$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aed36d3-f14c-40fb-adde-8c1a23da1f3b.roa File: 1aed36d3-f14c-40fb-adde-8c1a23da1f3b.roa (raw, json) Hash identifier: e0IlwC72c6VFom+RdRqejBuzrem2zGc2xuULpgZdAZI= Subject key identifier: CE:43:63:D6:02:04:A7:8B:B5:EB:83:6A:67:66:E7:85:24:CF:15:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E6A492D21B72AE1B66927A8A67F567DCD6EE257 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aed36d3-f14c-40fb-adde-8c1a23da1f3b.roa Signing time: Fri 17 Oct 2025 00:01:28 +0000 ROA not before: Fri 17 Oct 2025 00:01:28 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6a:49:2d:21:b7:2a:e1:b6:69:27:a8:a6:7f:56:7d:cd:6e:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 00:01:28 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=5501f93e0592a62c204d9b1daeaa47d9ca25f83029c986c6191ca8409cc32145, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:73:e2:aa:c9:7c:86:10:92:2a:bc:3f:98: 54:3f:39:93:88:c5:ef:4e:5e:c4:db:1f:2b:f5:bb: 73:03:fc:dc:9d:c3:1b:0b:af:11:02:e5:63:ad:c7: 9c:fe:02:c2:ef:50:cf:bb:ff:49:cf:c9:b1:29:a3: 15:6e:8e:05:5f:4c:2c:ce:07:0e:66:cb:20:46:fe: 7f:14:a8:ac:7b:6b:18:38:81:dd:df:e9:94:e5:14: b3:3d:20:0b:e0:18:6b:da:61:3f:b0:35:65:7f:53: a0:dd:0c:09:18:06:57:7c:75:d1:a2:ee:0f:88:83: 24:08:f9:06:8f:ad:2b:75:f1:39:25:ed:b4:63:94: b0:54:fb:03:c5:25:74:69:4d:3f:b8:24:c0:de:0f: 6f:d0:7b:00:88:ba:f8:28:e7:48:50:1d:d0:6e:73: 9e:d6:2b:a7:38:99:f4:07:7f:b2:6e:18:fb:7f:fb: c3:9a:d6:d1:24:33:82:f4:81:d2:b2:40:0f:e3:2d: 7f:dc:12:cf:29:5d:9b:f3:f3:fa:c7:1d:0f:16:ee: 40:00:fb:99:1a:42:91:fc:4d:90:a7:88:2f:a8:a0: 74:34:fb:71:fd:c8:7f:ef:ed:92:92:6b:d7:4b:0d: 01:79:43:5e:1c:88:8c:a4:04:48:48:ac:fa:67:ce: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:43:63:D6:02:04:A7:8B:B5:EB:83:6A:67:66:E7:85:24:CF:15:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aed36d3-f14c-40fb-adde-8c1a23da1f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.194.0/23 Signature Algorithm: sha256WithRSAEncryption 29:3a:5f:d8:95:c2:a2:1d:ba:6d:40:ed:c3:41:40:c4:03:02: e6:46:ca:5f:a7:4a:b6:77:bd:29:53:bd:42:07:df:31:b5:c6: 94:70:51:91:19:31:5e:78:26:6e:cd:47:a2:b6:4e:ce:b0:08: 82:ce:ff:40:a3:67:02:b1:bf:d9:82:11:05:84:3d:48:b8:36: 72:ef:64:ba:4c:5a:e3:1b:f8:59:a6:f2:b5:1c:7b:34:02:05: 34:73:fc:34:03:34:33:f6:45:55:ca:46:9b:9f:0f:d8:29:9b: 3d:40:55:c8:9c:bf:ad:5b:ee:86:62:05:f0:7d:8f:69:44:2f: 9a:f3:42:e1:ad:5c:20:6d:7e:d5:af:7c:e7:12:11:9f:63:d5: e6:54:58:43:0f:1a:2e:79:9d:97:04:9e:80:59:84:07:e2:d8: fe:ca:78:ec:63:99:f4:86:f7:ca:78:ef:84:0d:4b:84:09:3a: 6b:11:96:af:35:bb:af:10:bc:4a:2d:25:9a:f3:c6:3d:2d:06: b8:4b:f0:7f:d9:29:47:4b:f0:86:0f:f8:9c:69:a1:64:fb:ac: 6c:69:00:fc:ec:8f:0a:1a:20:a6:ed:da:fd:5b:3e:07:dd:b4: 9d:f1:37:2e:35:7d:af:84:fa:25:5b:06:d9:c0:6f:27:b0:c5: bd:20:c5:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTmpJLSG3KuG2aSeopn9Wfc1u4lcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MDAwMTI4WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTAxZjkzZTA1OTJhNjJjMjA0ZDliMWRhZWFhNDdkOWNh MjVmODMwMjljOTg2YzYxOTFjYTg0MDljYzMyMTQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZyHPiqsl8hhCSKrw/mFQ/OZOIxe9OXsTbHyv1u3MD/Nyd wxsLrxEC5WOtx5z+AsLvUM+7/0nPybEpoxVujgVfTCzOBw5myyBG/n8UqKx7axg4 gd3f6ZTlFLM9IAvgGGvaYT+wNWV/U6DdDAkYBld8ddGi7g+IgyQI+QaPrSt18Tkl 7bRjlLBU+wPFJXRpTT+4JMDeD2/QewCIuvgo50hQHdBuc57WK6c4mfQHf7JuGPt/ +8Oa1tEkM4L0gdKyQA/jLX/cEs8pXZvz8/rHHQ8W7kAA+5kaQpH8TZCniC+ooHQ0 +3H9yH/v7ZKSa9dLDQF5Q14ciIykBEhIrPpnztyDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzkNj1gIEp4u164NqZ2bnhSTPFTEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhZWQzNmQzLWYxNGMtNDBmYi1hZGRlLThjMWEyM2RhMWYzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wMIwDQYJKoZIhvcNAQELBQADggEBACk6X9iVwqIdum1A7cNBQMQDAuZG yl+nSrZ3vSlTvUIH3zG1xpRwUZEZMV54Jm7NR6K2Ts6wCILO/0CjZwKxv9mCEQWE PUi4NnLvZLpMWuMb+Fmm8rUcezQCBTRz/DQDNDP2RVXKRpufD9gpmz1AVcicv61b 7oZiBfB9j2lEL5rzQuGtXCBtftWvfOcSEZ9j1eZUWEMPGi55nZcEnoBZhAfi2P7K eOxjmfSG98p474QNS4QJOmsRlq81u68QvEotJZrzxj0tBrhL8H/ZKUdL8IYP+Jxp oWT7rGxpAPzsjwoaIKbt2v1bPgfdtJ3xNy41fa+E+iVbBtnAbyewxb0gxXo= -----END CERTIFICATE-----Generated at Sat Oct 18 02:12:12 2025 by rpki-client