$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6157fc5b-7d60-4954-ba7f-3f3168aa8f3e.roa File: 6157fc5b-7d60-4954-ba7f-3f3168aa8f3e.roa (raw, json) Hash identifier: UxJDMVsJOsS9QucU7gtZND5nUkxZlY7pRIzkljjh7Gk= Subject key identifier: C7:60:8E:61:5A:E3:D9:54:F0:1D:00:6E:05:E3:7D:77:64:1E:EB:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E8CD474895436DD0BA5AD21F633A46F8568B6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6157fc5b-7d60-4954-ba7f-3f3168aa8f3e.roa Signing time: Thu 16 Oct 2025 19:48:16 +0000 ROA not before: Thu 16 Oct 2025 19:48:16 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.159.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8c:d4:74:89:54:36:dd:0b:a5:ad:21:f6:33:a4:6f:85:68:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:48:16 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=e9016fd40dcc0567cf548749de09963dc4b903afa9a666fce4225054310cee9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:e1:22:e4:a5:db:41:0f:f2:12:b2:4b:cb: af:93:e6:75:92:64:ed:14:7a:67:c4:d5:42:ff:68: c8:b1:85:8a:64:9f:5e:be:a5:ce:0f:54:42:9b:70: 9d:3f:77:d5:3c:51:43:2f:2d:06:c7:85:34:38:49: 8d:75:25:6b:5e:17:d0:6a:44:7a:ee:0d:cd:dc:d5: f2:89:83:dd:1d:44:bb:03:b9:9b:9c:a9:f1:35:25: 3f:f2:7a:fc:4e:9c:bf:e0:8c:df:cc:fe:89:ed:41: fa:cb:f1:64:3d:89:7d:a2:97:19:79:3a:58:33:a9: 67:c7:60:38:c3:74:da:57:e9:3b:54:7f:4a:72:b4: f9:a6:bf:c0:7f:ef:97:71:83:56:c0:46:22:43:a6: e3:47:63:95:e3:01:dd:6c:fd:32:9b:4f:f2:e5:35: 2a:90:ee:04:05:fc:1e:5a:95:58:dd:19:37:7e:b6: 9e:15:88:18:a8:7e:fd:32:9f:7a:5b:5a:af:2d:7a: fb:4e:2d:e4:b0:d2:f1:8f:0e:38:d1:29:46:56:55: 43:68:c1:9c:fd:0e:f6:34:25:78:41:c1:a0:d4:80: 0a:2d:3a:2d:c9:ec:43:9d:01:1f:6b:75:39:c2:a8: ce:de:04:93:14:af:aa:43:16:36:c4:5d:f0:50:98: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:60:8E:61:5A:E3:D9:54:F0:1D:00:6E:05:E3:7D:77:64:1E:EB:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6157fc5b-7d60-4954-ba7f-3f3168aa8f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.159.64.0/18 Signature Algorithm: sha256WithRSAEncryption 22:1e:68:c2:39:d1:e4:49:08:c2:59:4c:53:0e:52:df:34:4f: df:f8:f1:c5:a4:ab:0c:34:dd:82:33:d2:e9:c4:eb:78:bb:77: 40:67:49:77:c1:48:c3:c3:ae:87:b4:c7:c4:c6:71:ad:57:b5: 79:ff:5b:20:68:2c:a4:9e:97:50:12:88:e0:be:e5:6c:e8:c6: ec:a2:27:8c:fe:ba:7a:22:93:87:cd:c1:d1:1f:ef:23:3c:7c: 0f:56:c8:df:e1:1a:ae:3f:52:78:f5:47:b5:ec:61:61:b3:2c: 3a:2e:52:ff:65:ca:e8:b8:f9:00:72:d5:fc:1d:4e:a5:da:92: b5:40:18:55:46:e7:ad:55:40:cb:8f:eb:25:f0:03:a1:20:f1: 79:f9:93:69:54:51:ae:26:98:a6:05:c2:0f:80:ac:5e:99:52: d2:dc:a6:d2:19:9e:56:66:a8:ee:a8:34:4f:0a:b1:8e:07:f6: fa:09:09:17:b7:7e:c2:65:5f:30:c1:ef:82:aa:65:88:af:56: 52:e2:1d:73:c7:bf:21:00:25:90:40:cb:4c:6d:13:7d:fb:a9: b6:7f:92:51:79:c4:ec:e5:d2:49:d1:d9:e2:44:74:2e:e7:7b: 94:ed:8c:70:3d:75:6d:9e:c9:a0:2c:ea:a7:5e:45:8e:b4:2e: 4e:04:58:97 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITPozUdIlUNt0Lpa0h9jOkb4VotjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTYxOTQ4MTZaFw0yNTExMjAyMzU5NTla MHoxSTBHBgNVBAUTQGU5MDE2ZmQ0MGRjYzA1NjdjZjU0ODc0OWRlMDk5NjNkYzRi OTAzYWZhOWE2NjZmY2U0MjI1MDU0MzEwY2VlOWMxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALIy4SLkpdtBD/ISskvLr5PmdZJk7RR6Z8TVQv9oyLGFimSf Xr6lzg9UQptwnT931TxRQy8tBseFNDhJjXUla14X0GpEeu4NzdzV8omD3R1EuwO5 m5yp8TUlP/J6/E6cv+CM38z+ie1B+svxZD2JfaKXGXk6WDOpZ8dgOMN02lfpO1R/ SnK0+aa/wH/vl3GDVsBGIkOm40djleMB3Wz9MptP8uU1KpDuBAX8HlqVWN0ZN362 nhWIGKh+/TKfeltary16+04t5LDS8Y8OONEpRlZVQ2jBnP0O9jQleEHBoNSACi06 LcnsQ50BH2t1OcKozt4EkxSvqkMWNsRd8FCYyz8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTHYI5hWuPZVPAdAG4F4313ZB7r9DAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNjE1N2ZjNWItN2Q2MC00OTU0LWJhN2YtM2YzMTY4YWE4ZjNlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBjafQDANBgkqhkiG9w0BAQsFAAOCAQEAIh5owjnR5EkIwllMUw5S3zRP3/jx xaSrDDTdgjPS6cTreLt3QGdJd8FIw8Ouh7THxMZxrVe1ef9bIGgspJ6XUBKI4L7l bOjG7KInjP66eiKTh83B0R/vIzx8D1bI3+Earj9SePVHtexhYbMsOi5S/2XK6Lj5 AHLV/B1OpdqStUAYVUbnrVVAy4/rJfADoSDxefmTaVRRriaYpgXCD4CsXplS0tym 0hmeVmao7qg0Twqxjgf2+gkJF7d+wmVfMMHvgqpliK9WUuIdc8e/IQAlkEDLTG0T ffuptn+SUXnE7OXSSdHZ4kR0Lud7lO2McD11bZ7JoCzqp15FjrQuTgRYlw== -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:45 2025 by rpki-client