$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22a58bc8-8cf9-4c4b-896d-ebe2ec88fec0.roa File: 22a58bc8-8cf9-4c4b-896d-ebe2ec88fec0.roa (raw, json) Hash identifier: BY0hUvUM/yStKxkpQikYl3fOf/R2HvrpGOtFhWwFjKw= Subject key identifier: 23:85:6D:06:B4:F1:36:31:1C:69:FE:46:ED:26:09:75:6A:BC:A6:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DF1775A802E32095D582E7D33ACCF04A4DCDC3D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22a58bc8-8cf9-4c4b-896d-ebe2ec88fec0.roa Signing time: Fri 26 Sep 2025 02:39:16 +0000 ROA not before: Fri 26 Sep 2025 02:39:16 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f1:77:5a:80:2e:32:09:5d:58:2e:7d:33:ac:cf:04:a4:dc:dc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:39:16 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=13c63d017ffd0592332746e92e8317fb7fbaae60ab5efbd74a615340a3fac65c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:d0:36:a7:81:f4:bf:7d:0d:2f:56:fb:22: 4f:37:6e:86:de:12:fd:96:cf:5b:64:0e:22:38:f2: b5:ed:6f:cf:b8:ea:80:d7:18:13:9e:cb:65:b5:3f: 92:a9:e6:5b:6b:69:01:7a:65:03:bb:d8:2e:0e:17: cd:53:e9:4c:26:4b:6d:04:b7:7c:dc:dd:45:16:81: 7c:7c:72:69:06:8c:75:8d:b4:75:c7:f4:8c:90:82: 61:05:e4:25:7f:43:f5:3a:01:47:d0:45:a8:68:df: 86:b4:3d:3c:b0:c7:29:d6:68:e2:e0:65:38:6d:1b: df:0f:76:1d:0f:21:f8:4d:21:c5:e1:b2:26:a7:cc: 8d:61:2d:0d:8b:6e:0d:fd:e9:32:ca:8c:57:1c:d2: 7f:d4:b6:4f:3c:55:ce:65:1d:7b:4e:bc:f8:fb:ad: 81:9f:e7:a6:25:7e:bf:a0:27:79:71:02:99:3d:02: e3:c4:55:70:bf:75:ef:1e:c2:ca:52:e7:53:28:2f: ec:d6:e0:09:24:1d:1f:b0:71:39:64:1d:7e:d8:d1: 15:2e:3f:22:91:f5:69:2d:ee:ea:a6:7e:76:c0:be: 7c:89:5c:42:a5:e3:00:76:3a:8b:bd:09:0d:3c:22: 4e:7f:09:82:a6:d9:24:76:e4:c4:52:c5:f1:de:74: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:6D:06:B4:F1:36:31:1C:69:FE:46:ED:26:09:75:6A:BC:A6:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22a58bc8-8cf9-4c4b-896d-ebe2ec88fec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.97.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:a6:ba:83:16:5a:d8:cb:c9:ba:90:2d:af:94:4c:4f:1f:15: 4b:ab:ca:d3:a8:9e:36:a7:69:73:fa:d2:a9:c0:96:69:6f:9b: 9a:03:ec:19:81:cd:72:4e:2d:57:16:bf:4b:49:1f:e9:bc:dd: df:83:65:38:df:37:21:c8:d1:63:2a:82:1a:43:78:f9:46:5d: 60:e7:42:b5:87:58:bc:6c:63:5a:7a:f2:a9:33:c5:a8:f3:6f: f8:17:65:e7:61:20:99:f4:20:00:6d:27:3f:e3:96:50:fb:fb: c7:a7:24:b7:ec:1f:b7:f4:5a:2d:17:f2:ca:7f:be:b7:c2:e5: c8:dc:21:c9:e9:b7:c6:e7:6b:02:e5:0a:79:d1:4f:c9:7c:d7: f0:95:74:b2:45:d8:a1:fd:00:74:11:6d:3d:ae:4c:d9:fc:ad: 4d:0d:29:cc:1c:bb:4b:d4:22:33:49:f9:ef:ae:83:65:91:20: d3:8c:db:74:cf:24:53:b9:91:b9:bb:bf:a6:ad:a3:64:76:51: 60:4f:c5:09:6c:4e:12:0d:49:c0:ca:01:82:2b:4c:b1:0d:18: f4:28:f6:4f:c4:8b:1d:27:6d:54:83:24:c8:e6:91:4d:e3:f2: e4:95:df:33:12:28:df:b3:38:c3:0f:a1:15:7e:56:9f:db:71: 13:e4:83:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUffF3WoAuMgldWC59M6zPBKTc3D0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIzOTE2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2M2M2QwMTdmZmQwNTkyMzMyNzQ2ZTkyZTgzMTdmYjdm YmFhZTYwYWI1ZWZiZDc0YTYxNTM0MGEzZmFjNjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYiNA2p4H0v30NL1b7Ik83bobeEv2Wz1tkDiI48rXtb8+4 6oDXGBOey2W1P5Kp5ltraQF6ZQO72C4OF81T6UwmS20Et3zc3UUWgXx8cmkGjHWN tHXH9IyQgmEF5CV/Q/U6AUfQRaho34a0PTywxynWaOLgZThtG98Pdh0PIfhNIcXh sianzI1hLQ2Lbg396TLKjFcc0n/Utk88Vc5lHXtOvPj7rYGf56Ylfr+gJ3lxApk9 AuPEVXC/de8ewspS51MoL+zW4AkkHR+wcTlkHX7Y0RUuPyKR9Wkt7uqmfnbAvnyJ XEKl4wB2Oou9CQ08Ik5/CYKm2SR25MRSxfHedN/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI4VtBrTxNjEcaf5G7SYJdWq8pqAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyYTU4YmM4LThjZjktNGM0Yi04OTZkLWViZTJlYzg4ZmVjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25mEwDQYJKoZIhvcNAQELBQADggEBAGumuoMWWtjLybqQLa+UTE8fFUur ytOonjanaXP60qnAlmlvm5oD7BmBzXJOLVcWv0tJH+m83d+DZTjfNyHI0WMqghpD ePlGXWDnQrWHWLxsY1p68qkzxajzb/gXZedhIJn0IABtJz/jllD7+8enJLfsH7f0 Wi0X8sp/vrfC5cjcIcnpt8bnawLlCnnRT8l81/CVdLJF2KH9AHQRbT2uTNn8rU0N Kcwcu0vUIjNJ+e+ug2WRINOM23TPJFO5kbm7v6ato2R2UWBPxQlsThINScDKAYIr TLENGPQo9k/Eix0nbVSDJMjmkU3j8uSV3zMSKN+zOMMPoRV+Vp/bcRPkg2o= -----END CERTIFICATE-----Generated at Sat Oct 18 04:15:42 2025 by rpki-client