$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e316cad8-c953-494c-9c64-d760ccd47189.roa File: e316cad8-c953-494c-9c64-d760ccd47189.roa (raw, json) Hash identifier: x0+whbGYLZsazvATEkh1urMK+36ieKqDyG+MILwP+gg= Subject key identifier: 50:1F:96:65:05:63:75:FC:4C:C4:54:11:DA:72:42:F2:43:2D:EE:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51E0638C0E648AA8B316D4FC80FEBA6DCE0414DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e316cad8-c953-494c-9c64-d760ccd47189.roa Signing time: Fri 10 Oct 2025 16:30:33 +0000 ROA not before: Fri 10 Oct 2025 16:30:33 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.166.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e0:63:8c:0e:64:8a:a8:b3:16:d4:fc:80:fe:ba:6d:ce:04:14:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:30:33 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=c7b366d8356e84b157ba91dd653b82f6dc32719d0feb89e133b649596d551c37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:95:55:ef:02:f2:01:35:42:c1:12:59:3b: 5b:00:62:bd:d4:11:a3:71:00:b1:99:9d:9b:98:f3: fe:ef:4d:79:92:00:cc:4c:13:ff:81:18:f4:7f:7b: 4d:4f:ac:70:e0:7a:28:89:a9:e6:b9:33:ed:a0:81: eb:7f:83:2c:75:41:7f:87:99:47:31:a4:d5:10:76: b2:b7:97:87:54:41:84:c9:ca:28:e4:a0:e1:e5:31: 59:91:8b:1c:ee:bb:bf:76:77:85:6f:42:df:75:41: ec:e4:87:65:16:03:c8:fb:cb:e0:00:ba:6a:4e:7c: 35:60:73:24:73:5a:af:65:45:4e:7b:a9:ec:fc:bc: ea:b0:fe:3e:48:72:ee:16:0e:96:f3:78:86:bb:3a: f1:c6:e3:e7:69:a4:ac:99:51:ce:55:fd:8b:f7:59: 30:43:84:66:3d:74:ba:92:56:a6:95:00:17:51:af: fe:23:3d:bb:1b:86:b7:5f:2b:83:fa:04:42:0d:71: 6d:f7:f0:0c:83:c4:16:6d:a0:30:fb:59:0b:66:8e: 0c:91:db:2b:0a:7d:e7:d4:58:67:91:08:3d:c9:9b: 60:1c:6e:4f:ee:95:ce:a8:cf:72:29:4d:ea:37:44: 3f:a4:d7:6e:c0:be:76:27:45:7c:0c:c6:b7:11:18: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1F:96:65:05:63:75:FC:4C:C4:54:11:DA:72:42:F2:43:2D:EE:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e316cad8-c953-494c-9c64-d760ccd47189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.166.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9f:30:2c:10:fc:bc:11:d9:3a:b0:2f:2d:1a:43:25:cd:c3:fc: 01:1a:81:2f:25:0a:31:d5:82:56:43:7d:08:2c:26:9c:3c:fe: da:16:5d:be:1a:83:3b:e0:55:88:30:ba:a2:20:53:41:b4:ce: 4a:16:54:81:35:46:0f:50:06:60:07:07:68:7b:85:8d:f5:39: d6:eb:3c:2a:2b:0c:62:ad:a4:44:11:ff:77:e9:d1:35:b0:bd: 3e:6b:39:4c:37:a4:10:5b:0f:37:27:cd:3e:39:f1:0b:36:d2: 2f:aa:ab:9d:dd:ec:75:41:76:32:34:14:0d:dd:28:5a:f6:29: af:87:ae:28:93:d7:57:2e:d1:10:a2:27:1a:37:70:b1:56:d0: a1:4a:10:62:31:2e:18:0f:f8:c9:4a:90:31:9e:c7:9c:bd:23: 67:f0:61:9e:d3:77:81:b6:40:0e:9c:de:e9:51:d7:73:96:0d: 7a:5a:e0:32:85:a0:21:a3:92:a7:5c:68:11:55:fa:b9:16:f4: c3:0a:c9:e6:41:02:17:09:f6:4e:95:81:1d:37:76:0c:e9:6d: 76:a4:67:3b:90:15:a2:33:ad:32:8b:ec:24:52:d4:ce:45:98: e7:45:8b:da:be:ec:98:2f:a6:29:76:19:ac:57:d7:f3:46:98: f0:26:0f:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUeBjjA5kiqizFtT8gP66bc4EFN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTYzMDMzWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2IzNjZkODM1NmU4NGIxNTdiYTkxZGQ2NTNiODJmNmRj MzI3MTlkMGZlYjg5ZTEzM2I2NDk1OTZkNTUxYzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJHpVV7wLyATVCwRJZO1sAYr3UEaNxALGZnZuY8/7vTXmS AMxME/+BGPR/e01PrHDgeiiJqea5M+2gget/gyx1QX+HmUcxpNUQdrK3l4dUQYTJ yijkoOHlMVmRixzuu792d4VvQt91Qezkh2UWA8j7y+AAumpOfDVgcyRzWq9lRU57 qez8vOqw/j5Icu4WDpbzeIa7OvHG4+dppKyZUc5V/Yv3WTBDhGY9dLqSVqaVABdR r/4jPbsbhrdfK4P6BEINcW338AyDxBZtoDD7WQtmjgyR2ysKfefUWGeRCD3Jm2Ac bk/ulc6oz3IpTeo3RD+k127AvnYnRXwMxrcRGElfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUB+WZQVjdfxMxFQR2nJC8kMt7kEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzMTZjYWQ4LWM5NTMtNDk0Yy05YzY0LWQ3NjBjY2Q0NzE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2pgAwDQYJKoZIhvcNAQELBQADggEBAJ8wLBD8vBHZOrAvLRpDJc3D/AEa gS8lCjHVglZDfQgsJpw8/toWXb4agzvgVYgwuqIgU0G0zkoWVIE1Rg9QBmAHB2h7 hY31OdbrPCorDGKtpEQR/3fp0TWwvT5rOUw3pBBbDzcnzT458Qs20i+qq53d7HVB djI0FA3dKFr2Ka+HriiT11cu0RCiJxo3cLFW0KFKEGIxLhgP+MlKkDGex5y9I2fw YZ7Td4G2QA6c3ulR13OWDXpa4DKFoCGjkqdcaBFV+rkW9MMKyeZBAhcJ9k6VgR03 dgzpbXakZzuQFaIzrTKL7CRS1M5FmOdFi9q+7Jgvpil2GaxX1/NGmPAmDyM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:04 2025 by rpki-client