$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47620158-9a75-43ff-afab-29d54a1c83e2.roa File: 47620158-9a75-43ff-afab-29d54a1c83e2.roa (raw, json) Hash identifier: febyNzkqpHsY6L7CLzp2RmuPxytQirgTgX759NEQIgQ= Subject key identifier: 35:07:40:FF:C0:FA:36:A5:7C:69:83:06:8F:5F:1D:9E:C7:1D:43:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 363AED54F7D1A52D00E0A5844CBB885F5300C728 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47620158-9a75-43ff-afab-29d54a1c83e2.roa Signing time: Fri 19 Sep 2025 15:51:16 +0000 ROA not before: Fri 19 Sep 2025 15:51:16 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3a:ed:54:f7:d1:a5:2d:00:e0:a5:84:4c:bb:88:5f:53:00:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 15:51:16 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=bc4cc0b164712952e01293265c00e32b134356f3c2f3c050684ae30c0a2123d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c9:ce:d5:eb:39:62:b0:de:b4:30:32:ae:3c: de:db:30:f7:05:13:29:17:3f:c6:3e:6e:18:1b:c7: 5b:2b:fc:d2:57:8a:1d:fc:4a:c8:0d:e0:31:73:a8: 07:06:34:40:ba:77:15:0b:ae:99:f7:ef:0b:dc:bb: 5e:9b:c2:67:89:26:45:62:f8:24:24:93:b4:cd:85: 4b:81:15:76:15:4c:a1:cb:74:0d:81:58:50:96:6a: a6:2d:f5:11:43:90:53:c9:21:b7:0d:fd:b7:68:8c: c4:23:5a:ab:d8:24:ab:c1:94:46:b9:8f:7d:ce:fe: 1c:03:92:26:0f:dc:da:38:dc:0d:41:6e:8e:01:2b: e5:43:74:f8:74:58:1a:95:d3:a8:5b:13:a9:f1:04: ed:62:2f:0e:1a:5f:04:56:1e:1b:7a:d3:de:d1:f9: 21:b3:36:5a:5f:d5:bf:77:87:4e:18:31:a4:23:c2: 09:64:6f:c0:fb:98:c4:ca:af:0d:30:bb:74:b2:a7: a7:a0:36:21:32:9c:5b:e8:3b:a0:a7:fd:da:52:00: 6a:8f:01:5d:ad:87:06:fb:0d:cd:43:54:81:f2:42: 52:d9:49:90:2b:cd:2a:eb:ac:7e:cf:c8:bc:6c:33: 30:51:06:e0:0a:3f:f4:ff:64:f2:ae:21:75:a4:5d: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:07:40:FF:C0:FA:36:A5:7C:69:83:06:8F:5F:1D:9E:C7:1D:43:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47620158-9a75-43ff-afab-29d54a1c83e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:e8:a2:59:2c:67:4b:e9:23:c7:8c:fa:d7:aa:38:d9:65:b7: 8e:b0:24:7b:d0:02:64:fb:d3:ad:68:c0:f2:df:03:1a:e2:b5: b3:d1:f6:ec:eb:90:f2:ac:a0:ff:74:2a:c0:ec:f2:97:f4:f7: 2c:67:f2:e1:58:e9:17:43:39:8e:75:67:cd:da:84:df:61:fc: c7:41:28:d5:64:a3:93:f6:17:a3:f5:8f:b9:57:79:ca:cd:a7: ee:84:bc:c3:78:c0:2a:b1:a7:b0:b5:5a:17:0a:cb:af:84:2c: 48:2c:4a:98:b0:e7:4f:53:7d:05:30:eb:1c:3c:0a:de:d6:5a: 1a:7e:b2:73:17:83:25:6d:7f:99:2e:aa:9b:a5:2f:33:62:04: 09:5c:d1:6c:61:70:a0:df:80:68:88:3f:e8:13:f3:1b:56:ce: 88:56:86:7e:98:11:27:e7:42:ea:13:8d:ac:48:b8:a1:1c:1b: 3f:37:70:4e:72:74:e7:86:08:9b:ec:4c:eb:24:81:54:d5:f6: 9c:13:07:cb:a5:45:3d:3f:99:b6:23:57:84:76:bd:3c:19:e1: b8:2b:ab:7f:97:66:92:cf:d8:10:2f:5a:b4:f9:88:75:bc:ed: e1:38:25:df:29:4d:ce:8b:4e:68:d2:18:3c:2d:ae:4b:01:da: 7d:66:81:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNjrtVPfRpS0A4KWETLuIX1MAxygwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTU1MTE2WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzRjYzBiMTY0NzEyOTUyZTAxMjkzMjY1YzAwZTMyYjEz NDM1NmYzYzJmM2MwNTA2ODRhZTMwYzBhMjEyM2QzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsyc7V6zlisN60MDKuPN7bMPcFEykXP8Y+bhgbx1sr/NJX ih38SsgN4DFzqAcGNEC6dxULrpn37wvcu16bwmeJJkVi+CQkk7TNhUuBFXYVTKHL dA2BWFCWaqYt9RFDkFPJIbcN/bdojMQjWqvYJKvBlEa5j33O/hwDkiYP3No43A1B bo4BK+VDdPh0WBqV06hbE6nxBO1iLw4aXwRWHht6097R+SGzNlpf1b93h04YMaQj wglkb8D7mMTKrw0wu3Syp6egNiEynFvoO6Cn/dpSAGqPAV2thwb7Dc1DVIHyQlLZ SZArzSrrrH7PyLxsMzBRBuAKP/T/ZPKuIXWkXUuBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNQdA/8D6NqV8aYMGj18dnscdQ3kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3NjIwMTU4LTlhNzUtNDNmZi1hZmFiLTI5ZDU0YTFjODNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2wzANBgkqhkiG9w0BAQsFAAOCAQEACuiiWSxnS+kjx4z616o42WW3jrAk e9ACZPvTrWjA8t8DGuK1s9H27OuQ8qyg/3QqwOzyl/T3LGfy4VjpF0M5jnVnzdqE 32H8x0Eo1WSjk/YXo/WPuVd5ys2n7oS8w3jAKrGnsLVaFwrLr4QsSCxKmLDnT1N9 BTDrHDwK3tZaGn6ycxeDJW1/mS6qm6UvM2IECVzRbGFwoN+AaIg/6BPzG1bOiFaG fpgRJ+dC6hONrEi4oRwbPzdwTnJ054YIm+xM6ySBVNX2nBMHy6VFPT+ZtiNXhHa9 PBnhuCurf5dmks/YEC9atPmIdbzt4Tgl3ylNzotOaNIYPC2uSwHafWaB6Q== -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:45 2025 by rpki-client