$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ae02283-fe16-4dd9-87a6-a725e859960f.roa File: 4ae02283-fe16-4dd9-87a6-a725e859960f.roa (raw, json) Hash identifier: 7+PO1XLTHoZsIc329gBT8E6BhcEdDC6QM6mCv5AUJ6A= Subject key identifier: BF:AA:CC:F2:AE:78:77:76:E0:15:6E:A8:D1:EB:9F:39:1F:EF:03:B6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08C275E99D1923EFB68E229D9C33105D1BDC22 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ae02283-fe16-4dd9-87a6-a725e859960f.roa Signing time: Fri 26 Sep 2025 03:02:54 +0000 ROA not before: Fri 26 Sep 2025 03:02:54 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c2:75:e9:9d:19:23:ef:b6:8e:22:9d:9c:33:10:5d:1b:dc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 03:02:54 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=4c669dfc544d36c8721f6639e6fa5d4aae0f0c58fe8f1fcefd045d865e316f7e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:0a:f5:db:6f:87:ec:28:04:9d:02:a9:6e: 8d:df:ba:f8:c1:ad:dc:7b:59:1b:ce:2f:08:91:25: 2a:9d:f1:40:f8:db:55:26:8d:7b:ec:67:37:b1:2d: fd:6a:17:3a:49:11:47:c0:86:71:3e:23:3a:c0:b6: 90:33:5e:b4:f6:ef:16:37:e5:5b:67:73:80:d6:57: 1a:dd:7b:72:52:c6:00:2b:b5:4e:05:53:74:05:f3: f0:38:99:5e:b1:45:21:09:5e:8b:c9:e9:f4:fd:f9: cb:f7:00:7e:3e:73:46:7a:e6:c3:ba:e0:25:cb:c6: d7:d1:c0:7a:12:af:5a:2a:dc:55:5a:f8:f2:83:31: a8:e9:dc:53:50:22:df:48:cb:92:7b:ba:27:b3:f4: 7e:f4:68:94:73:66:fc:45:e2:46:8b:19:46:cd:09: 63:77:cc:c4:96:f4:37:90:bc:aa:17:0e:fa:8f:c3: df:fb:80:63:15:bf:f0:59:47:ec:0b:89:1b:77:45: e4:a6:b1:c8:ce:8c:ad:75:03:f7:af:04:e7:61:97: aa:7e:5f:c3:54:5a:f7:56:50:f6:a8:af:8d:61:29: 32:b1:50:b2:20:9f:9d:ce:f0:22:45:e7:3a:cd:44: e7:f5:c5:fe:23:8d:14:a0:e3:2a:27:7f:f7:89:04: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:CC:F2:AE:78:77:76:E0:15:6E:A8:D1:EB:9F:39:1F:EF:03:B6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ae02283-fe16-4dd9-87a6-a725e859960f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.196.0/22 Signature Algorithm: sha256WithRSAEncryption 13:20:a9:64:b5:b1:d4:f8:95:1c:76:1f:40:69:7f:a2:30:36: 9e:cc:e4:46:a7:74:72:fa:9a:b9:df:53:df:d2:b7:74:9d:a4: f7:a3:aa:5d:de:a5:64:24:83:69:28:b2:e8:be:03:90:3a:67: 97:04:9b:70:52:e6:2f:ce:a6:b6:5e:3c:94:f9:4a:aa:c1:5c: d4:1b:2f:df:7c:22:8e:42:f7:7a:63:8d:ef:0f:37:ba:15:21: 76:b3:b4:aa:cb:16:15:98:be:8f:35:18:82:99:c2:db:ac:7b: 3f:9a:f2:3d:fa:71:35:8e:84:22:41:e2:80:7d:2c:f5:a9:f3: 88:a9:11:72:d0:18:4f:be:cb:cf:3d:eb:84:89:21:4b:d4:42: 76:52:fa:c3:aa:f0:45:28:a0:1c:19:60:a2:37:b1:2d:e1:e2: 52:60:85:2c:ac:49:bb:66:ad:7a:77:17:1b:59:d7:5c:b5:8f: 30:67:e2:00:02:75:9a:b4:b2:7e:ca:41:1e:e0:ce:43:93:4b: 60:8b:fe:2e:3d:14:75:f3:86:3d:31:f2:f9:0c:14:33:5a:e4: c5:3a:de:0c:34:c7:35:10:08:80:4a:cc:a8:97:8f:f0:ab:96: 17:0d:9b:76:78:50:1a:a7:2e:8f:be:f0:3e:c6:94:05:ef:b8: 50:c7:e5:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITCMJ16Z0ZI++2jiKdnDMQXRvcIjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjYwMzAyNTRaFw0yNTEwMzEyMzU5NTla MHoxSTBHBgNVBAUTQDRjNjY5ZGZjNTQ0ZDM2Yzg3MjFmNjYzOWU2ZmE1ZDRhYWUw ZjBjNThmZThmMWZjZWZkMDQ1ZDg2NWUzMTZmN2UxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAI5ECvXbb4fsKASdAqlujd+6+MGt3HtZG84vCJElKp3xQPjb VSaNe+xnN7Et/WoXOkkRR8CGcT4jOsC2kDNetPbvFjflW2dzgNZXGt17clLGACu1 TgVTdAXz8DiZXrFFIQlei8np9P35y/cAfj5zRnrmw7rgJcvG19HAehKvWircVVr4 8oMxqOncU1Ai30jLknu6J7P0fvRolHNm/EXiRosZRs0JY3fMxJb0N5C8qhcO+o/D 3/uAYxW/8FlH7AuJG3dF5KaxyM6MrXUD968E52GXqn5fw1Ra91ZQ9qivjWEpMrFQ siCfnc7wIkXnOs1E5/XF/iONFKDjKid/94kEbMkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBS/qszyrnh3duAVbqjR6585H+8DtjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNGFlMDIyODMtZmUxNi00ZGQ5LTg3YTYtYTcyNWU4NTk5NjBmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAjbvxDANBgkqhkiG9w0BAQsFAAOCAQEAEyCpZLWx1PiVHHYfQGl/ojA2nszk Rqd0cvqaud9T39K3dJ2k96OqXd6lZCSDaSiy6L4DkDpnlwSbcFLmL86mtl48lPlK qsFc1Bsv33wijkL3emON7w83uhUhdrO0qssWFZi+jzUYgpnC26x7P5ryPfpxNY6E IkHigH0s9anziKkRctAYT77Lzz3rhIkhS9RCdlL6w6rwRSigHBlgojexLeHiUmCF LKxJu2atencXG1nXXLWPMGfiAAJ1mrSyfspBHuDOQ5NLYIv+Lj0UdfOGPTHy+QwU M1rkxTreDDTHNRAIgErMqJeP8KuWFw2bdnhQGqcuj77wPsaUBe+4UMflfw== -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:28 2025 by rpki-client