$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/435e89e7-b35a-4d73-b299-4331d9370ac6.roa File: 435e89e7-b35a-4d73-b299-4331d9370ac6.roa (raw, json) Hash identifier: 9RZsIVYrs+QaaFcKYM/NqbzmdT+W25CJ9HUSKXKcwdg= Subject key identifier: FD:04:D3:02:08:D5:FC:13:0A:97:93:2A:95:00:3D:96:B7:F8:75:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A5DED1BAF323DA782D310C49782E0EB92CDBF4A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/435e89e7-b35a-4d73-b299-4331d9370ac6.roa Signing time: Fri 10 Oct 2025 16:47:43 +0000 ROA not before: Fri 10 Oct 2025 16:47:43 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.185.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5d:ed:1b:af:32:3d:a7:82:d3:10:c4:97:82:e0:eb:92:cd:bf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:47:43 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=aa793ab8e0130454a4e69e320fba8464a368f321696c5872672e3b4fabd34dc5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:b4:bb:0a:3e:c2:92:58:f3:d5:db:ea:cc: 07:ed:ad:4a:59:63:f3:27:59:70:02:af:04:b8:85: 91:c5:12:02:c0:9a:76:7e:9f:51:bb:21:ec:14:07: 8e:74:42:b1:63:70:fb:62:48:f2:67:3f:f7:89:36: c1:e0:c8:df:3b:f3:66:7f:24:05:e0:13:84:6c:5b: c7:31:f2:b3:39:d8:02:8e:cc:8f:26:28:8f:34:90: 30:9f:eb:fa:0a:28:1e:ee:97:8c:20:e3:ff:83:91: aa:06:d9:db:a3:af:9d:b2:37:cb:a0:ad:2e:61:5e: 45:b6:55:25:61:46:12:4d:98:04:f9:66:45:a8:8a: 85:f2:66:14:9e:06:c7:47:be:a3:91:64:60:01:0b: 46:47:92:40:f4:62:3e:5b:54:04:f3:61:5a:da:f4: 30:10:a7:70:f3:f2:72:90:10:4e:79:37:8d:a3:69: 6f:d6:28:73:13:d1:16:f9:31:05:85:c5:bf:b4:ec: e0:75:2e:ed:b0:e3:a0:b5:a8:6a:47:76:2b:e1:ee: 48:ff:a2:7b:89:46:07:cc:a1:e0:17:cb:30:98:0d: bc:c3:17:a4:aa:0a:19:97:17:06:81:0d:f2:86:aa: 06:75:d3:7d:ca:a5:b2:bb:36:44:f9:27:38:b9:81: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:04:D3:02:08:D5:FC:13:0A:97:93:2A:95:00:3D:96:B7:F8:75:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/435e89e7-b35a-4d73-b299-4331d9370ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.185.128.0/18 Signature Algorithm: sha256WithRSAEncryption 17:a5:d9:1f:34:61:17:ca:9c:49:d1:ff:64:e0:b2:f9:1d:2a: ee:5e:8f:7a:14:53:fd:3f:37:f6:f6:87:bc:94:53:8f:90:0b: d7:d2:c3:7a:5c:e8:bd:7d:06:ed:0f:0e:73:74:bc:4b:8f:47: 97:69:84:bc:fd:f2:d2:c8:ac:80:2f:90:1a:30:02:6e:49:a9: d9:9d:d3:05:a7:3e:9b:49:31:f5:ee:41:88:d9:f5:69:e2:01: a1:c0:33:25:13:67:4c:5f:e1:5d:dc:98:62:e8:0f:c6:31:21: 3b:67:09:eb:33:6f:74:26:6e:71:e0:ac:58:34:49:79:01:d1: 9b:46:1e:c5:3e:3c:c7:20:7b:ab:c9:1d:18:7b:9e:42:5d:3b: 3a:8b:40:63:0d:f1:55:14:9d:1a:f4:b1:6f:9f:9d:d8:66:d1: 52:c9:80:2a:53:2d:00:01:c5:ef:0b:b4:d0:bc:c1:ff:1d:38: de:94:86:51:bb:0c:7b:38:c8:3e:10:cb:4b:cf:7e:b0:f6:43: 38:9a:b7:2b:56:95:92:86:f0:cf:33:74:0f:70:55:86:61:04: 7b:3d:63:83:65:d1:44:d5:b6:cd:13:a9:00:3d:f8:2b:94:9e: 23:31:dc:47:c2:7f:7a:1a:a0:00:3f:19:fc:01:ed:d3:04:17: f5:74:2d:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUel3tG68yPaeC0xDEl4Lg65LNv0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTY0NzQzWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTc5M2FiOGUwMTMwNDU0YTRlNjllMzIwZmJhODQ2NGEz NjhmMzIxNjk2YzU4NzI2NzJlM2I0ZmFiZDM0ZGM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCytbS7Cj7Ckljz1dvqzAftrUpZY/MnWXACrwS4hZHFEgLA mnZ+n1G7IewUB450QrFjcPtiSPJnP/eJNsHgyN8782Z/JAXgE4RsW8cx8rM52AKO zI8mKI80kDCf6/oKKB7ul4wg4/+DkaoG2dujr52yN8ugrS5hXkW2VSVhRhJNmAT5 ZkWoioXyZhSeBsdHvqORZGABC0ZHkkD0Yj5bVATzYVra9DAQp3Dz8nKQEE55N42j aW/WKHMT0Rb5MQWFxb+07OB1Lu2w46C1qGpHdivh7kj/onuJRgfMoeAXyzCYDbzD F6SqChmXFwaBDfKGqgZ1033KpbK7NkT5Jzi5gTg/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/QTTAgjV/BMKl5MqlQA9lrf4dXkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQzNWU4OWU3LWIzNWEtNGQ3My1iMjk5LTQzMzFkOTM3MGFjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2uYAwDQYJKoZIhvcNAQELBQADggEBABel2R80YRfKnEnR/2TgsvkdKu5e j3oUU/0/N/b2h7yUU4+QC9fSw3pc6L19Bu0PDnN0vEuPR5dphLz98tLIrIAvkBow Am5Jqdmd0wWnPptJMfXuQYjZ9WniAaHAMyUTZ0xf4V3cmGLoD8YxITtnCeszb3Qm bnHgrFg0SXkB0ZtGHsU+PMcge6vJHRh7nkJdOzqLQGMN8VUUnRr0sW+fndhm0VLJ gCpTLQABxe8LtNC8wf8dON6UhlG7DHs4yD4Qy0vPfrD2QziatytWlZKG8M8zdA9w VYZhBHs9Y4Nl0UTVts0TqQA9+CuUniMx3EfCf3oaoAA/GfwB7dMEF/V0LQQ= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:13 2025 by rpki-client