$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f41b957-50b9-4acf-891e-5e6bae1e1fcf.roa File: 1f41b957-50b9-4acf-891e-5e6bae1e1fcf.roa (raw, json) Hash identifier: 0Yf4fdjCXl9V8Qa2gkTllbS/zRRnI3a8A0blfJMxPLA= Subject key identifier: 02:71:1C:7D:9D:E6:4E:47:86:A1:B3:CE:F4:55:E1:E5:6D:7E:58:D1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C71C02D822D795F8A7A92B1CED2F020CDBC839C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f41b957-50b9-4acf-891e-5e6bae1e1fcf.roa Signing time: Tue 21 Oct 2025 06:21:30 +0000 ROA not before: Tue 21 Oct 2025 06:21:30 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:71:c0:2d:82:2d:79:5f:8a:7a:92:b1:ce:d2:f0:20:cd:bc:83:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 06:21:30 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=c26247c1e18f693e45fe7ffc5be07c0b49d1bd098838adf3d0838bd4bdc48544, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:7b:6e:9d:8c:f3:14:d2:a4:e7:1c:09:68: 80:82:f4:0a:83:1a:51:a5:35:7c:d2:d0:8b:53:18: b9:a3:10:6e:bb:18:bd:82:49:fc:4c:23:2a:1b:93: 62:40:7b:92:4e:81:3d:0f:c0:08:77:a0:a9:3b:43: a0:27:d6:da:9f:95:10:62:32:d6:2e:a0:2c:ea:45: 99:dd:5f:3d:3e:e4:c2:95:82:2f:98:02:16:63:25: 1a:cc:8d:3e:1f:18:b9:63:03:32:37:f2:95:70:4b: db:e7:cd:a0:1f:91:b2:3e:bc:04:93:0c:c5:f8:51: e4:9c:39:8a:d7:59:2b:c5:8a:fc:ce:bb:23:d6:8b: 31:a0:e2:71:68:b5:f2:8c:b6:72:7f:91:ea:75:26: 1d:1e:93:fd:df:fa:b8:07:33:49:7d:73:b7:1c:e8: 32:d0:52:5f:4b:a4:53:93:a4:ee:80:41:2d:4f:c6: 70:e8:65:fb:6c:be:ee:3a:4e:ba:0b:4d:b7:a3:79: 04:19:94:3b:4e:91:ae:92:92:55:e5:d3:af:2c:fd: 6d:ed:ed:40:92:95:5e:80:e4:63:79:85:e1:d0:54: 7b:3c:44:75:42:3e:69:27:52:9a:3d:6b:ea:5b:12: b6:63:58:8b:50:54:2b:1f:0b:89:55:1f:b4:81:cc: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:71:1C:7D:9D:E6:4E:47:86:A1:B3:CE:F4:55:E1:E5:6D:7E:58:D1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f41b957-50b9-4acf-891e-5e6bae1e1fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.32.0/20 Signature Algorithm: sha256WithRSAEncryption 73:13:20:80:61:5c:db:7d:a8:a7:4f:36:29:21:96:7f:6a:04: db:0b:0d:e2:4f:d3:c3:ae:d1:00:bb:28:cb:97:92:72:c7:b4: 6e:c9:79:48:f7:ac:f9:3d:d0:59:f1:38:3f:9c:f0:c1:65:92: aa:ab:0a:2c:02:7c:00:46:99:8d:f2:e3:99:a3:a2:5e:1a:ce: f2:7c:37:ee:b6:bc:d9:e0:9e:88:a0:e5:51:bc:61:f3:7f:72: fe:53:70:26:67:57:2f:dc:28:3e:da:71:18:9f:64:0d:8d:8d: 31:02:2b:e3:8d:90:b0:aa:59:df:1a:19:80:17:7b:c4:7a:1e: e2:39:f1:0d:65:61:a1:36:c3:77:c0:dd:e8:2b:46:c5:9b:14: d1:03:50:f3:cc:5e:bb:3f:8b:03:98:d0:c3:71:d9:33:08:86: bb:38:c4:ba:5b:0b:92:46:7b:9c:a9:a8:13:5e:2b:38:42:4d: 9a:59:bc:38:62:42:57:52:73:f6:81:32:25:d5:bf:fe:2b:41: dc:69:b8:1f:0c:e1:76:bd:4b:26:68:1f:e0:28:4a:47:ed:5a: be:53:97:76:5c:d4:0b:7a:a8:87:57:29:f4:80:1c:64:5e:1d: c7:84:55:af:a5:be:7b:75:dc:1f:10:f1:ed:fa:bb:47:68:46: ae:cb:45:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHHHALYIteV+KepKxztLwIM28g5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDYyMTMwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjYyNDdjMWUxOGY2OTNlNDVmZTdmZmM1YmUwN2MwYjQ5 ZDFiZDA5ODgzOGFkZjNkMDgzOGJkNGJkYzQ4NTQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNCXtunYzzFNKk5xwJaICC9AqDGlGlNXzS0ItTGLmjEG67 GL2CSfxMIyobk2JAe5JOgT0PwAh3oKk7Q6An1tqflRBiMtYuoCzqRZndXz0+5MKV gi+YAhZjJRrMjT4fGLljAzI38pVwS9vnzaAfkbI+vASTDMX4UeScOYrXWSvFivzO uyPWizGg4nFotfKMtnJ/kep1Jh0ek/3f+rgHM0l9c7cc6DLQUl9LpFOTpO6AQS1P xnDoZftsvu46TroLTbejeQQZlDtOka6SklXl068s/W3t7UCSlV6A5GN5heHQVHs8 RHVCPmknUpo9a+pbErZjWItQVCsfC4lVH7SBzK0jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAnEcfZ3mTkeGobPO9FXh5W1+WNEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmNDFiOTU3LTUwYjktNGFjZi04OTFlLTVlNmJhZTFlMWZjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ25iAwDQYJKoZIhvcNAQELBQADggEBAHMTIIBhXNt9qKdPNikhln9qBNsL DeJP08Ou0QC7KMuXknLHtG7JeUj3rPk90FnxOD+c8MFlkqqrCiwCfABGmY3y45mj ol4azvJ8N+62vNngnoig5VG8YfN/cv5TcCZnVy/cKD7acRifZA2NjTECK+ONkLCq Wd8aGYAXe8R6HuI58Q1lYaE2w3fA3egrRsWbFNEDUPPMXrs/iwOY0MNx2TMIhrs4 xLpbC5JGe5ypqBNeKzhCTZpZvDhiQldSc/aBMiXVv/4rQdxpuB8M4Xa9SyZoH+Ao SkftWr5Tl3Zc1At6qIdXKfSAHGReHceEVa+lvnt13B8Q8e36u0doRq7LRZ8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:52 2025 by rpki-client