$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eab61c8c-b20d-49c5-86d4-2ad3f922c0ef.roa File: eab61c8c-b20d-49c5-86d4-2ad3f922c0ef.roa (raw, json) Hash identifier: QliqeZwMuZaEjwghvtuMW6TcqbGddrYny1gSW6JPCwI= Subject key identifier: C2:4C:07:18:66:E0:AF:35:28:D5:E9:6B:51:39:9A:A0:55:F7:FE:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 242134BC0F61B91A31FD08A5BDFFCA1E44AC8DFC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eab61c8c-b20d-49c5-86d4-2ad3f922c0ef.roa Signing time: Thu 16 Oct 2025 22:50:15 +0000 ROA not before: Thu 16 Oct 2025 22:50:15 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:21:34:bc:0f:61:b9:1a:31:fd:08:a5:bd:ff:ca:1e:44:ac:8d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 22:50:15 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=8a8bbcdf6ca8a07aec87ee458e7ffe3e88cd2c95634f5b42b910d7bd1b1d1cb0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:0d:f9:40:72:89:cc:cf:ae:90:3a:7f:9a: 0d:06:5b:83:c2:c9:10:36:82:ad:6c:0a:80:7e:19: 7f:60:02:62:4e:6e:07:57:ec:05:1e:32:b0:7e:b4: 4e:06:1d:1a:c9:cc:66:4e:23:f6:d8:37:f2:0e:0e: 14:d2:eb:b4:83:8d:e0:6a:39:cd:cc:ae:fd:1e:c7: 41:b7:b2:e5:bf:c4:73:b9:70:c3:4c:1a:be:26:fa: 65:71:95:9a:24:8a:29:fa:69:8f:39:9d:af:c4:b1: eb:91:f5:08:61:1a:f9:38:2e:70:c8:45:05:aa:33: 6f:08:28:6f:1a:5e:2b:c2:f8:31:ad:e8:f0:eb:a4: 1d:d7:25:5b:a7:19:8b:50:4f:40:f5:2f:2d:d0:e6: 1f:a2:10:3c:19:0f:b0:e6:ca:0e:a3:40:5e:8f:ec: 11:b7:c5:29:18:96:df:94:10:c2:25:67:bd:13:fa: 1f:73:ea:d0:b0:43:b4:3a:56:76:b0:44:56:2d:80: 4f:f5:d4:01:84:4d:d2:19:44:57:be:cd:00:dd:44: e9:54:66:b1:33:9a:1c:3e:04:f9:26:61:92:8d:62: 7c:0f:c3:3c:aa:04:b2:d1:df:c5:32:30:57:a7:fe: b8:dd:92:94:39:7f:8e:4e:de:de:a9:8c:30:24:13: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4C:07:18:66:E0:AF:35:28:D5:E9:6B:51:39:9A:A0:55:F7:FE:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eab61c8c-b20d-49c5-86d4-2ad3f922c0ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:16:ad:ce:c1:39:61:9e:5a:ec:35:c5:2c:2b:d9:a7:eb:08: 15:27:b6:de:63:49:a2:36:c8:f9:26:1d:dd:72:f0:aa:66:28: a6:79:35:c7:4e:42:d7:ec:f1:4c:a1:6d:ab:8c:ce:bd:77:38: ea:b8:c6:a8:a5:45:8f:da:8a:55:0c:8d:7e:4f:3d:ea:43:4f: 00:4b:cd:93:b2:f4:37:bc:cc:fb:58:3a:2b:d0:50:2a:bf:24: 50:fd:00:89:cb:88:cc:da:aa:42:7c:fc:cb:2d:87:11:be:5e: 02:dd:91:26:d7:bc:d6:51:a6:9f:27:c8:26:1c:94:a5:c1:a0: 85:e7:ac:24:9b:e1:2c:c2:79:c9:23:8b:d4:fb:f9:1f:5d:15: 19:59:62:3b:b2:2c:51:69:e1:92:37:fb:48:73:35:ab:3a:0d: c4:84:22:98:ee:40:3c:78:01:d2:17:f5:a9:14:6a:a7:00:b0: 71:1d:de:c8:47:0a:e8:b9:71:c8:23:9f:2c:08:d7:7c:c9:17: 44:a6:05:be:c4:df:e5:ea:f3:7d:dc:1f:e0:d5:05:67:59:93: df:bc:ab:7e:d1:fa:40:0d:52:e4:d9:b8:04:6e:92:d6:04:5e: 03:d5:e3:c4:9d:77:fc:b2:99:ab:7f:46:3f:ca:9b:05:fd:a1: 34:f3:d2:2d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJCE0vA9huRox/Qilvf/KHkSsjfwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjI1MDE1WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YThiYmNkZjZjYThhMDdhZWM4N2VlNDU4ZTdmZmUzZTg4 Y2QyYzk1NjM0ZjViNDJiOTEwZDdiZDFiMWQxY2IwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpNg35QHKJzM+ukDp/mg0GW4PCyRA2gq1sCoB+GX9gAmJO bgdX7AUeMrB+tE4GHRrJzGZOI/bYN/IODhTS67SDjeBqOc3Mrv0ex0G3suW/xHO5 cMNMGr4m+mVxlZokiin6aY85na/EseuR9QhhGvk4LnDIRQWqM28IKG8aXivC+DGt 6PDrpB3XJVunGYtQT0D1Ly3Q5h+iEDwZD7Dmyg6jQF6P7BG3xSkYlt+UEMIlZ70T +h9z6tCwQ7Q6VnawRFYtgE/11AGETdIZRFe+zQDdROlUZrEzmhw+BPkmYZKNYnwP wzyqBLLR38UyMFen/rjdkpQ5f45O3t6pjDAkE2VLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwkwHGGbgrzUo1elrUTmaoFX3/kUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VhYjYxYzhjLWIyMGQtNDljNS04NmQ0LTJhZDNmOTIyYzBlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2tjANBgkqhkiG9w0BAQsFAAOCAQEAnRatzsE5YZ5a7DXFLCvZp+sIFSe2 3mNJojbI+SYd3XLwqmYopnk1x05C1+zxTKFtq4zOvXc46rjGqKVFj9qKVQyNfk89 6kNPAEvNk7L0N7zM+1g6K9BQKr8kUP0AicuIzNqqQnz8yy2HEb5eAt2RJte81lGm nyfIJhyUpcGgheesJJvhLMJ5ySOL1Pv5H10VGVliO7IsUWnhkjf7SHM1qzoNxIQi mO5APHgB0hf1qRRqpwCwcR3eyEcK6LlxyCOfLAjXfMkXRKYFvsTf5erzfdwf4NUF Z1mT37yrftH6QA1S5Nm4BG6S1gReA9XjxJ13/LKZq39GP8qbBf2hNPPSLQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:32 2025 by rpki-client