$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87ac2015-effd-4fb2-97aa-04c2abfeadf1.roa File: 87ac2015-effd-4fb2-97aa-04c2abfeadf1.roa (raw, json) Hash identifier: gRRzh/5jS26mens1AlvRgrqx7DVLxDuI0cTF16fmCp8= Subject key identifier: 94:5F:5F:4F:14:85:AD:86:8B:93:CD:6B:32:C5:2F:CC:71:68:0D:BB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 456BE4DDD84A895F3E9C9B0B25B8ACD6449E25FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87ac2015-effd-4fb2-97aa-04c2abfeadf1.roa Signing time: Fri 26 Sep 2025 03:03:11 +0000 ROA not before: Fri 26 Sep 2025 03:03:11 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6b:e4:dd:d8:4a:89:5f:3e:9c:9b:0b:25:b8:ac:d6:44:9e:25:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 03:03:11 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=e9e77b5916e97236d9265d1e233c9ca2b451e0d0eded5d5c6980b95c2ff3aa7d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:10:70:f7:56:ad:21:78:14:d6:2f:f8:4a: 64:cc:ee:93:97:08:8b:ac:56:44:08:cf:70:01:7b: 97:1f:27:97:97:a1:30:fd:6c:ab:1d:c9:1a:d7:38: b4:32:96:66:a8:35:cc:ca:23:7f:8b:3e:0c:2e:7a: 2f:55:dc:7f:9c:28:a7:e1:a0:d2:d8:3a:e9:eb:aa: c2:c6:96:7d:09:43:50:24:b0:96:64:e8:a9:0a:81: 8a:41:30:49:e2:4b:9e:43:53:0e:12:a2:80:4d:8f: a1:f9:39:37:0f:c6:43:ad:43:e2:eb:0d:89:f2:29: 33:58:5c:43:a1:43:93:6e:20:78:73:56:00:af:25: 0f:96:9e:65:7b:08:80:fa:c3:14:79:51:f1:d6:08: 19:f9:a4:a9:fd:e0:b3:49:64:d7:2d:0c:46:0f:14: 50:41:e2:63:55:68:61:05:d4:4b:54:1c:e2:52:57: 0d:43:e6:6c:4b:f7:00:82:0d:b8:c9:a2:85:aa:32: cd:7f:22:9c:79:56:a2:07:cf:09:89:b3:32:df:17: a0:b5:d1:75:1e:bf:16:a3:c2:cd:5a:84:0e:f2:e3: 0f:e7:d9:a1:59:67:ed:25:2e:dd:bf:c8:bd:dd:a5: 2c:cf:9c:6a:1b:68:ea:fd:0c:a8:2f:01:ac:5f:a0: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5F:5F:4F:14:85:AD:86:8B:93:CD:6B:32:C5:2F:CC:71:68:0D:BB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87ac2015-effd-4fb2-97aa-04c2abfeadf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.176.0/21 Signature Algorithm: sha256WithRSAEncryption 48:ca:3b:21:c0:80:f2:7d:50:0e:b0:05:5e:28:15:06:68:58: 11:c1:21:f0:d2:62:b0:52:03:01:de:47:5a:5e:4c:e2:92:28: e7:a3:97:bb:9b:7f:d6:59:09:29:87:ab:f0:73:2c:c7:bf:a7: 28:ed:00:5a:55:22:5b:05:31:50:3a:fa:75:5c:3c:82:bc:26: 3a:45:67:94:e3:af:e6:0a:ff:2f:7d:e7:0a:8b:84:e6:00:b3: 16:5f:a1:47:58:2f:74:20:3e:8d:90:6c:d3:c5:e1:5f:bc:47: 89:45:e1:aa:c8:51:84:c0:4b:b1:22:82:d2:31:64:c4:da:05: 91:27:21:8c:d4:74:2b:9c:f0:f4:d9:6e:67:d2:63:34:bd:a5: 86:73:a5:1a:82:64:aa:07:52:23:e8:ff:31:44:7f:f8:d4:3c: 45:2c:f3:c8:5c:60:75:06:5a:8c:4c:57:54:bf:f7:27:af:11: 91:b2:39:ce:1b:d5:73:7f:a5:43:13:aa:3d:7d:dc:5b:88:8c: 53:90:b0:0c:ea:ba:88:36:52:5e:43:1a:b9:ea:06:b4:f9:7f: 0f:36:b8:99:18:4d:78:bd:b5:b7:56:21:8f:da:9f:49:e0:6f: 42:23:02:38:35:0f:6e:59:5f:fb:45:f9:71:8a:b6:43:3d:42: 93:a1:60:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURWvk3dhKiV8+nJsLJbis1kSeJf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDMwMzExWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWU3N2I1OTE2ZTk3MjM2ZDkyNjVkMWUyMzNjOWNhMmI0 NTFlMGQwZWRlZDVkNWM2OTgwYjk1YzJmZjNhYTdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC11BBw91atIXgU1i/4SmTM7pOXCIusVkQIz3ABe5cfJ5eX oTD9bKsdyRrXOLQylmaoNczKI3+LPgwuei9V3H+cKKfhoNLYOunrqsLGln0JQ1Ak sJZk6KkKgYpBMEniS55DUw4SooBNj6H5OTcPxkOtQ+LrDYnyKTNYXEOhQ5NuIHhz VgCvJQ+WnmV7CID6wxR5UfHWCBn5pKn94LNJZNctDEYPFFBB4mNVaGEF1EtUHOJS Vw1D5mxL9wCCDbjJooWqMs1/Ipx5VqIHzwmJszLfF6C10XUevxajws1ahA7y4w/n 2aFZZ+0lLt2/yL3dpSzPnGobaOr9DKgvAaxfoDRhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlF9fTxSFrYaLk81rMsUvzHFoDbswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3YWMyMDE1LWVmZmQtNGZiMi05N2FhLTA0YzJhYmZlYWRmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM25rAwDQYJKoZIhvcNAQELBQADggEBAEjKOyHAgPJ9UA6wBV4oFQZoWBHB IfDSYrBSAwHeR1peTOKSKOejl7ubf9ZZCSmHq/BzLMe/pyjtAFpVIlsFMVA6+nVc PIK8JjpFZ5Tjr+YK/y995wqLhOYAsxZfoUdYL3QgPo2QbNPF4V+8R4lF4arIUYTA S7EigtIxZMTaBZEnIYzUdCuc8PTZbmfSYzS9pYZzpRqCZKoHUiPo/zFEf/jUPEUs 88hcYHUGWoxMV1S/9yevEZGyOc4b1XN/pUMTqj193FuIjFOQsAzquog2Ul5DGrnq BrT5fw82uJkYTXi9tbdWIY/an0ngb0IjAjg1D25ZX/tF+XGKtkM9QpOhYJo= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:23 2025 by rpki-client