$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/931f92cb-688f-4cf0-8f8e-5f07be35de44.roa File: 931f92cb-688f-4cf0-8f8e-5f07be35de44.roa (raw, json) Hash identifier: G3h6YPs13mZyIzih122RW2OaKdbGO3cwQyvfswnVzCA= Subject key identifier: 4D:B2:DC:FC:81:E1:32:B3:37:2E:C4:DE:E0:93:69:D4:79:47:FD:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DFFDA7761BC248E3948B73CB5ED8FE56DBC2F8F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/931f92cb-688f-4cf0-8f8e-5f07be35de44.roa Signing time: Fri 17 Oct 2025 21:00:25 +0000 ROA not before: Fri 17 Oct 2025 21:00:25 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.250.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ff:da:77:61:bc:24:8e:39:48:b7:3c:b5:ed:8f:e5:6d:bc:2f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 21:00:25 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=1f793a8fcd7757f353f8ced619a23fbfd8a3686fa6539beb26cd4369421b1f39, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:83:33:32:04:05:ff:c1:b2:13:63:b6:e3: 91:d5:91:c0:54:6b:e4:e7:c8:7a:32:b6:a0:df:17: df:20:d7:69:2c:d1:63:4c:35:ba:a7:34:8c:0c:27: 36:bc:2f:e5:3a:c5:14:d7:8c:e3:45:4e:9e:d4:ed: a5:ca:ed:e4:94:41:e6:1e:36:88:0a:84:5c:32:fe: 4d:29:57:99:15:54:f7:6a:74:ce:46:5c:2e:ae:02: e1:1c:dd:ef:ae:25:07:35:d0:3b:9d:67:e8:a9:86: 0f:e6:38:e6:f1:6d:51:77:f7:f0:17:af:17:1d:b2: 03:6f:f0:fb:77:fd:2b:ee:38:f9:99:8c:a6:4a:e0: 3b:9e:ce:13:49:38:72:a9:35:e2:7f:7b:d3:5e:19: 6e:8b:93:2a:42:93:3a:ac:79:15:5d:56:35:0b:6e: 1d:cf:9f:11:78:d7:0f:65:5e:af:ea:8e:db:88:ef: fb:d1:a3:b2:de:fd:d7:c6:41:36:2d:7b:99:2a:a2: a6:ee:1e:08:d9:48:8b:d0:11:84:67:23:3a:d8:75: ed:69:6e:db:3c:4d:70:32:20:d2:8e:39:55:da:d3: d2:34:43:b5:d3:09:a9:dc:ae:e1:dd:5c:15:08:9c: 39:5e:e5:1b:87:22:3c:be:d8:37:69:20:16:1f:5a: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B2:DC:FC:81:E1:32:B3:37:2E:C4:DE:E0:93:69:D4:79:47:FD:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/931f92cb-688f-4cf0-8f8e-5f07be35de44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.250.128.0/18 Signature Algorithm: sha256WithRSAEncryption 55:3d:da:7d:35:4d:ae:bc:4f:c8:d2:4d:d0:09:cb:7b:2b:4d: 51:08:99:05:2b:51:c2:84:22:0e:a7:7d:a7:91:b0:e7:91:70: 58:ff:a0:f1:ef:17:50:1b:8f:f6:07:fc:35:96:de:b1:d6:52: 35:9a:b7:06:f8:db:3d:8e:84:bc:7e:fe:35:cf:3a:67:3f:a4: 79:0f:d6:ee:2b:ff:5a:db:32:f2:77:9f:e7:2d:d1:00:10:bd: 0a:fa:13:fc:95:0a:a7:e5:5b:b2:8c:c6:c2:14:2f:eb:66:86: 43:6a:f2:48:ff:e8:22:58:47:fc:cf:0f:4c:98:fa:69:a4:34: 20:67:b5:55:77:23:59:d1:71:0a:53:6b:97:85:cd:3e:e4:7d: c1:c0:46:14:26:65:a4:65:28:48:8e:8b:fb:90:5f:21:c1:3b: c1:37:63:7e:4c:a2:b4:56:16:fb:30:a6:d6:22:19:0d:5a:b9: a6:b2:e2:b9:2f:fd:55:72:43:eb:6a:88:cc:a9:e1:eb:8a:eb: d8:36:5d:5b:45:2b:5b:27:0e:32:b5:52:fe:49:0f:66:6e:6f: 43:6e:2b:2f:d3:be:01:12:75:38:bc:6c:99:23:97:3a:0c:16: 80:93:36:7b:54:e1:f4:62:e3:86:0c:4a:85:0f:8d:39:16:7d: e7:15:86:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULf/ad2G8JI45SLc8te2P5W28L48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjEwMDI1WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjc5M2E4ZmNkNzc1N2YzNTNmOGNlZDYxOWEyM2ZiZmQ4 YTM2ODZmYTY1MzliZWIyNmNkNDM2OTQyMWIxZjM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb14MzMgQF/8GyE2O245HVkcBUa+TnyHoytqDfF98g12ks 0WNMNbqnNIwMJza8L+U6xRTXjONFTp7U7aXK7eSUQeYeNogKhFwy/k0pV5kVVPdq dM5GXC6uAuEc3e+uJQc10DudZ+iphg/mOObxbVF39/AXrxcdsgNv8Pt3/SvuOPmZ jKZK4DuezhNJOHKpNeJ/e9NeGW6LkypCkzqseRVdVjULbh3PnxF41w9lXq/qjtuI 7/vRo7Le/dfGQTYte5kqoqbuHgjZSIvQEYRnIzrYde1pbts8TXAyINKOOVXa09I0 Q7XTCancruHdXBUInDle5RuHIjy+2DdpIBYfWnJTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTbLc/IHhMrM3LsTe4JNp1HlH/cwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzMWY5MmNiLTY4OGYtNGNmMC04ZjhlLTVmMDdiZTM1ZGU0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2+oAwDQYJKoZIhvcNAQELBQADggEBAFU92n01Ta68T8jSTdAJy3srTVEI mQUrUcKEIg6nfaeRsOeRcFj/oPHvF1Abj/YH/DWW3rHWUjWatwb42z2OhLx+/jXP Omc/pHkP1u4r/1rbMvJ3n+ct0QAQvQr6E/yVCqflW7KMxsIUL+tmhkNq8kj/6CJY R/zPD0yY+mmkNCBntVV3I1nRcQpTa5eFzT7kfcHARhQmZaRlKEiOi/uQXyHBO8E3 Y35MorRWFvswptYiGQ1auaay4rkv/VVyQ+tqiMyp4euK69g2XVtFK1snDjK1Uv5J D2Zub0NuKy/TvgESdTi8bJkjlzoMFoCTNntU4fRi44YMSoUPjTkWfecVhhk= -----END CERTIFICATE-----Generated at Sat Oct 18 04:53:10 2025 by rpki-client