$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa File: 471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa (raw, json) Hash identifier: NL6PwpIsFDFU1LY0oz36K+YnImCjvmazyMJwLA3jPUY= Subject key identifier: F4:36:DA:6A:87:9D:27:4A:F4:87:61:AC:6B:80:53:27:EB:7B:F7:0C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7EA3141CA03F3FBCF976E238974E37F472E0013E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa Signing time: Fri 19 Sep 2025 16:40:38 +0000 ROA not before: Fri 19 Sep 2025 16:40:38 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a3:14:1c:a0:3f:3f:bc:f9:76:e2:38:97:4e:37:f4:72:e0:01:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 16:40:38 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=afa6a70c4925e9666299fdca536680e5aa760a1ad3d0e1b11249d94e3550c336, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:00:92:d8:5b:bf:61:a1:20:00:c5:7c:7f: 83:93:41:25:26:52:2e:b5:0a:e1:ab:f6:1a:02:6c: 4c:40:54:8c:8d:bf:14:1f:ea:5c:f6:e6:d6:79:5c: 65:81:92:84:45:3d:29:40:6d:47:c6:57:bd:e8:0f: 7c:79:cb:2f:cc:c7:58:13:16:51:b8:f5:a3:96:f8: f2:be:42:f8:23:78:48:0e:10:92:8b:d9:06:0c:03: 40:95:17:66:1a:1a:d6:7c:c8:ad:49:03:19:eb:19: b2:98:ed:22:1b:34:0b:71:1b:64:f2:c9:e1:2f:19: 51:f2:df:dd:c3:1a:bf:32:9d:01:f1:5c:fd:fc:72: f9:ff:27:87:42:02:c2:5a:a8:06:1b:12:01:57:4f: f4:40:98:e0:35:38:b2:dd:31:9c:16:8d:5f:e5:65: fa:3b:6f:f6:c6:a4:da:0f:91:cf:49:17:27:3c:2f: 58:13:ff:a0:50:47:0a:7b:49:d4:a4:2e:e2:d1:0f: 55:cd:4e:75:f2:ba:77:f6:df:3d:2b:ca:1f:15:ff: 11:6f:81:7e:71:54:08:fe:34:45:9c:c3:aa:61:95: bc:57:32:c8:4d:f5:2c:7b:83:2e:4b:09:29:b4:67: 3a:f7:6b:56:70:c5:6e:42:fc:65:1e:04:f6:8d:6b: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:36:DA:6A:87:9D:27:4A:F4:87:61:AC:6B:80:53:27:EB:7B:F7:0C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.224.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:d6:aa:49:5a:03:7f:ae:25:8d:d4:91:31:78:da:d6:11:a1: af:8f:be:9e:5e:3d:55:ab:c4:dd:5d:66:68:75:6b:d4:4e:c7: d5:ce:f4:8f:ce:e9:e8:54:33:fa:5c:07:46:98:ed:0c:b9:1d: 8f:41:0b:9c:f1:ae:ed:c6:13:ba:41:0c:37:66:dc:fb:2a:dd: 28:94:bc:5f:c3:fe:44:3c:2b:f7:a3:13:ca:4a:10:0b:f9:9e: 3f:57:c1:34:a7:13:2d:c2:48:47:e1:65:75:d5:25:19:bd:5d: cf:fc:ce:03:9f:cc:e0:7b:e6:16:d3:03:75:7b:9b:f2:85:ce: 2f:f5:74:47:79:29:ef:0a:6d:b6:34:e4:b2:7b:5e:e5:f9:43: 51:22:39:fb:a7:4d:4d:35:b6:8f:6b:0e:03:47:e1:35:00:47: 36:94:8b:e0:5a:05:a6:a7:86:77:df:d0:cb:9e:f5:d8:a3:ed: a2:66:97:4e:38:b8:be:08:a7:12:46:a1:fd:b1:1e:13:e8:6b: 81:3c:0c:96:98:d6:3a:d6:29:75:fc:b7:ea:94:0c:23:9a:b2: 1f:9c:a0:48:ab:ba:05:6b:07:05:7b:73:55:86:0a:59:35:16: 5f:06:ad:81:77:a6:09:aa:a1:05:f3:10:89:7c:21:c3:d2:1b: 03:d9:65:c4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfqMUHKA/P7z5duI4l0439HLgAT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTY0MDM4WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmE2YTcwYzQ5MjVlOTY2NjI5OWZkY2E1MzY2ODBlNWFh NzYwYTFhZDNkMGUxYjExMjQ5ZDk0ZTM1NTBjMzM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCVQCS2Fu/YaEgAMV8f4OTQSUmUi61CuGr9hoCbExAVIyN vxQf6lz25tZ5XGWBkoRFPSlAbUfGV73oD3x5yy/Mx1gTFlG49aOW+PK+QvgjeEgO EJKL2QYMA0CVF2YaGtZ8yK1JAxnrGbKY7SIbNAtxG2TyyeEvGVHy393DGr8ynQHx XP38cvn/J4dCAsJaqAYbEgFXT/RAmOA1OLLdMZwWjV/lZfo7b/bGpNoPkc9JFyc8 L1gT/6BQRwp7SdSkLuLRD1XNTnXyunf23z0ryh8V/xFvgX5xVAj+NEWcw6phlbxX MshN9Sx7gy5LCSm0Zzr3a1ZwxW5C/GUeBPaNa0FDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9DbaaoedJ0r0h2Gsa4BTJ+t79wwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3MTQ4NWMzLTg2ODgtNGExNC04Yzg4LThkMmVjYWVkZWViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA24DANBgkqhkiG9w0BAQsFAAOCAQEAHNaqSVoDf64ljdSRMXja1hGhr4++ nl49VavE3V1maHVr1E7H1c70j87p6FQz+lwHRpjtDLkdj0ELnPGu7cYTukEMN2bc +yrdKJS8X8P+RDwr96MTykoQC/meP1fBNKcTLcJIR+FlddUlGb1dz/zOA5/M4Hvm FtMDdXub8oXOL/V0R3kp7wpttjTksnte5flDUSI5+6dNTTW2j2sOA0fhNQBHNpSL 4FoFpqeGd9/Qy5712KPtomaXTji4vginEkah/bEeE+hrgTwMlpjWOtYpdfy36pQM I5qyH5ygSKu6BWsHBXtzVYYKWTUWXwatgXemCaqhBfMQiXwhw9IbA9llxA== -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:37 2025 by rpki-client