$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7323f876-7b10-4675-88be-d9a9c3a11954.roa File: 7323f876-7b10-4675-88be-d9a9c3a11954.roa (raw, json) Hash identifier: lOU69rTyp2J9EUGSAeXq3YlOr5owVSOb9JG7QsakIJc= Subject key identifier: 7C:3B:CF:04:72:49:9B:7A:D9:0A:0B:DF:FB:0A:74:C1:78:75:89:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 114E31174E89E99200D7010D1BA438BE431B24DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7323f876-7b10-4675-88be-d9a9c3a11954.roa Signing time: Fri 19 Sep 2025 02:37:28 +0000 ROA not before: Fri 19 Sep 2025 02:37:28 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4e:31:17:4e:89:e9:92:00:d7:01:0d:1b:a4:38:be:43:1b:24:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 02:37:28 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=b2d54a1d22d86a3d1cd2efc3f9e0a434c5b4cc53dff40f2b37ad85ecc193dc2b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:74:7d:81:e3:1b:3c:1f:ff:0e:f1:7c:8b:84: d8:11:98:55:de:31:85:f3:f4:a8:c4:25:bf:fa:20: 4b:aa:c0:b2:a5:fe:7a:1f:f8:7b:e7:a3:56:7c:8f: 26:99:7d:9d:7e:2d:e7:9f:1c:75:8d:7a:7e:a8:f3: 40:38:36:16:50:30:c7:bd:da:ac:33:18:33:ed:59: e0:11:e7:95:3c:69:e9:b8:f2:07:5f:ed:66:7a:97: 27:03:94:14:cd:93:2d:cd:e7:57:17:72:79:13:76: 11:13:c9:71:09:f7:f3:0f:3f:0e:82:68:b3:9c:5e: ca:cf:c3:f0:b3:b6:4b:68:cc:c2:70:6c:31:8c:c8: 11:dd:62:77:55:02:61:f0:2d:10:03:70:bb:03:93: 8e:d7:51:23:0a:fe:ae:b0:81:c3:c2:1c:e7:6d:72: 00:e1:ed:d0:e5:72:19:fa:1e:0a:a9:a3:b8:5a:14: 6a:e5:f1:fe:b4:15:af:ea:91:7f:f3:97:73:d7:f9: f1:52:e0:59:75:13:85:b2:54:bc:c3:bc:a2:51:d8: d8:8c:26:12:10:88:5a:f6:30:80:11:8d:e2:63:76: 21:ff:bc:fc:52:d9:4c:41:12:2d:52:34:90:88:88: df:4d:5c:69:40:08:91:bb:07:41:2b:e0:82:fe:5d: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:CF:04:72:49:9B:7A:D9:0A:0B:DF:FB:0A:74:C1:78:75:89:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7323f876-7b10-4675-88be-d9a9c3a11954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.32.0/23 Signature Algorithm: sha256WithRSAEncryption 29:4d:50:71:42:6c:9f:9f:32:e2:42:ea:2c:8c:60:99:9f:a5: a6:33:dc:e7:ed:43:2d:e4:67:28:a8:cd:38:eb:84:c1:78:c9: 8e:48:d7:a5:35:04:43:cc:f7:ac:fe:a9:be:97:3d:18:c0:31: a2:ff:4e:09:b2:cc:20:48:39:89:8a:50:c2:2a:91:d7:2d:da: 3c:c7:ec:f3:69:23:44:2b:bd:09:01:cf:1d:dd:c0:42:10:b1: 40:07:5f:1a:30:66:a6:ab:66:05:ad:6a:65:f7:aa:89:12:39: c3:b3:c0:f7:29:71:e8:36:87:f4:1a:a3:57:89:4a:3d:6f:13: fe:1d:8f:30:aa:ed:6b:36:c6:04:27:de:0c:1c:14:45:df:bc: dd:ca:55:7a:1c:78:5e:9b:20:7c:24:52:9d:17:a1:98:3b:e3: 21:ad:b1:e2:17:2a:84:26:3c:1b:f7:6e:6a:0d:6b:ee:06:39: 63:d4:64:be:a2:4b:31:1b:1f:fd:be:b0:20:4c:18:b5:10:65: 9f:56:34:11:50:77:0d:63:d4:7d:e7:21:ac:19:b1:3a:17:2f: b0:14:f3:92:bf:2e:67:64:8c:d8:0b:57:bc:c0:6a:43:39:d1: fc:77:7f:9c:c2:da:2a:d0:f6:6e:49:8c:31:6b:9c:22:46:4f: 23:b4:6c:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEU4xF06J6ZIA1wENG6Q4vkMbJN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDIzNzI4WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmQ1NGExZDIyZDg2YTNkMWNkMmVmYzNmOWUwYTQzNGM1 YjRjYzUzZGZmNDBmMmIzN2FkODVlY2MxOTNkYzJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwdH2B4xs8H/8O8XyLhNgRmFXeMYXz9KjEJb/6IEuqwLKl /nof+Hvno1Z8jyaZfZ1+LeefHHWNen6o80A4NhZQMMe92qwzGDPtWeAR55U8aem4 8gdf7WZ6lycDlBTNky3N51cXcnkTdhETyXEJ9/MPPw6CaLOcXsrPw/CztktozMJw bDGMyBHdYndVAmHwLRADcLsDk47XUSMK/q6wgcPCHOdtcgDh7dDlchn6Hgqpo7ha FGrl8f60Fa/qkX/zl3PX+fFS4Fl1E4WyVLzDvKJR2NiMJhIQiFr2MIARjeJjdiH/ vPxS2UxBEi1SNJCIiN9NXGlACJG7B0Er4IL+XcorAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfDvPBHJJm3rZCgvf+wp0wXh1iaMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzczMjNmODc2LTdiMTAtNDY3NS04OGJlLWQ5YTljM2ExMTk1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wCAwDQYJKoZIhvcNAQELBQADggEBAClNUHFCbJ+fMuJC6iyMYJmfpaYz 3OftQy3kZyiozTjrhMF4yY5I16U1BEPM96z+qb6XPRjAMaL/TgmyzCBIOYmKUMIq kdct2jzH7PNpI0QrvQkBzx3dwEIQsUAHXxowZqarZgWtamX3qokSOcOzwPcpceg2 h/Qao1eJSj1vE/4djzCq7Ws2xgQn3gwcFEXfvN3KVXoceF6bIHwkUp0XoZg74yGt seIXKoQmPBv3bmoNa+4GOWPUZL6iSzEbH/2+sCBMGLUQZZ9WNBFQdw1j1H3nIawZ sToXL7AU85K/LmdkjNgLV7zAakM50fx3f5zC2irQ9m5JjDFrnCJGTyO0bJ4= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:51 2025 by rpki-client