$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2b37ca4-3979-4a33-a6e6-d22ae9a73da1.roa File: b2b37ca4-3979-4a33-a6e6-d22ae9a73da1.roa (raw, json) Hash identifier: AJnyt+qUoIhBoCgde3Gy7p6kO7Vd0JwtZ47A+bpnp7M= Subject key identifier: DE:02:84:B5:34:60:C6:B7:87:53:71:ED:2B:0E:F2:1B:B2:1D:6B:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7ECFEB3E8CF81DCB77DA0367AFA101A9405FE3DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2b37ca4-3979-4a33-a6e6-d22ae9a73da1.roa Signing time: Fri 26 Sep 2025 02:29:28 +0000 ROA not before: Fri 26 Sep 2025 02:29:28 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cf:eb:3e:8c:f8:1d:cb:77:da:03:67:af:a1:01:a9:40:5f:e3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:29:28 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=27b8ad3a2470e74d2e6e61fd67f1aff2a46e4cd5e830c4890074dae8469005b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:ef:3a:00:28:ab:cc:2b:db:9c:22:51:22: c9:f1:2f:42:b0:7b:44:e0:41:e1:47:a9:e4:9e:72: 09:e5:0a:18:b6:93:0d:5e:8f:6e:0f:cb:6a:ed:b2: 22:f3:e6:65:19:77:5e:9d:92:70:dd:31:e8:01:21: 2a:49:f1:e0:67:0d:45:23:23:b0:c5:34:d4:b0:8e: 06:6a:f8:f9:4d:3f:18:e2:ea:7c:7e:f5:e2:ea:56: 41:b8:66:3f:ba:25:6f:c8:73:0e:8e:7f:3b:94:e4: eb:03:0a:88:0e:81:da:01:b7:f4:8e:48:ff:fa:da: cc:82:69:4c:ba:df:ad:b7:aa:b6:f1:94:cb:49:75: 33:cc:27:ed:e8:6d:aa:9a:4f:0a:47:cb:6f:4e:a8: b9:fb:da:90:7a:85:f3:ad:7d:ff:92:00:df:1e:d5: e5:7c:99:f0:97:5d:11:5c:3d:fc:40:59:33:f7:a0: ec:3b:84:37:95:43:75:e0:b7:3b:2f:fe:d1:a7:3a: 76:8c:4f:73:60:c9:53:e0:0e:2f:a2:d5:6b:7b:9c: d8:c5:e3:6c:95:ad:fd:c0:c4:b4:27:68:3d:cf:47: 29:59:ef:f0:8d:6b:06:2c:88:ff:a3:c3:f6:a2:c1: fa:4c:87:51:21:33:61:48:8b:10:3c:11:47:ab:d4: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:84:B5:34:60:C6:B7:87:53:71:ED:2B:0E:F2:1B:B2:1D:6B:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2b37ca4-3979-4a33-a6e6-d22ae9a73da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.229.0/24 Signature Algorithm: sha256WithRSAEncryption 85:be:c8:31:4e:fe:44:f1:e0:b8:4a:b0:fb:bf:8b:e5:03:05: 3b:91:58:94:42:48:fb:58:06:5f:07:59:52:71:d2:00:40:87: e3:13:57:bc:fe:91:13:7f:03:77:52:db:96:3a:fe:83:b8:85: ff:77:71:46:ee:55:e3:46:6d:c0:d4:8a:4c:98:69:e8:2d:a1: 2a:ef:bf:20:ac:3d:e7:cf:24:34:70:4d:07:7f:70:ee:94:9c: 61:f3:81:81:4e:81:16:89:5e:d2:81:b7:8e:a7:e2:50:b5:09: 4c:b6:25:60:8a:05:8e:c7:70:c1:f9:c6:e8:52:5f:9f:30:d1: 01:92:6f:db:dc:a6:e6:7a:ee:c5:1f:5c:d9:86:d3:ea:ac:c1: a2:93:38:80:c4:67:fd:c3:88:b8:8d:dc:d6:a7:a6:70:10:10: 1a:eb:13:3b:44:10:02:f6:0f:0e:f2:77:03:00:57:8a:fa:10: 4c:1e:97:16:9a:e1:c0:fc:a7:fa:cc:cf:f9:df:37:46:c4:4b: d3:f7:df:57:6c:95:62:50:02:40:ec:45:c7:c9:6b:89:23:72: 84:b8:92:73:ff:4a:d8:95:26:be:d9:fd:0d:fd:94:f5:4b:68: 27:54:3c:c2:85:45:3e:25:6c:9b:c7:62:af:14:87:28:d4:e0: 80:50:02:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfs/rPoz4Hct32gNnr6EBqUBf498wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIyOTI4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2I4YWQzYTI0NzBlNzRkMmU2ZTYxZmQ2N2YxYWZmMmE0 NmU0Y2Q1ZTgzMGM0ODkwMDc0ZGFlODQ2OTAwNWI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvhO86ACirzCvbnCJRIsnxL0Kwe0TgQeFHqeSecgnlChi2 kw1ej24Py2rtsiLz5mUZd16dknDdMegBISpJ8eBnDUUjI7DFNNSwjgZq+PlNPxji 6nx+9eLqVkG4Zj+6JW/Icw6OfzuU5OsDCogOgdoBt/SOSP/62syCaUy63623qrbx lMtJdTPMJ+3obaqaTwpHy29OqLn72pB6hfOtff+SAN8e1eV8mfCXXRFcPfxAWTP3 oOw7hDeVQ3Xgtzsv/tGnOnaMT3NgyVPgDi+i1Wt7nNjF42yVrf3AxLQnaD3PRylZ 7/CNawYsiP+jw/aiwfpMh1EhM2FIixA8EUer1PSJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3gKEtTRgxreHU3HtKw7yG7Ida3YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyYjM3Y2E0LTM5NzktNGEzMy1hNmU2LWQyMmFlOWE3M2RhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25uUwDQYJKoZIhvcNAQELBQADggEBAIW+yDFO/kTx4LhKsPu/i+UDBTuR WJRCSPtYBl8HWVJx0gBAh+MTV7z+kRN/A3dS25Y6/oO4hf93cUbuVeNGbcDUikyY aegtoSrvvyCsPefPJDRwTQd/cO6UnGHzgYFOgRaJXtKBt46n4lC1CUy2JWCKBY7H cMH5xuhSX58w0QGSb9vcpuZ67sUfXNmG0+qswaKTOIDEZ/3DiLiN3NanpnAQEBrr EztEEAL2Dw7ydwMAV4r6EEwelxaa4cD8p/rMz/nfN0bES9P331dslWJQAkDsRcfJ a4kjcoS4knP/StiVJr7Z/Q39lPVLaCdUPMKFRT4lbJvHYq8UhyjU4IBQAg0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:01:58 2025 by rpki-client