$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eabbe50e-9d36-4df6-b117-db93a83e8b73.roa File: eabbe50e-9d36-4df6-b117-db93a83e8b73.roa (raw, json) Hash identifier: UzqN1/tQxqiUAHjRbvAGx12ouXXfj7zD4VmZGs3x2ek= Subject key identifier: A8:9C:5D:E5:60:2B:08:BF:12:62:9C:83:B1:66:00:2B:B8:D5:4F:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35C9100E41349A04A5EF5BBB7C55364ABDBA57C8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eabbe50e-9d36-4df6-b117-db93a83e8b73.roa Signing time: Thu 16 Oct 2025 23:37:52 +0000 ROA not before: Thu 16 Oct 2025 23:37:52 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c9:10:0e:41:34:9a:04:a5:ef:5b:bb:7c:55:36:4a:bd:ba:57:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 23:37:52 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=9ba886069e98ed5d9cce2c6c748a283c04d43e7390835f467667cc4bee67e91a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:1e:74:42:a0:89:c3:9a:5f:41:89:37:71: a0:c7:77:86:ad:91:17:ba:6e:ef:44:4f:b4:cd:b4: 73:18:e0:9b:e6:7e:eb:ef:13:79:2e:2c:dc:89:5d: 74:6b:00:2e:46:e9:f9:fb:b9:b1:dd:1e:b4:7b:26: 76:a2:90:cb:3c:31:0f:8b:18:ff:f6:d1:70:fa:68: ff:f7:86:00:68:29:23:c8:68:0c:46:21:88:f1:74: d3:4c:e5:30:38:1a:a8:f6:26:6a:70:7c:72:c5:5b: ac:8c:34:47:5e:e1:bc:64:1c:32:54:64:64:82:19: 99:83:bd:f8:7e:cd:89:20:62:12:63:e8:aa:fb:6a: 85:02:44:00:2d:c2:30:e8:d9:66:f9:c7:12:19:38: b7:d7:0e:0c:a2:82:d9:db:60:75:dc:d9:9d:79:34: f2:9a:18:90:c2:7d:95:37:cb:3f:78:34:6f:50:79: 81:7c:c4:7f:3a:fb:33:20:78:8d:e0:10:29:a4:48: ad:99:5a:41:cf:9d:a9:b8:8c:c6:2d:ed:06:c6:0a: b2:49:d6:89:fb:2e:51:33:62:e1:62:46:c3:f1:3a: c5:ac:f3:8f:03:d4:db:b2:1c:9b:a2:d5:7d:fd:4e: 73:66:f2:60:a4:92:c1:c4:ef:ee:e4:15:3f:4b:01: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9C:5D:E5:60:2B:08:BF:12:62:9C:83:B1:66:00:2B:B8:D5:4F:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eabbe50e-9d36-4df6-b117-db93a83e8b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.144.0/20 Signature Algorithm: sha256WithRSAEncryption 75:58:50:a1:d9:74:1a:2b:df:e2:5a:03:fb:57:e2:3f:c1:83: f3:6f:d8:eb:9e:33:63:83:e0:8f:2b:db:23:ed:18:0c:81:93: b0:c2:64:88:7f:ef:72:21:22:dc:17:ad:3b:ca:ea:b1:81:67: 84:f1:e3:9b:39:a5:fa:d1:de:0e:f8:8c:f8:f9:aa:08:2c:27: 37:65:a5:37:42:e9:98:e8:24:d6:40:69:df:a6:30:18:51:3f: bd:4f:22:36:cd:ea:ee:b0:50:01:a9:05:6c:c5:99:26:64:6e: 17:36:f8:3f:d2:f7:80:07:86:cd:1f:b4:dd:92:43:e0:74:e6: a1:9c:45:3e:b3:63:f6:3b:f4:7b:aa:5d:71:d0:4b:57:4b:3f: ae:16:6b:c7:a8:74:6b:ed:dd:fa:74:5b:94:ca:fd:1f:66:71: bc:c5:1e:2a:e3:ad:16:3d:e6:3d:da:ab:f3:de:f6:94:f0:7f: 93:2f:00:53:ae:c9:c5:59:9f:8d:df:88:07:40:f1:bc:96:bd: 77:36:8e:0a:97:54:17:4c:ec:7c:73:5b:77:99:d3:16:99:a8: 6d:ce:b8:58:74:ab:c2:c1:16:4f:4c:dd:9f:42:65:28:0f:bf: 03:a0:cb:60:1a:0d:ea:c3:59:94:f6:e9:3a:e9:56:a8:e2:82: 00:06:95:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNckQDkE0mgSl71u7fFU2Sr26V8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjMzNzUyWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmE4ODYwNjllOThlZDVkOWNjZTJjNmM3NDhhMjgzYzA0 ZDQzZTczOTA4MzVmNDY3NjY3Y2M0YmVlNjdlOTFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNRx50QqCJw5pfQYk3caDHd4atkRe6bu9ET7TNtHMY4Jvm fuvvE3kuLNyJXXRrAC5G6fn7ubHdHrR7JnaikMs8MQ+LGP/20XD6aP/3hgBoKSPI aAxGIYjxdNNM5TA4Gqj2JmpwfHLFW6yMNEde4bxkHDJUZGSCGZmDvfh+zYkgYhJj 6Kr7aoUCRAAtwjDo2Wb5xxIZOLfXDgyigtnbYHXc2Z15NPKaGJDCfZU3yz94NG9Q eYF8xH86+zMgeI3gECmkSK2ZWkHPnam4jMYt7QbGCrJJ1on7LlEzYuFiRsPxOsWs 848D1NuyHJui1X39TnNm8mCkksHE7+7kFT9LAcFtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqJxd5WArCL8SYpyDsWYAK7jVTwkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VhYmJlNTBlLTlkMzYtNGRmNi1iMTE3LWRiOTNhODNlOGI3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2wJAwDQYJKoZIhvcNAQELBQADggEBAHVYUKHZdBor3+JaA/tX4j/Bg/Nv 2OueM2OD4I8r2yPtGAyBk7DCZIh/73IhItwXrTvK6rGBZ4Tx45s5pfrR3g74jPj5 qggsJzdlpTdC6ZjoJNZAad+mMBhRP71PIjbN6u6wUAGpBWzFmSZkbhc2+D/S94AH hs0ftN2SQ+B05qGcRT6zY/Y79HuqXXHQS1dLP64Wa8eodGvt3fp0W5TK/R9mcbzF HirjrRY95j3aq/Pe9pTwf5MvAFOuycVZn43fiAdA8byWvXc2jgqXVBdM7HxzW3eZ 0xaZqG3OuFh0q8LBFk9M3Z9CZSgPvwOgy2AaDerDWZT26TrpVqjiggAGlY0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:27 2025 by rpki-client