$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e607366-a5b9-469d-96bc-19db7f27a9fe.roa File: 6e607366-a5b9-469d-96bc-19db7f27a9fe.roa (raw, json) Hash identifier: FQzs1kT3JZW3BJ35BFSB8rB13zvYKMqOCuuO3owNnx8= Subject key identifier: 47:31:51:B5:9D:6D:61:AF:B6:E1:12:DF:E0:EA:0D:36:30:D4:74:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C8A917C1870CEB16F68776092E4F0A92653BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e607366-a5b9-469d-96bc-19db7f27a9fe.roa Signing time: Fri 26 Sep 2025 17:35:58 +0000 ROA not before: Fri 26 Sep 2025 17:35:58 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.95.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8a:91:7c:18:70:ce:b1:6f:68:77:60:92:e4:f0:a9:26:53:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:35:58 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=9e01db41c5e25f8787e659287d31ae7619f386345546b46d683ff167c0c074d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:7b:db:95:4a:5c:b1:ee:6f:f2:68:85:fc: a4:39:73:2d:86:d7:f0:4d:ca:ef:96:d2:1f:87:8a: cf:d2:62:67:3f:a7:98:d1:b3:b7:cb:7a:53:98:9b: 2f:89:85:84:b5:f0:e9:1b:55:1b:08:10:e3:63:02: 14:61:61:a1:77:b9:57:21:24:8c:17:7b:14:24:dc: 9e:63:7e:e6:1f:0a:24:ea:60:dc:9e:fd:01:41:2d: cf:38:23:0b:0b:5f:d0:bb:23:3c:9c:0a:0f:70:40: b6:61:55:35:a4:c7:ac:6c:bc:40:ac:58:f9:a7:17: 88:ae:e8:f8:7e:a0:52:bd:1e:ce:15:aa:a9:37:7b: dd:cb:26:6d:d0:09:c7:f0:ab:fb:18:72:f1:9d:df: 79:79:02:05:c9:d7:49:3d:33:fe:d5:6b:69:bc:f4: c7:a8:13:54:ed:90:90:5d:06:e5:65:3b:8a:ef:72: 10:bd:4b:97:62:4d:37:14:15:f7:fa:db:4a:26:f8: d1:1c:88:c1:cc:c1:e1:a5:cd:2b:5a:fc:d2:79:21: 69:ac:7d:59:7d:cd:a1:e9:af:24:61:a4:38:06:1b: 8b:06:37:24:7a:a8:f3:ab:44:d1:e8:63:40:82:3e: f3:65:e6:0a:29:a3:52:56:87:1a:e7:fe:af:db:03: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:51:B5:9D:6D:61:AF:B6:E1:12:DF:E0:EA:0D:36:30:D4:74:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e607366-a5b9-469d-96bc-19db7f27a9fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.95.128.0/17 Signature Algorithm: sha256WithRSAEncryption 36:e0:18:a2:64:1b:64:5b:3f:7b:5c:ea:d8:a7:44:04:e3:ff: 08:95:5c:49:2f:32:f0:da:62:4e:17:d0:ce:5d:71:28:61:f1: 2d:4f:5c:08:76:7a:0d:ab:55:cd:d5:0d:e9:83:26:56:f7:48: 0e:7f:6f:b1:29:98:fc:63:43:9d:d9:f1:6e:02:e8:6d:bc:f1: 8b:ac:b3:9c:28:2c:b5:3f:40:ec:8f:f6:0f:d0:c5:80:4f:ec: b4:eb:8b:22:4d:57:96:89:1d:86:08:ba:99:43:3e:a6:5c:b3: 24:5e:60:0d:55:6e:b3:c0:dc:4e:8f:2a:53:4b:9e:fa:88:82: 1b:e4:5f:76:23:16:68:80:f5:23:b2:93:38:a4:56:71:3b:15: 49:0f:f2:da:8d:6d:2c:82:27:29:c5:51:f1:25:c0:65:8c:2f: 22:4d:8a:70:7c:4e:78:3a:8c:85:97:8f:71:7d:4a:3f:af:d0: 7d:f3:b1:58:a1:95:44:0b:fa:8f:1c:47:2d:37:04:10:b2:35: 76:8f:89:e4:cb:e2:cd:39:ce:a4:51:a8:86:85:6a:e8:e4:3f: 32:db:e6:f1:29:f9:3f:7d:5b:e6:cc:31:c9:86:68:7d:cf:1f: a3:64:dd:12:c4:13:9d:f5:f3:b6:00:1c:52:f1:5c:ea:94:99: 1e:06:3c:63 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITXIqRfBhwzrFvaHdgkuTwqSZTujANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjYxNzM1NThaFw0yNTEwMzEyMzU5NTla MHoxSTBHBgNVBAUTQDllMDFkYjQxYzVlMjVmODc4N2U2NTkyODdkMzFhZTc2MTlm Mzg2MzQ1NTQ2YjQ2ZDY4M2ZmMTY3YzBjMDc0ZDQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ6te9uVSlyx7m/yaIX8pDlzLYbX8E3K75bSH4eKz9JiZz+n mNGzt8t6U5ibL4mFhLXw6RtVGwgQ42MCFGFhoXe5VyEkjBd7FCTcnmN+5h8KJOpg 3J79AUEtzzgjCwtf0LsjPJwKD3BAtmFVNaTHrGy8QKxY+acXiK7o+H6gUr0ezhWq qTd73csmbdAJx/Cr+xhy8Z3feXkCBcnXST0z/tVrabz0x6gTVO2QkF0G5WU7iu9y EL1Ll2JNNxQV9/rbSib40RyIwczB4aXNK1r80nkhaax9WX3NoemvJGGkOAYbiwY3 JHqo86tE0ehjQII+82XmCimjUlaHGuf+r9sDdS0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRHMVG1nW1hr7bhEt/g6g02MNR0LzAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNmU2MDczNjYtYTViOS00NjlkLTk2YmMtMTlkYjdmMjdhOWZlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBzZfgDANBgkqhkiG9w0BAQsFAAOCAQEANuAYomQbZFs/e1zq2KdEBOP/CJVc SS8y8NpiThfQzl1xKGHxLU9cCHZ6DatVzdUN6YMmVvdIDn9vsSmY/GNDndnxbgLo bbzxi6yznCgstT9A7I/2D9DFgE/stOuLIk1Xlokdhgi6mUM+plyzJF5gDVVus8Dc To8qU0ue+oiCG+RfdiMWaID1I7KTOKRWcTsVSQ/y2o1tLIInKcVR8SXAZYwvIk2K cHxOeDqMhZePcX1KP6/QffOxWKGVRAv6jxxHLTcEELI1do+J5MvizTnOpFGohoVq 6OQ/Mtvm8Sn5P31b5swxyYZofc8fo2TdEsQTnfXztgAcUvFc6pSZHgY8Yw== -----END CERTIFICATE-----Generated at Sat Oct 18 04:53:08 2025 by rpki-client