$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa File: a1fde637-becd-4e25-8fd7-57380fc4e43c.roa (raw, json) Hash identifier: qxks1ZAhVPWCDode2Bt1vpWbxeGs2BL9xKmO7dWB0ng= Subject key identifier: 46:C4:03:29:F2:39:05:35:FB:F9:3C:F0:83:3E:E6:56:E2:DB:E8:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 45ED579CE380E4602F9B2EB388707977A8A2916A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa Signing time: Fri 17 Oct 2025 23:01:24 +0000 ROA not before: Fri 17 Oct 2025 23:01:24 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ed:57:9c:e3:80:e4:60:2f:9b:2e:b3:88:70:79:77:a8:a2:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:01:24 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=cc903edf9d1b0e3632da8985f7eb77ed8ce220fdd9d4569ae74e9997e321a741, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:df:5e:a5:b7:60:6d:b2:cc:a4:c6:95:9a: ae:94:7c:ab:61:cc:c7:64:13:88:89:2a:0e:ed:87: 91:3e:f1:ad:cb:c9:4c:8a:ef:c2:18:18:cf:3c:ea: 5c:8a:35:c1:dd:5d:87:cc:8c:6a:8f:a5:f3:7b:8f: ed:a6:4d:f1:90:93:8f:29:ab:05:14:2e:a1:4b:de: e0:41:29:22:20:8e:9f:90:a4:4b:d6:66:51:d4:08: 38:11:e9:b2:ed:38:90:8b:e6:40:5c:d9:af:50:34: f2:09:23:b8:80:a0:31:82:7c:53:d2:55:f2:56:9e: 91:a0:25:d6:85:25:90:9a:06:67:a0:1c:1f:67:16: fc:55:5d:c5:dd:44:6b:4c:33:c9:ff:0f:b6:42:a2: a2:38:d0:d7:d4:9f:af:ef:98:ae:9e:7d:18:a3:14: 2d:a0:6e:28:de:53:6b:26:40:4c:a5:e2:35:cc:16: a0:da:f7:0f:43:8b:5b:b9:d1:fe:02:1b:f3:19:c6: c6:2e:02:33:2f:25:3d:d7:98:1f:b1:c2:3f:79:7a: 76:91:fc:ca:2f:95:03:01:0d:ec:62:3c:c5:f7:29: 13:ee:b7:eb:88:bd:15:ac:4f:98:e9:0b:b1:c8:58: 9d:d1:f3:60:9a:6f:22:12:9b:29:de:23:5e:08:26: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C4:03:29:F2:39:05:35:FB:F9:3C:F0:83:3E:E6:56:E2:DB:E8:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:10:96:88:d2:d7:87:23:8f:c1:9e:12:a1:e0:50:3a:b0:38: f4:dd:26:91:99:69:9c:91:3f:8e:39:c5:30:86:b9:eb:b9:8c: 5e:a9:74:19:8b:9f:4c:e5:77:56:aa:c5:c8:60:1e:89:61:c1: 6d:04:44:9c:33:55:0f:8b:88:66:17:c3:9c:46:71:a5:c7:59: 1c:85:4c:a8:fe:1b:ac:95:c5:01:d8:20:55:5c:99:49:d2:8d: ba:f6:a3:91:b8:ce:f3:9d:bd:61:01:fb:86:2e:2d:dc:10:82: d0:17:ee:8a:f8:68:fc:83:bd:a8:a6:5f:34:09:6d:c3:15:63: dd:99:75:ea:77:86:29:96:eb:b0:6b:b7:55:a8:7b:72:ea:a9: a6:44:ff:7a:a9:f2:ec:ae:57:7b:2b:f5:e2:8d:a8:c7:43:60: a9:cc:be:2d:b0:d5:2b:52:62:d1:83:02:72:08:77:0c:c7:39: 04:9f:e3:fe:0d:4b:eb:29:b3:bb:c8:33:d4:0d:e3:c3:9b:89: c7:59:ae:c5:f0:bc:66:49:97:a2:39:b2:55:8c:72:e9:aa:d1: e4:e6:49:ab:2f:e9:b2:85:8d:6a:95:f4:50:42:37:b8:38:c9: f8:be:8e:66:2b:bd:15:d7:1c:ee:ee:1b:03:8c:b0:aa:c0:af: f9:22:e0:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURe1XnOOA5GAvmy6ziHB5d6iikWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjMwMTI0WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzkwM2VkZjlkMWIwZTM2MzJkYTg5ODVmN2ViNzdlZDhj ZTIyMGZkZDlkNDU2OWFlNzRlOTk5N2UzMjFhNzQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPw99epbdgbbLMpMaVmq6UfKthzMdkE4iJKg7th5E+8a3L yUyK78IYGM886lyKNcHdXYfMjGqPpfN7j+2mTfGQk48pqwUULqFL3uBBKSIgjp+Q pEvWZlHUCDgR6bLtOJCL5kBc2a9QNPIJI7iAoDGCfFPSVfJWnpGgJdaFJZCaBmeg HB9nFvxVXcXdRGtMM8n/D7ZCoqI40NfUn6/vmK6efRijFC2gbijeU2smQEyl4jXM FqDa9w9Di1u50f4CG/MZxsYuAjMvJT3XmB+xwj95enaR/MovlQMBDexiPMX3KRPu t+uIvRWsT5jpC7HIWJ3R82CabyISmyneI14IJrVhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURsQDKfI5BTX7+Tzwgz7mVuLb6EUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExZmRlNjM3LWJlY2QtNGUyNS04ZmQ3LTU3MzgwZmM0ZTQzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2w/AwDQYJKoZIhvcNAQELBQADggEBAJ8QlojS14cjj8GeEqHgUDqwOPTd JpGZaZyRP445xTCGueu5jF6pdBmLn0zld1aqxchgHolhwW0ERJwzVQ+LiGYXw5xG caXHWRyFTKj+G6yVxQHYIFVcmUnSjbr2o5G4zvOdvWEB+4YuLdwQgtAX7or4aPyD vaimXzQJbcMVY92Zdep3himW67Brt1Woe3LqqaZE/3qp8uyuV3sr9eKNqMdDYKnM vi2w1StSYtGDAnIIdwzHOQSf4/4NS+sps7vIM9QN48ObicdZrsXwvGZJl6I5slWM cumq0eTmSasv6bKFjWqV9FBCN7g4yfi+jmYrvRXXHO7uGwOMsKrAr/ki4Go= -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:08 2025 by rpki-client