$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa File: e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa (raw, json) Hash identifier: o2XKQOrynzw6vM+nIo2F8cvu7QKv1OvffEU/vBWzt68= Subject key identifier: 66:9D:3D:A9:70:07:16:E3:D0:F2:93:3D:79:C0:7E:3D:4E:79:41:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4100BD12C72259536155A6F4BAD25AA1421B481C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa Signing time: Sat 18 Oct 2025 06:00:12 +0000 ROA not before: Sat 18 Oct 2025 06:00:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:00:bd:12:c7:22:59:53:61:55:a6:f4:ba:d2:5a:a1:42:1b:48:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:00:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=befd8020ecc7f1377d995feacbbe9e3b0512cd3b4d76974065a26cc8b08b3389, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:0e:e0:a0:96:e0:02:d1:ed:9b:80:b2:6f: 33:b7:0f:87:1c:13:4e:49:52:c8:74:85:fd:62:ca: 95:4a:ba:cd:ba:ef:65:14:f3:bd:0b:f3:d6:eb:b0: aa:76:52:c6:52:ad:5b:71:96:cf:f9:96:19:64:c2: 4b:fb:9d:74:74:1d:d8:b8:e3:0a:92:5b:61:f5:49: d4:65:8e:5f:5a:5e:30:e2:0d:57:18:f6:7f:ce:5d: d1:f3:f3:ce:35:45:5c:80:ff:15:a7:c5:97:42:2b: 35:3d:13:9c:7a:e5:16:b9:33:15:c4:fb:e9:cc:e2: 35:99:ff:f0:8a:ba:eb:73:e0:99:c9:3e:fe:44:1b: 5f:eb:a3:90:e5:29:22:56:e6:cd:11:63:15:77:6f: dd:bf:6a:54:1c:e5:a2:6b:39:40:4c:66:a7:a2:91: a7:b0:66:4c:86:74:3d:2f:a7:72:d7:d9:e6:44:e9: db:a8:19:48:c9:ff:e5:4e:b6:02:49:fd:96:3a:e0: 73:55:fe:8e:cf:ac:99:ef:b8:91:52:56:e0:4d:de: eb:b5:c4:d3:9c:1b:06:44:29:1c:1e:b6:e9:9f:0b: 3b:40:a8:6e:34:4c:3f:6c:57:2a:35:c0:15:70:23: e3:66:5f:f1:86:d7:cb:1c:3f:60:92:5b:42:91:0a: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:3D:A9:70:07:16:E3:D0:F2:93:3D:79:C0:7E:3D:4E:79:41:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e56ea8f5-b292-4f84-bdf8-a03c2db99ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.160.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:21:90:39:8a:da:f2:5e:25:96:13:14:ec:ad:a9:b8:3e:5c: c4:e0:a3:00:fb:7f:df:b5:a6:0b:00:ca:3a:14:6f:57:aa:e7: c2:d1:db:15:f4:a2:bc:15:48:f2:52:24:d1:d5:45:eb:83:b2: 3b:e7:d0:00:53:fb:3e:27:2e:16:ec:4c:db:de:99:c4:8a:ba: 37:03:7c:24:78:64:54:69:34:a6:57:ea:d8:31:7c:bc:0d:84: 1f:63:e3:76:18:c0:c7:d8:70:9d:34:80:3c:c6:08:b7:a3:71: e7:57:16:35:97:48:16:95:44:3f:06:48:85:55:77:46:8d:34: 67:59:48:d0:f4:7e:79:51:6e:36:c3:aa:ea:2d:70:78:c6:15: e1:25:55:3a:64:85:c8:f4:37:f9:c2:86:4c:cc:0c:19:46:f1: 04:d1:01:65:4d:5b:d5:49:6d:9a:2c:b5:bf:f8:3e:18:1c:95: 08:44:e3:0c:e4:3c:48:a9:b7:31:81:ba:8b:3a:12:0b:08:59: bb:a8:ae:68:b7:a7:85:03:cd:e1:bb:4f:97:58:b8:6e:37:89: 64:d9:0a:22:13:6e:dd:78:59:4b:94:39:76:cd:0f:14:76:65: 38:0e:6a:52:a7:5b:b0:23:ef:c1:c2:bd:03:28:e3:1c:62:22: 29:92:bf:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQQC9EsciWVNhVab0utJaoUIbSBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYwMDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWZkODAyMGVjYzdmMTM3N2Q5OTVmZWFjYmJlOWUzYjA1 MTJjZDNiNGQ3Njk3NDA2NWEyNmNjOGIwOGIzMzg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvNA7goJbgAtHtm4CybzO3D4ccE05JUsh0hf1iypVKus26 72UU870L89brsKp2UsZSrVtxls/5lhlkwkv7nXR0Hdi44wqSW2H1SdRljl9aXjDi DVcY9n/OXdHz8841RVyA/xWnxZdCKzU9E5x65Ra5MxXE++nM4jWZ//CKuutz4JnJ Pv5EG1/ro5DlKSJW5s0RYxV3b92/alQc5aJrOUBMZqeikaewZkyGdD0vp3LX2eZE 6duoGUjJ/+VOtgJJ/ZY64HNV/o7PrJnvuJFSVuBN3uu1xNOcGwZEKRwetumfCztA qG40TD9sVyo1wBVwI+NmX/GG18scP2CSW0KRCpAXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZp09qXAHFuPQ8pM9ecB+PU55QeswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U1NmVhOGY1LWIyOTItNGY4NC1iZGY4LWEwM2MyZGI5OWFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM28KAwDQYJKoZIhvcNAQELBQADggEBAA0hkDmK2vJeJZYTFOytqbg+XMTg owD7f9+1pgsAyjoUb1eq58LR2xX0orwVSPJSJNHVReuDsjvn0ABT+z4nLhbsTNve mcSKujcDfCR4ZFRpNKZX6tgxfLwNhB9j43YYwMfYcJ00gDzGCLejcedXFjWXSBaV RD8GSIVVd0aNNGdZSND0fnlRbjbDquotcHjGFeElVTpkhcj0N/nChkzMDBlG8QTR AWVNW9VJbZostb/4PhgclQhE4wzkPEiptzGBuos6EgsIWbuormi3p4UDzeG7T5dY uG43iWTZCiITbt14WUuUOXbNDxR2ZTgOalKnW7Aj78HCvQMo4xxiIimSv3s= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:51 2025 by rpki-client