$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49e468e7-e4fc-4927-9b59-e4026263fff4.roa File: 49e468e7-e4fc-4927-9b59-e4026263fff4.roa (raw, json) Hash identifier: hiJAE4YO6NzuUqgxoMaWzQbHoSP9UxwCkKM3cuowyIc= Subject key identifier: 62:1E:FA:02:17:0F:55:52:88:47:4E:B5:0E:4C:B4:11:26:05:6E:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CE78F6728666C933737DDF24C6C9387154C2E56 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49e468e7-e4fc-4927-9b59-e4026263fff4.roa Signing time: Thu 16 Oct 2025 23:25:11 +0000 ROA not before: Thu 16 Oct 2025 23:25:11 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e7:8f:67:28:66:6c:93:37:37:dd:f2:4c:6c:93:87:15:4c:2e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 23:25:11 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=98bb32b754320cf0f0ca1729d3cf2b906aa831d4a00af517c1827dd54f142b11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:ac:37:56:08:66:31:13:fa:c0:89:b9:9a: c9:1a:91:0f:a6:76:02:40:3a:d1:4d:6b:f9:b0:1b: 28:8a:42:44:7c:29:4d:42:26:96:3f:6a:4b:d1:6e: 05:a7:39:5a:e7:e8:be:ac:e4:5a:32:13:87:54:93: ec:1f:de:d3:a7:59:61:4e:fc:3d:58:1d:66:77:87: d9:7b:c7:4f:b0:1a:c9:76:d9:af:21:50:50:c5:f7: ee:85:f3:f4:fd:11:6f:a3:a3:22:aa:4b:ba:1f:da: 69:f9:4f:f3:71:8a:05:df:a3:9e:83:8f:64:72:ad: 20:c6:82:30:21:8c:54:75:2d:f1:23:ac:43:40:a3: 9f:59:35:ac:89:f0:49:2b:f4:01:e8:0c:99:35:59: 72:80:11:be:41:e2:40:67:32:8e:2d:ff:4a:4c:4e: 89:16:d8:6e:29:d3:10:ca:18:f8:e2:66:a8:a2:2a: 0c:e3:12:38:06:7c:51:fd:ac:b9:24:35:cb:98:f0: 72:5b:d4:f3:45:0c:09:03:23:43:4a:68:de:d8:df: c1:fa:5d:44:07:b3:a0:7a:61:2f:af:c0:e6:7f:c3: 86:eb:9d:6c:ee:7a:82:69:91:e7:cd:54:d3:ca:a6: 92:89:a1:cf:df:f9:f4:e1:e1:1b:8a:37:f8:7b:42: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1E:FA:02:17:0F:55:52:88:47:4E:B5:0E:4C:B4:11:26:05:6E:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49e468e7-e4fc-4927-9b59-e4026263fff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.8.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:da:02:be:c4:d0:80:e8:5e:3b:ee:2c:86:55:21:47:4d:29: 7a:35:b8:f1:e5:80:34:d7:e0:0a:30:7d:b6:5b:38:90:2d:90: e6:43:f6:98:5c:44:64:d6:e0:59:89:0e:f4:14:72:7b:a1:92: ab:90:33:87:5c:ff:04:1d:d8:9c:af:9e:68:b4:d5:5b:11:31: 8d:07:3c:82:94:e5:24:e8:ce:7c:42:9d:04:cf:25:b9:82:02: e0:76:e0:28:72:2b:e2:cd:35:91:71:f7:19:22:8a:d6:3d:4d: c1:1e:6a:2c:dd:a6:6f:a6:97:3d:60:09:8d:09:a0:54:55:29: d2:9e:5a:e9:e2:e6:8d:b3:1d:9f:91:d8:8d:e4:d8:81:7f:18: 1a:93:cf:59:9b:46:c4:a9:1a:d3:49:1e:ac:ba:bb:81:e3:0d: 08:dc:90:3b:41:af:92:96:d3:55:ac:b2:93:09:80:f3:e7:7b: e2:4e:a9:cb:84:5e:26:db:5f:5f:57:e4:c1:3f:b1:4f:f8:7a: 01:dc:d5:9e:31:7a:4f:95:08:6d:ba:a0:10:98:11:c5:8b:ba: 00:61:b0:75:51:5d:05:f4:14:6d:44:a2:65:77:93:94:02:ca: c7:8e:4e:17:62:46:96:ce:4b:c0:33:50:3e:b3:3f:7a:80:b0: b7:31:e4:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULOePZyhmbJM3N93yTGyThxVMLlYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjMyNTExWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGJiMzJiNzU0MzIwY2YwZjBjYTE3MjlkM2NmMmI5MDZh YTgzMWQ0YTAwYWY1MTdjMTgyN2RkNTRmMTQyYjExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtTqw3VghmMRP6wIm5mskakQ+mdgJAOtFNa/mwGyiKQkR8 KU1CJpY/akvRbgWnOVrn6L6s5FoyE4dUk+wf3tOnWWFO/D1YHWZ3h9l7x0+wGsl2 2a8hUFDF9+6F8/T9EW+joyKqS7of2mn5T/NxigXfo56Dj2RyrSDGgjAhjFR1LfEj rENAo59ZNayJ8Ekr9AHoDJk1WXKAEb5B4kBnMo4t/0pMTokW2G4p0xDKGPjiZqii KgzjEjgGfFH9rLkkNcuY8HJb1PNFDAkDI0NKaN7Y38H6XUQHs6B6YS+vwOZ/w4br nWzueoJpkefNVNPKppKJoc/f+fTh4RuKN/h7Qkg9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYh76AhcPVVKIR061Dky0ESYFbqMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5ZTQ2OGU3LWU0ZmMtNDkyNy05YjU5LWU0MDI2MjYzZmZmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2wAgwDQYJKoZIhvcNAQELBQADggEBAE7aAr7E0IDoXjvuLIZVIUdNKXo1 uPHlgDTX4AowfbZbOJAtkOZD9phcRGTW4FmJDvQUcnuhkquQM4dc/wQd2Jyvnmi0 1VsRMY0HPIKU5SToznxCnQTPJbmCAuB24ChyK+LNNZFx9xkiitY9TcEeaizdpm+m lz1gCY0JoFRVKdKeWuni5o2zHZ+R2I3k2IF/GBqTz1mbRsSpGtNJHqy6u4HjDQjc kDtBr5KW01WsspMJgPPne+JOqcuEXibbX19X5ME/sU/4egHc1Z4xek+VCG26oBCY EcWLugBhsHVRXQX0FG1EomV3k5QCyseOThdiRpbOS8AzUD6zP3qAsLcx5JI= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:05 2025 by rpki-client