$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0211194e-4902-4c5f-80e5-fc3255256faf.roa File: 0211194e-4902-4c5f-80e5-fc3255256faf.roa (raw, json) Hash identifier: lDSRbC0LvE5L2D4yvaLg0dIaCe1wQMXG1/5nCOtFrMo= Subject key identifier: D1:B6:AF:DD:01:81:A4:63:24:C6:6F:13:F9:28:13:0C:74:C0:D4:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AE89E03184A4C9C0EC90EB6500C81943C6C941B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0211194e-4902-4c5f-80e5-fc3255256faf.roa Signing time: Tue 21 Oct 2025 00:30:17 +0000 ROA not before: Tue 21 Oct 2025 00:30:17 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e8:9e:03:18:4a:4c:9c:0e:c9:0e:b6:50:0c:81:94:3c:6c:94:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:30:17 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=ab5589c73d05adae7610c30df7b9eb4703e3d19c9031b7ace67e851360d7fa68, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:f3:77:48:39:e0:8a:ac:41:89:2a:4c:bb: d4:f4:cb:ba:f1:db:82:75:94:b8:c0:a1:52:1f:ed: 70:dd:b0:2a:0a:5f:fb:44:d3:36:8e:27:e5:b2:a4: 75:e1:8a:46:4e:6a:20:f1:54:4b:74:de:52:34:b5: 9b:b5:5e:6a:31:fc:8f:11:82:bb:ba:8a:3e:94:f1: ee:a4:d2:25:48:17:ab:e7:d4:4f:26:5e:41:c5:7e: 0e:e9:35:e0:a9:10:a6:3d:c7:83:8f:a0:9f:9f:a8: 5d:fe:c7:74:c0:6d:8e:ab:06:48:d7:c0:27:35:f6: 98:a1:60:4c:e2:19:a0:f8:ab:4c:28:1a:93:cc:ac: 53:78:42:fa:d1:f0:21:d5:0a:64:1d:71:df:0d:51: 27:0f:09:c9:b2:75:db:e7:c3:7a:44:8a:b9:89:6d: db:70:d5:7e:a3:4a:7a:4c:8c:40:c0:15:95:67:b3: 99:a7:e1:6f:5f:6f:71:5a:3b:60:17:44:a0:44:cb: 12:e0:05:81:cd:23:c2:0e:1c:f4:57:a4:68:e3:a2: c7:40:31:c9:68:09:dd:0e:ab:56:cf:65:e2:ca:9d: 45:3c:70:5c:37:e9:1a:38:f3:0a:38:0e:eb:de:31: 64:11:ae:70:ba:ad:ca:00:2d:29:36:94:e4:07:18: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:AF:DD:01:81:A4:63:24:C6:6F:13:F9:28:13:0C:74:C0:D4:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0211194e-4902-4c5f-80e5-fc3255256faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.200.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:18:44:54:ca:ae:b2:15:2d:eb:f3:99:bb:49:6a:f3:35:88: 27:17:d7:dd:12:87:1f:0c:3e:e2:6a:e8:91:90:95:76:aa:48: c5:d6:0e:8f:89:b5:d8:3a:d6:e8:b9:08:86:77:d0:99:89:f4: c6:f6:ca:d1:91:f9:90:53:cf:bd:cb:d3:57:59:0c:56:6d:75: f2:85:73:a9:5a:7e:10:ef:5e:20:96:62:8e:95:ce:19:4f:10: b3:27:22:7c:0d:b0:ab:31:b4:ad:e8:3c:33:9e:a1:02:56:76: 8a:62:0a:14:e9:d3:63:5b:20:5a:65:e1:02:fd:c5:56:ea:33: b6:a7:29:87:bd:b0:a9:cd:af:d8:79:a7:bd:39:99:d4:e6:33: 6d:9a:cb:4d:32:d5:3a:da:69:16:53:ba:17:d9:65:f2:e4:4d: f2:1a:69:b4:6e:5d:6e:40:af:cf:dc:b2:d2:3f:14:27:b0:18: b3:e8:3d:80:93:80:a1:30:4d:87:04:cf:af:df:9e:2a:c3:b6: f5:b9:a9:f6:c9:fb:c5:d5:f0:ca:86:8c:12:79:e9:e2:32:0e: d5:c4:fc:af:50:e0:a0:71:f7:6c:3b:f1:77:2c:9e:cd:80:55: 77:45:ca:56:b6:df:1f:6b:37:fc:16:0a:c9:30:c1:0d:b2:c1: 96:35:ad:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGuieAxhKTJwOyQ62UAyBlDxslBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDAzMDE3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjU1ODljNzNkMDVhZGFlNzYxMGMzMGRmN2I5ZWI0NzAz ZTNkMTljOTAzMWI3YWNlNjdlODUxMzYwZDdmYTY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeqPN3SDngiqxBiSpMu9T0y7rx24J1lLjAoVIf7XDdsCoK X/tE0zaOJ+WypHXhikZOaiDxVEt03lI0tZu1Xmox/I8Rgru6ij6U8e6k0iVIF6vn 1E8mXkHFfg7pNeCpEKY9x4OPoJ+fqF3+x3TAbY6rBkjXwCc19pihYEziGaD4q0wo GpPMrFN4QvrR8CHVCmQdcd8NUScPCcmyddvnw3pEirmJbdtw1X6jSnpMjEDAFZVn s5mn4W9fb3FaO2AXRKBEyxLgBYHNI8IOHPRXpGjjosdAMcloCd0Oq1bPZeLKnUU8 cFw36Ro48wo4DuveMWQRrnC6rcoALSk2lOQHGBc7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0bav3QGBpGMkxm8T+SgTDHTA1L4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyMTExOTRlLTQ5MDItNGM1Zi04MGU1LWZjMzI1NTI1NmZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM25sgwDQYJKoZIhvcNAQELBQADggEBAB4YRFTKrrIVLevzmbtJavM1iCcX 190Shx8MPuJq6JGQlXaqSMXWDo+Jtdg61ui5CIZ30JmJ9Mb2ytGR+ZBTz73L01dZ DFZtdfKFc6lafhDvXiCWYo6VzhlPELMnInwNsKsxtK3oPDOeoQJWdopiChTp02Nb IFpl4QL9xVbqM7anKYe9sKnNr9h5p705mdTmM22ay00y1TraaRZTuhfZZfLkTfIa abRuXW5Ar8/cstI/FCewGLPoPYCTgKEwTYcEz6/fnirDtvW5qfbJ+8XV8MqGjBJ5 6eIyDtXE/K9Q4KBx92w78Xcsns2AVXdFyla23x9rN/wWCskwwQ2ywZY1rQ0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:24 2025 by rpki-client