$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abc2085e-f070-4570-a6ac-81daddee565d.roa File: abc2085e-f070-4570-a6ac-81daddee565d.roa (raw, json) Hash identifier: tJsIESu5t+W21zGfdgmgnO2i3VpXadgeLy143eeZSgE= Subject key identifier: 4A:7E:6E:90:5F:BB:CA:39:B5:EC:92:93:48:0D:CD:70:FA:8E:3E:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39530438E40E3BD24853C426CEE844EBF902B908 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abc2085e-f070-4570-a6ac-81daddee565d.roa Signing time: Fri 19 Sep 2025 16:21:23 +0000 ROA not before: Fri 19 Sep 2025 16:21:23 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:53:04:38:e4:0e:3b:d2:48:53:c4:26:ce:e8:44:eb:f9:02:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 16:21:23 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=2e3f041168848d46e2ac23303a3a2e0dd086251c824dc4ca6c61f9200d003790, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:2d:c7:3e:37:08:4d:10:e9:c2:5a:ba:c4: 67:84:89:39:82:d3:25:d9:b2:24:b7:85:29:64:c9: 3e:88:2a:fd:94:f9:6b:9f:c9:39:79:dd:48:fc:ae: ff:57:66:42:fc:a5:79:34:2e:80:7f:b1:a1:cb:e3: 16:24:e8:67:20:e3:ff:74:1f:33:91:36:1c:d7:b4: 97:7a:82:59:1e:58:df:9b:7a:b1:b3:06:51:ff:71: 13:37:f2:91:dd:2e:73:18:41:4a:4e:0e:35:7a:ae: af:b2:f0:af:7a:18:59:9a:fd:1f:48:4b:dc:85:4f: 06:8e:1a:e9:a4:26:05:ee:0f:98:14:d5:46:34:91: 39:29:54:73:83:7e:7a:9a:51:24:57:7a:8b:29:1d: a0:bb:6b:e6:93:8d:f1:09:3b:8f:e1:82:28:94:ed: a2:83:17:35:c7:b9:b2:35:bb:78:dc:55:3e:90:f1: 37:1b:50:ab:ba:0c:3e:19:5b:62:92:38:37:bb:99: 82:c8:d3:ca:83:e0:00:c0:50:7c:75:53:3a:31:23: a1:3f:fa:b7:c0:03:07:d6:22:b0:bd:c3:4f:71:d7: 85:15:24:e4:78:f7:02:22:40:b8:9c:15:9a:f8:a2: a0:cd:b2:29:25:af:4a:6e:a3:a6:40:31:ab:26:06: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7E:6E:90:5F:BB:CA:39:B5:EC:92:93:48:0D:CD:70:FA:8E:3E:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abc2085e-f070-4570-a6ac-81daddee565d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.238.96.0/20 Signature Algorithm: sha256WithRSAEncryption 83:3f:96:1f:d0:61:ce:1c:e8:1a:5c:b7:06:b3:eb:d2:a0:da: 1f:58:bb:2a:71:47:51:ab:f1:f4:ed:d1:7f:a5:21:41:74:83: a1:87:4c:ea:ed:30:5f:7f:a1:7c:0e:c2:c2:04:c7:38:e7:63: 11:65:e4:df:cd:1b:6e:b5:64:a9:97:a2:00:34:a6:13:a0:b2: e9:ba:05:b7:59:0f:7c:28:3a:83:52:df:cf:fc:cc:a5:bc:07: 2a:8c:0c:4e:72:4a:6f:cc:9e:a5:f0:5e:29:b3:67:49:af:91: 99:ec:c4:93:92:8a:36:9f:80:eb:11:db:9e:70:cd:e8:a1:dc: 30:3d:cc:86:b0:57:7e:f2:a6:9f:42:6c:15:7c:f0:35:21:ef: a9:cb:f0:7a:cf:45:07:69:7c:e7:b8:48:49:fe:ed:cf:34:e9: 87:17:d7:cb:9e:67:b7:a6:22:79:99:a7:3e:bf:5b:38:22:0e: 23:5d:43:a4:40:52:08:95:3b:7a:75:17:d7:7f:72:aa:9d:9f: e9:ca:d4:c1:45:88:e8:c9:c1:75:c8:91:20:12:a8:89:b3:ba: dc:8a:db:5d:d9:9f:d2:57:be:6b:bd:b1:8e:16:fb:75:3a:b2: b7:6a:c4:9c:3c:d3:8c:55:db:f6:79:ca:ed:46:d9:d2:85:a8: 31:16:04:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOVMEOOQOO9JIU8QmzuhE6/kCuQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTYyMTIzWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTNmMDQxMTY4ODQ4ZDQ2ZTJhYzIzMzAzYTNhMmUwZGQw ODYyNTFjODI0ZGM0Y2E2YzYxZjkyMDBkMDAzNzkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDe4C3HPjcITRDpwlq6xGeEiTmC0yXZsiS3hSlkyT6IKv2U +WufyTl53Uj8rv9XZkL8pXk0LoB/saHL4xYk6Gcg4/90HzORNhzXtJd6glkeWN+b erGzBlH/cRM38pHdLnMYQUpODjV6rq+y8K96GFma/R9IS9yFTwaOGumkJgXuD5gU 1UY0kTkpVHODfnqaUSRXeospHaC7a+aTjfEJO4/hgiiU7aKDFzXHubI1u3jcVT6Q 8TcbUKu6DD4ZW2KSODe7mYLI08qD4ADAUHx1UzoxI6E/+rfAAwfWIrC9w09x14UV JOR49wIiQLicFZr4oqDNsiklr0puo6ZAMasmBsJVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSn5ukF+7yjm17JKTSA3NcPqOPhcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiYzIwODVlLWYwNzAtNDU3MC1hNmFjLTgxZGFkZGVlNTY1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27mAwDQYJKoZIhvcNAQELBQADggEBAIM/lh/QYc4c6Bpctwaz69Kg2h9Y uypxR1Gr8fTt0X+lIUF0g6GHTOrtMF9/oXwOwsIExzjnYxFl5N/NG261ZKmXogA0 phOgsum6BbdZD3woOoNS38/8zKW8ByqMDE5ySm/MnqXwXimzZ0mvkZnsxJOSijaf gOsR255wzeih3DA9zIawV37ypp9CbBV88DUh76nL8HrPRQdpfOe4SEn+7c806YcX 18ueZ7emInmZpz6/WzgiDiNdQ6RAUgiVO3p1F9d/cqqdn+nK1MFFiOjJwXXIkSAS qImzutyK213Zn9JXvmu9sY4W+3U6srdqxJw804xV2/Z5yu1G2dKFqDEWBHI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:22 2025 by rpki-client