$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/786f64c5-0af0-44db-8951-10a34a8d6bfa.roa File: 786f64c5-0af0-44db-8951-10a34a8d6bfa.roa (raw, json) Hash identifier: cjoZp9kj5EC1MnTlEumbmnpKogB4tDC01h/3i3z6UMM= Subject key identifier: 89:36:90:E4:78:D5:B1:21:BD:90:84:3D:D0:23:64:92:EF:6F:45:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B0F0E908DB15737DA21B14246DA56C5CB00113F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/786f64c5-0af0-44db-8951-10a34a8d6bfa.roa Signing time: Thu 16 Oct 2025 23:39:06 +0000 ROA not before: Thu 16 Oct 2025 23:39:06 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0f:0e:90:8d:b1:57:37:da:21:b1:42:46:da:56:c5:cb:00:11:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 23:39:06 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=1519237b60d50287adc8da388c80923a0eb6975a84725504d4d0d14fb9b0a989, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:6f:16:1c:a3:3c:ec:c4:5d:f4:e9:a6:57: b9:c8:12:1f:20:80:57:16:fa:6f:e1:82:c7:65:2a: a9:7e:46:00:fd:61:55:cd:93:74:99:fb:e0:6c:a1: 59:20:34:bd:95:17:b4:23:a9:6b:3e:ea:36:1b:4b: e2:e7:ee:f0:40:16:47:f6:ae:07:e6:47:64:39:d1: a4:13:6d:7d:e2:5b:c4:cd:9a:a2:ce:6b:62:61:e2: 79:ac:1f:ec:84:bf:99:4f:a9:46:13:8b:7d:5e:f6: 73:c3:dd:9f:47:73:89:63:cd:c1:86:68:7d:62:11: 68:c8:f2:b0:e5:8b:5e:71:f6:db:0a:74:93:fd:e3: 18:18:de:90:44:01:2d:45:42:0d:0f:ec:27:0f:d5: ef:67:58:88:9c:7f:e3:4e:28:e6:6c:eb:b6:fa:80: 87:d9:ac:48:fc:85:40:32:fc:6f:28:e2:65:78:40: 6f:3a:05:ea:18:bc:28:09:8d:a2:ab:9c:f5:51:9d: c3:90:3b:7b:a5:13:ea:50:af:cb:c5:43:b3:e1:a8: 77:c1:c6:03:84:0c:b5:3e:f5:de:ba:04:91:15:ea: ce:fd:6c:71:9a:ce:4d:f8:fa:62:74:19:3b:2e:fe: d9:d9:39:c4:63:9d:8b:da:15:d9:de:17:09:ab:65: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:36:90:E4:78:D5:B1:21:BD:90:84:3D:D0:23:64:92:EF:6F:45:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/786f64c5-0af0-44db-8951-10a34a8d6bfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.112.0/21 Signature Algorithm: sha256WithRSAEncryption 61:cc:6c:9e:96:f4:38:a3:2b:30:ad:a0:f3:40:d6:8b:e5:4c: 31:5b:f4:ab:4a:48:e6:67:fa:8f:fc:04:fd:3b:b3:fd:97:05: cb:d9:c3:aa:57:fc:b5:33:72:da:31:ba:e6:00:41:9e:c6:be: 88:6a:c9:0a:86:6e:f9:34:b2:58:59:b8:db:e3:65:89:9a:18: 26:4d:6c:b0:e9:ac:9f:35:9b:e1:0f:b9:27:3e:9f:05:2e:ad: 6f:57:4b:a5:5d:c9:da:eb:3f:9f:ec:b7:3c:af:09:75:7f:c8: e2:af:8c:8d:3e:93:d7:88:da:b2:5b:7b:36:55:eb:80:04:79: a3:cb:c7:ce:f7:93:05:e7:63:8a:5f:d5:e2:9c:3b:25:49:5f: 06:15:cc:ed:0d:7a:42:e8:02:65:d6:b9:fa:16:d8:42:b5:22: f1:50:1d:8b:69:88:a8:fd:50:63:22:c2:1c:31:44:21:31:17: 40:93:01:2d:69:75:94:9f:6a:1c:63:e2:b8:20:bb:83:8b:f8: 8e:57:b6:d0:74:b1:83:72:86:a4:78:77:36:4a:ab:a8:86:39: 73:15:e7:09:07:37:8a:77:f0:91:c2:ed:5a:8c:9b:cb:23:09: 0f:9b:74:50:83:ff:05:de:04:80:2e:9b:81:6c:df:95:67:43: ce:92:79:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOw8OkI2xVzfaIbFCRtpWxcsAET8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjMzOTA2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTE5MjM3YjYwZDUwMjg3YWRjOGRhMzg4YzgwOTIzYTBl YjY5NzVhODQ3MjU1MDRkNGQwZDE0ZmI5YjBhOTg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJPG8WHKM87MRd9OmmV7nIEh8ggFcW+m/hgsdlKql+RgD9 YVXNk3SZ++BsoVkgNL2VF7QjqWs+6jYbS+Ln7vBAFkf2rgfmR2Q50aQTbX3iW8TN mqLOa2Jh4nmsH+yEv5lPqUYTi31e9nPD3Z9Hc4ljzcGGaH1iEWjI8rDli15x9tsK dJP94xgY3pBEAS1FQg0P7CcP1e9nWIicf+NOKOZs67b6gIfZrEj8hUAy/G8o4mV4 QG86BeoYvCgJjaKrnPVRncOQO3ulE+pQr8vFQ7PhqHfBxgOEDLU+9d66BJEV6s79 bHGazk34+mJ0GTsu/tnZOcRjnYvaFdneFwmrZQ2jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiTaQ5HjVsSG9kIQ90CNkku9vRSIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4NmY2NGM1LTBhZjAtNDRkYi04OTUxLTEwYTM0YThkNmJmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2wHAwDQYJKoZIhvcNAQELBQADggEBAGHMbJ6W9DijKzCtoPNA1ovlTDFb 9KtKSOZn+o/8BP07s/2XBcvZw6pX/LUzctoxuuYAQZ7GvohqyQqGbvk0slhZuNvj ZYmaGCZNbLDprJ81m+EPuSc+nwUurW9XS6VdydrrP5/stzyvCXV/yOKvjI0+k9eI 2rJbezZV64AEeaPLx873kwXnY4pf1eKcOyVJXwYVzO0NekLoAmXWufoW2EK1IvFQ HYtpiKj9UGMiwhwxRCExF0CTAS1pdZSfahxj4rggu4OL+I5XttB0sYNyhqR4dzZK q6iGOXMV5wkHN4p38JHC7VqMm8sjCQ+bdFCD/wXeBIAum4Fs35VnQ86SeY8= -----END CERTIFICATE-----Generated at Sat Oct 18 04:52:45 2025 by rpki-client