$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d99d9ec-42c4-4861-afdc-51606b09cc48.roa File: 2d99d9ec-42c4-4861-afdc-51606b09cc48.roa (raw, json) Hash identifier: 7yCpVclJqaHDOzut4XjOOpRf/Sf+/7SvkcpGR5bvOYE= Subject key identifier: B0:81:FD:65:48:6D:53:C1:ED:A9:4A:50:F1:0C:40:E3:22:A1:EC:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 443D7A5F3711C61CF819F7041B1419018EEAA078 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d99d9ec-42c4-4861-afdc-51606b09cc48.roa Signing time: Fri 26 Sep 2025 17:15:12 +0000 ROA not before: Fri 26 Sep 2025 17:15:12 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3d:7a:5f:37:11:c6:1c:f8:19:f7:04:1b:14:19:01:8e:ea:a0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:15:12 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=55c97301aaa9c39a1d380d8013f53cf7f359f8c7d8c7fa646d95d72f58bbd247, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:5a:92:a5:73:19:83:0b:f8:0d:ae:32:99: ff:12:aa:2a:08:51:db:31:35:48:93:27:04:37:08: 78:7c:51:9a:33:9b:21:2a:62:df:57:8d:ee:a7:1d: 6e:ee:07:a5:d5:87:a8:e2:99:f0:cb:41:cd:cc:1b: 13:24:84:43:eb:23:1b:bb:2a:f8:b2:7e:b8:06:53: 76:9e:a7:c2:ab:92:d3:f6:8b:19:17:66:19:9c:f5: 42:28:6e:8a:a9:e3:a6:db:45:cb:21:40:66:1a:b9: 25:77:63:ec:69:16:a9:fc:63:38:9b:29:6a:82:7e: f2:e3:f8:e4:0f:1c:44:d1:04:6a:c8:a7:df:30:bf: 76:3c:47:ce:81:d6:f2:6f:46:ed:15:2c:3c:75:06: 67:fc:c3:6c:19:65:c3:b8:97:07:48:e1:90:a3:1a: 7a:c7:16:e7:63:2f:c5:6a:4d:97:bd:d5:36:1d:91: 62:5e:fc:3d:35:5c:d0:84:e3:46:4b:58:10:9f:2e: 2c:3c:41:e2:a6:bd:03:ff:45:bd:19:00:a8:b8:80: 1c:5a:40:78:11:3e:ab:e1:36:07:a4:59:2c:6a:2a: bd:32:bc:2b:4b:00:fe:f6:27:04:3a:eb:63:82:31: b6:dc:f1:71:1b:d3:3a:9e:de:b4:6b:cb:d7:46:a9: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:81:FD:65:48:6D:53:C1:ED:A9:4A:50:F1:0C:40:E3:22:A1:EC:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d99d9ec-42c4-4861-afdc-51606b09cc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.32.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:79:b5:8b:1e:8d:6b:71:9c:e0:41:81:9f:b2:49:f9:d2:43: 3e:29:bd:c7:43:7f:fc:95:09:9b:c1:09:03:d7:1c:b2:f5:6f: 71:12:f3:80:7c:a7:34:c3:66:7d:ae:17:e5:bf:08:30:dc:19: 61:b3:34:de:ae:89:8d:bc:08:bc:d2:5f:1c:be:ed:aa:55:07: 9e:10:83:4c:69:aa:ff:32:1c:90:c7:79:f4:26:6e:eb:e6:bd: 96:1a:32:16:e8:82:c4:dd:f8:cc:8b:46:10:51:16:35:95:8f: bb:ee:ed:f9:ff:6d:4e:a3:fb:eb:5b:5d:e1:6f:1c:8b:73:8c: d7:6a:2b:a7:93:37:3b:8f:41:f8:d4:07:dc:48:5f:63:26:65: d2:9a:60:9e:48:5b:64:18:84:a0:99:df:61:70:9f:21:45:3c: c0:92:6f:14:7a:6e:d8:b1:b9:99:12:0c:e2:cc:ae:54:48:e6: f3:75:aa:a9:78:81:eb:f3:c5:c6:a9:e0:fb:40:62:21:c0:ed: 41:bf:96:9b:2b:07:a2:d9:25:28:c5:e7:2a:90:6e:bb:3e:58: b5:fe:88:c8:e5:d5:23:95:49:a4:d6:fb:0f:76:c3:79:4b:1b: 06:cc:90:4e:f9:f2:ab:1e:fa:28:7b:83:2d:f1:07:1a:cd:2b: 99:71:4c:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURD16XzcRxhz4GfcEGxQZAY7qoHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcxNTEyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWM5NzMwMWFhYTljMzlhMWQzODBkODAxM2Y1M2NmN2Yz NTlmOGM3ZDhjN2ZhNjQ2ZDk1ZDcyZjU4YmJkMjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiiFqSpXMZgwv4Da4ymf8SqioIUdsxNUiTJwQ3CHh8UZoz myEqYt9Xje6nHW7uB6XVh6jimfDLQc3MGxMkhEPrIxu7KviyfrgGU3aep8KrktP2 ixkXZhmc9UIoboqp46bbRcshQGYauSV3Y+xpFqn8YzibKWqCfvLj+OQPHETRBGrI p98wv3Y8R86B1vJvRu0VLDx1Bmf8w2wZZcO4lwdI4ZCjGnrHFudjL8VqTZe91TYd kWJe/D01XNCE40ZLWBCfLiw8QeKmvQP/Rb0ZAKi4gBxaQHgRPqvhNgekWSxqKr0y vCtLAP72JwQ662OCMbbc8XEb0zqe3rRry9dGqQglAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsIH9ZUhtU8HtqUpQ8QxA4yKh7FowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkOTlkOWVjLTQyYzQtNDg2MS1hZmRjLTUxNjA2YjA5Y2M0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM27yAwDQYJKoZIhvcNAQELBQADggEBAF55tYsejWtxnOBBgZ+ySfnSQz4p vcdDf/yVCZvBCQPXHLL1b3ES84B8pzTDZn2uF+W/CDDcGWGzNN6uiY28CLzSXxy+ 7apVB54Qg0xpqv8yHJDHefQmbuvmvZYaMhbogsTd+MyLRhBRFjWVj7vu7fn/bU6j ++tbXeFvHItzjNdqK6eTNzuPQfjUB9xIX2MmZdKaYJ5IW2QYhKCZ32FwnyFFPMCS bxR6btixuZkSDOLMrlRI5vN1qql4gevzxcap4PtAYiHA7UG/lpsrB6LZJSjF5yqQ brs+WLX+iMjl1SOVSaTW+w92w3lLGwbMkE758qse+ih7gy3xBxrNK5lxTJ8= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:13 2025 by rpki-client