$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/238c8b2d-7a21-4fe7-8b1a-3643603058d2.roa File: 238c8b2d-7a21-4fe7-8b1a-3643603058d2.roa (raw, json) Hash identifier: fDZlEdVivQbKtNkrMnq3FFbs1iB0+yLQrhdVQ8gVj4g= Subject key identifier: 21:6B:1E:0D:A6:3A:F1:65:5D:0D:97:64:0A:FC:3A:26:7F:70:41:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 737DCFB4B0703AAF1356EC5432A84F5CB98055 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/238c8b2d-7a21-4fe7-8b1a-3643603058d2.roa Signing time: Fri 17 Oct 2025 21:51:38 +0000 ROA not before: Fri 17 Oct 2025 21:51:38 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.249.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7d:cf:b4:b0:70:3a:af:13:56:ec:54:32:a8:4f:5c:b9:80:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 21:51:38 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=12dbc231f0c2ad3674182b8201e019a561570eeec30351fb2cde3d594e87631d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:44:8d:9b:72:4e:47:c8:a4:4c:bd:f5:cd: 74:0e:c9:26:3d:ac:6e:06:a7:88:0b:31:a7:0b:44: a7:82:10:b3:40:95:78:c8:34:bb:be:7a:20:2c:06: 21:b8:2d:77:df:81:e4:c0:61:84:c8:eb:be:e2:de: 7d:76:33:e8:6b:e1:2a:78:4e:33:f1:5c:7c:47:66: a7:4f:7c:18:c9:38:8b:24:bf:a3:0c:a4:59:80:b3: 35:b1:6a:fb:70:72:b9:dd:fa:40:13:75:9f:c6:0f: 33:39:a7:c0:90:90:76:0e:ef:dd:f9:df:b6:e8:b4: 26:c6:3d:43:c6:aa:d0:c4:1d:a0:11:d8:30:89:91: 22:f6:4f:d4:aa:61:57:89:59:5e:78:9d:b5:f7:ba: 88:5f:25:84:13:2c:9f:21:26:05:bf:82:fa:6f:1d: e6:91:b3:9b:ae:6e:8e:4a:37:bd:d6:27:fd:08:d4: ef:cd:78:cb:5c:6d:c4:0d:e9:0e:bf:14:34:58:be: 37:d3:ba:17:77:20:f9:4b:c6:44:21:c1:88:7e:93: 0b:dc:73:73:f3:68:44:5e:41:9b:81:00:70:ab:77: f6:29:ff:70:eb:aa:c1:a7:68:a9:dc:c0:1e:fa:94: 22:f7:5e:da:0a:d7:7c:74:24:8b:b8:29:6a:27:b9: a8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6B:1E:0D:A6:3A:F1:65:5D:0D:97:64:0A:FC:3A:26:7F:70:41:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/238c8b2d-7a21-4fe7-8b1a-3643603058d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.249.0.0/19 Signature Algorithm: sha256WithRSAEncryption ab:b1:f3:fe:be:c3:93:81:2f:4a:e1:40:ba:9a:75:43:bc:0a: 49:5e:d6:ad:fa:1b:56:a0:1c:a3:3b:65:48:02:a6:75:78:0c: a0:92:7c:fb:9c:19:fc:c6:21:35:47:3d:2f:09:c1:31:a6:47: 28:3d:fd:6f:8b:93:d6:2b:6b:41:3f:9b:91:9c:95:16:f4:bb: 6c:c4:c2:9c:e0:1b:2e:61:76:9f:7c:21:cd:94:d3:7b:dd:ab: c3:11:aa:d8:4d:9a:0f:54:d5:7d:08:ea:46:2d:73:fa:f6:e3: 0e:7c:58:f5:f8:d6:a5:02:69:b8:be:84:62:5b:c5:4f:ad:ed: 41:7d:06:6f:ed:b5:25:ca:a7:bd:73:97:43:31:fb:48:95:05: 1c:81:c6:d2:27:33:21:d9:9e:a9:ae:41:f9:ed:c5:d3:de:4f: c8:04:5e:21:8f:f8:72:8e:80:32:b2:93:ac:69:c6:72:dc:4e: fe:fe:5b:75:25:13:f7:2b:a4:63:09:d1:07:7a:22:3f:7d:a8: ef:e2:8c:6d:bb:de:1d:74:d5:ba:d3:e4:76:71:c2:27:b2:2b: 5b:b3:1b:d7:98:a2:e4:86:44:44:db:91:b6:ef:37:99:7c:88: 44:35:43:0b:0b:e3:55:9d:ae:ca:53:73:7e:60:ca:36:24:9b: e9:2c:78:b6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITc33PtLBwOq8TVuxUMqhPXLmAVTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTcyMTUxMzhaFw0yNTExMjEyMzU5NTla MHoxSTBHBgNVBAUTQDEyZGJjMjMxZjBjMmFkMzY3NDE4MmI4MjAxZTAxOWE1NjE1 NzBlZWVjMzAzNTFmYjJjZGUzZDU5NGU4NzYzMWQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMuiRI2bck5HyKRMvfXNdA7JJj2sbganiAsxpwtEp4IQs0CV eMg0u756ICwGIbgtd9+B5MBhhMjrvuLefXYz6GvhKnhOM/FcfEdmp098GMk4iyS/ owykWYCzNbFq+3Byud36QBN1n8YPMzmnwJCQdg7v3fnftui0JsY9Q8aq0MQdoBHY MImRIvZP1KphV4lZXnidtfe6iF8lhBMsnyEmBb+C+m8d5pGzm65ujko3vdYn/QjU 7814y1xtxA3pDr8UNFi+N9O6F3cg+UvGRCHBiH6TC9xzc/NoRF5Bm4EAcKt39in/ cOuqwadoqdzAHvqUIvde2grXfHQki7gpaie5qAECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQhax4NpjrxZV0Nl2QK/Domf3BBJTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMjM4YzhiMmQtN2EyMS00ZmU3LThiMWEtMzY0MzYwMzA1OGQyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTb5ADANBgkqhkiG9w0BAQsFAAOCAQEAq7Hz/r7Dk4EvSuFAupp1Q7wKSV7W rfobVqAcoztlSAKmdXgMoJJ8+5wZ/MYhNUc9LwnBMaZHKD39b4uT1itrQT+bkZyV FvS7bMTCnOAbLmF2n3whzZTTe92rwxGq2E2aD1TVfQjqRi1z+vbjDnxY9fjWpQJp uL6EYlvFT63tQX0Gb+21JcqnvXOXQzH7SJUFHIHG0iczIdmeqa5B+e3F095PyARe IY/4co6AMrKTrGnGctxO/v5bdSUT9yukYwnRB3oiP32o7+KMbbveHXTVutPkdnHC J7IrW7Mb15ii5IZERNuRtu83mXyIRDVDCwvjVZ2uylNzfmDKNiSb6Sx4tg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:48:47 2025 by rpki-client