$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa File: 2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa (raw, json) Hash identifier: kmPiN23ryaPWpkRASOqPv9ClJtg2C047I8RwXk8SUTQ= Subject key identifier: B1:CD:D6:AE:C6:2A:90:4D:EB:2B:2C:7A:0C:01:96:D7:2F:82:E5:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20FA375FD56F4ACE2FB8CCAF43044B2566758A54 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa Signing time: Thu 16 Oct 2025 19:56:57 +0000 ROA not before: Thu 16 Oct 2025 19:56:57 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.150.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fa:37:5f:d5:6f:4a:ce:2f:b8:cc:af:43:04:4b:25:66:75:8a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:56:57 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=b9a434b4062f2146b212ae2737b0dbfa994147edeaa882dee97ed60893b955c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:36:1d:e6:aa:3d:10:39:bf:e3:38:20:51: 62:43:ab:b7:d3:cd:ca:35:cb:e5:50:27:78:71:78: 58:b7:e1:91:6d:9d:38:26:1c:3a:33:7a:0d:15:85: fa:62:4e:62:0e:f3:bd:d8:2a:5e:1e:3c:7b:a1:c7: 8e:15:28:43:de:44:7a:77:33:1b:32:06:bc:4a:57: b4:8e:ff:22:3d:14:50:59:61:87:71:8c:8e:53:4a: aa:07:af:1b:95:c7:f3:b0:3d:7e:de:2f:df:6a:c3: 88:b6:55:60:81:71:36:80:b0:08:76:c7:34:87:23: ce:f2:77:39:5f:b7:d7:b8:ee:c3:b0:53:7f:9e:a3: 49:54:51:2b:76:03:43:40:17:ea:3b:f9:13:81:d6: 08:44:60:34:1d:6f:de:a9:2e:53:60:9f:b3:a6:22: 30:69:53:8d:c9:83:4d:97:d3:71:f8:80:0c:02:a6: 15:f2:1f:69:4d:6f:d2:ce:e4:73:c0:f6:1d:de:5b: 9c:6a:9b:14:d6:09:ce:c0:3d:36:3a:11:1b:a3:b1: 6f:69:13:e4:03:33:77:2a:69:b2:d6:b8:52:a8:99: f8:b7:16:d7:3a:fa:40:10:75:d8:77:e5:fb:c0:a2: bc:23:24:3e:10:90:d5:4c:70:16:61:e7:f4:e7:2c: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CD:D6:AE:C6:2A:90:4D:EB:2B:2C:7A:0C:01:96:D7:2F:82:E5:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d997d40-5423-4f39-a3a2-b9e9cbd1a476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.150.0.0/17 Signature Algorithm: sha256WithRSAEncryption 03:1a:e4:ef:61:5c:10:45:b7:31:d4:a8:4c:d9:86:5f:2d:99: e4:06:6b:cd:39:58:1f:3a:42:10:18:7c:36:e1:71:cb:7c:8a: 27:74:4f:07:2f:f1:68:2a:d1:c9:19:82:54:7b:23:68:0d:ae: e3:d5:74:7d:4a:ac:49:74:6f:97:e2:3c:a7:0d:5f:5a:ca:a2: 03:27:42:2b:f0:1f:08:2b:0d:7c:8c:e8:0f:57:1d:95:2a:cf: 91:0b:be:cd:f1:df:39:5d:c4:84:06:d5:73:ac:aa:6f:78:bf: 94:40:01:fb:d3:3d:91:f8:49:bb:36:72:af:02:fb:93:82:c1: 5b:ba:6d:da:1e:62:16:11:58:bc:64:fa:f2:db:60:05:3c:81: 15:a0:a2:6b:d0:23:4a:b7:8f:70:a6:9d:58:d3:e2:11:5d:02: d1:70:38:68:1a:92:38:0e:72:f6:ca:5c:50:53:1f:5f:b3:f4: b9:16:82:e7:f0:a1:7b:ad:66:c8:2b:eb:c0:fd:0e:da:ba:18: 3d:75:02:3e:28:a3:bd:a9:75:6a:55:74:70:7b:ac:89:6c:6a: 4e:c9:08:87:79:ea:dc:db:25:ee:3b:35:95:78:8f:9c:df:13: 02:b6:bb:3c:d9:73:05:7d:28:9a:36:b8:1f:c3:ed:6d:d0:0e: dd:16:61:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIPo3X9VvSs4vuMyvQwRLJWZ1ilQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTk1NjU3WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWE0MzRiNDA2MmYyMTQ2YjIxMmFlMjczN2IwZGJmYTk5 NDE0N2VkZWFhODgyZGVlOTdlZDYwODkzYjk1NWM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChMjYd5qo9EDm/4zggUWJDq7fTzco1y+VQJ3hxeFi34ZFt nTgmHDozeg0VhfpiTmIO873YKl4ePHuhx44VKEPeRHp3MxsyBrxKV7SO/yI9FFBZ YYdxjI5TSqoHrxuVx/OwPX7eL99qw4i2VWCBcTaAsAh2xzSHI87ydzlft9e47sOw U3+eo0lUUSt2A0NAF+o7+ROB1ghEYDQdb96pLlNgn7OmIjBpU43Jg02X03H4gAwC phXyH2lNb9LO5HPA9h3eW5xqmxTWCc7APTY6ERujsW9pE+QDM3cqabLWuFKomfi3 Ftc6+kAQddh35fvAorwjJD4QkNVMcBZh5/TnLGA/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsc3WrsYqkE3rKyx6DAGW1y+C5R8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkOTk3ZDQwLTU0MjMtNGYzOS1hM2EyLWI5ZTljYmQxYTQ3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2lgAwDQYJKoZIhvcNAQELBQADggEBAAMa5O9hXBBFtzHUqEzZhl8tmeQG a805WB86QhAYfDbhcct8iid0Twcv8Wgq0ckZglR7I2gNruPVdH1KrEl0b5fiPKcN X1rKogMnQivwHwgrDXyM6A9XHZUqz5ELvs3x3zldxIQG1XOsqm94v5RAAfvTPZH4 Sbs2cq8C+5OCwVu6bdoeYhYRWLxk+vLbYAU8gRWgomvQI0q3j3CmnVjT4hFdAtFw OGgakjgOcvbKXFBTH1+z9LkWgufwoXutZsgr68D9Dtq6GD11Aj4oo72pdWpVdHB7 rIlsak7JCId56tzbJe47NZV4j5zfEwK2uzzZcwV9KJo2uB/D7W3QDt0WYeQ= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:26 2025 by rpki-client