$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1250c6be-a56c-40dc-8031-ff2ed89bb869.roa File: 1250c6be-a56c-40dc-8031-ff2ed89bb869.roa (raw, json) Hash identifier: B+MdzR9OaUtQy7II3NXyQo5frFLQI5MhqrwyE2jeix4= Subject key identifier: BC:F0:C0:66:00:CF:43:F2:8D:81:D6:E0:5C:0E:BE:85:22:A7:5D:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23C9981103C28261BACE2DF0D110F8C8C92391B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1250c6be-a56c-40dc-8031-ff2ed89bb869.roa Signing time: Fri 26 Sep 2025 02:29:17 +0000 ROA not before: Fri 26 Sep 2025 02:29:17 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c9:98:11:03:c2:82:61:ba:ce:2d:f0:d1:10:f8:c8:c9:23:91:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:29:17 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=fa80f420f74fb9217a6310b7687d68f2c234ac8e82c2b635e65b684e709ef386, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:38:b1:34:c3:f9:62:a2:49:43:c4:03:0f: 06:cc:0e:21:fa:fb:85:89:2e:b2:5d:eb:0d:c5:4f: 3b:ab:db:35:f8:70:f6:a1:4d:18:80:95:97:fe:e2: 33:3e:2f:d4:93:6d:de:ac:be:d5:40:a4:3e:30:d2: 54:32:d3:e4:c4:90:19:a8:95:ae:d3:20:c3:25:d2: 55:70:65:70:9b:a7:33:af:58:f7:68:6d:e3:cf:0d: 41:b2:a8:42:39:e4:63:58:b3:b5:d2:fa:36:b0:ab: 73:0e:65:5c:43:af:fe:5a:02:ea:41:68:8f:54:71: 03:8f:21:c0:c0:67:80:c4:46:09:b6:33:cc:27:fe: fc:7a:33:d6:cc:d5:74:0e:60:6f:a7:23:80:c1:50: 89:2c:72:5d:ac:da:37:f7:04:7a:df:5b:1c:23:7a: 65:10:69:a4:bd:4c:48:30:1e:73:2e:d6:36:5b:a7: 2c:91:44:70:c5:e0:1c:c4:ef:cb:ec:f8:13:0f:b2: 45:9c:e9:b2:b4:af:1e:f9:bd:00:c7:07:eb:69:7d: 22:3d:28:af:a4:61:7d:90:51:62:f6:06:9f:25:b0: 86:37:e1:6c:1b:b6:ec:44:7e:dc:bf:27:12:90:c1: b8:e0:61:b9:82:56:77:e1:7d:5d:2a:da:ca:fb:5c: 6e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F0:C0:66:00:CF:43:F2:8D:81:D6:E0:5C:0E:BE:85:22:A7:5D:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1250c6be-a56c-40dc-8031-ff2ed89bb869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.217.0/24 Signature Algorithm: sha256WithRSAEncryption a3:58:7d:4f:13:1f:a0:d3:72:d7:f7:c1:6c:07:8e:9f:54:0a: 47:79:1e:4a:74:1e:16:fc:5d:4d:77:94:ae:e8:2f:67:7f:d0: d1:d7:1d:50:d6:35:c2:1d:74:0f:5e:73:d2:9d:f3:60:88:3b: 88:a4:3b:7d:2e:a7:e3:05:7a:86:5a:e6:71:a9:22:37:4d:5c: f6:0c:f3:5d:0e:55:70:28:5e:58:e7:8f:7d:1d:bb:4d:35:08: 05:d3:f5:41:5e:5a:d8:e1:bc:6d:86:2d:9a:e9:95:1b:56:92: ca:22:85:1c:92:0a:88:49:b6:5b:f0:c2:d8:67:4c:2c:58:06: ea:89:9f:39:a2:d5:62:73:19:4b:2a:ea:50:6f:99:bf:7b:99: d2:be:3f:f2:54:d3:e9:b0:c7:5a:a1:d8:45:5a:eb:67:78:ee: ad:9e:8c:dd:6e:97:0d:20:9c:99:d4:50:f1:aa:7a:85:08:8c: 47:b0:db:12:05:03:26:d8:ce:80:64:f8:74:71:6d:cb:f3:be: 47:f3:e1:61:fe:cc:bb:a0:bc:8c:77:b8:a4:e8:98:c2:32:a8: a3:9f:c4:7e:9b:60:c2:3d:bb:6b:2b:bb:84:19:2c:0b:e3:af: 00:14:66:52:e1:09:70:62:15:48:87:42:31:94:45:75:9e:57: 92:d7:8f:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI8mYEQPCgmG6zi3w0RD4yMkjkbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIyOTE3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTgwZjQyMGY3NGZiOTIxN2E2MzEwYjc2ODdkNjhmMmMy MzRhYzhlODJjMmI2MzVlNjViNjg0ZTcwOWVmMzg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxsjixNMP5YqJJQ8QDDwbMDiH6+4WJLrJd6w3FTzur2zX4 cPahTRiAlZf+4jM+L9STbd6svtVApD4w0lQy0+TEkBmola7TIMMl0lVwZXCbpzOv WPdobePPDUGyqEI55GNYs7XS+jawq3MOZVxDr/5aAupBaI9UcQOPIcDAZ4DERgm2 M8wn/vx6M9bM1XQOYG+nI4DBUIkscl2s2jf3BHrfWxwjemUQaaS9TEgwHnMu1jZb pyyRRHDF4BzE78vs+BMPskWc6bK0rx75vQDHB+tpfSI9KK+kYX2QUWL2Bp8lsIY3 4WwbtuxEfty/JxKQwbjgYbmCVnfhfV0q2sr7XG6XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvPDAZgDPQ/KNgdbgXA6+hSKnXY0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNTBjNmJlLWE1NmMtNDBkYy04MDMxLWZmMmVkODliYjg2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25tkwDQYJKoZIhvcNAQELBQADggEBAKNYfU8TH6DTctf3wWwHjp9UCkd5 Hkp0Hhb8XU13lK7oL2d/0NHXHVDWNcIddA9ec9Kd82CIO4ikO30up+MFeoZa5nGp IjdNXPYM810OVXAoXljnj30du001CAXT9UFeWtjhvG2GLZrplRtWksoihRySCohJ tlvwwthnTCxYBuqJnzmi1WJzGUsq6lBvmb97mdK+P/JU0+mwx1qh2EVa62d47q2e jN1ulw0gnJnUUPGqeoUIjEew2xIFAybYzoBk+HRxbcvzvkfz4WH+zLugvIx3uKTo mMIyqKOfxH6bYMI9u2sru4QZLAvjrwAUZlLhCXBiFUiHQjGURXWeV5LXj2k= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:35 2025 by rpki-client