$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ed438b6-0177-4b90-a249-548cfe4bfd1d.roa File: 1ed438b6-0177-4b90-a249-548cfe4bfd1d.roa (raw, json) Hash identifier: DAq9vJ3EsA+b6z/nS4RX2Z5ebEqhpxjXq+u0ZoeuJg8= Subject key identifier: 49:64:0D:20:F0:97:8C:C4:05:DD:2E:C3:A7:C2:D3:44:90:BA:92:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FE26CC34632C5110AC3A4BC341281D451CAE671 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ed438b6-0177-4b90-a249-548cfe4bfd1d.roa Signing time: Tue 21 Oct 2025 11:03:50 +0000 ROA not before: Tue 21 Oct 2025 11:03:50 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e2:6c:c3:46:32:c5:11:0a:c3:a4:bc:34:12:81:d4:51:ca:e6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 11:03:50 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=6810bc2a9c5fb3dd6f80d25444be767a0a3b9e45550e7f7309d11ecc1ed88d49, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:e5:85:5a:dc:bf:5d:da:24:33:93:b2:1d: a4:19:6f:77:26:3b:66:8c:42:32:dc:cb:e3:53:d1: 9b:6e:86:51:c0:de:0d:9c:58:db:35:c9:5d:2d:e1: fa:dd:85:da:6e:21:6a:2f:d0:ae:9d:33:9a:d3:56: 59:8a:0b:1c:d3:68:64:f8:06:30:91:e3:68:3c:f6: df:53:1c:56:4a:01:53:58:d1:36:a6:82:f9:ba:5b: 2d:d1:53:30:19:56:88:9e:88:7f:84:ec:d7:e5:d2: 81:d1:6e:44:35:c1:ee:4c:c5:d3:39:3d:b1:41:23: c2:ad:8a:ff:6a:ae:98:fd:f3:72:95:bb:56:97:5c: 2b:55:de:68:48:7c:fb:8e:52:2e:a1:72:4a:a0:64: fb:47:80:4b:4c:d7:a9:4a:72:24:92:7a:ee:32:c6: e9:17:b1:81:cc:8d:ae:a7:28:a7:f3:d1:7d:27:d9: 3d:01:e6:19:cd:4b:cf:c3:9d:9c:6a:51:47:bd:93: e9:ca:e1:79:4d:07:75:f9:19:ea:ae:6b:05:7d:97: db:85:b3:61:c2:32:8e:43:e6:4f:8d:66:54:d6:34: 0c:04:2e:de:63:30:2f:51:25:29:4b:f9:73:da:26: f8:16:16:5c:c8:96:4e:fa:bf:71:4c:bc:f2:ec:00: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:0D:20:F0:97:8C:C4:05:DD:2E:C3:A7:C2:D3:44:90:BA:92:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ed438b6-0177-4b90-a249-548cfe4bfd1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.100.0/23 Signature Algorithm: sha256WithRSAEncryption b3:d2:58:dc:c5:31:46:14:af:1e:b7:1f:00:3e:13:9c:1d:54: e8:55:d1:96:99:f3:87:8b:eb:20:26:32:9b:f5:98:ad:83:cd: 90:8e:3a:79:f8:62:e6:c2:ec:93:29:ef:c2:72:bd:e2:6c:3c: 1e:0b:b0:1c:41:8f:54:4f:5e:eb:ac:24:ff:4b:7e:dc:d8:31: b3:3f:9e:5f:13:b4:77:a6:83:d1:76:1f:93:d7:47:68:c1:5e: bb:39:ee:29:4a:97:31:0a:aa:e9:8f:ac:cc:28:ab:5c:a9:2f: ac:9f:e4:3b:f9:2e:cd:a0:4c:91:b5:e8:4e:1e:41:19:51:2e: ca:c5:9f:32:57:d4:71:d7:8a:6e:e2:81:51:85:9a:ae:fa:52: 41:4a:0c:73:94:b7:1b:b2:4b:12:19:48:94:4a:44:ba:06:86: 22:a2:f9:df:f0:a7:50:3d:3d:44:cc:d7:c2:b0:fe:2c:18:52: 32:b5:69:ff:23:b0:c0:0f:35:5b:63:f3:16:61:45:48:72:e8: a9:08:f1:46:c8:2c:65:9f:5c:c7:ca:6f:80:91:09:ee:83:a2: d1:9e:df:1c:b3:de:2c:cd:c7:2e:c1:99:f5:94:53:8f:92:08: 76:25:1a:68:9f:b9:0f:4f:13:01:79:bb:38:ac:61:76:db:7f: 19:fb:ca:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb+Jsw0YyxREKw6S8NBKB1FHK5nEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTEwMzUwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODEwYmMyYTljNWZiM2RkNmY4MGQyNTQ0NGJlNzY3YTBh M2I5ZTQ1NTUwZTdmNzMwOWQxMWVjYzFlZDg4ZDQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRROWFWty/XdokM5OyHaQZb3cmO2aMQjLcy+NT0ZtuhlHA 3g2cWNs1yV0t4frdhdpuIWov0K6dM5rTVlmKCxzTaGT4BjCR42g89t9THFZKAVNY 0Tamgvm6Wy3RUzAZVoieiH+E7Nfl0oHRbkQ1we5MxdM5PbFBI8Ktiv9qrpj983KV u1aXXCtV3mhIfPuOUi6hckqgZPtHgEtM16lKciSSeu4yxukXsYHMja6nKKfz0X0n 2T0B5hnNS8/DnZxqUUe9k+nK4XlNB3X5GequawV9l9uFs2HCMo5D5k+NZlTWNAwE Lt5jMC9RJSlL+XPaJvgWFlzIlk76v3FMvPLsANUpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSWQNIPCXjMQF3S7Dp8LTRJC6kvAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlZDQzOGI2LTAxNzctNGI5MC1hMjQ5LTU0OGNmZTRiZmQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28GQwDQYJKoZIhvcNAQELBQADggEBALPSWNzFMUYUrx63HwA+E5wdVOhV 0ZaZ84eL6yAmMpv1mK2DzZCOOnn4YubC7JMp78JyveJsPB4LsBxBj1RPXuusJP9L ftzYMbM/nl8TtHemg9F2H5PXR2jBXrs57ilKlzEKqumPrMwoq1ypL6yf5Dv5Ls2g TJG16E4eQRlRLsrFnzJX1HHXim7igVGFmq76UkFKDHOUtxuySxIZSJRKRLoGhiKi +d/wp1A9PUTM18Kw/iwYUjK1af8jsMAPNVtj8xZhRUhy6KkI8UbILGWfXMfKb4CR Ce6DotGe3xyz3izNxy7BmfWUU4+SCHYlGmifuQ9PEwF5uzisYXbbfxn7yoo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:54:24 2025 by rpki-client