$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af93e00f-1435-40c3-a246-8b08e9c6c405.roa File: af93e00f-1435-40c3-a246-8b08e9c6c405.roa (raw, json) Hash identifier: aRhA/9GG9OrwAkQ1wRuXb+9hNR0+TVbazv3nFzGH+24= Subject key identifier: AA:BE:B2:C9:5F:6E:38:30:FF:2E:FD:EC:E3:D0:68:4D:BC:4F:EF:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1928BBDA749EE9E98101832C02539A88451A1C87 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af93e00f-1435-40c3-a246-8b08e9c6c405.roa Signing time: Fri 10 Oct 2025 16:30:26 +0000 ROA not before: Fri 10 Oct 2025 16:30:26 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.169.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:28:bb:da:74:9e:e9:e9:81:01:83:2c:02:53:9a:88:45:1a:1c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:30:26 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=f8cbf8fe79b7bc1d4dcef13d15608ab3eea744bdded01949c7006cb998b1e576, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:42:fa:c5:9b:e2:a8:9b:d1:62:3d:c1:26: 20:70:dd:72:d7:2d:98:aa:1e:eb:0c:8f:4f:a0:63: 14:59:eb:83:6a:18:76:a8:6d:a3:9a:6a:53:a5:51: 85:cf:2f:95:fb:0d:6a:84:eb:65:2e:56:4e:80:a2: 94:d1:c7:1a:17:12:60:20:13:c6:e2:fb:f2:f0:21: 66:8b:6d:2e:87:d3:09:4b:f0:7d:e8:63:53:f1:0a: e2:58:5d:67:41:b3:85:2e:35:73:60:1e:00:8a:cc: 81:b4:58:c8:f2:cd:30:6a:f7:14:b7:76:c9:03:96: a8:1f:f9:b3:ba:7c:9d:d2:db:80:a8:be:69:b6:7e: 6a:b9:ca:2c:cb:a3:ce:64:83:29:9e:3d:f1:75:4e: 5e:bc:60:3e:fc:35:f0:37:f3:cc:36:3f:b6:ad:37: 74:49:9d:be:b5:fc:40:dc:b0:5a:d7:e0:1d:f5:8e: e1:a2:79:f9:64:a7:55:c2:67:1f:42:7c:eb:f6:f0: 3b:78:5f:0e:55:9d:f2:2f:42:a1:da:e9:41:58:0d: 19:a5:2f:ee:47:0a:0e:eb:40:7b:b6:0c:4d:0a:d0: 31:80:1e:be:5a:35:99:05:31:1a:1c:26:15:3c:ab: 8a:e8:e9:fa:75:8a:68:17:e5:ec:9d:32:80:1f:ad: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:B2:C9:5F:6E:38:30:FF:2E:FD:EC:E3:D0:68:4D:BC:4F:EF:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af93e00f-1435-40c3-a246-8b08e9c6c405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.169.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2a:58:0e:57:ba:f6:f1:4e:1c:bd:8f:99:77:ac:38:5b:5d:31: 28:40:3b:91:1a:86:51:3d:1f:0d:d3:10:89:58:15:52:cc:c6: 91:30:95:0a:05:17:c2:c4:56:e9:35:98:51:30:dc:23:88:77: c0:11:5c:f1:5e:6b:ed:73:58:f1:84:b4:a1:d6:7a:d7:88:f8: a9:93:44:bf:2a:a5:3e:4a:a7:87:79:ab:cd:56:56:eb:75:ba: 52:cf:cf:6a:d8:49:cf:ac:56:52:0e:6b:66:03:7a:ec:b0:8c: 72:28:b2:d4:4f:22:c1:c1:3f:34:71:b9:41:5f:22:63:ec:4d: 83:d0:32:51:b6:26:36:7f:51:65:0a:a5:f5:6b:d0:c3:47:57: db:bd:9c:48:c5:44:b4:e6:cc:46:7e:27:01:18:f7:c9:84:b4: 8d:d5:53:1e:95:36:27:37:f2:d3:24:61:ca:b1:fa:fb:fc:27: 28:90:a0:5c:d8:45:32:27:41:a8:e7:f7:0c:2e:42:58:6e:4c: f5:a1:78:7e:3c:5c:1f:14:34:da:88:56:64:49:57:d1:4f:f1: 55:ee:ab:a6:d4:b1:19:c3:92:81:de:37:66:9f:79:42:bd:04: 6a:ba:10:6f:27:55:4e:5d:c5:8e:21:10:36:f1:0b:d3:d0:48: 55:76:f3:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGSi72nSe6emBAYMsAlOaiEUaHIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTYzMDI2WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGNiZjhmZTc5YjdiYzFkNGRjZWYxM2QxNTYwOGFiM2Vl YTc0NGJkZGVkMDE5NDljNzAwNmNiOTk4YjFlNTc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcTUL6xZviqJvRYj3BJiBw3XLXLZiqHusMj0+gYxRZ64Nq GHaobaOaalOlUYXPL5X7DWqE62UuVk6AopTRxxoXEmAgE8bi+/LwIWaLbS6H0wlL 8H3oY1PxCuJYXWdBs4UuNXNgHgCKzIG0WMjyzTBq9xS3dskDlqgf+bO6fJ3S24Co vmm2fmq5yizLo85kgymePfF1Tl68YD78NfA388w2P7atN3RJnb61/EDcsFrX4B31 juGieflkp1XCZx9CfOv28Dt4Xw5VnfIvQqHa6UFYDRmlL+5HCg7rQHu2DE0K0DGA Hr5aNZkFMRocJhU8q4ro6fp1imgX5eydMoAfrQznAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqr6yyV9uODD/Lv3s49BoTbxP748wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmOTNlMDBmLTE0MzUtNDBjMy1hMjQ2LThiMDhlOWM2YzQwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2qQAwDQYJKoZIhvcNAQELBQADggEBACpYDle69vFOHL2PmXesOFtdMShA O5EahlE9Hw3TEIlYFVLMxpEwlQoFF8LEVuk1mFEw3COId8ARXPFea+1zWPGEtKHW eteI+KmTRL8qpT5Kp4d5q81WVut1ulLPz2rYSc+sVlIOa2YDeuywjHIostRPIsHB PzRxuUFfImPsTYPQMlG2JjZ/UWUKpfVr0MNHV9u9nEjFRLTmzEZ+JwEY98mEtI3V Ux6VNic38tMkYcqx+vv8JyiQoFzYRTInQajn9wwuQlhuTPWheH48XB8UNNqIVmRJ V9FP8VXuq6bUsRnDkoHeN2afeUK9BGq6EG8nVU5dxY4hEDbxC9PQSFV281o= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:48 2025 by rpki-client