$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2c52221-0d32-465f-90bb-0aadb930a75a.roa File: e2c52221-0d32-465f-90bb-0aadb930a75a.roa (raw, json) Hash identifier: v5fRb1MTqjyx7AMxb655PWeypfU+Ck1YJurIHHw8eak= Subject key identifier: 72:A4:3A:46:D2:12:F6:E0:DD:44:A4:1C:03:9A:31:5D:3E:83:13:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C3150E4FB7EDFDBD9E05A903FA52C80FF9680F3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2c52221-0d32-465f-90bb-0aadb930a75a.roa Signing time: Fri 17 Oct 2025 21:51:29 +0000 ROA not before: Fri 17 Oct 2025 21:51:29 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:31:50:e4:fb:7e:df:db:d9:e0:5a:90:3f:a5:2c:80:ff:96:80:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 21:51:29 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=484e144364af7505a2de1a3cae2ed216d61543cefd3c7f296705ec766975e074, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:30:44:9a:10:07:93:1d:07:22:60:7d:57: 7d:2d:66:8a:8f:2c:2d:af:63:ea:0c:3d:99:d1:47: 81:6a:c8:2d:ac:ee:0d:2b:2f:c1:0f:bd:7b:30:4c: b0:28:6d:ae:14:32:eb:43:e0:fc:59:58:fd:c9:84: 02:94:b1:49:9f:ed:15:a8:c9:af:90:27:be:75:d4: 26:6f:45:45:3f:88:fc:e3:d7:71:07:4e:5d:a4:6f: 05:f8:28:81:9e:68:e3:46:15:40:cb:83:17:54:98: 74:55:75:35:25:aa:b1:92:a8:54:c7:06:5a:aa:88: 7a:ef:fa:a7:a6:88:45:f2:5b:05:78:a1:f1:49:d3: d2:26:13:0b:f9:69:44:96:71:93:db:3c:e7:4f:98: d6:4a:58:5c:1c:57:f7:07:2e:f1:d2:be:49:a4:ed: ac:98:36:b1:d0:6c:a3:8c:66:7c:72:86:8d:11:cc: 8f:86:26:2e:50:89:27:95:84:cd:a7:80:6d:fb:c6: b8:4a:a5:b3:db:9b:fc:f1:05:e3:4e:09:70:11:de: a6:a1:32:c3:1d:b4:19:69:25:31:5f:0a:ae:d2:a2: cf:b3:fd:0a:a1:44:08:fc:c0:f5:a2:4b:ae:a8:09: b8:67:88:dd:c8:06:d6:a9:78:15:40:24:58:62:d7: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A4:3A:46:D2:12:F6:E0:DD:44:A4:1C:03:9A:31:5D:3E:83:13:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2c52221-0d32-465f-90bb-0aadb930a75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.220.0/23 Signature Algorithm: sha256WithRSAEncryption a5:24:00:8b:85:16:17:1e:78:b8:38:3d:73:a7:62:4a:8e:e0: 2b:8e:69:18:32:6f:e8:a1:a6:a5:1c:77:09:99:dc:93:3e:4b: be:23:65:92:a1:b5:89:ca:44:c4:2e:a5:33:11:67:8d:92:1a: 59:04:67:53:63:8e:1f:00:22:4d:d2:07:a8:99:85:1a:88:82: ee:3a:17:ba:5e:fd:99:15:ca:a5:f5:6a:21:87:a0:3d:4a:03: 27:d0:d7:b5:2a:fa:17:c8:ee:e2:79:25:5b:ab:1d:17:ad:b5: d9:a5:a2:72:39:d0:39:8f:93:76:08:af:32:4c:d1:fa:59:fe: e2:16:e3:da:67:26:70:cd:4f:53:f0:d6:e7:34:ca:c1:4d:62: 79:eb:cf:7e:ba:9b:f1:66:1f:fd:ba:62:f0:71:af:eb:1b:d7: 05:3c:10:c7:cf:bc:d0:36:f4:76:66:50:69:8b:6c:b5:b5:06: b0:7a:de:9d:37:e2:ad:83:e9:40:ba:9c:4d:3e:f8:6b:59:1a: b4:f8:1e:50:27:83:89:22:42:dd:6e:ca:38:5a:1a:b3:aa:b7: 57:d6:79:9e:8b:7f:dd:31:14:b2:d9:8b:fe:e5:63:80:80:49: bf:63:1a:05:e1:99:08:37:fb:7f:ed:96:d1:2f:c9:33:56:65: 5e:b5:b1:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPDFQ5Pt+39vZ4FqQP6UsgP+WgPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjE1MTI5WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODRlMTQ0MzY0YWY3NTA1YTJkZTFhM2NhZTJlZDIxNmQ2 MTU0M2NlZmQzYzdmMjk2NzA1ZWM3NjY5NzVlMDc0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbPjBEmhAHkx0HImB9V30tZoqPLC2vY+oMPZnRR4FqyC2s 7g0rL8EPvXswTLAoba4UMutD4PxZWP3JhAKUsUmf7RWoya+QJ7511CZvRUU/iPzj 13EHTl2kbwX4KIGeaONGFUDLgxdUmHRVdTUlqrGSqFTHBlqqiHrv+qemiEXyWwV4 ofFJ09ImEwv5aUSWcZPbPOdPmNZKWFwcV/cHLvHSvkmk7ayYNrHQbKOMZnxyho0R zI+GJi5QiSeVhM2ngG37xrhKpbPbm/zxBeNOCXAR3qahMsMdtBlpJTFfCq7Sos+z /QqhRAj8wPWiS66oCbhniN3IBtapeBVAJFhi1z8VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcqQ6RtIS9uDdRKQcA5oxXT6DEwEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyYzUyMjIxLTBkMzItNDY1Zi05MGJiLTBhYWRiOTMwYTc1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2xdwwDQYJKoZIhvcNAQELBQADggEBAKUkAIuFFhceeLg4PXOnYkqO4CuO aRgyb+ihpqUcdwmZ3JM+S74jZZKhtYnKRMQupTMRZ42SGlkEZ1Njjh8AIk3SB6iZ hRqIgu46F7pe/ZkVyqX1aiGHoD1KAyfQ17Uq+hfI7uJ5JVurHRettdmlonI50DmP k3YIrzJM0fpZ/uIW49pnJnDNT1Pw1uc0ysFNYnnrz366m/FmH/26YvBxr+sb1wU8 EMfPvNA29HZmUGmLbLW1BrB63p034q2D6UC6nE0++GtZGrT4HlAng4kiQt1uyjha GrOqt1fWeZ6Lf90xFLLZi/7lY4CASb9jGgXhmQg3+3/tltEvyTNWZV61sdU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:13:37 2025 by rpki-client