$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87044d36-2d64-4c6b-86fc-d61e95c35150.roa File: 87044d36-2d64-4c6b-86fc-d61e95c35150.roa (raw, json) Hash identifier: Rx2SB5wjKOBlTMqq/3nKH95ipth2K7GJhPQgob6zyms= Subject key identifier: 14:55:9E:D4:E5:5B:D3:C9:02:30:F9:4C:35:D6:72:CC:F6:14:D9:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F89AE2B262927AD82542A8482BE5582D2612FA1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87044d36-2d64-4c6b-86fc-d61e95c35150.roa Signing time: Fri 17 Oct 2025 22:41:07 +0000 ROA not before: Fri 17 Oct 2025 22:41:07 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:89:ae:2b:26:29:27:ad:82:54:2a:84:82:be:55:82:d2:61:2f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:41:07 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=33d58ed5495f029bc577b3da21fa45e43aa7799089a723777d205d4b6ed629c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:56:ac:ac:de:6b:dc:ac:8a:fe:50:04:d9:0f: 3e:f2:e9:49:6f:30:3a:5b:a4:a8:2f:14:d6:c8:1d: 4a:fb:1a:f8:31:27:02:20:2f:34:d3:f3:8e:56:f7: 6f:d3:0e:cb:d8:a3:59:3a:38:b6:71:2b:8f:49:5a: 25:6e:f1:74:95:33:bd:2a:ba:ac:2d:cc:dc:30:d2: 2b:c3:da:a6:19:cf:43:44:ae:05:b4:fe:4d:20:cf: 84:03:48:9d:57:1f:1c:dd:f1:dc:25:79:03:64:f6: 42:71:32:d4:26:b1:b5:b9:7e:8a:76:28:a9:65:88: eb:86:f1:c7:18:a6:e9:c6:f4:36:5c:ea:39:3a:b7: 1f:de:3a:8e:90:c6:4f:01:88:1f:1a:61:20:a2:65: c6:19:ed:b7:7f:67:fb:f0:8b:fc:41:4e:69:1a:88: f6:1e:05:ad:1a:2b:51:67:e2:67:8f:76:22:ce:aa: e9:b5:6a:5c:39:43:12:46:a8:6a:8d:80:09:a9:04: 43:ca:1f:16:e7:6c:71:4a:08:01:c2:8f:f4:b6:0d: a3:c3:bb:55:49:5b:12:dd:18:60:b0:ad:c6:95:35: 42:62:75:0a:24:ef:21:6c:ce:f8:33:ae:c9:f5:da: 30:43:02:7f:87:28:35:a2:7a:c7:b6:73:d0:df:a1: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:55:9E:D4:E5:5B:D3:C9:02:30:F9:4C:35:D6:72:CC:F6:14:D9:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87044d36-2d64-4c6b-86fc-d61e95c35150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.64.0/20 Signature Algorithm: sha256WithRSAEncryption a2:3b:40:44:cf:4a:f3:1d:e0:f3:c1:e2:28:47:4f:0f:f3:31: 9b:62:f6:49:00:a7:00:9e:1e:64:e8:db:c8:4e:25:56:7c:3b: 7a:9d:45:8a:e5:14:4f:be:b2:e7:54:ae:1b:bb:ea:71:63:bc: c5:a7:1d:a5:04:6a:fd:44:00:53:9f:ca:28:75:0d:64:2f:31: b4:09:bd:f8:f9:12:85:e2:25:e8:6b:66:3a:fe:d9:2f:82:57: 5b:a1:af:10:6d:aa:5a:11:17:53:e2:3d:2a:8b:7c:80:e1:8b: a8:df:20:6d:45:8b:a6:49:2f:b3:2a:99:dc:2b:2f:9c:2d:a9: 3d:ae:f5:f3:0c:ce:98:31:a1:4e:31:23:e7:9f:88:7e:4a:c7: 73:b0:c9:c3:b1:53:37:18:0b:76:98:41:d2:5c:88:f8:d8:b6: 77:98:c7:1d:dd:c0:d3:f6:2b:24:19:dc:cf:50:9d:3c:5a:c2: e2:50:79:33:4d:12:d7:7e:30:99:6f:a2:14:13:d2:a9:34:d5: 39:fb:4a:05:85:ba:53:ff:42:bb:cb:bc:5f:56:75:a9:f9:bc: b2:61:c0:f6:cf:fd:cf:96:3a:dc:d9:d7:b7:b1:a7:46:4d:42: eb:b4:bf:0d:1b:80:a3:f3:23:bd:5f:96:f5:bf:4f:76:51:d9: d7:20:36:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb4muKyYpJ62CVCqEgr5VgtJhL6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjI0MTA3WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2Q1OGVkNTQ5NWYwMjliYzU3N2IzZGEyMWZhNDVlNDNh YTc3OTkwODlhNzIzNzc3ZDIwNWQ0YjZlZDYyOWMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD7Vqys3mvcrIr+UATZDz7y6UlvMDpbpKgvFNbIHUr7Gvgx JwIgLzTT845W92/TDsvYo1k6OLZxK49JWiVu8XSVM70quqwtzNww0ivD2qYZz0NE rgW0/k0gz4QDSJ1XHxzd8dwleQNk9kJxMtQmsbW5fop2KKlliOuG8ccYpunG9DZc 6jk6tx/eOo6Qxk8BiB8aYSCiZcYZ7bd/Z/vwi/xBTmkaiPYeBa0aK1Fn4mePdiLO qum1alw5QxJGqGqNgAmpBEPKHxbnbHFKCAHCj/S2DaPDu1VJWxLdGGCwrcaVNUJi dQok7yFszvgzrsn12jBDAn+HKDWiese2c9Dfod3XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFFWe1OVb08kCMPlMNdZyzPYU2SAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3MDQ0ZDM2LTJkNjQtNGM2Yi04NmZjLWQ2MWU5NWMzNTE1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2w0AwDQYJKoZIhvcNAQELBQADggEBAKI7QETPSvMd4PPB4ihHTw/zMZti 9kkApwCeHmTo28hOJVZ8O3qdRYrlFE++sudUrhu76nFjvMWnHaUEav1EAFOfyih1 DWQvMbQJvfj5EoXiJehrZjr+2S+CV1uhrxBtqloRF1PiPSqLfIDhi6jfIG1Fi6ZJ L7MqmdwrL5wtqT2u9fMMzpgxoU4xI+efiH5Kx3OwycOxUzcYC3aYQdJciPjYtneY xx3dwNP2KyQZ3M9QnTxawuJQeTNNEtd+MJlvohQT0qk01Tn7SgWFulP/QrvLvF9W dan5vLJhwPbP/c+WOtzZ17exp0ZNQuu0vw0bgKPzI71flvW/T3ZR2dcgNoM= -----END CERTIFICATE-----Generated at Sat Oct 18 02:20:14 2025 by rpki-client