$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/002783e3-2a2a-4802-b40e-cc21942761b4.roa File: 002783e3-2a2a-4802-b40e-cc21942761b4.roa (raw, json) Hash identifier: +cv1nYnGdmYc5rXAxPCGVLWYj0VmGdzDzu+KDuWke9I= Subject key identifier: B1:AF:A4:6C:B6:C4:7C:A9:9F:61:72:20:48:8E:BC:07:0F:F9:0D:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B3548FBA3FE7A552DAFCC1A610307B230A0CE69 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/002783e3-2a2a-4802-b40e-cc21942761b4.roa Signing time: Thu 16 Oct 2025 21:34:28 +0000 ROA not before: Thu 16 Oct 2025 21:34:28 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:35:48:fb:a3:fe:7a:55:2d:af:cc:1a:61:03:07:b2:30:a0:ce:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 21:34:28 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=cff4baf1939b641292f4d2f504df95d40bee1167ea02c62a74338698bce493b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:03:59:ba:1a:fd:11:4f:45:8a:2e:18:64: c0:61:e5:ad:15:1b:aa:02:17:d1:98:9a:d7:ac:db: 37:c1:4d:4c:20:31:f0:f7:7e:50:7a:66:46:8f:a4: b9:a8:90:2e:93:64:11:4d:87:c2:08:68:94:2d:8f: 37:e3:23:ec:ce:27:89:42:c3:0e:39:da:7d:b9:88: 46:f4:36:9d:c0:fe:9c:2b:4a:78:10:df:6b:b8:b9: be:8d:80:af:ad:23:8b:0e:5b:18:31:a8:9e:4a:36: 61:1e:d7:30:7f:d1:40:8c:ea:c1:73:dc:5f:2c:5a: 72:e8:f1:5a:0f:e1:b6:6d:c4:61:cb:a2:f4:4d:cc: 08:22:77:cb:57:84:a9:62:ae:46:55:05:a1:01:d4: aa:4b:ce:26:99:19:3c:9f:14:93:96:74:06:d2:22: cf:58:56:f1:a0:2d:bf:d2:af:15:6b:f8:6c:72:89: 9f:94:b0:ff:75:9d:b5:db:fc:22:0f:90:54:88:af: 31:4e:17:ca:4e:7b:fb:ec:14:8d:39:2b:05:a6:45: 34:94:bb:4a:ed:62:fc:15:02:5a:a7:19:9c:24:cb: 98:5b:85:35:be:42:88:d5:75:a2:f1:87:92:62:4c: d1:aa:e3:69:54:4e:02:f1:c8:1a:ba:e2:54:3f:62: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AF:A4:6C:B6:C4:7C:A9:9F:61:72:20:48:8E:BC:07:0F:F9:0D:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/002783e3-2a2a-4802-b40e-cc21942761b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.148.0/22 Signature Algorithm: sha256WithRSAEncryption 12:e1:dd:4a:36:0f:e6:88:2b:91:e6:db:73:53:95:b8:63:0e: 54:20:9f:85:d4:19:b7:9f:85:fe:71:10:1d:69:2a:ff:7f:ee: dd:ad:d9:37:06:d2:d4:71:de:a4:64:fb:c5:7e:8e:b8:4e:45: 52:e1:29:79:67:bd:c4:f5:b3:d1:0f:d0:28:95:ee:9d:e2:a3: 66:3d:0a:25:93:e9:78:ab:38:06:85:2b:f4:42:ba:56:49:96: 8a:12:82:77:69:a1:93:d5:4c:93:f9:f3:03:45:8b:e0:9e:49: c9:f8:42:28:b7:a6:84:99:c6:17:e0:52:cd:07:d3:5f:88:79: dc:76:b6:a2:d9:81:b0:97:5e:12:c6:bc:cb:b4:f6:2a:95:a0: 5f:11:c6:e9:fe:f4:4d:ae:ed:3f:96:cc:22:cd:3b:cb:20:d6: 73:c9:ef:8e:ac:12:e1:7b:4f:7d:fe:6c:80:bc:dd:db:4e:de: ff:8f:2c:ff:b0:20:5e:9c:01:2a:6e:98:b2:06:d4:a4:f6:72: c9:2d:36:3c:c6:6f:b0:93:11:7b:95:0f:3d:8b:b0:d0:e5:dd: 4e:79:09:b8:07:a4:ad:2d:6d:d9:47:39:f1:a9:a4:9a:9e:8b: 5f:c7:35:e0:84:87:c9:37:bb:b1:4c:b7:e2:26:fb:d2:11:44: dc:a3:44:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWzVI+6P+elUtr8waYQMHsjCgzmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjEzNDI4WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmY0YmFmMTkzOWI2NDEyOTJmNGQyZjUwNGRmOTVkNDBi ZWUxMTY3ZWEwMmM2MmE3NDMzODY5OGJjZTQ5M2I2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbTQNZuhr9EU9Fii4YZMBh5a0VG6oCF9GYmtes2zfBTUwg MfD3flB6ZkaPpLmokC6TZBFNh8IIaJQtjzfjI+zOJ4lCww452n25iEb0Np3A/pwr SngQ32u4ub6NgK+tI4sOWxgxqJ5KNmEe1zB/0UCM6sFz3F8sWnLo8VoP4bZtxGHL ovRNzAgid8tXhKlirkZVBaEB1KpLziaZGTyfFJOWdAbSIs9YVvGgLb/SrxVr+Gxy iZ+UsP91nbXb/CIPkFSIrzFOF8pOe/vsFI05KwWmRTSUu0rtYvwVAlqnGZwky5hb hTW+QojVdaLxh5JiTNGq42lUTgLxyBq64lQ/YnYdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsa+kbLbEfKmfYXIgSI68Bw/5DZwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwMjc4M2UzLTJhMmEtNDgwMi1iNDBlLWNjMjE5NDI3NjFiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2tpQwDQYJKoZIhvcNAQELBQADggEBABLh3Uo2D+aIK5Hm23NTlbhjDlQg n4XUGbefhf5xEB1pKv9/7t2t2TcG0tRx3qRk+8V+jrhORVLhKXlnvcT1s9EP0CiV 7p3io2Y9CiWT6XirOAaFK/RCulZJlooSgndpoZPVTJP58wNFi+CeScn4Qii3poSZ xhfgUs0H01+Iedx2tqLZgbCXXhLGvMu09iqVoF8Rxun+9E2u7T+WzCLNO8sg1nPJ 746sEuF7T33+bIC83dtO3v+PLP+wIF6cASpumLIG1KT2csktNjzGb7CTEXuVDz2L sNDl3U55CbgHpK0tbdlHOfGppJqei1/HNeCEh8k3u7FMt+Im+9IRRNyjRB0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:53 2025 by rpki-client