$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a721e853-0369-4d32-b3f4-ef9c261b1f58.roa File: a721e853-0369-4d32-b3f4-ef9c261b1f58.roa (raw, json) Hash identifier: akwFSp0aO4J2rzX8ud5rX3zAW6U2rQX2xDcTbBeDnRc= Subject key identifier: E3:E2:55:5F:10:4E:16:85:C6:97:4B:E6:C8:DD:9A:2C:FB:28:CB:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 023913CDBCCDAD2CB32696ABF6067B7609B90DC1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a721e853-0369-4d32-b3f4-ef9c261b1f58.roa Signing time: Fri 10 Oct 2025 15:37:42 +0000 ROA not before: Fri 10 Oct 2025 15:37:42 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.217.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:39:13:cd:bc:cd:ad:2c:b3:26:96:ab:f6:06:7b:76:09:b9:0d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:37:42 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=27d8609b3b382f5486bb4b71927a7f2eb1f2bd84a2f9296ad4af6dcdc26cc356, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:2f:69:50:39:d0:8e:1e:67:76:be:26:37: d8:3d:95:1c:64:57:70:cb:49:8c:00:e1:9b:7e:6e: ca:19:f1:aa:74:42:9d:be:b8:46:b7:5c:e5:c1:04: 24:b4:1d:2f:d1:25:d4:32:3d:81:95:6c:7f:93:0f: 90:eb:b1:fc:15:87:45:cd:6f:d5:aa:14:28:6b:13: ef:6c:1e:9a:bd:b7:92:e5:eb:a4:ef:78:da:b6:e0: 2e:20:fd:f7:ce:8e:7e:94:88:b2:65:02:c5:6e:33: 36:06:99:f7:e5:04:19:1e:8e:be:f8:46:5c:bd:15: 78:cb:cd:71:95:96:c3:32:8a:56:89:e3:20:42:11: ed:67:9e:90:d9:49:3e:85:f3:1f:9a:2c:41:42:5f: 68:9b:25:e8:bd:96:4a:87:46:77:97:79:d0:ec:29: bb:aa:35:72:fc:15:4e:dc:e9:65:49:23:e3:b7:c0: 2a:28:3f:ce:e0:9b:42:69:24:2b:fd:37:6d:da:d9: 97:92:2e:a7:28:d3:40:2e:65:d2:94:bc:40:8b:c7: bf:df:48:0c:69:a5:01:19:73:29:6a:75:7d:8f:72: 24:82:86:62:eb:f6:1c:5e:c6:41:90:93:df:e2:44: 7a:f0:d8:d6:9d:53:70:8a:30:a6:a2:4d:bb:4d:b5: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:55:5F:10:4E:16:85:C6:97:4B:E6:C8:DD:9A:2C:FB:28:CB:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a721e853-0369-4d32-b3f4-ef9c261b1f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.217.143.0/24 Signature Algorithm: sha256WithRSAEncryption 19:66:11:4f:b9:e9:d0:1f:90:af:88:a0:88:b3:1c:f7:52:fc: eb:0e:a5:e2:9d:07:0c:a3:2c:1b:f5:ba:31:c1:de:2b:15:19: 16:75:d5:87:10:af:f7:b3:8f:07:4c:6d:39:32:8d:85:2a:9b: 8b:74:1f:e2:a5:9a:bd:0f:bf:fa:f6:ee:58:3b:98:b4:74:16: 35:82:54:38:10:a2:22:2b:72:5b:21:b6:41:f9:f8:b1:6d:17: 42:7c:a9:35:06:81:52:87:d5:9e:78:5a:61:c4:46:b6:c6:74: 83:ae:34:e5:66:b1:49:9a:b2:fe:4a:76:ac:b4:a5:da:d6:c3: 5b:96:75:3e:ba:74:50:8c:c9:8f:df:8f:59:ba:b3:fe:7f:62: c0:d6:ab:a6:6b:65:69:fe:21:cf:6d:96:f1:ae:55:93:62:9f: ed:3d:0a:71:88:2e:15:ed:73:b5:b4:e8:bd:c5:be:ec:71:ac: 5a:55:d7:90:1d:58:a2:60:7d:87:9b:b2:7c:82:33:be:f4:b3: 8e:fa:71:20:00:18:2a:93:1b:a7:1c:a4:b7:fd:b6:a4:e7:ac: 86:a6:f7:24:6a:1f:a9:53:c3:47:61:3a:4f:6c:97:c2:08:75: ce:59:5f:25:18:20:7a:56:25:e6:5b:db:07:42:5e:c3:3a:5c: 83:24:ce:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAjkTzbzNrSyzJpar9gZ7dgm5DcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUzNzQyWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2Q4NjA5YjNiMzgyZjU0ODZiYjRiNzE5MjdhN2YyZWIx ZjJiZDg0YTJmOTI5NmFkNGFmNmRjZGMyNmNjMzU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZzi9pUDnQjh5ndr4mN9g9lRxkV3DLSYwA4Zt+bsoZ8ap0 Qp2+uEa3XOXBBCS0HS/RJdQyPYGVbH+TD5DrsfwVh0XNb9WqFChrE+9sHpq9t5Ll 66TveNq24C4g/ffOjn6UiLJlAsVuMzYGmfflBBkejr74Rly9FXjLzXGVlsMyilaJ 4yBCEe1nnpDZST6F8x+aLEFCX2ibJei9lkqHRneXedDsKbuqNXL8FU7c6WVJI+O3 wCooP87gm0JpJCv9N23a2ZeSLqco00AuZdKUvECLx7/fSAxppQEZcylqdX2PciSC hmLr9hxexkGQk9/iRHrw2NadU3CKMKaiTbtNtSvrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4+JVXxBOFoXGl0vmyN2aLPsoy5owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3MjFlODUzLTAzNjktNGQzMi1iM2Y0LWVmOWMyNjFiMWY1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAi2Y8wDQYJKoZIhvcNAQELBQADggEBABlmEU+56dAfkK+IoIizHPdS/OsO peKdBwyjLBv1ujHB3isVGRZ11YcQr/ezjwdMbTkyjYUqm4t0H+Klmr0Pv/r27lg7 mLR0FjWCVDgQoiIrclshtkH5+LFtF0J8qTUGgVKH1Z54WmHERrbGdIOuNOVmsUma sv5Kdqy0pdrWw1uWdT66dFCMyY/fj1m6s/5/YsDWq6ZrZWn+Ic9tlvGuVZNin+09 CnGILhXtc7W06L3FvuxxrFpV15AdWKJgfYebsnyCM770s476cSAAGCqTG6ccpLf9 tqTnrIam9yRqH6lTw0dhOk9sl8IIdc5ZXyUYIHpWJeZb2wdCXsM6XIMkzuc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:20:15 2025 by rpki-client