$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aecfde2-72d6-4e38-a6c9-25d6fab408e9.roa File: 9aecfde2-72d6-4e38-a6c9-25d6fab408e9.roa (raw, json) Hash identifier: UNar+ufxMTl9VL6f7vyUrxL6n/KEkm2UCWRfBABTlOo= Subject key identifier: C9:C1:10:8A:C4:0D:C7:91:19:D9:33:2B:DA:71:66:CD:64:33:55:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 381538D30C83B686BF7026A47B9AD6C366948EB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aecfde2-72d6-4e38-a6c9-25d6fab408e9.roa Signing time: Fri 17 Oct 2025 00:16:57 +0000 ROA not before: Fri 17 Oct 2025 00:16:57 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:15:38:d3:0c:83:b6:86:bf:70:26:a4:7b:9a:d6:c3:66:94:8e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 00:16:57 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=a2a84c2fc80ed5fecc9cf42a872b30c40a146a1e9a7c9c15e74f68c7e03eb7e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:41:d3:e0:3f:23:83:e0:5f:ae:e5:04:ed: ff:54:25:33:05:c9:89:2a:9e:8d:3d:8b:32:50:c6: 28:0c:a4:34:b2:ac:db:ff:11:3b:74:0c:29:a5:63: 83:50:d9:3a:fb:33:49:82:38:79:ae:50:9b:a3:7f: 1b:99:ec:7b:02:ce:ec:c7:7c:86:fc:90:c5:ce:1a: 27:c4:81:ed:9f:d2:63:2d:1f:62:41:db:d3:72:d0: 41:44:88:0c:9e:50:a4:25:2e:c7:6a:fd:8b:3a:ab: 7e:5b:c1:ae:dc:fd:e5:34:90:80:16:a8:9d:21:f4: c1:b6:8a:0a:53:07:04:1d:19:97:4c:53:65:22:36: cc:20:18:89:50:28:12:11:9e:fb:ed:2e:5b:89:9f: 90:0c:89:f7:61:9a:ea:cd:df:97:9a:d7:b2:06:21: c2:5a:de:7a:0f:da:e9:95:31:f6:29:51:3c:28:33: 68:1f:ed:a5:79:63:c1:ec:33:f2:d5:17:ca:ac:66: f5:dd:35:f0:fc:ee:38:db:65:e6:94:e1:1e:02:6a: d7:55:e9:6e:4f:eb:7f:05:64:3c:cd:51:3a:73:1a: 44:49:46:4d:74:17:82:97:a8:c8:55:93:0e:ec:63: bb:c1:57:22:6a:c8:63:f6:db:fd:11:04:62:76:61: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:10:8A:C4:0D:C7:91:19:D9:33:2B:DA:71:66:CD:64:33:55:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aecfde2-72d6-4e38-a6c9-25d6fab408e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.64.0/20 Signature Algorithm: sha256WithRSAEncryption a5:30:54:85:a7:76:cd:41:db:cd:ba:95:7f:6c:84:fd:46:f0: b5:97:00:03:26:9d:ae:38:20:05:08:44:2e:b3:f5:3d:8c:3c: d3:50:4d:82:9a:28:7c:ad:c9:3f:27:18:1d:74:56:08:53:e4: 4b:53:19:b0:99:53:6f:89:b5:f0:2b:f6:11:7f:2f:dd:9e:8f: 67:a9:5a:90:60:0f:9a:cd:6f:f8:a8:f3:be:d5:4d:e7:e7:47: a8:2e:ab:97:6d:d6:91:4b:47:2b:56:93:42:92:1c:cb:27:49: 5f:ed:c8:ba:f2:10:9c:19:0f:c9:59:54:ea:18:a9:77:4e:81: 93:16:ed:8d:3e:43:98:27:53:2a:a6:2c:17:82:d3:39:02:6f: 47:d6:74:61:56:bd:cc:0c:75:61:7f:b6:f4:6d:ee:a4:c0:fa: cc:be:b6:1e:a1:c4:95:49:47:71:c2:1c:9d:f8:7e:f1:69:a5: 28:28:6e:5b:94:7c:dd:b8:93:9b:e3:ad:d5:5f:d8:e0:f6:79: f0:c8:24:e4:ed:87:3a:fd:3f:b6:d8:28:87:61:ba:05:29:0d: 71:6d:68:7f:da:2b:82:ce:ea:e3:64:3b:e0:93:73:fe:1e:64: 8a:72:25:52:38:8b:2c:0e:bf:d4:1f:b1:a0:4c:e0:01:0d:9c: 78:75:95:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOBU40wyDtoa/cCake5rWw2aUjrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MDAxNjU3WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmE4NGMyZmM4MGVkNWZlY2M5Y2Y0MmE4NzJiMzBjNDBh MTQ2YTFlOWE3YzljMTVlNzRmNjhjN2UwM2ViN2UyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKpkHT4D8jg+BfruUE7f9UJTMFyYkqno09izJQxigMpDSy rNv/ETt0DCmlY4NQ2Tr7M0mCOHmuUJujfxuZ7HsCzuzHfIb8kMXOGifEge2f0mMt H2JB29Ny0EFEiAyeUKQlLsdq/Ys6q35bwa7c/eU0kIAWqJ0h9MG2igpTBwQdGZdM U2UiNswgGIlQKBIRnvvtLluJn5AMifdhmurN35ea17IGIcJa3noP2umVMfYpUTwo M2gf7aV5Y8HsM/LVF8qsZvXdNfD87jjbZeaU4R4CatdV6W5P638FZDzNUTpzGkRJ Rk10F4KXqMhVkw7sY7vBVyJqyGP22/0RBGJ2YfrFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUycEQisQNx5EZ2TMr2nFmzWQzVYYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZWNmZGUyLTcyZDYtNGUzOC1hNmM5LTI1ZDZmYWI0MDhlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2wEAwDQYJKoZIhvcNAQELBQADggEBAKUwVIWnds1B2826lX9shP1G8LWX AAMmna44IAUIRC6z9T2MPNNQTYKaKHytyT8nGB10VghT5EtTGbCZU2+JtfAr9hF/ L92ej2epWpBgD5rNb/io877VTefnR6guq5dt1pFLRytWk0KSHMsnSV/tyLryEJwZ D8lZVOoYqXdOgZMW7Y0+Q5gnUyqmLBeC0zkCb0fWdGFWvcwMdWF/tvRt7qTA+sy+ th6hxJVJR3HCHJ34fvFppSgobluUfN24k5vjrdVf2OD2efDIJOTthzr9P7bYKIdh ugUpDXFtaH/aK4LO6uNkO+CTc/4eZIpyJVI4iywOv9QfsaBM4AENnHh1lSc= -----END CERTIFICATE-----Generated at Sat Oct 18 04:54:56 2025 by rpki-client