$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe7b547-84a9-488c-8d6b-3c05cf783187.roa File: 3fe7b547-84a9-488c-8d6b-3c05cf783187.roa (raw, json) Hash identifier: Ou+/rxD1umxe1qVeNX1fB09rTzcJ8OT69GgjVyyCBaI= Subject key identifier: AB:A6:FA:12:D6:B3:16:5E:8A:C1:4A:82:F3:9B:83:CC:B9:1D:0B:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7871217342CCE20BF1F301F6D76B78E72829FEFF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe7b547-84a9-488c-8d6b-3c05cf783187.roa Signing time: Tue 23 Sep 2025 17:22:08 +0000 ROA not before: Tue 23 Sep 2025 17:22:08 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:71:21:73:42:cc:e2:0b:f1:f3:01:f6:d7:6b:78:e7:28:29:fe:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 17:22:08 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=54cdd0c0f0156812d52b7716caa108d0089a196893f061e9390ddecfd6bc22a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:72:fe:da:50:cc:17:45:e7:0d:7c:89:af: dd:d6:fe:b5:15:d5:2a:23:1b:a1:ea:ec:fb:62:1d: 9a:c1:1a:4e:ec:09:70:21:f2:85:42:8a:a4:03:1f: 60:a2:4e:f6:0e:35:e6:3a:5d:07:82:9b:49:bf:c0: fa:b0:59:19:64:a7:6b:00:7f:ed:f6:d5:26:1d:84: d8:c2:9c:c3:0f:77:9c:76:32:38:84:70:d5:0d:86: 7a:06:81:d0:39:77:40:d1:d4:2a:6a:39:85:31:7a: 5f:ad:81:bf:00:33:43:2d:03:45:b9:86:32:bb:7d: 73:1e:67:fd:06:63:04:04:67:9b:e0:c4:81:e6:02: 71:97:93:fa:da:f3:7f:35:90:75:37:ad:2c:30:ad: 39:c2:f9:98:9b:f0:b6:85:65:aa:d0:cd:2e:2a:86: 55:fa:bc:c3:b1:0f:9a:09:0f:54:16:66:1d:04:bf: 56:f9:a9:5c:f4:23:3f:77:a6:f0:84:97:f1:e5:54: 00:95:fb:de:0b:40:8d:dc:5b:46:4e:88:46:30:8e: a6:19:06:81:42:44:05:27:9c:e9:85:fb:cc:62:b3: 61:cd:82:1a:0c:a8:86:f1:6b:ff:9c:85:58:72:a8: 48:56:48:d2:0e:78:37:f2:bb:ec:41:7e:45:a2:06: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A6:FA:12:D6:B3:16:5E:8A:C1:4A:82:F3:9B:83:CC:B9:1D:0B:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe7b547-84a9-488c-8d6b-3c05cf783187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.110.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ab:7c:97:3a:93:26:b6:6d:a7:36:63:d1:b5:68:4f:05:a4: 81:41:f7:61:ff:ef:f4:ba:50:ff:e2:2d:65:58:2a:18:2e:ff: ae:52:f8:f3:e6:9e:db:d8:7c:f4:ac:bb:9f:3d:fd:0c:70:26: 8e:53:24:a7:e4:53:a4:40:ba:e1:73:a8:4a:92:b8:9c:24:f6: 41:8e:72:31:08:d6:54:9a:4c:65:64:c2:8f:e5:fd:ee:a4:6b: 33:f1:3a:d2:aa:a9:c0:96:48:5d:a4:75:a4:1f:09:d9:82:1b: 9f:23:ac:de:4d:ee:d6:d3:b0:8a:84:aa:1e:3b:3a:81:e8:5a: 8a:00:38:34:f5:71:07:5a:7e:0a:8f:65:25:a9:99:dd:b4:15: a8:fd:a2:e2:24:88:bb:95:aa:fe:65:d7:98:1c:7f:55:5d:23: 50:30:de:83:e8:84:8c:f8:88:80:bd:4b:fe:c1:80:f9:e1:e7: 2f:ae:1a:10:05:d2:9c:0d:be:40:b9:b5:f4:e4:94:eb:8f:b8: f9:51:32:a2:1e:a4:d8:11:b5:90:17:c5:f8:c1:1f:f6:cf:68: ed:f9:d0:54:3e:8c:d9:5f:6f:df:22:50:7b:b2:c8:18:93:c3: 16:58:f1:a9:d0:22:ec:92:f0:80:34:ca:47:09:43:58:4a:82: 95:79:1c:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeHEhc0LM4gvx8wH212t45ygp/v8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMTcyMjA4WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGNkZDBjMGYwMTU2ODEyZDUyYjc3MTZjYWExMDhkMDA4 OWExOTY4OTNmMDYxZTkzOTBkZGVjZmQ2YmMyMmEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4zXL+2lDMF0XnDXyJr93W/rUV1SojG6Hq7PtiHZrBGk7s CXAh8oVCiqQDH2CiTvYONeY6XQeCm0m/wPqwWRlkp2sAf+321SYdhNjCnMMPd5x2 MjiEcNUNhnoGgdA5d0DR1CpqOYUxel+tgb8AM0MtA0W5hjK7fXMeZ/0GYwQEZ5vg xIHmAnGXk/ra8381kHU3rSwwrTnC+Zib8LaFZarQzS4qhlX6vMOxD5oJD1QWZh0E v1b5qVz0Iz93pvCEl/HlVACV+94LQI3cW0ZOiEYwjqYZBoFCRAUnnOmF+8xis2HN ghoMqIbxa/+chVhyqEhWSNIOeDfyu+xBfkWiBkYfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq6b6EtazFl6KwUqC85uDzLkdC/owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmZTdiNTQ3LTg0YTktNDg4Yy04ZDZiLTNjMDVjZjc4MzE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28G4wDQYJKoZIhvcNAQELBQADggEBAFirfJc6kya2bac2Y9G1aE8FpIFB 92H/7/S6UP/iLWVYKhgu/65S+PPmntvYfPSsu589/QxwJo5TJKfkU6RAuuFzqEqS uJwk9kGOcjEI1lSaTGVkwo/l/e6kazPxOtKqqcCWSF2kdaQfCdmCG58jrN5N7tbT sIqEqh47OoHoWooAODT1cQdafgqPZSWpmd20Faj9ouIkiLuVqv5l15gcf1VdI1Aw 3oPohIz4iIC9S/7BgPnh5y+uGhAF0pwNvkC5tfTklOuPuPlRMqIepNgRtZAXxfjB H/bPaO350FQ+jNlfb98iUHuyyBiTwxZY8anQIuyS8IA0ykcJQ1hKgpV5HGo= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:18 2025 by rpki-client