$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/868750b4-8c5d-4422-8cce-ebfbf71e5945.roa File: 868750b4-8c5d-4422-8cce-ebfbf71e5945.roa (raw, json) Hash identifier: 2lQUaUNzw0YQasL4pKYPTQSYNZ8XmYiz1LmZST/HOU4= Subject key identifier: 8F:F8:27:66:9E:31:F7:26:53:E9:39:C9:49:52:C3:64:F3:F5:4A:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67538910F410016ACCF429925C20115799DF556D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/868750b4-8c5d-4422-8cce-ebfbf71e5945.roa Signing time: Fri 10 Oct 2025 16:56:25 +0000 ROA not before: Fri 10 Oct 2025 16:56:25 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.210.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:53:89:10:f4:10:01:6a:cc:f4:29:92:5c:20:11:57:99:df:55:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:56:25 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=96a794af07a80f72ba963555e79a5243c40b300e5ea5aa0f0c35e0e262ea50df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:81:09:fa:3f:e8:57:da:46:08:5b:06:99: b8:22:dd:28:32:52:3b:b5:4c:c9:d0:04:24:65:25: 6f:95:65:c5:55:e4:44:a6:b6:8b:ff:2c:30:fd:32: 56:c8:b2:ca:c5:c4:ee:4d:92:4c:2b:77:86:c4:1f: c6:ff:3a:e1:aa:8b:31:bd:c7:47:5a:12:a1:23:71: c8:f0:7f:d9:e5:c3:be:e4:d3:7b:dc:2b:a0:0c:54: 55:73:43:76:37:4f:42:4b:36:bc:fd:d7:42:30:01: 0e:00:51:60:6f:3c:c2:13:a0:bb:9e:21:62:3c:cc: e9:f2:3a:19:77:fd:7d:ca:20:f6:2d:68:d7:5a:d8: 86:74:73:ed:8b:2d:65:4e:94:e2:dd:2c:a9:72:dd: fb:a7:85:ce:8f:09:18:77:6d:fe:ad:0b:e9:05:26: 53:e4:8e:d2:79:da:72:70:b0:5f:2f:84:88:1d:2d: 07:43:45:1a:72:97:f7:66:3c:5f:46:c7:05:fb:d7: 13:08:f2:a7:21:a6:b4:70:74:57:ca:21:eb:fe:27: ed:cc:2b:d0:4e:3b:a4:ef:6e:a7:e6:25:91:c5:2a: c9:09:69:be:cc:3e:69:3a:a7:eb:28:53:a2:da:b2: a3:20:4d:19:f2:31:42:78:2a:a4:7f:4e:d9:c4:8b: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:27:66:9E:31:F7:26:53:E9:39:C9:49:52:C3:64:F3:F5:4A:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/868750b4-8c5d-4422-8cce-ebfbf71e5945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5b:71:27:84:24:e8:5d:09:87:45:e1:88:98:03:00:6c:bd:12: bf:a2:42:8c:f1:fc:57:87:d7:1c:b7:5d:bd:86:73:e2:31:d2: 9b:0a:f8:71:c3:e4:8f:a9:ba:9a:70:c9:79:c3:d5:28:2a:ff: 31:4b:dc:ac:2a:48:cb:67:8f:46:b5:ca:26:42:20:ba:7e:d0: 0e:a8:17:f2:3e:13:b0:20:0b:72:15:13:66:eb:e5:58:93:aa: 69:3b:e0:f8:89:52:e4:be:01:fa:d7:d2:e7:88:63:c3:8b:df: 47:20:45:50:58:33:6f:da:ff:ac:2f:bf:87:72:a3:6b:d6:c2: bb:23:12:c7:24:4e:79:ed:0f:2e:d0:35:a7:07:36:cb:ce:a0: ea:22:a0:09:d1:bc:fa:5b:4a:39:1a:70:6b:a9:6f:c3:cf:77: 3d:49:05:af:ff:48:59:98:af:8e:77:f4:7a:66:9e:a6:95:1a: 39:63:c5:8e:c5:f3:16:56:b2:ee:ce:14:db:fb:cf:c5:12:0a: a6:c1:27:07:c7:15:a4:11:eb:fa:94:9f:04:07:83:a9:1a:e5: 77:5a:6e:d2:ef:04:2e:72:d0:33:03:64:ff:ae:bc:8a:9f:eb: b7:6d:de:79:63:47:5d:d1:35:d0:0b:b6:e0:e1:76:d0:05:d8: f0:7b:e6:fc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ1OJEPQQAWrM9CmSXCARV5nfVW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTY1NjI1WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmE3OTRhZjA3YTgwZjcyYmE5NjM1NTVlNzlhNTI0M2M0 MGIzMDBlNWVhNWFhMGYwYzM1ZTBlMjYyZWE1MGRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzeYEJ+j/oV9pGCFsGmbgi3SgyUju1TMnQBCRlJW+VZcVV 5ESmtov/LDD9MlbIssrFxO5Nkkwrd4bEH8b/OuGqizG9x0daEqEjccjwf9nlw77k 03vcK6AMVFVzQ3Y3T0JLNrz910IwAQ4AUWBvPMIToLueIWI8zOnyOhl3/X3KIPYt aNda2IZ0c+2LLWVOlOLdLKly3funhc6PCRh3bf6tC+kFJlPkjtJ52nJwsF8vhIgd LQdDRRpyl/dmPF9GxwX71xMI8qchprRwdFfKIev+J+3MK9BOO6TvbqfmJZHFKskJ ab7MPmk6p+soU6LasqMgTRnyMUJ4KqR/TtnEi+RbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUj/gnZp4x9yZT6TnJSVLDZPP1Sl0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2ODc1MGI0LThjNWQtNDQyMi04Y2NlLWViZmJmNzFlNTk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA20jANBgkqhkiG9w0BAQsFAAOCAQEAW3EnhCToXQmHReGImAMAbL0Sv6JC jPH8V4fXHLddvYZz4jHSmwr4ccPkj6m6mnDJecPVKCr/MUvcrCpIy2ePRrXKJkIg un7QDqgX8j4TsCALchUTZuvlWJOqaTvg+IlS5L4B+tfS54hjw4vfRyBFUFgzb9r/ rC+/h3Kja9bCuyMSxyROee0PLtA1pwc2y86g6iKgCdG8+ltKORpwa6lvw893PUkF r/9IWZivjnf0emaeppUaOWPFjsXzFlay7s4U2/vPxRIKpsEnB8cVpBHr+pSfBAeD qRrld1pu0u8ELnLQMwNk/668ip/rt23eeWNHXdE10Au24OF20AXY8Hvm/A== -----END CERTIFICATE-----Generated at Sat Oct 18 02:20:07 2025 by rpki-client