$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4804fd78-007a-4273-a8ff-72bb619c3e37.roa File: 4804fd78-007a-4273-a8ff-72bb619c3e37.roa (raw, json) Hash identifier: hMJ73oOeKY7cLmax9+tm/Djr/JM6dDRGEO4rIizKWvg= Subject key identifier: 8A:BA:B0:BB:19:BB:A1:C1:35:2A:C9:E1:13:F1:69:BA:5F:6E:24:D1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74FE898183BB50D27B186FDB8850D1B80889FF88 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4804fd78-007a-4273-a8ff-72bb619c3e37.roa Signing time: Tue 04 Nov 2025 01:51:50 +0000 ROA not before: Tue 04 Nov 2025 01:51:50 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.217.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fe:89:81:83:bb:50:d2:7b:18:6f:db:88:50:d1:b8:08:89:ff:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:51:50 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=01dad1daeec5110297793f33f8580c8fc528202457cb52090cbb507b946da21b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:c3:c9:1c:97:12:ed:dd:8f:73:29:16:90: 6f:3f:0d:37:f4:c7:61:e0:91:fd:2d:52:f9:d9:27: 66:33:46:56:83:4d:08:6d:14:54:79:7f:98:4b:b1: 68:44:88:b5:fd:83:4d:09:c6:93:b6:11:2a:0d:03: d5:db:e2:1e:8b:d5:40:29:12:f1:59:b3:e6:b4:2c: 7d:35:37:07:04:51:70:7c:1e:3d:8c:0a:95:26:67: 73:76:fb:90:fd:18:39:4a:ad:93:28:e2:7e:de:32: 14:17:8a:bb:86:dd:6f:0d:50:e6:c8:aa:2b:80:bc: 73:ca:f4:d9:93:1a:74:08:15:51:8f:46:75:6d:9e: 54:f5:44:ec:ad:3b:ce:45:59:3e:76:12:a8:fd:09: c5:37:ad:f5:8e:d0:28:88:c8:2f:24:29:14:cd:06: 2b:bd:12:70:e1:0b:11:dd:29:e5:81:b3:44:fd:e4: 6a:fc:04:ff:07:3a:8f:cf:8b:a0:4b:9a:63:ed:e7: 64:2d:7d:b9:53:6a:29:3c:98:f9:04:2f:68:34:e7: c6:d4:76:cb:2c:2c:79:d3:c5:54:7e:70:0c:2c:ed: ea:e8:75:ca:52:c5:3d:80:c7:58:a5:f1:2c:45:3a: af:90:a0:5d:19:1e:27:8d:ac:ac:f5:d5:37:da:49: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:B0:BB:19:BB:A1:C1:35:2A:C9:E1:13:F1:69:BA:5F:6E:24:D1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4804fd78-007a-4273-a8ff-72bb619c3e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.217.116.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:76:4b:7f:9e:00:2c:55:05:15:2c:0a:8f:1a:33:33:0c:ee: 44:da:6d:16:54:12:c6:db:06:88:ce:0b:9e:02:b2:94:33:12: 43:0c:7e:9b:ba:ac:87:ca:a2:00:db:67:38:3c:8b:29:78:31: c6:c4:cb:2e:7a:37:1a:92:da:17:78:f6:42:25:08:c5:fc:41: 3a:c8:9f:2f:16:4a:43:9a:61:07:b3:67:a4:dc:73:23:5a:de: 55:fb:15:8c:85:17:7a:85:68:0a:53:22:51:1f:b6:f2:4f:b9: 83:f3:15:cd:53:b3:8e:b7:66:ff:e0:a1:69:0e:42:ff:6b:68: af:a9:40:3d:74:d1:aa:17:01:14:5f:0e:7d:e1:14:66:e1:26: 37:a6:d3:5f:fa:c4:fa:89:7c:ce:9e:be:22:b7:6d:ba:b4:cc: 5b:7f:54:65:1f:f4:08:e9:83:15:42:d2:35:6c:7c:c1:8f:08: d2:9a:72:71:6e:ea:3f:f3:17:cd:b2:71:5b:68:71:57:f8:e6: c7:68:40:f9:f9:d6:08:76:69:c6:d8:d2:a4:a0:b9:0d:9a:95: bd:07:65:3e:b1:9e:f2:4b:46:04:2d:80:10:b0:75:c7:ef:35: 3a:45:19:cd:15:f3:3c:0d:ed:5e:18:5a:8e:e9:36:ed:2e:4e: 27:48:bb:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdP6JgYO7UNJ7GG/biFDRuAiJ/4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDE1MTUwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWRhZDFkYWVlYzUxMTAyOTc3OTNmMzNmODU4MGM4ZmM1 MjgyMDI0NTdjYjUyMDkwY2JiNTA3Yjk0NmRhMjFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiAsPJHJcS7d2PcykWkG8/DTf0x2Hgkf0tUvnZJ2YzRlaD TQhtFFR5f5hLsWhEiLX9g00JxpO2ESoNA9Xb4h6L1UApEvFZs+a0LH01NwcEUXB8 Hj2MCpUmZ3N2+5D9GDlKrZMo4n7eMhQXiruG3W8NUObIqiuAvHPK9NmTGnQIFVGP RnVtnlT1ROytO85FWT52Eqj9CcU3rfWO0CiIyC8kKRTNBiu9EnDhCxHdKeWBs0T9 5Gr8BP8HOo/Pi6BLmmPt52QtfblTaik8mPkEL2g058bUdsssLHnTxVR+cAws7ero dcpSxT2Ax1il8SxFOq+QoF0ZHieNrKz11TfaScSrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUirqwuxm7ocE1KsnhE/Fpul9uJNEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4MDRmZDc4LTAwN2EtNDI3My1hOGZmLTcyYmI2MTljM2UzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI22XQwDQYJKoZIhvcNAQELBQADggEBAA12S3+eACxVBRUsCo8aMzMM7kTa bRZUEsbbBojOC54CspQzEkMMfpu6rIfKogDbZzg8iyl4McbEyy56NxqS2hd49kIl CMX8QTrIny8WSkOaYQezZ6TccyNa3lX7FYyFF3qFaApTIlEftvJPuYPzFc1Ts463 Zv/goWkOQv9raK+pQD100aoXARRfDn3hFGbhJjem01/6xPqJfM6eviK3bbq0zFt/ VGUf9AjpgxVC0jVsfMGPCNKacnFu6j/zF82ycVtocVf45sdoQPn51gh2acbY0qSg uQ2alb0HZT6xnvJLRgQtgBCwdcfvNTpFGc0V8zwN7V4YWo7pNu0uTidIu0w= -----END CERTIFICATE-----Generated at Wed Nov 5 22:51:32 2025 by rpki-client