$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a5c160e-32a1-40d3-bd81-987d2cae2b23.roa File: 7a5c160e-32a1-40d3-bd81-987d2cae2b23.roa (raw, json) Hash identifier: pOv0zLl3Ux+flkPyRZ3UdfkTEBg3UcA9kOexIPcGl7w= Subject key identifier: B1:2C:20:9B:0A:D3:8D:19:3C:EB:20:CD:55:84:E5:4F:86:70:89:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09D5A3C3CE32185B5382D9C83AE2BC8FEA7C6C33 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a5c160e-32a1-40d3-bd81-987d2cae2b23.roa Signing time: Tue 11 Nov 2025 03:31:05 +0000 ROA not before: Tue 11 Nov 2025 03:31:05 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.225.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d5:a3:c3:ce:32:18:5b:53:82:d9:c8:3a:e2:bc:8f:ea:7c:6c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 11 03:31:05 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=135051d7403707dd5bf971fec0cfaffe534554a0451b142b2415b7ae07b64bd5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:d5:72:f5:42:1e:6a:e0:3f:c8:8f:ce:a9: a3:c4:38:92:6d:31:99:97:6a:ef:91:44:d2:c4:d6: 01:05:47:41:e4:e0:b6:1d:21:9d:3c:22:ce:56:ae: 91:8d:2c:2b:66:70:82:c6:81:94:3d:45:ed:de:bf: 9d:0a:b0:86:3e:a5:eb:b6:77:47:21:a0:cd:d8:27: c7:5d:74:eb:ad:68:c9:69:a4:ca:6f:2b:ed:c9:1c: 8c:aa:c8:5f:c4:84:70:25:68:d0:52:79:42:88:0c: c6:85:b9:b0:f5:8e:2b:23:cb:a9:85:2e:6c:f4:f1: 55:fa:82:19:7b:a9:9b:36:7f:61:eb:3f:cf:93:d9: 24:73:df:74:97:f7:f4:f6:17:9a:03:03:8c:4d:d9: e3:da:02:62:6a:76:99:9d:fd:d4:1f:56:ed:02:38: 56:00:d9:04:94:58:cd:27:e5:a4:e2:2e:a0:98:26: fb:b6:db:59:06:74:06:05:8e:80:8d:ef:05:88:4c: 8c:8e:45:af:b0:41:9f:b3:01:41:63:42:f9:95:8a: d9:52:cd:d6:01:49:81:d1:17:7d:33:bc:69:23:62: d9:07:ff:66:33:f7:86:9b:8b:9d:7e:1a:08:9e:bf: 74:6e:c2:c2:fc:e5:8a:5f:59:5c:2c:7c:c2:c8:1b: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2C:20:9B:0A:D3:8D:19:3C:EB:20:CD:55:84:E5:4F:86:70:89:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a5c160e-32a1-40d3-bd81-987d2cae2b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.225.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:b7:77:f0:7c:8f:da:64:8c:fe:17:b5:f2:a0:9c:98:84:9b: 10:b5:71:14:d2:a6:93:20:78:2e:7a:13:c9:d9:a7:a3:5a:3e: 73:f2:f5:14:cb:d6:13:c9:28:e4:66:40:74:8c:56:67:20:b1: a6:14:38:f3:bf:8a:15:c0:5c:5e:76:e8:76:8b:86:cb:35:74: 60:52:34:2a:c8:ed:87:be:c2:52:4d:1f:36:6b:8a:25:f4:6a: d5:eb:15:7c:cb:a7:2e:9c:e9:56:1e:c7:c1:27:9e:45:e3:2f: da:ff:a8:66:2b:cf:47:dd:f7:0b:40:4f:56:f6:43:47:e8:55: cf:bb:0f:34:df:1b:2c:2f:9d:ff:ee:73:2a:0b:b5:6c:ea:0c: 3b:15:9d:55:ca:21:24:f2:0d:de:30:36:48:7d:0c:5e:b9:26: 91:8c:74:d4:e6:f2:05:47:24:70:6a:fe:09:84:e4:6a:86:05: 60:be:c4:e3:a4:f8:b7:fc:83:d8:d0:e4:09:66:37:9a:50:fa: 8f:35:a0:5e:5b:f4:55:f6:a2:3a:9c:55:c7:1d:31:09:15:a4: db:21:4b:5c:0b:07:c5:8e:2d:dc:bc:4b:40:b2:65:05:8b:1f: 3a:54:10:83:c9:e2:ba:87:da:6f:7d:e9:e0:16:46:ca:ed:ac: 0e:67:16:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCdWjw84yGFtTgtnIOuK8j+p8bDMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTExMDMzMTA1WhcNMjUxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzUwNTFkNzQwMzcwN2RkNWJmOTcxZmVjMGNmYWZmZTUz NDU1NGEwNDUxYjE0MmIyNDE1YjdhZTA3YjY0YmQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxI9Vy9UIeauA/yI/OqaPEOJJtMZmXau+RRNLE1gEFR0Hk 4LYdIZ08Is5WrpGNLCtmcILGgZQ9Re3ev50KsIY+peu2d0choM3YJ8dddOutaMlp pMpvK+3JHIyqyF/EhHAlaNBSeUKIDMaFubD1jisjy6mFLmz08VX6ghl7qZs2f2Hr P8+T2SRz33SX9/T2F5oDA4xN2ePaAmJqdpmd/dQfVu0COFYA2QSUWM0n5aTiLqCY Jvu221kGdAYFjoCN7wWITIyORa+wQZ+zAUFjQvmVitlSzdYBSYHRF30zvGkjYtkH /2Yz94abi51+Ggiev3RuwsL85YpfWVwsfMLIG2NpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsSwgmwrTjRk86yDNVYTlT4ZwidcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdhNWMxNjBlLTMyYTEtNDBkMy1iZDgxLTk4N2QyY2FlMmIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY24UAwDQYJKoZIhvcNAQELBQADggEBAEu3d/B8j9pkjP4XtfKgnJiEmxC1 cRTSppMgeC56E8nZp6NaPnPy9RTL1hPJKORmQHSMVmcgsaYUOPO/ihXAXF526HaL hss1dGBSNCrI7Ye+wlJNHzZriiX0atXrFXzLpy6c6VYex8EnnkXjL9r/qGYrz0fd 9wtAT1b2Q0foVc+7DzTfGywvnf/ucyoLtWzqDDsVnVXKISTyDd4wNkh9DF65JpGM dNTm8gVHJHBq/gmE5GqGBWC+xOOk+Lf8g9jQ5AlmN5pQ+o81oF5b9FX2ojqcVccd MQkVpNshS1wLB8WOLdy8S0CyZQWLHzpUEIPJ4rqH2m996eAWRsrtrA5nFiM= -----END CERTIFICATE-----Generated at Thu Nov 13 09:56:49 2025 by rpki-client