$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3712dcf2-3680-4073-9a52-d4a9d3b80706.roa File: 3712dcf2-3680-4073-9a52-d4a9d3b80706.roa (raw, json) Hash identifier: jsdHRjk3HkXAXvBfEO9U70m5EPavSiysVBZ4UkAxlvE= Subject key identifier: D0:EA:B3:F4:8E:0F:C2:92:A9:CB:07:98:5A:43:E4:85:06:0E:EF:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: D4BCA730DFF2E8D060E7146D27467C4F35480D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3712dcf2-3680-4073-9a52-d4a9d3b80706.roa Signing time: Fri 26 Sep 2025 17:07:40 +0000 ROA not before: Fri 26 Sep 2025 17:07:40 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.220.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d4:bc:a7:30:df:f2:e8:d0:60:e7:14:6d:27:46:7c:4f:35:48:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:07:40 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d9b7be26ac6f5030d32b74d1868d6d222929fbea0b03d8d154dd15ecd95c3412, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9a:13:d4:55:4e:af:fb:db:cf:a4:b7:0b:5f: a7:77:6b:b2:b8:38:b2:a5:0f:16:46:94:17:1c:b9: 0c:97:00:68:bb:69:bd:5b:ec:35:44:1d:87:a2:73: 59:2a:b0:fa:2c:94:9c:83:53:42:c5:e4:04:bc:60: 5d:4f:e8:4c:05:76:b8:30:14:35:cd:62:05:31:ad: 7f:ab:02:c3:48:22:4d:77:5b:89:a2:81:9e:7e:a1: 44:be:16:57:53:10:61:37:29:8a:f1:9b:7d:26:81: b6:ff:97:63:9d:d9:84:df:b0:fc:28:c6:42:79:c7: e3:1a:2a:a9:2d:78:dc:d7:80:a4:5e:ab:66:34:d4: 87:e4:3b:4d:5d:7c:a2:af:9a:57:8a:b6:b2:5e:4b: 47:10:3e:d0:74:76:8c:2e:58:62:ba:54:b1:93:cf: f0:5b:05:d7:5b:75:57:fa:79:e4:6a:98:ea:06:ae: 85:ce:75:10:f7:c3:f9:d4:ce:e7:03:47:b1:74:55: f4:f2:f1:5e:af:f8:5c:7f:1d:da:7e:2d:79:93:02: 9c:f0:fd:68:f6:bb:bb:bf:fb:45:9c:ba:f5:a0:10: 45:43:9e:a2:41:19:4b:d1:22:b2:cd:f0:10:2b:e7: 5b:4f:04:34:bf:a9:a9:ed:04:99:29:22:8d:d9:67: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EA:B3:F4:8E:0F:C2:92:A9:CB:07:98:5A:43:E4:85:06:0E:EF:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3712dcf2-3680-4073-9a52-d4a9d3b80706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.220.4.0/22 Signature Algorithm: sha256WithRSAEncryption 59:97:59:b7:ab:4c:17:96:4d:a6:bb:57:5a:72:4c:b0:ba:e3: c8:cc:b0:63:54:59:52:14:96:a4:d9:50:f3:39:ce:2d:ca:27: a7:c2:95:b2:0a:e7:f8:c7:1b:c9:c4:1e:f2:08:11:c2:35:74: c9:ac:e1:e4:ce:1a:1f:c1:12:2d:dc:3a:a2:34:67:df:b0:2e: 42:dc:86:79:8f:ac:86:2b:92:d9:ef:82:7c:9a:4e:b1:51:09: 42:61:b5:dd:a2:67:ae:42:02:cd:54:e4:9c:d5:52:41:af:54: 12:2f:d8:6f:a1:6a:4e:d6:96:df:8c:b4:18:81:38:84:eb:6e: 0f:97:fb:78:37:0f:8a:ac:d1:f0:79:2f:8c:7c:f1:09:97:0f: 72:8c:08:43:ef:a8:78:36:0f:71:4f:44:d7:14:36:af:1d:55: 81:03:d6:5e:73:12:53:65:f4:3a:39:5a:23:03:82:7c:87:36: 47:ce:e8:db:ed:be:c1:de:ec:6b:72:da:0f:2d:62:88:39:16: 5d:20:08:8e:27:65:92:04:0e:31:c2:e3:e0:3c:f0:ef:d0:35: 01:57:cc:61:c2:de:fd:0b:4a:b2:8f:06:bc:42:e9:90:ac:9c: 8f:e7:a6:09:47:45:d4:20:91:a2:db:03:87:f0:06:36:8c:ad: d4:57:7b:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUANS8pzDf8ujQYOcUbSdGfE81SA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcwNzQwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWI3YmUyNmFjNmY1MDMwZDMyYjc0ZDE4NjhkNmQyMjI5 MjlmYmVhMGIwM2Q4ZDE1NGRkMTVlY2Q5NWMzNDEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhmhPUVU6v+9vPpLcLX6d3a7K4OLKlDxZGlBccuQyXAGi7 ab1b7DVEHYeic1kqsPoslJyDU0LF5AS8YF1P6EwFdrgwFDXNYgUxrX+rAsNIIk13 W4migZ5+oUS+FldTEGE3KYrxm30mgbb/l2Od2YTfsPwoxkJ5x+MaKqkteNzXgKRe q2Y01IfkO01dfKKvmleKtrJeS0cQPtB0dowuWGK6VLGTz/BbBddbdVf6eeRqmOoG roXOdRD3w/nUzucDR7F0VfTy8V6v+Fx/Hdp+LXmTApzw/Wj2u7u/+0WcuvWgEEVD nqJBGUvRIrLN8BAr51tPBDS/qantBJkpIo3ZZ49BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0Oqz9I4PwpKpyweYWkPkhQYO7zkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3MTJkY2YyLTM2ODAtNDA3My05YTUyLWQ0YTlkM2I4MDcwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI23AQwDQYJKoZIhvcNAQELBQADggEBAFmXWberTBeWTaa7V1pyTLC648jM sGNUWVIUlqTZUPM5zi3KJ6fClbIK5/jHG8nEHvIIEcI1dMms4eTOGh/BEi3cOqI0 Z9+wLkLchnmPrIYrktnvgnyaTrFRCUJhtd2iZ65CAs1U5JzVUkGvVBIv2G+hak7W lt+MtBiBOITrbg+X+3g3D4qs0fB5L4x88QmXD3KMCEPvqHg2D3FPRNcUNq8dVYED 1l5zElNl9Do5WiMDgnyHNkfO6NvtvsHe7Gty2g8tYog5Fl0gCI4nZZIEDjHC4+A8 8O/QNQFXzGHC3v0LSrKPBrxC6ZCsnI/npglHRdQgkaLbA4fwBjaMrdRXe1c= -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:33 2025 by rpki-client