$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/efc1c34c-0074-40b1-bf48-52bda113f196.roa File: efc1c34c-0074-40b1-bf48-52bda113f196.roa (raw, json) Hash identifier: NwakzehPlhsTlDQ9aHvztKalmFrRWklSvL+3nZXeB+Q= Subject key identifier: AC:1E:EC:B4:37:C4:B9:F5:FE:77:CD:02:60:89:F4:C8:C4:83:04:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68B8D5916E536C054DFAB9AC01B880D3C0741494 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/efc1c34c-0074-40b1-bf48-52bda113f196.roa Signing time: Fri 10 Oct 2025 16:47:39 +0000 ROA not before: Fri 10 Oct 2025 16:47:39 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.184.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b8:d5:91:6e:53:6c:05:4d:fa:b9:ac:01:b8:80:d3:c0:74:14:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:47:39 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=44b87aad67b5614087de0bef62179ef63bdb088283a31d31bd221a6c4f1a850e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:e9:52:70:70:7e:9f:88:aa:b9:57:37:a8: 03:47:38:bd:84:19:a6:89:8e:dc:d9:96:08:0d:cb: 6e:49:2a:fb:dd:a0:c6:2c:f8:41:6f:0e:c2:15:ec: f6:53:3f:b4:24:05:6b:d9:43:ce:1d:ea:3a:1a:d5: 45:4a:90:28:59:a4:66:27:d9:31:97:92:b1:ef:09: 16:4a:94:41:bc:88:63:ef:d6:dd:96:a4:41:5f:2f: b9:70:f6:e1:d3:e1:43:fd:cd:51:01:77:90:b0:56: 2b:e6:c2:eb:a9:d4:d4:89:a0:12:8c:f7:79:6d:2e: 1c:ad:52:d5:81:9d:0b:c0:0f:30:cb:46:9d:fd:67: 2e:c7:f2:0e:f8:2f:4e:b9:7a:e1:53:28:a3:24:56: 40:22:75:9c:d7:cc:09:27:bc:f7:79:08:04:8f:43: 29:14:56:02:b5:ef:d1:38:e4:eb:92:87:fe:3f:a1: 6d:d9:d6:2f:6b:36:a9:74:94:30:e8:58:bf:53:3a: 8c:a9:45:14:17:92:cf:cf:58:69:37:48:8c:07:97: 39:0a:1f:8c:4a:12:0b:b7:a5:73:00:8f:41:cb:db: f2:6b:e0:cd:b1:64:48:ef:8c:9b:7d:54:85:cb:ec: 75:bc:d9:3e:fe:63:56:07:50:d4:5a:6f:a0:a0:92: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1E:EC:B4:37:C4:B9:F5:FE:77:CD:02:60:89:F4:C8:C4:83:04:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/efc1c34c-0074-40b1-bf48-52bda113f196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.184.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:5d:96:aa:78:81:d3:d6:7c:7f:49:ba:6c:7d:17:76:58:f6: 5c:79:47:ac:3a:2d:7f:74:5c:e9:06:f0:3c:90:b8:10:4a:15: 79:50:34:b8:08:9f:6e:79:ec:2e:f8:88:83:41:a8:ce:06:69: 61:9f:69:dd:d3:0a:fa:02:c1:a6:65:47:40:89:0f:25:10:7c: ca:9b:3c:2c:4a:a2:75:eb:c1:fd:43:4d:05:b5:2f:72:76:5a: 22:58:53:07:2e:80:6c:a0:7e:32:5b:d2:78:f4:19:2c:5c:dc: 12:bb:57:78:0f:3f:12:58:a8:e0:01:03:c2:75:af:b2:ec:64: df:7a:a5:03:73:2d:3f:08:2a:86:b9:09:ad:29:32:f1:e0:1d: de:48:ba:47:be:2a:1c:a3:ea:eb:a0:36:ca:79:a7:78:39:b7: 8d:99:2e:2a:ea:ed:30:3b:07:f8:24:af:25:41:3d:63:52:b0: 6e:c1:82:b6:69:e5:64:e5:50:2b:98:ce:ee:da:0d:96:a2:64: 12:e3:11:2f:d3:76:01:46:da:9e:2c:f7:b5:ad:34:98:61:a3: 80:f5:d2:b1:6e:0f:dd:da:84:fc:ef:ce:85:e4:6d:b4:80:52: 1c:8a:f3:45:ae:89:bd:dd:7a:c1:72:2b:fa:63:f7:fd:af:b8: d3:54:14:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaLjVkW5TbAVN+rmsAbiA08B0FJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTY0NzM5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGI4N2FhZDY3YjU2MTQwODdkZTBiZWY2MjE3OWVmNjNi ZGIwODgyODNhMzFkMzFiZDIyMWE2YzRmMWE4NTBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMPOlScHB+n4iquVc3qANHOL2EGaaJjtzZlggNy25JKvvd oMYs+EFvDsIV7PZTP7QkBWvZQ84d6joa1UVKkChZpGYn2TGXkrHvCRZKlEG8iGPv 1t2WpEFfL7lw9uHT4UP9zVEBd5CwVivmwuup1NSJoBKM93ltLhytUtWBnQvADzDL Rp39Zy7H8g74L065euFTKKMkVkAidZzXzAknvPd5CASPQykUVgK179E45OuSh/4/ oW3Z1i9rNql0lDDoWL9TOoypRRQXks/PWGk3SIwHlzkKH4xKEgu3pXMAj0HL2/Jr 4M2xZEjvjJt9VIXL7HW82T7+Y1YHUNRab6Cgkr5zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrB7stDfEufX+d80CYIn0yMSDBOgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmYzFjMzRjLTAwNzQtNDBiMS1iZjQ4LTUyYmRhMTEzZjE5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2uMAwDQYJKoZIhvcNAQELBQADggEBAJ5dlqp4gdPWfH9Jumx9F3ZY9lx5 R6w6LX90XOkG8DyQuBBKFXlQNLgIn2557C74iINBqM4GaWGfad3TCvoCwaZlR0CJ DyUQfMqbPCxKonXrwf1DTQW1L3J2WiJYUwcugGygfjJb0nj0GSxc3BK7V3gPPxJY qOABA8J1r7LsZN96pQNzLT8IKoa5Ca0pMvHgHd5Iuke+Khyj6uugNsp5p3g5t42Z Lirq7TA7B/gkryVBPWNSsG7BgrZp5WTlUCuYzu7aDZaiZBLjES/TdgFG2p4s97Wt NJhho4D10rFuD93ahPzvzoXkbbSAUhyK80Wuib3desFyK/pj9/2vuNNUFB4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:19 2025 by rpki-client