$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88ca9320-468c-4088-8617-9d914b14b7cd.roa File: 88ca9320-468c-4088-8617-9d914b14b7cd.roa (raw, json) Hash identifier: /21pTWTnpvTOWBmAGG7/nS+bgihoVqD/n0V0ONurBmg= Subject key identifier: 44:0F:87:BF:B3:3F:76:5B:FC:D7:01:60:DA:DE:2D:D0:99:53:7F:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11248059C7E5E5A2D57141DE33DC15C6919FED5E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88ca9320-468c-4088-8617-9d914b14b7cd.roa Signing time: Fri 26 Sep 2025 17:07:49 +0000 ROA not before: Fri 26 Sep 2025 17:07:49 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:24:80:59:c7:e5:e5:a2:d5:71:41:de:33:dc:15:c6:91:9f:ed:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:07:49 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=060e4df8b9ee033e6e978bf8c2b489764707a0ec495b1c76cdec9340dae68da5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:5b:61:42:c5:2f:7a:5a:1c:0a:fa:55:01: dc:b9:47:2b:4e:68:ad:25:c7:d5:1b:5a:0e:60:99: 0f:71:7f:6e:e4:0f:aa:29:2f:4d:fa:bc:a0:de:d5: f4:5e:1b:d3:a2:2c:79:04:9c:1e:07:f9:ee:8c:e7: 8a:33:90:39:fa:25:ed:54:71:1d:59:d6:32:00:db: 01:13:ae:b5:8a:3b:3b:cb:ac:bf:56:ab:d8:80:a0: bb:19:6c:a2:f2:c9:e3:dd:49:2e:ff:26:de:14:4a: 0e:a6:7d:3a:34:f6:24:5e:6f:52:f4:53:82:a8:3c: a8:a8:0d:56:3c:10:53:08:5b:72:bc:27:bc:97:fb: 70:8c:8f:0f:e1:9f:31:b2:a3:81:c6:6c:34:12:55: c2:0f:07:00:3b:4b:e4:1b:84:e9:24:19:40:86:cc: ea:0e:ce:61:30:73:11:e1:70:dd:19:b6:22:35:67: 68:e5:5b:66:08:16:eb:39:83:46:38:27:2f:96:0e: 96:82:92:28:e1:1e:d5:9b:e9:d8:fc:ba:02:e6:ed: 30:80:ab:c1:41:12:b8:7a:4d:91:4f:ce:10:ca:2d: 11:c6:0e:f0:96:d5:4b:c9:e1:20:db:a3:24:4d:26: 17:39:2b:86:4f:db:12:57:22:b6:a0:0a:3e:2c:8f: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0F:87:BF:B3:3F:76:5B:FC:D7:01:60:DA:DE:2D:D0:99:53:7F:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88ca9320-468c-4088-8617-9d914b14b7cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:12:07:4e:c5:d8:c2:82:2d:e0:13:d5:bd:66:14:9b:d3:18: eb:44:c7:b0:98:41:86:a0:47:23:fa:f4:c3:9f:1a:e5:19:55: b7:ea:77:52:19:17:6d:b1:4d:61:3d:02:09:f8:b1:f2:e6:f7: de:2c:25:99:e9:09:97:98:a6:a4:38:34:19:f6:a3:a9:73:98: 98:5e:1b:f6:5f:fa:19:58:74:21:12:e0:fb:ee:76:f4:c5:ad: 9c:4b:e9:70:93:56:82:07:65:34:c7:91:0d:4d:a0:f4:f7:7c: 43:d1:c1:46:4c:02:5d:3a:90:3c:9c:8f:70:f5:ed:bc:99:f0: 51:7d:f5:ff:cd:68:06:5a:a1:11:7c:e5:85:e0:a9:c4:82:a4: df:5d:61:94:70:f7:6e:fc:d9:08:47:d7:33:32:84:47:c0:49: 8c:a4:94:5d:64:c9:69:dd:2a:ea:e5:c1:fb:be:92:3d:4d:3e: 54:87:b0:fa:4d:e7:15:11:82:7d:1e:29:c1:47:2d:00:60:10: c4:a6:8a:93:10:2d:a4:07:dc:c4:84:f8:11:df:28:e3:c7:7e: 6a:6d:f9:f3:41:2f:93:e5:94:89:82:44:f5:d2:06:bf:1e:87: 79:9d:10:83:80:cd:6a:66:55:ea:3c:b2:61:48:f8:74:b2:f7: cc:f7:64:80 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUESSAWcfl5aLVcUHeM9wVxpGf7V4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcwNzQ5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjBlNGRmOGI5ZWUwMzNlNmU5NzhiZjhjMmI0ODk3NjQ3 MDdhMGVjNDk1YjFjNzZjZGVjOTM0MGRhZTY4ZGE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxrlthQsUvelocCvpVAdy5RytOaK0lx9UbWg5gmQ9xf27k D6opL036vKDe1fReG9OiLHkEnB4H+e6M54ozkDn6Je1UcR1Z1jIA2wETrrWKOzvL rL9Wq9iAoLsZbKLyyePdSS7/Jt4USg6mfTo09iReb1L0U4KoPKioDVY8EFMIW3K8 J7yX+3CMjw/hnzGyo4HGbDQSVcIPBwA7S+QbhOkkGUCGzOoOzmEwcxHhcN0ZtiI1 Z2jlW2YIFus5g0Y4Jy+WDpaCkijhHtWb6dj8ugLm7TCAq8FBErh6TZFPzhDKLRHG DvCW1UvJ4SDboyRNJhc5K4ZP2xJXIragCj4sj4lfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURA+Hv7M/dlv81wFg2t4t0JlTf/YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4Y2E5MzIwLTQ2OGMtNDA4OC04NjE3LTlkOTE0YjE0YjdjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA23TANBgkqhkiG9w0BAQsFAAOCAQEAERIHTsXYwoIt4BPVvWYUm9MY60TH sJhBhqBHI/r0w58a5RlVt+p3UhkXbbFNYT0CCfix8ub33iwlmekJl5impDg0Gfaj qXOYmF4b9l/6GVh0IRLg++529MWtnEvpcJNWggdlNMeRDU2g9Pd8Q9HBRkwCXTqQ PJyPcPXtvJnwUX31/81oBlqhEXzlheCpxIKk311hlHD3bvzZCEfXMzKER8BJjKSU XWTJad0q6uXB+76SPU0+VIew+k3nFRGCfR4pwUctAGAQxKaKkxAtpAfcxIT4Ed8o 48d+am3580Evk+WUiYJE9dIGvx6HeZ0Qg4DNamZV6jyyYUj4dLL3zPdkgA== -----END CERTIFICATE-----Generated at Sat Oct 18 02:20:16 2025 by rpki-client