:d0:0f:ae:12:2e:40:ab:e3:66:67: 00:80:08:e9:a5:2d:1c:47:95:6a:ef:fa:32:66:9e:a8:cd:f5: f9:61:de:c2:ab:ba:3d:3d:4b:a1:25:ee:23:29:74:82:19:7a: c2:56:a9:1c:49:3f:fd:48:0e:8f:cd:98:f5:67:c4:63:f1:b4: 95:09:96:12:99:7e:39:aa:5b:56:8f:e0:da:53:e9:30:7a:70: cb:68:65:78:7b:63:32:9d:5c:ef:ea:09:e3:5f:7e:fc:88:f1: be:d7:a2:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIwdP/UhNdefkEoOsztcItHMpjvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDU1MTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjA2ZGEyZjQ5YjAxNWQxNTYyMWNiYjhhYmQyNTQ5NmE0 MTFlNThkYTUwZTI4MWExMmMyNDNkNzA0ZTE0YTYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUdAsM/k1ek73SejqS72HkZgLbZ2436ftWtJpze+WLljy5 Wr8TQhJRdBG3xg2r1xedQjd0U26/yKZSKYDsQybLMq9k8moYVGm3SVbw3CWghRNp sKAvlUSLKMLuOM5CIX1hLm7ruT6c3sh6qOiGEoYPXQTNfqVBuZCoBmzUReZ1/3Sb KjG17+LFv5n9XRNbQxUmQl/9mxK1qqcBstHOo3esgKalTmXdg3eyq8kuiUMlmzhU 8n6IsWKTi9/XDcFMaVqjuJeoYbL8rvi9uTTuaWf6fQJiY6O61KOhqnQxNGLfkG7g 5pFFhqD2zGOoHHjmeA/NaY7nP6ZQAPzil58dh3IjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ+dsuPiHKNxqe67HT/w8vNfy0GMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiNDI1MTRhLWQ5M2QtNGViZC05YWE2LTAyMWNkYThlNjVlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wIAwDQYJKoZIhvcNAQELBQADggEBAHJGbsXRtmc3ABy9YFhY1Ff6SeAr o52J5U0IM4eJUrYngXoK6oaS2wHLAMFMRgf/6M+giolIbwwIXFTT/lxiwgeN2JZw N5lyelKjFvLRsfM72AOG3CV6q1lFZmVcFXNCvHiFH/v7/pPSZUqoSPf5MMDL8d7D CKGZcoSyOw+hdWoeI5LG/o5RIOZk9yocGq5psfHxm1JMGKIw0A+uEi5Aq+NmZwCA COmlLRxHlWrv+jJmnqjN9flh3sKruj09S6El7iMpdIIZesJWqRxJP/1IDo/NmPVn xGPxtJUJlhKZfjmqW1aP4NpT6TB6cMtoZXh7YzKdXO/qCeNffvyI8b7Xojw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:55 2025 by rpki-client