$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2283230-1eba-477d-a5d4-65f3be07c228.roa File: a2283230-1eba-477d-a5d4-65f3be07c228.roa (raw, json) Hash identifier: N4M8tVAjGci6/AyFeWZu4cjFqX65ICokgY+mHMxv1WQ= Subject key identifier: 48:48:22:5D:07:29:41:9B:B4:A0:1A:E3:5A:E4:00:1A:1F:19:77:A4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D7820E9E3E2C2ED992AF004F4600F77EEC409FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2283230-1eba-477d-a5d4-65f3be07c228.roa Signing time: Thu 16 Oct 2025 20:15:25 +0000 ROA not before: Thu 16 Oct 2025 20:15:25 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:78:20:e9:e3:e2:c2:ed:99:2a:f0:04:f4:60:0f:77:ee:c4:09:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 20:15:25 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=0dedf8d4e488cf6dfe75c7e9bd5f49d7bec56c0555dfecc7718a2715cdc0896a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:52:77:1a:f8:bc:4f:f4:1b:c0:e3:f1:e1: 56:c0:68:3f:65:eb:bf:6e:ed:fa:4f:c9:b7:6e:28: 05:29:8f:c6:d5:cc:1b:79:3a:fe:db:78:2f:61:bc: 79:db:69:ba:2a:56:7b:a4:d0:6b:55:7a:41:f2:8c: f9:d8:83:f5:e6:86:68:29:c5:0c:9d:7e:14:44:94: 8e:98:d6:fb:75:56:ed:11:23:c1:4e:67:f2:d0:03: 2b:66:77:f6:76:cc:cc:a8:7a:fe:ec:10:8f:dc:ed: 74:21:4b:ca:e6:ae:b9:29:9d:f9:3c:33:d2:2a:f4: 76:a8:8b:5b:06:da:11:6c:c6:74:60:8b:16:79:2b: ba:28:12:c9:3e:2d:9c:66:54:93:72:55:99:86:9d: f3:bf:af:91:f3:e3:fa:65:42:42:03:ae:10:27:e1: 5c:90:aa:dd:72:78:95:a2:84:fe:68:aa:03:a8:67: 52:4a:45:6e:dc:bf:4d:63:15:75:b7:ec:75:fd:9b: 52:07:9c:ff:d3:73:06:22:bb:8a:cd:d1:00:63:7d: 12:56:70:78:16:c4:d9:a9:79:ec:7f:e0:50:69:ed: 5a:67:d4:00:ec:dd:f4:3e:4c:b0:cd:2a:9a:25:48: 7d:cf:23:b9:05:96:68:82:29:f2:9d:60:4e:f3:14: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:48:22:5D:07:29:41:9B:B4:A0:1A:E3:5A:E4:00:1A:1F:19:77:A4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2283230-1eba-477d-a5d4-65f3be07c228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.234.0/23 Signature Algorithm: sha256WithRSAEncryption b3:42:6a:40:06:a3:98:4b:5c:ab:45:86:f5:0a:fb:98:cc:3e: 33:08:95:bb:4d:ab:e5:d2:3b:76:fc:f2:b2:94:7a:57:7f:29: 49:0c:ab:1d:3c:57:21:f1:39:4d:51:e2:5a:cd:ad:fa:bc:56: dc:d6:f9:4a:01:a6:0a:7d:55:00:e5:4b:ba:75:cb:77:12:35: 7b:b1:68:e3:a2:5c:bb:d1:ea:36:26:c1:f1:cf:4e:90:11:08: 2a:47:ef:d0:18:1d:fd:c7:e2:51:a9:3d:b6:12:87:eb:99:f0: 03:a1:04:aa:ef:ec:7c:6b:a9:23:bf:bb:82:75:4f:bf:39:4d: 9b:b2:b1:86:8a:f2:7f:ac:5e:38:f9:27:ad:d8:38:a7:bc:43: 20:ae:95:17:ce:0d:b6:71:2f:6b:f6:a5:70:63:31:7a:8a:c7: dc:8c:ce:2c:d0:c8:f0:d0:8b:4d:db:43:75:45:5c:c2:42:9e: b3:aa:c7:c5:fa:a5:17:c4:c3:c0:b6:f3:d0:2e:30:4f:ba:34: d5:87:33:87:54:cf:3d:76:da:87:2a:e6:aa:45:7a:d5:14:29: a1:68:1c:6e:6a:79:c8:7c:79:4b:1f:21:35:2a:bb:d3:ca:6c: 22:e5:76:7e:8a:50:7c:a9:94:66:3f:05:cc:fe:c0:50:ec:28: 5e:3d:e2:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbXgg6ePiwu2ZKvAE9GAPd+7ECf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjAxNTI1WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGVkZjhkNGU0ODhjZjZkZmU3NWM3ZTliZDVmNDlkN2Jl YzU2YzA1NTVkZmVjYzc3MThhMjcxNWNkYzA4OTZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCykFJ3Gvi8T/QbwOPx4VbAaD9l679u7fpPybduKAUpj8bV zBt5Ov7beC9hvHnbaboqVnuk0GtVekHyjPnYg/XmhmgpxQydfhRElI6Y1vt1Vu0R I8FOZ/LQAytmd/Z2zMyoev7sEI/c7XQhS8rmrrkpnfk8M9Iq9Haoi1sG2hFsxnRg ixZ5K7ooEsk+LZxmVJNyVZmGnfO/r5Hz4/plQkIDrhAn4VyQqt1yeJWihP5oqgOo Z1JKRW7cv01jFXW37HX9m1IHnP/TcwYiu4rN0QBjfRJWcHgWxNmpeex/4FBp7Vpn 1ADs3fQ+TLDNKpolSH3PI7kFlmiCKfKdYE7zFKndAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSEgiXQcpQZu0oBrjWuQAGh8Zd6QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyMjgzMjMwLTFlYmEtNDc3ZC1hNWQ0LTY1ZjNiZTA3YzIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2tuowDQYJKoZIhvcNAQELBQADggEBALNCakAGo5hLXKtFhvUK+5jMPjMI lbtNq+XSO3b88rKUeld/KUkMqx08VyHxOU1R4lrNrfq8VtzW+UoBpgp9VQDlS7p1 y3cSNXuxaOOiXLvR6jYmwfHPTpARCCpH79AYHf3H4lGpPbYSh+uZ8AOhBKrv7Hxr qSO/u4J1T785TZuysYaK8n+sXjj5J63YOKe8QyCulRfODbZxL2v2pXBjMXqKx9yM zizQyPDQi03bQ3VFXMJCnrOqx8X6pRfEw8C289AuME+6NNWHM4dUzz122ocq5qpF etUUKaFoHG5qech8eUsfITUqu9PKbCLldn6KUHyplGY/Bcz+wFDsKF494kg= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:14 2025 by rpki-client