$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/712f2712-6acc-4960-b646-fba6b433f184.roa File: 712f2712-6acc-4960-b646-fba6b433f184.roa (raw, json) Hash identifier: Iji5McVr08H2NG+Il7bgTpeYc87EtKqJweHjLQWL8BI= Subject key identifier: 0E:3F:BB:1A:79:59:8C:BE:2B:69:0A:64:10:9F:F6:08:3F:EF:CC:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DB1BE59B9E2CF05E3DB2D981682B78C8BF3CD2B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/712f2712-6acc-4960-b646-fba6b433f184.roa Signing time: Fri 19 Sep 2025 16:31:35 +0000 ROA not before: Fri 19 Sep 2025 16:31:35 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.225.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b1:be:59:b9:e2:cf:05:e3:db:2d:98:16:82:b7:8c:8b:f3:cd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 16:31:35 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=7b852fe2672fe368a2d6cada33453bb597e9d94fede379c7b91cc655e16933c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:bd:2e:10:a5:d9:4a:7e:5b:8a:50:ca:9c: 50:0f:78:f5:46:51:79:25:67:15:e0:20:35:f9:c8: 0d:84:0b:00:3b:3d:6b:ef:b9:a1:5c:7a:75:28:e0: df:37:9f:8e:d6:be:38:6d:88:26:5b:25:cc:7a:3d: 17:2c:1a:da:30:7b:1d:8b:1b:8e:5d:d8:4f:22:62: f7:4c:f1:48:3f:34:0b:ae:4b:9a:32:33:17:78:45: 80:56:83:fc:a3:c9:77:37:84:63:9a:6b:d4:94:f8: 41:61:07:24:e2:c4:da:a3:69:8c:ac:db:3c:8a:24: 54:9e:61:b3:27:c7:4e:f9:3e:f9:39:ff:15:57:b0: 2c:cc:b9:7f:c9:a5:2d:48:a3:50:54:c9:14:ad:fc: 66:7b:7a:74:38:dd:e8:4d:22:b9:60:fd:dc:26:72: 83:08:f6:45:88:b0:1a:ec:0c:32:a4:68:d6:4b:0e: 75:fe:df:58:16:23:8f:bb:ef:7e:67:ee:ad:3c:85: 03:07:b2:f2:93:38:ee:b6:a9:fe:57:80:35:51:74: 97:e0:f5:0d:3c:52:37:a2:23:6e:31:22:8c:56:ba: 8a:60:88:60:11:47:fc:a0:2d:66:8a:b1:15:f6:1b: 17:6a:10:12:3c:42:a0:d2:9c:10:7d:dd:70:cb:66: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3F:BB:1A:79:59:8C:BE:2B:69:0A:64:10:9F:F6:08:3F:EF:CC:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/712f2712-6acc-4960-b646-fba6b433f184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.225.128.0/17 Signature Algorithm: sha256WithRSAEncryption a2:fb:b1:d6:08:7d:fe:4b:71:ae:ff:f1:0c:7d:c8:3e:16:e6: 05:27:38:ca:a1:b5:af:97:a3:de:ab:17:7e:75:91:f5:72:28: d0:c2:98:5f:7f:fe:69:2f:eb:cd:26:7e:53:b9:01:6e:2f:0b: ac:5b:34:cb:62:37:a7:b1:19:a2:00:df:8b:08:a7:11:f4:ca: 13:a5:b9:e3:30:d1:c8:5c:3e:3c:31:12:79:54:e4:02:51:b5: 3f:f4:09:15:e9:62:82:aa:0a:48:0d:68:f4:77:9e:70:43:10: 31:d5:07:8d:83:41:ae:72:6e:a1:55:dd:80:11:f0:d2:83:0c: 92:a0:11:a9:64:92:c9:e5:0f:df:33:8d:6f:e9:cf:ca:fc:82: fb:ce:8d:f3:63:5f:92:fa:6e:2f:8a:5e:d2:59:94:52:a6:08: 15:c8:12:14:1d:e7:54:33:5d:b1:8c:80:36:09:79:08:14:e6: c8:84:f4:07:4b:86:28:c1:bc:1c:48:88:30:68:ab:85:e6:ba: ee:40:c2:cf:2a:4a:fe:17:b2:04:be:16:63:2b:66:5a:d9:74: 7e:d2:9e:6c:3b:76:b3:c7:11:ca:cc:4c:76:60:0a:8e:10:7e: 02:93:a6:ba:25:46:5b:61:7a:e8:6a:47:a7:e3:17:cd:45:0f: d8:30:f2:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbbG+WbnizwXj2y2YFoK3jIvzzSswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTYzMTM1WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Yjg1MmZlMjY3MmZlMzY4YTJkNmNhZGEzMzQ1M2JiNTk3 ZTlkOTRmZWRlMzc5YzdiOTFjYzY1NWUxNjkzM2M5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC61b0uEKXZSn5bilDKnFAPePVGUXklZxXgIDX5yA2ECwA7 PWvvuaFcenUo4N83n47WvjhtiCZbJcx6PRcsGtowex2LG45d2E8iYvdM8Ug/NAuu S5oyMxd4RYBWg/yjyXc3hGOaa9SU+EFhByTixNqjaYys2zyKJFSeYbMnx075Pvk5 /xVXsCzMuX/JpS1Io1BUyRSt/GZ7enQ43ehNIrlg/dwmcoMI9kWIsBrsDDKkaNZL DnX+31gWI4+7735n7q08hQMHsvKTOO62qf5XgDVRdJfg9Q08UjeiI24xIoxWuopg iGARR/ygLWaKsRX2GxdqEBI8QqDSnBB93XDLZoKDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDj+7GnlZjL4raQpkEJ/2CD/vzD4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxMmYyNzEyLTZhY2MtNDk2MC1iNjQ2LWZiYTZiNDMzZjE4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc24YAwDQYJKoZIhvcNAQELBQADggEBAKL7sdYIff5Lca7/8Qx9yD4W5gUn OMqhta+Xo96rF351kfVyKNDCmF9//mkv680mflO5AW4vC6xbNMtiN6exGaIA34sI pxH0yhOlueMw0chcPjwxEnlU5AJRtT/0CRXpYoKqCkgNaPR3nnBDEDHVB42DQa5y bqFV3YAR8NKDDJKgEalkksnlD98zjW/pz8r8gvvOjfNjX5L6bi+KXtJZlFKmCBXI EhQd51QzXbGMgDYJeQgU5siE9AdLhijBvBxIiDBoq4Xmuu5Aws8qSv4XsgS+FmMr ZlrZdH7Snmw7drPHEcrMTHZgCo4QfgKTprolRltheuhqR6fjF81FD9gw8tQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:00:18 2025 by rpki-client