$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa File: dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa (raw, json) Hash identifier: 8tpuvo9qhwQK7MzlcJHItmCrCJqQWKaqilXKkexkEeo= Subject key identifier: E5:DE:AA:87:22:39:4C:84:B0:05:87:C7:EA:32:8F:B0:0F:BA:75:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61DBC00CBA7B8A85A9AC2B6CE9A0C627ADAF7118 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa Signing time: Fri 17 Oct 2025 23:01:29 +0000 ROA not before: Fri 17 Oct 2025 23:01:29 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.250.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:db:c0:0c:ba:7b:8a:85:a9:ac:2b:6c:e9:a0:c6:27:ad:af:71:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:01:29 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=c62c4499f6eb04cc8e1936519ccd38f8b4732c5866435f1fcab414ef58767f3d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:90:5e:e8:ef:72:20:4a:db:f7:26:5a:1c: 87:77:d9:35:ac:2e:6b:94:05:de:2b:80:21:ff:fc: 12:b1:71:28:db:fd:93:1d:69:1e:3f:e1:1d:c8:61: 96:de:94:ac:ae:ff:d8:3d:9d:7d:08:4d:1b:a6:00: 6c:41:13:19:3c:9c:70:b9:fe:ac:4f:f4:6e:d2:16: f1:6d:87:b7:aa:ad:49:e6:f4:90:53:ec:c7:9a:fe: ab:fb:43:49:8b:9e:d0:04:fb:ba:08:1a:b1:c0:4f: e1:32:3a:74:81:7d:c6:ac:e4:c8:0b:44:14:5c:e1: 9f:56:85:1c:a9:af:82:3d:c5:53:c9:5c:ca:2b:73: 89:16:c1:4b:05:52:ba:27:ad:af:78:8e:f8:37:f9: dd:68:74:dc:a2:9f:89:56:56:18:07:df:4e:b8:ba: cd:7b:76:45:5a:fa:48:7a:a7:64:a4:b6:db:f9:e4: 2a:64:44:62:2d:ed:39:82:22:71:7f:9d:11:6e:ca: 2a:0d:b8:41:ed:4c:ee:a8:72:c5:e6:20:a6:e5:12: 4d:89:89:e7:b1:53:1f:1a:9b:04:02:03:45:39:79: bc:55:a1:4b:5c:5c:6d:07:d1:4b:6a:be:9f:eb:e3: 81:7f:5a:71:87:70:91:a1:a1:9a:a4:fd:2a:2a:a3: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DE:AA:87:22:39:4C:84:B0:05:87:C7:EA:32:8F:B0:0F:BA:75:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.250.192.0/18 Signature Algorithm: sha256WithRSAEncryption 2d:e6:9d:64:b8:a7:2d:b0:d4:e0:9d:da:f1:03:f3:38:b4:16: b5:84:93:87:bc:7e:4f:dd:95:ce:3e:ab:94:94:71:7f:fc:52: ff:c0:14:4e:7c:93:46:1c:a3:f7:85:87:ec:e2:2a:b7:5a:7b: a5:2b:5c:91:ba:60:fd:84:98:dd:2f:3e:94:23:57:a8:22:00: 0f:63:ec:28:2b:77:fb:1b:44:fc:13:8e:ba:cc:a6:be:50:57: cf:f1:54:75:57:9b:e9:ca:57:9c:28:48:0a:a3:a4:24:1c:9d: 57:d0:8a:da:a7:76:ce:74:41:2f:c0:64:a7:96:79:83:61:61: 4d:90:fe:2f:8d:49:f2:a0:6b:9c:c0:bd:ec:3d:22:26:3a:fe: 85:c4:22:cd:16:5e:54:00:a4:61:52:ae:de:44:7a:3b:9f:03: 58:f2:e8:3c:26:e9:d7:88:66:29:a7:42:06:f4:03:dd:44:7e: 4b:b7:5a:9e:68:c2:61:78:48:27:66:68:fa:f6:1b:a4:4a:b9: 50:e0:e2:15:20:48:07:61:82:6d:f8:75:13:53:6a:ef:19:b5: f3:7a:48:63:6c:ad:d8:7b:9a:68:ba:ef:be:ee:04:7c:f4:b6: c0:f0:5b:07:80:23:e5:f0:f1:5f:3e:24:49:a0:61:db:ae:87: 29:f4:b4:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYdvADLp7ioWprCts6aDGJ62vcRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjMwMTI5WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjJjNDQ5OWY2ZWIwNGNjOGUxOTM2NTE5Y2NkMzhmOGI0 NzMyYzU4NjY0MzVmMWZjYWI0MTRlZjU4NzY3ZjNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu4JBe6O9yIErb9yZaHId32TWsLmuUBd4rgCH//BKxcSjb /ZMdaR4/4R3IYZbelKyu/9g9nX0ITRumAGxBExk8nHC5/qxP9G7SFvFth7eqrUnm 9JBT7Mea/qv7Q0mLntAE+7oIGrHAT+EyOnSBfcas5MgLRBRc4Z9WhRypr4I9xVPJ XMorc4kWwUsFUronra94jvg3+d1odNyin4lWVhgH3064us17dkVa+kh6p2Skttv5 5CpkRGIt7TmCInF/nRFuyioNuEHtTO6ocsXmIKblEk2JieexUx8amwQCA0U5ebxV oUtcXG0H0Utqvp/r44F/WnGHcJGhoZqk/Soqo+o5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5d6qhyI5TISwBYfH6jKPsA+6dZEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjZDdlMzg0LWYzMGUtNDVmOC1iOWM0LWZmYzFhMTQ5ZTQ2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2+sAwDQYJKoZIhvcNAQELBQADggEBAC3mnWS4py2w1OCd2vED8zi0FrWE k4e8fk/dlc4+q5SUcX/8Uv/AFE58k0Yco/eFh+ziKrdae6UrXJG6YP2EmN0vPpQj V6giAA9j7Cgrd/sbRPwTjrrMpr5QV8/xVHVXm+nKV5woSAqjpCQcnVfQitqnds50 QS/AZKeWeYNhYU2Q/i+NSfKga5zAvew9IiY6/oXEIs0WXlQApGFSrt5EejufA1jy 6Dwm6deIZimnQgb0A91Efku3Wp5owmF4SCdmaPr2G6RKuVDg4hUgSAdhgm34dRNT au8ZtfN6SGNsrdh7mmi6777uBHz0tsDwWweAI+Xw8V8+JEmgYduuhyn0tOo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:46 2025 by rpki-client