$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/822822f4-d715-4c1a-aac4-f40ff89dd609.roa File: 822822f4-d715-4c1a-aac4-f40ff89dd609.roa (raw, json) Hash identifier: 2PlBNXMuMGPZ/7MfAXMfdVGPD1QypZWghtYRyLj+KmQ= Subject key identifier: 4C:82:CD:B1:1F:70:93:E1:FD:BB:A5:EB:D8:80:68:DB:19:1D:06:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 233458D87300DD98A3F9244E17EFBF16676B0870 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/822822f4-d715-4c1a-aac4-f40ff89dd609.roa Signing time: Fri 19 Sep 2025 15:33:23 +0000 ROA not before: Fri 19 Sep 2025 15:33:23 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.207.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:34:58:d8:73:00:dd:98:a3:f9:24:4e:17:ef:bf:16:67:6b:08:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 15:33:23 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=4a8f85aaea1c41c85ec94557565e8578bdc96c5120db4f0b82a04dcbf0e73876, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:89:98:58:3b:32:e7:1e:bd:47:11:45:25: a8:ad:91:dc:a6:13:16:1d:74:ad:70:bb:54:ab:51: c2:5e:d7:62:a3:43:0c:4d:c5:62:bd:de:76:c2:a8: 98:f8:cb:0f:4a:5e:23:56:be:4a:9e:76:d0:c6:02: 1d:47:cb:db:ba:06:ec:26:83:19:58:4f:5e:69:87: a7:20:ef:50:fa:c7:55:49:0c:bf:63:5e:5b:bc:16: be:82:93:da:3e:ec:2e:16:23:99:45:03:49:0d:8f: ac:aa:71:4a:9f:45:94:c2:80:bb:67:a7:88:ef:9d: ea:a1:35:ca:1b:79:81:6c:f6:fc:03:87:fc:f1:3b: 11:85:72:53:8d:8f:15:f2:02:4d:ce:f7:7d:ac:f0: d1:62:c6:4c:90:40:fa:f0:e4:ee:38:ee:c6:5e:4c: d8:a6:d5:8d:a3:8a:b6:7c:f9:92:15:b9:5b:45:36: 1c:5a:be:9c:e8:76:1e:fd:d5:24:68:e3:0b:15:a5: 65:7a:18:0e:3f:32:b9:cf:3d:b5:a0:9b:86:1f:d9: 52:88:12:25:41:3d:d4:59:97:07:e2:1b:51:4b:d3: 54:fb:17:50:f0:82:4e:83:b4:92:64:d2:cf:2f:3a: 91:7a:39:ef:3e:64:b3:88:ea:94:df:48:ef:cf:0f: 04:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:CD:B1:1F:70:93:E1:FD:BB:A5:EB:D8:80:68:DB:19:1D:06:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/822822f4-d715-4c1a-aac4-f40ff89dd609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.207.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:6c:46:b0:00:62:1e:f3:af:52:cf:8e:c9:99:bc:0b:e3:e8: e9:b1:0f:9a:17:38:1f:a7:4b:f6:df:a3:72:c0:dc:4f:e1:c6: fa:6c:eb:b5:f4:37:b3:6b:72:fc:13:f6:ea:ef:35:af:14:d9: 85:0b:51:71:57:3a:c7:1e:2a:63:de:84:f5:f2:97:d3:81:ec: 27:f8:63:9a:e5:02:fa:77:ea:1f:5f:3b:6a:ed:c2:6a:37:0f: 74:a9:72:13:85:10:6a:05:93:9a:4f:a1:9a:00:b8:8a:5c:84: 49:9d:99:e9:a0:3a:e9:f8:ed:94:e1:b1:b6:74:67:c6:ce:36: e9:3a:66:a9:09:19:43:60:fe:c9:6b:cd:5e:1e:5e:3d:fa:cc: d0:d3:bb:b8:0c:86:30:14:e9:29:8f:29:b8:8b:03:08:08:e7: a1:c9:6a:de:1d:67:a4:4a:3f:aa:e0:48:32:bd:c8:91:95:09: 64:2a:a5:54:2c:38:09:76:51:f8:7e:3c:ae:b3:0a:86:40:9c: c7:c1:dc:cc:ae:85:c4:11:17:13:46:27:ce:70:fd:b9:55:26: e7:71:d8:3a:58:44:6b:5c:1f:02:e2:e1:62:1b:44:3d:e2:02: d5:49:4e:21:a5:c5:8f:0d:d6:32:68:e6:50:4d:03:e1:35:4d: 31:b4:88:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIzRY2HMA3Zij+SROF++/FmdrCHAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTUzMzIzWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YThmODVhYWVhMWM0MWM4NWVjOTQ1NTc1NjVlODU3OGJk Yzk2YzUxMjBkYjRmMGI4MmEwNGRjYmYwZTczODc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY54mYWDsy5x69RxFFJaitkdymExYddK1wu1SrUcJe12Kj QwxNxWK93nbCqJj4yw9KXiNWvkqedtDGAh1Hy9u6BuwmgxlYT15ph6cg71D6x1VJ DL9jXlu8Fr6Ck9o+7C4WI5lFA0kNj6yqcUqfRZTCgLtnp4jvneqhNcobeYFs9vwD h/zxOxGFclONjxXyAk3O932s8NFixkyQQPrw5O447sZeTNim1Y2jirZ8+ZIVuVtF Nhxavpzodh791SRo4wsVpWV6GA4/MrnPPbWgm4Yf2VKIEiVBPdRZlwfiG1FL01T7 F1Dwgk6DtJJk0s8vOpF6Oe8+ZLOI6pTfSO/PDwQPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTILNsR9wk+H9u6Xr2IBo2xkdBsIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgyMjgyMmY0LWQ3MTUtNGMxYS1hYWM0LWY0MGZmODlkZDYwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2z/gwDQYJKoZIhvcNAQELBQADggEBACpsRrAAYh7zr1LPjsmZvAvj6Omx D5oXOB+nS/bfo3LA3E/hxvps67X0N7NrcvwT9urvNa8U2YULUXFXOsceKmPehPXy l9OB7Cf4Y5rlAvp36h9fO2rtwmo3D3SpchOFEGoFk5pPoZoAuIpchEmdmemgOun4 7ZThsbZ0Z8bONuk6ZqkJGUNg/slrzV4eXj36zNDTu7gMhjAU6SmPKbiLAwgI56HJ at4dZ6RKP6rgSDK9yJGVCWQqpVQsOAl2Ufh+PK6zCoZAnMfB3MyuhcQRFxNGJ85w /blVJudx2DpYRGtcHwLi4WIbRD3iAtVJTiGlxY8N1jJo5lBNA+E1TTG0iCw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:52 2025 by rpki-client