$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9df8808-d439-42ad-9638-0a63e95e2c01.roa File: a9df8808-d439-42ad-9638-0a63e95e2c01.roa (raw, json) Hash identifier: 2hMsoxueE2ghE2VT1wqKmSluzK+y+dPbE+Muc+wSAwA= Subject key identifier: FA:D3:42:82:14:FA:31:0A:2F:D1:5E:3A:4F:0B:F5:29:D9:65:33:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50632DF5E5B80EA8DA897B38A3B46B03CE8BC020 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9df8808-d439-42ad-9638-0a63e95e2c01.roa Signing time: Fri 26 Sep 2025 02:39:40 +0000 ROA not before: Fri 26 Sep 2025 02:39:40 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:63:2d:f5:e5:b8:0e:a8:da:89:7b:38:a3:b4:6b:03:ce:8b:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:39:40 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=cdcd96c1328e571e25f545b4c7adab61a7b9536ea9b25b1dce5588b8e3ee5180, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:b2:57:29:d7:7f:b2:1d:53:90:5f:e3:80: 17:13:3c:d9:8b:a7:ee:dd:00:6b:4f:8f:9a:0c:ee: 3a:24:23:c7:27:65:a1:8a:15:37:6d:ca:8f:51:33: d7:81:43:d9:38:c6:04:b7:3e:64:72:84:51:1b:3b: f6:88:81:d4:06:85:5a:5a:26:a4:60:d9:c7:3b:14: c9:32:0a:63:14:b2:ab:50:63:3d:a6:a2:ee:0d:96: ec:8b:8c:d2:d0:af:2a:26:92:11:30:d6:87:2e:5a: e8:06:15:80:d8:38:94:bf:70:1e:b9:8d:d2:b6:5a: 54:bf:78:31:eb:c0:fd:ec:b6:69:89:25:84:15:e2: 25:a1:64:af:5e:28:dd:11:fe:43:8d:52:a0:a6:6e: fc:aa:14:bf:cf:e4:0f:00:73:ef:bb:3d:35:41:9e: a8:1c:ec:12:31:67:0d:01:d7:bd:69:9a:68:01:0f: e6:ca:ba:de:84:6a:1a:c9:e4:2b:a0:ce:c8:a2:2e: b3:b2:c8:85:92:9c:c4:2b:87:ad:33:b1:df:f9:6f: 34:da:b6:03:22:7e:be:44:a8:18:fd:55:f6:c9:35: 3a:37:0c:5e:c2:49:b2:d0:57:5b:f3:ce:34:dd:85: 06:15:97:ad:67:5e:9f:64:9c:77:67:9d:e5:e1:f3: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D3:42:82:14:FA:31:0A:2F:D1:5E:3A:4F:0B:F5:29:D9:65:33:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9df8808-d439-42ad-9638-0a63e95e2c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.150.0/24 Signature Algorithm: sha256WithRSAEncryption 73:15:d2:29:18:91:e2:cd:cd:d4:89:71:b8:cc:8f:09:8a:a4: ed:82:c4:05:5d:7c:4a:58:3b:c9:77:93:eb:11:ff:6b:55:61: cc:01:d9:df:fe:b3:cb:42:89:48:ef:ce:b2:7e:0f:56:b0:ff: 57:46:e3:ca:69:a3:94:53:f7:24:93:e7:cf:93:a0:6b:f4:64: a3:60:41:c9:bb:93:af:fa:b0:61:46:8a:b7:6f:f0:9c:48:17: b2:65:fe:9e:e2:ed:69:cf:f6:f9:79:47:d6:02:63:1a:3a:5c: 9d:03:c0:fb:5f:5e:79:59:0f:82:92:f7:4f:2e:8a:a7:fa:a2: 77:f9:30:06:83:99:13:64:3e:e7:f3:4d:62:76:e4:5d:1d:c4: 7c:33:57:ad:64:49:d0:58:d3:7f:66:7b:69:4d:62:79:1b:a0: a8:91:d3:54:52:81:fc:cc:df:5f:ca:a0:97:1e:fe:d1:aa:ac: 8f:0d:cf:c9:9a:d6:56:ad:d0:cc:ef:22:84:4d:c7:b7:49:b2: 58:39:47:1d:35:20:ff:02:49:96:ff:b3:d5:78:cf:22:98:d5: 48:fd:c3:7b:76:2e:14:5b:39:60:e6:c5:77:29:23:60:1f:1f: 5e:5e:53:7c:18:db:b2:74:a4:30:a2:69:74:cf:e6:f0:eb:61: c3:80:4c:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUGMt9eW4DqjaiXs4o7RrA86LwCAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIzOTQwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGNkOTZjMTMyOGU1NzFlMjVmNTQ1YjRjN2FkYWI2MWE3 Yjk1MzZlYTliMjViMWRjZTU1ODhiOGUzZWU1MTgwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChGbJXKdd/sh1TkF/jgBcTPNmLp+7dAGtPj5oM7jokI8cn ZaGKFTdtyo9RM9eBQ9k4xgS3PmRyhFEbO/aIgdQGhVpaJqRg2cc7FMkyCmMUsqtQ Yz2mou4NluyLjNLQryomkhEw1ocuWugGFYDYOJS/cB65jdK2WlS/eDHrwP3stmmJ JYQV4iWhZK9eKN0R/kONUqCmbvyqFL/P5A8Ac++7PTVBnqgc7BIxZw0B171pmmgB D+bKut6EahrJ5CugzsiiLrOyyIWSnMQrh60zsd/5bzTatgMifr5EqBj9VfbJNTo3 DF7CSbLQV1vzzjTdhQYVl61nXp9knHdnneXh8w/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+tNCghT6MQov0V46Twv1KdllM84wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5ZGY4ODA4LWQ0MzktNDJhZC05NjM4LTBhNjNlOTVlMmMwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA275YwDQYJKoZIhvcNAQELBQADggEBAHMV0ikYkeLNzdSJcbjMjwmKpO2C xAVdfEpYO8l3k+sR/2tVYcwB2d/+s8tCiUjvzrJ+D1aw/1dG48ppo5RT9yST58+T oGv0ZKNgQcm7k6/6sGFGirdv8JxIF7Jl/p7i7WnP9vl5R9YCYxo6XJ0DwPtfXnlZ D4KS908uiqf6onf5MAaDmRNkPufzTWJ25F0dxHwzV61kSdBY039me2lNYnkboKiR 01RSgfzM31/KoJce/tGqrI8Nz8ma1lat0MzvIoRNx7dJslg5Rx01IP8CSZb/s9V4 zyKY1Uj9w3t2LhRbOWDmxXcpI2AfH15eU3wY27J0pDCiaXTP5vDrYcOATBg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:39 2025 by rpki-client