$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa File: b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa (raw, json) Hash identifier: RpyRkWIrHDq07w6zbafiQEApYVT2/WK2A2HrZNdcZQk= Subject key identifier: 8C:75:C8:12:87:1E:F9:53:98:23:D5:40:BD:37:38:38:37:4B:3D:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0DB5FD9EDFC29B439A70C05A71EAF45C01B5A1B8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa Signing time: Fri 19 Sep 2025 15:00:22 +0000 ROA not before: Fri 19 Sep 2025 15:00:22 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.159.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b5:fd:9e:df:c2:9b:43:9a:70:c0:5a:71:ea:f4:5c:01:b5:a1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 15:00:22 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=264eeaac7ab5a24a07521702c55a1ba5d85480ff1f0caddbfd322f1bb8bc0112, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:05:30:e0:6f:9c:03:09:b0:93:44:71:5e: 51:6e:e6:16:57:3c:c5:ae:e6:21:8d:06:b9:e2:77: 02:db:a4:a8:a4:8a:40:d3:d4:c8:61:e8:09:3d:b0: cb:09:64:58:b1:e6:15:8d:8e:13:80:8d:6e:20:2c: a6:26:48:1c:e6:96:a4:b5:8b:ca:79:1f:8d:06:d6: 17:00:2d:a8:ab:73:ad:04:db:fe:6f:0f:14:92:45: 59:c8:93:68:60:f8:96:d9:41:02:14:ef:31:aa:a3: 0a:3e:da:a1:dd:37:f1:29:be:40:28:d0:47:e9:6d: a9:a6:55:42:71:14:2e:43:fb:47:72:f5:e9:9e:1b: 32:64:e5:7c:e7:7c:01:3d:08:f5:76:ec:4c:2b:c6: 60:a1:db:86:af:9c:7e:32:3f:ed:5b:d9:71:6b:3e: 73:28:47:03:20:74:ca:be:19:85:08:af:75:83:37: 03:fc:27:6b:15:a3:1a:9b:6e:5d:e7:46:b2:0c:ad: 95:be:46:6a:93:8a:1e:e5:9f:34:d5:a7:8b:8d:9a: 3a:95:e4:4d:cc:66:c7:27:dc:88:df:1f:da:d6:e9: ea:56:fa:42:2e:60:6c:dd:67:6b:83:0b:2a:81:9a: ed:60:d4:0b:3f:b3:ce:1e:ac:bc:da:98:a5:99:de: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:C8:12:87:1E:F9:53:98:23:D5:40:BD:37:38:38:37:4B:3D:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.159.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:83:de:d5:a8:e3:a3:ec:d4:85:85:71:07:17:02:90:8b:cd: 43:a5:7a:c0:87:30:9a:f3:77:fa:89:ba:84:25:20:67:91:29: 30:e1:c7:24:3f:47:11:bf:b9:80:10:db:36:05:20:21:ff:66: ff:f2:a6:ec:81:47:b6:c3:d1:16:c9:db:32:6e:83:e7:90:b6: 59:06:32:f2:cf:77:d7:7c:8d:08:c1:3f:c0:97:70:94:01:7f: 13:5a:fe:27:fc:13:a3:f7:90:9f:bc:f9:9a:7f:0e:a9:a7:00: 16:2d:99:6d:62:77:ec:40:b7:eb:7c:8e:f8:d8:12:67:fc:df: 0f:42:8f:3e:81:10:12:03:34:ba:ec:ea:46:f2:5a:d8:24:19: 29:6d:95:db:24:1e:23:57:f6:e8:c1:6d:46:11:21:c1:72:0c: 9d:de:d8:6a:a3:3b:ef:98:cc:1a:92:c4:b6:2a:13:26:7e:ac: a6:9a:94:d0:28:a7:17:d1:4f:85:9c:9f:88:62:5b:6d:62:76: e0:34:39:ea:c4:bf:89:25:1c:22:7c:12:ac:2c:99:56:fa:94: d5:6f:12:4a:7c:e5:18:63:a7:f1:d6:f1:61:3b:63:ed:07:10: 88:fc:4c:c2:f1:46:4b:3c:b8:62:ce:6d:c9:eb:2c:78:2e:ee: a3:82:39:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDbX9nt/Cm0OacMBacer0XAG1obgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTUwMDIyWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjRlZWFhYzdhYjVhMjRhMDc1MjE3MDJjNTVhMWJhNWQ4 NTQ4MGZmMWYwY2FkZGJmZDMyMmYxYmI4YmMwMTEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI4gUw4G+cAwmwk0RxXlFu5hZXPMWu5iGNBrnidwLbpKik ikDT1Mhh6Ak9sMsJZFix5hWNjhOAjW4gLKYmSBzmlqS1i8p5H40G1hcALairc60E 2/5vDxSSRVnIk2hg+JbZQQIU7zGqowo+2qHdN/EpvkAo0EfpbammVUJxFC5D+0dy 9emeGzJk5XznfAE9CPV27EwrxmCh24avnH4yP+1b2XFrPnMoRwMgdMq+GYUIr3WD NwP8J2sVoxqbbl3nRrIMrZW+RmqTih7lnzTVp4uNmjqV5E3MZscn3IjfH9rW6epW +kIuYGzdZ2uDCyqBmu1g1As/s84erLzamKWZ3i/rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjHXIEoce+VOYI9VAvTc4ODdLPfswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2NDY2N2QzLThjMjgtNDU1My1iN2JjLTNmNGYwZjhkZmZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2n0AwDQYJKoZIhvcNAQELBQADggEBAA2D3tWo46Ps1IWFcQcXApCLzUOl esCHMJrzd/qJuoQlIGeRKTDhxyQ/RxG/uYAQ2zYFICH/Zv/ypuyBR7bD0RbJ2zJu g+eQtlkGMvLPd9d8jQjBP8CXcJQBfxNa/if8E6P3kJ+8+Zp/DqmnABYtmW1id+xA t+t8jvjYEmf83w9Cjz6BEBIDNLrs6kbyWtgkGSltldskHiNX9ujBbUYRIcFyDJ3e 2GqjO++YzBqSxLYqEyZ+rKaalNAopxfRT4Wcn4hiW21iduA0OerEv4klHCJ8Eqws mVb6lNVvEkp85Rhjp/HW8WE7Y+0HEIj8TMLxRks8uGLObcnrLHgu7qOCOZE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:58 2025 by rpki-client