$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa File: 5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa (raw, json) Hash identifier: AfsP8T+hYxP/OZXF0qZGOWLZpX4BzgzmIbqOtkLXU8o= Subject key identifier: 42:75:C2:E6:4E:A9:11:23:B7:90:4A:C5:73:BE:20:54:75:89:39:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09218213A3BA1E67564E5B1DB2195DC9B648B38B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa Signing time: Thu 16 Oct 2025 23:17:48 +0000 ROA not before: Thu 16 Oct 2025 23:17:48 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.207.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:21:82:13:a3:ba:1e:67:56:4e:5b:1d:b2:19:5d:c9:b6:48:b3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 23:17:48 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=6cdef9cee229adb42a2a725fb0f015c127154d8871c18da48537acd172dd07be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:3f:4c:a2:d8:32:64:33:f2:20:ff:16:10: 06:26:e8:84:a4:e0:ad:ae:f7:3d:64:b4:ac:34:dd: 99:49:d3:a0:55:7a:b0:9d:3f:d0:ed:68:d6:db:71: 23:85:db:71:8b:c8:28:0b:e2:d2:fb:98:11:45:da: f6:da:68:cd:04:f8:2b:66:fe:88:e6:3e:5b:36:7c: ce:ef:6f:72:ce:c7:63:3d:b4:b7:09:0a:95:1d:78: 6f:e1:01:6d:f8:a3:1a:22:eb:41:31:e3:a1:32:16: 13:18:56:5b:fd:05:22:47:fc:ac:18:75:a5:64:c0: 49:1d:ab:2d:bb:c2:5f:9f:1f:7d:3d:1f:9b:96:0f: 89:f2:4f:c3:03:12:c9:84:b9:37:40:19:dc:98:da: 75:2f:60:1e:e4:09:96:02:e6:25:83:85:af:54:6c: c5:05:c9:42:4b:f7:8d:0b:ec:15:52:02:ff:e3:2a: a2:7d:fb:3c:94:db:c8:13:2e:b2:f5:24:f1:3c:0d: 2d:d1:44:d0:ba:1f:51:90:04:6a:94:80:66:6d:b8: 99:a8:b7:fb:c1:37:aa:51:10:77:6f:98:17:57:51: 52:5b:34:7f:45:c5:bd:53:d5:7e:8d:ad:41:fc:c4: 70:01:14:8c:b6:ac:8b:6c:16:65:93:24:a1:78:f3: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:C2:E6:4E:A9:11:23:B7:90:4A:C5:73:BE:20:54:75:89:39:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.207.128.0/17 Signature Algorithm: sha256WithRSAEncryption 48:e1:c3:cd:1e:10:c3:5e:f8:a4:ce:7f:00:0d:6e:2d:64:5a: 77:69:0e:28:37:c3:bc:c1:bf:34:94:e3:89:56:e1:d9:14:52: 48:b0:50:ec:79:48:a0:54:24:a9:78:ad:4f:c0:0f:31:3c:2f: bb:82:8f:fe:06:04:49:01:e9:ab:1d:3a:ca:59:a0:56:6d:c9: 86:e0:90:b7:ac:28:f2:b8:06:a0:d1:12:e5:b9:66:df:16:f5: 55:1c:f8:07:65:1a:63:b8:39:30:16:44:1b:57:cf:90:ab:c9: 6c:a8:30:b6:d5:0f:c4:e0:a6:18:ba:4d:60:ff:ed:91:35:bd: 30:51:bb:37:de:80:e9:b4:89:29:05:f9:85:6b:cc:63:12:b0: 6b:58:1a:a9:57:ec:16:63:8b:f7:90:af:70:8c:68:e3:fc:fd: e4:38:62:cb:03:a1:8e:96:a3:20:b2:94:cb:be:60:1f:62:30: 1b:54:06:db:84:08:91:f1:62:9c:00:03:9d:42:cb:dd:ae:58: 70:db:50:7f:d4:e1:79:9f:ae:3b:2e:07:ce:58:1e:41:97:40: 6a:1f:4e:24:b8:0a:ba:29:4f:a7:97:60:73:d2:f8:eb:d8:39: 48:68:fd:bf:9b:4a:32:02:fe:74:7d:29:41:5b:31:eb:ad:2a: 46:d7:b3:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCSGCE6O6HmdWTlsdshldybZIs4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjMxNzQ4WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2RlZjljZWUyMjlhZGI0MmEyYTcyNWZiMGYwMTVjMTI3 MTU0ZDg4NzFjMThkYTQ4NTM3YWNkMTcyZGQwN2JlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCinT9MotgyZDPyIP8WEAYm6ISk4K2u9z1ktKw03ZlJ06BV erCdP9DtaNbbcSOF23GLyCgL4tL7mBFF2vbaaM0E+Ctm/ojmPls2fM7vb3LOx2M9 tLcJCpUdeG/hAW34oxoi60Ex46EyFhMYVlv9BSJH/KwYdaVkwEkdqy27wl+fH309 H5uWD4nyT8MDEsmEuTdAGdyY2nUvYB7kCZYC5iWDha9UbMUFyUJL940L7BVSAv/j KqJ9+zyU28gTLrL1JPE8DS3RRNC6H1GQBGqUgGZtuJmot/vBN6pREHdvmBdXUVJb NH9Fxb1T1X6NrUH8xHABFIy2rItsFmWTJKF4857BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQnXC5k6pESO3kErFc74gVHWJOTUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzViYzBmY2U2LTc2YjYtNDQwNi04MDA0LTU3YTU5YmZlMjhjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2z4AwDQYJKoZIhvcNAQELBQADggEBAEjhw80eEMNe+KTOfwANbi1kWndp Dig3w7zBvzSU44lW4dkUUkiwUOx5SKBUJKl4rU/ADzE8L7uCj/4GBEkB6asdOspZ oFZtyYbgkLesKPK4BqDREuW5Zt8W9VUc+AdlGmO4OTAWRBtXz5CryWyoMLbVD8Tg phi6TWD/7ZE1vTBRuzfegOm0iSkF+YVrzGMSsGtYGqlX7BZji/eQr3CMaOP8/eQ4 YssDoY6WoyCylMu+YB9iMBtUBtuECJHxYpwAA51Cy92uWHDbUH/U4XmfrjsuB85Y HkGXQGofTiS4CropT6eXYHPS+OvYOUho/b+bSjIC/nR9KUFbMeutKkbXs34= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:49 2025 by rpki-client