$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa File: c23cc3c2-e83d-490c-955a-29d56b95286e.roa (raw, json) Hash identifier: p7TKeysvspIXaaWaOt425FXh0tfDZBMzldIvXk00RRQ= Subject key identifier: 12:09:E6:A1:99:9D:68:D4:B7:63:0D:69:EB:67:51:BB:9B:CD:0F:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C4A94360BE006204365AFBF9BF2DEECF1EAECAC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa Signing time: Fri 07 Nov 2025 01:21:32 +0000 ROA not before: Fri 07 Nov 2025 01:21:32 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.156.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4a:94:36:0b:e0:06:20:43:65:af:bf:9b:f2:de:ec:f1:ea:ec:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:21:32 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=f0ee08ce544419dada20e21861f0118ceb8e2f4493efdc25cc8ca106f116c26a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:1b:6f:62:ec:bf:5b:7c:bd:1b:9d:c5:e7: 3f:78:d2:2a:0e:e0:97:a8:18:2a:f6:15:92:d9:10: 42:b1:61:71:17:f7:4a:3c:dd:e0:a9:67:95:72:a3: 62:fe:c9:c2:5d:2d:bb:08:0f:d9:47:85:8b:60:a8: 10:38:93:4e:66:3f:68:f8:ff:81:d6:8e:af:2e:7a: 7c:d5:48:3a:05:d6:a2:7b:60:1f:d1:69:a8:e9:94: 87:6f:16:af:35:d9:42:27:77:6c:3e:4a:68:20:8d: 68:7e:39:39:5d:4a:d9:e6:25:59:87:aa:ec:68:3c: 92:c4:cd:6b:9d:0e:f4:8e:a1:7c:ea:7c:fb:01:8c: 63:00:d7:c2:c0:a3:03:f8:af:c3:98:28:16:19:83: c0:4e:12:20:51:42:4b:6b:a3:9c:95:55:0f:8c:e1: eb:d0:eb:ba:5e:34:d0:05:00:71:3d:1e:63:2d:37: 5e:38:8c:b2:05:9e:b0:34:ab:99:ab:dc:ba:8f:c4: af:a8:cc:2b:91:f1:ae:51:7b:cb:98:0a:c3:8e:d2: d1:82:ba:c6:23:32:47:87:37:5e:28:83:eb:9d:b3: fc:21:d1:7b:30:0a:a3:8a:12:26:5b:39:7a:25:94: a2:6d:70:35:e5:23:15:72:01:86:51:ba:e9:d8:c7: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:E6:A1:99:9D:68:D4:B7:63:0D:69:EB:67:51:BB:9B:CD:0F:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.0.0/24 Signature Algorithm: sha256WithRSAEncryption 55:cc:63:4b:fc:1d:4f:05:ca:48:89:b0:6b:83:50:70:d4:08: e7:e4:8c:91:64:47:6c:7c:73:b9:cc:c9:ba:76:7a:5c:58:b9: cd:9c:71:40:b4:85:c6:d0:ed:3c:61:d1:76:eb:de:e7:5e:a0: a6:1b:cc:c5:a7:a1:6f:23:52:9a:ce:6f:ca:53:5d:20:2d:d3: 4c:f6:00:99:1f:57:4d:de:be:a6:02:cf:5d:dd:d7:a7:61:63: ad:d4:7b:e2:d8:09:71:76:95:32:2f:52:ce:2d:a4:b1:e4:33: 6d:4a:2d:15:e7:ad:77:35:d9:e1:aa:00:b7:e7:00:73:45:bb: 5c:0b:cc:2e:69:c9:1e:76:44:3e:63:0b:a5:b3:ea:02:f5:65: 42:f0:be:69:a1:b9:9e:5d:d9:42:38:1b:7f:c0:0d:18:00:5c: cf:97:73:15:e0:b5:34:15:36:e6:7b:eb:6a:d6:f9:93:6e:f9: d9:64:14:cf:05:f5:51:ac:0f:ef:f8:68:a6:e1:aa:9e:66:57: d1:7d:61:81:07:74:88:41:ce:1f:47:ff:d3:6d:b5:59:80:0f: e9:c9:f0:8d:70:6e:13:f5:95:94:be:f8:ca:5f:43:bc:d5:9a: 5f:da:2e:b5:49:2a:43:51:ed:a7:73:a3:65:d3:b3:23:94:2e: ac:86:a1:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHEqUNgvgBiBDZa+/m/Le7PHq7KwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDEyMTMyWhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGVlMDhjZTU0NDQxOWRhZGEyMGUyMTg2MWYwMTE4Y2Vi OGUyZjQ0OTNlZmRjMjVjYzhjYTEwNmYxMTZjMjZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgmBtvYuy/W3y9G53F5z940ioO4JeoGCr2FZLZEEKxYXEX 90o83eCpZ5Vyo2L+ycJdLbsID9lHhYtgqBA4k05mP2j4/4HWjq8uenzVSDoF1qJ7 YB/RaajplIdvFq812UInd2w+SmggjWh+OTldStnmJVmHquxoPJLEzWudDvSOoXzq fPsBjGMA18LAowP4r8OYKBYZg8BOEiBRQktro5yVVQ+M4evQ67peNNAFAHE9HmMt N144jLIFnrA0q5mr3LqPxK+ozCuR8a5Re8uYCsOO0tGCusYjMkeHN14og+uds/wh 0XswCqOKEiZbOXollKJtcDXlIxVyAYZRuunYx3pJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEgnmoZmdaNS3Yw1p62dRu5vND+4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyM2NjM2MyLWU4M2QtNDkwYy05NTVhLTI5ZDU2Yjk1Mjg2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2nAAwDQYJKoZIhvcNAQELBQADggEBAFXMY0v8HU8FykiJsGuDUHDUCOfk jJFkR2x8c7nMybp2elxYuc2ccUC0hcbQ7Txh0Xbr3udeoKYbzMWnoW8jUprOb8pT XSAt00z2AJkfV03evqYCz13d16dhY63Ue+LYCXF2lTIvUs4tpLHkM21KLRXnrXc1 2eGqALfnAHNFu1wLzC5pyR52RD5jC6Wz6gL1ZULwvmmhuZ5d2UI4G3/ADRgAXM+X cxXgtTQVNuZ762rW+ZNu+dlkFM8F9VGsD+/4aKbhqp5mV9F9YYEHdIhBzh9H/9Nt tVmAD+nJ8I1wbhP1lZS++MpfQ7zVml/aLrVJKkNR7adzo2XTsyOULqyGoWI= -----END CERTIFICATE-----Generated at Fri Nov 7 20:17:34 2025 by rpki-client