$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/789165f8-e3fb-4783-8d27-9e95a425d9a5.roa File: 789165f8-e3fb-4783-8d27-9e95a425d9a5.roa (raw, json) Hash identifier: ER7lWTCbREWBHzliTynD1OD1dUZlGaZcPd8Ej9E5sQQ= Subject key identifier: 1E:AE:C7:38:AD:42:CE:B6:95:B7:80:EC:EE:95:58:31:DB:B4:B6:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 038E0B83307340183BF94525493D1038EA356B68 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/789165f8-e3fb-4783-8d27-9e95a425d9a5.roa Signing time: Fri 10 Oct 2025 16:30:26 +0000 ROA not before: Fri 10 Oct 2025 16:30:26 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.160.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8e:0b:83:30:73:40:18:3b:f9:45:25:49:3d:10:38:ea:35:6b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:30:26 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=70a421ffbf7bb0d9e8cc551b68f7886f4d4e403842a15274a63c46381e5a1c71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:9b:bc:3a:75:e6:6e:c4:a7:e3:bd:76:ad: 59:e0:e4:3b:97:06:3f:50:46:6e:91:9d:bc:41:53: 49:e5:f3:43:82:5f:9f:30:77:3f:4a:a6:c8:f1:fa: 4c:a6:b6:53:12:68:6d:ab:a7:cb:cd:96:61:ed:95: a0:67:f2:e7:26:8d:41:4b:97:93:fd:97:c0:23:4f: c2:ec:dc:a3:d5:23:69:4e:c6:96:15:6f:46:8a:c7: 60:49:13:3d:6a:38:e7:a0:34:8d:53:8b:b8:ae:33: 63:9f:12:a9:cf:b9:d2:f9:2a:75:93:a3:1e:81:a8: 0e:91:2f:34:db:4f:70:21:b1:de:a6:8a:98:74:ce: c6:c6:b5:0b:1f:80:6d:23:d1:c2:0c:4c:b1:23:72: 97:c8:d1:a2:11:7f:1a:3e:54:0b:29:7f:52:1e:8e: 7a:28:70:22:5b:ed:6b:e0:38:e3:b4:ba:89:91:cc: 52:a3:56:5a:34:0b:da:ad:28:3e:72:f7:e1:64:c0: 3b:db:bb:c0:20:bd:5c:5d:dc:c8:2a:24:1d:a1:ca: 67:e7:9a:42:c9:7e:c2:67:34:10:49:99:0c:fe:1d: a9:ea:4f:f3:fa:ca:2e:8d:7a:64:4d:bf:26:db:82: 6e:96:67:b9:21:67:d9:aa:a8:b0:ff:31:be:75:a8: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AE:C7:38:AD:42:CE:B6:95:B7:80:EC:EE:95:58:31:DB:B4:B6:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/789165f8-e3fb-4783-8d27-9e95a425d9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.160.0.0/12 Signature Algorithm: sha256WithRSAEncryption 4c:c2:16:34:6f:d9:64:27:e6:f4:b3:0d:bc:c8:90:03:6a:92: 32:47:80:da:b2:d0:d3:d0:9f:95:ce:df:c5:87:34:2e:0a:dd: a5:a5:07:ae:28:7f:f4:fc:1e:9f:e2:ef:64:56:f6:6c:18:20: 25:2f:d4:6e:08:54:70:3c:0f:68:d3:0a:aa:5e:34:98:86:95: 07:5d:43:ec:84:57:e4:78:bf:1e:91:a7:52:85:71:f2:4c:cc: 6c:f9:99:5b:b8:8f:06:92:2c:53:42:7a:f0:a7:d8:3e:20:9d: 95:c2:77:04:91:83:d4:2e:3e:b5:a9:8c:db:4b:03:43:e6:51: c7:5f:92:99:cd:12:8f:68:49:04:0e:e8:6b:18:9e:a7:51:9b: da:c9:3e:97:4c:7b:90:8f:a5:53:2c:f5:ba:3e:d1:fd:39:d2: 42:9a:9f:58:87:b7:10:7e:dc:bb:47:99:db:49:51:d7:67:e1: 96:89:af:28:1e:2c:26:72:60:3c:16:01:89:01:7b:89:e2:20: ce:74:71:92:aa:90:53:17:8c:c9:8b:50:41:c9:5d:a6:e2:bf: bf:72:8f:3d:ee:1c:15:78:79:eb:69:5c:a1:7e:4a:1e:f8:16: 1d:ab:15:96:38:ad:00:92:b2:da:5f:7d:b2:a8:25:8e:57:ae: d5:37:2b:bb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUA44LgzBzQBg7+UUlST0QOOo1a2gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTYzMDI2WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGE0MjFmZmJmN2JiMGQ5ZThjYzU1MWI2OGY3ODg2ZjRk NGU0MDM4NDJhMTUyNzRhNjNjNDYzODFlNWExYzcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQHJu8OnXmbsSn4712rVng5DuXBj9QRm6RnbxBU0nl80OC X58wdz9Kpsjx+kymtlMSaG2rp8vNlmHtlaBn8ucmjUFLl5P9l8AjT8Ls3KPVI2lO xpYVb0aKx2BJEz1qOOegNI1Ti7iuM2OfEqnPudL5KnWTox6BqA6RLzTbT3Ahsd6m iph0zsbGtQsfgG0j0cIMTLEjcpfI0aIRfxo+VAspf1IejnoocCJb7WvgOOO0uomR zFKjVlo0C9qtKD5y9+FkwDvbu8AgvVxd3MgqJB2hymfnmkLJfsJnNBBJmQz+Hanq T/P6yi6NemRNvybbgm6WZ7khZ9mqqLD/Mb51qKdXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHq7HOK1CzraVt4Ds7pVYMdu0tnUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4OTE2NWY4LWUzZmItNDc4My04ZDI3LTllOTVhNDI1ZDlhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQ2oDANBgkqhkiG9w0BAQsFAAOCAQEATMIWNG/ZZCfm9LMNvMiQA2qSMkeA 2rLQ09Cflc7fxYc0LgrdpaUHrih/9Pwen+LvZFb2bBggJS/UbghUcDwPaNMKql40 mIaVB11D7IRX5Hi/HpGnUoVx8kzMbPmZW7iPBpIsU0J68KfYPiCdlcJ3BJGD1C4+ tamM20sDQ+ZRx1+Smc0Sj2hJBA7oaxiep1Gb2sk+l0x7kI+lUyz1uj7R/TnSQpqf WIe3EH7cu0eZ20lR12fhlomvKB4sJnJgPBYBiQF7ieIgznRxkqqQUxeMyYtQQcld puK/v3KPPe4cFXh562lcoX5KHvgWHasVljitAJKy2l99sqgljleu1Tcruw== -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:59 2025 by rpki-client