$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49744934-f904-48fe-9e1b-9559fd2ffc90.roa File: 49744934-f904-48fe-9e1b-9559fd2ffc90.roa (raw, json) Hash identifier: rb9+H6PpJuSLUISJoEZbvrLG63IJZCAsphdCu7mgzbg= Subject key identifier: 61:90:0C:6C:A0:79:B4:F1:7A:5E:55:50:A0:58:16:0D:56:4C:FA:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 500069AE8AF25443702EF363A4CD778A1617BA47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49744934-f904-48fe-9e1b-9559fd2ffc90.roa Signing time: Tue 21 Oct 2025 08:10:14 +0000 ROA not before: Tue 21 Oct 2025 08:10:14 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.83.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:00:69:ae:8a:f2:54:43:70:2e:f3:63:a4:cd:77:8a:16:17:ba:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 08:10:14 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=9cb5220c347f9d7ea589f65ec57625b5f9bc5d05d860f5aa222e8e18cf114843, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:46:19:2d:8f:60:db:ba:54:7d:ec:75:2b: a2:fd:ed:32:34:35:56:9b:40:04:ee:f7:0f:01:61: e2:86:0c:16:a2:fa:3d:6d:77:02:65:2e:c2:f2:34: 7e:cc:0f:a5:df:11:d3:4d:92:28:2e:2e:ec:54:d0: 63:f6:8e:08:ea:b1:ab:36:ad:be:1c:d1:95:72:12: e5:02:f4:aa:10:c4:af:f5:f6:f9:9e:ed:ba:65:cb: 19:1e:13:cb:21:ee:f4:7f:94:09:aa:45:52:ee:72: ef:c4:f7:bf:2b:84:5e:80:ec:96:36:ea:39:40:1f: dd:2e:81:81:bf:d9:be:e8:c7:13:32:f1:b2:4a:59: ce:1b:68:9e:41:5f:c9:de:73:a8:4a:be:5a:e3:3e: 5a:70:1f:c8:04:99:dc:38:94:81:99:72:17:96:3a: d5:64:fc:69:22:17:27:1e:84:d5:ee:31:6d:2b:7f: 87:73:54:a1:26:74:dd:5e:04:3e:21:84:53:54:36: 20:f1:37:a1:00:64:3d:1d:20:bb:3d:47:92:84:27: 88:63:5b:3f:34:e4:a1:84:7a:f8:92:e1:bd:c2:11: e1:af:38:82:dd:fd:e3:f8:00:1d:3a:b7:2c:70:dd: 27:db:e8:9c:f8:42:f9:2d:75:d3:33:07:9d:a8:38: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:0C:6C:A0:79:B4:F1:7A:5E:55:50:A0:58:16:0D:56:4C:FA:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49744934-f904-48fe-9e1b-9559fd2ffc90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.83.64.0/18 Signature Algorithm: sha256WithRSAEncryption 28:fe:9f:85:12:04:04:cd:2f:74:70:6a:c0:57:da:21:67:04: 98:b8:b4:7c:a2:1a:2f:af:92:97:05:6f:00:a0:d7:9d:6d:6c: ac:4f:5f:a2:ba:f0:78:4a:80:55:bd:c0:42:91:ce:34:b8:63: 7b:a8:fa:8e:b7:3c:81:d0:61:9a:02:7d:6b:d8:71:ff:65:96: 1f:ff:ad:5e:2f:3a:f1:0d:9e:93:5b:9d:a5:c6:7c:c0:44:cd: 15:c7:59:b9:ca:bc:6a:dc:c5:40:13:ca:b5:81:9a:01:18:ff: 10:28:60:34:8a:0d:3c:8f:a3:c6:86:1f:f2:27:8f:57:b1:43: 0f:16:bc:69:2f:1c:49:7e:5d:af:94:ee:b8:df:38:c9:47:0a: b7:be:25:0b:f1:29:42:c9:0b:16:ed:b2:43:12:79:83:e0:b5: 6f:ec:27:d9:f9:25:70:6c:8c:aa:87:82:d9:c5:56:2d:68:74: ca:4f:ec:24:9a:fe:f1:74:9b:d1:be:8a:16:aa:06:d4:f3:69: da:de:f3:51:8f:c4:96:04:40:f7:0a:67:81:e5:69:b3:c2:41: 3f:ff:34:5c:05:4e:a0:92:c7:c2:0e:2d:f2:b9:f9:17:03:90: 05:c4:74:16:ec:67:f6:dc:2a:8f:2c:41:aa:96:e0:53:01:23: 85:7b:2e:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUABproryVENwLvNjpM13ihYXukcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDgxMDE0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2I1MjIwYzM0N2Y5ZDdlYTU4OWY2NWVjNTc2MjViNWY5 YmM1ZDA1ZDg2MGY1YWEyMjJlOGUxOGNmMTE0ODQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxR0YZLY9g27pUfex1K6L97TI0NVabQATu9w8BYeKGDBai +j1tdwJlLsLyNH7MD6XfEdNNkiguLuxU0GP2jgjqsas2rb4c0ZVyEuUC9KoQxK/1 9vme7bplyxkeE8sh7vR/lAmqRVLucu/E978rhF6A7JY26jlAH90ugYG/2b7oxxMy 8bJKWc4baJ5BX8nec6hKvlrjPlpwH8gEmdw4lIGZcheWOtVk/GkiFycehNXuMW0r f4dzVKEmdN1eBD4hhFNUNiDxN6EAZD0dILs9R5KEJ4hjWz805KGEeviS4b3CEeGv OILd/eP4AB06tyxw3Sfb6Jz4QvktddMzB52oOFjfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYZAMbKB5tPF6XlVQoFgWDVZM+t8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5NzQ0OTM0LWY5MDQtNDhmZS05ZTFiLTk1NTlmZDJmZmM5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2U0AwDQYJKoZIhvcNAQELBQADggEBACj+n4USBATNL3RwasBX2iFnBJi4 tHyiGi+vkpcFbwCg151tbKxPX6K68HhKgFW9wEKRzjS4Y3uo+o63PIHQYZoCfWvY cf9llh//rV4vOvENnpNbnaXGfMBEzRXHWbnKvGrcxUATyrWBmgEY/xAoYDSKDTyP o8aGH/Inj1exQw8WvGkvHEl+Xa+U7rjfOMlHCre+JQvxKULJCxbtskMSeYPgtW/s J9n5JXBsjKqHgtnFVi1odMpP7CSa/vF0m9G+ihaqBtTzadre81GPxJYEQPcKZ4Hl abPCQT//NFwFTqCSx8IOLfK5+RcDkAXEdBbsZ/bcKo8sQaqW4FMBI4V7Lts= -----END CERTIFICATE-----Generated at Wed Nov 5 01:49:16 2025 by rpki-client