$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65cbf137-f814-4afd-a8bf-39999e212824.roa File: 65cbf137-f814-4afd-a8bf-39999e212824.roa (raw, json) Hash identifier: wUw33ylevKH7O1AyoZoOCwNjuIwJ8qUenETfQMfjqVQ= Subject key identifier: 96:CF:76:87:B5:13:80:66:50:15:F5:D2:3D:24:1A:AC:A0:B8:1A:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7434339A4D028F49353166D4EA3676D43DD67DDD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65cbf137-f814-4afd-a8bf-39999e212824.roa Signing time: Fri 17 Oct 2025 22:40:10 +0000 ROA not before: Fri 17 Oct 2025 22:40:10 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:34:33:9a:4d:02:8f:49:35:31:66:d4:ea:36:76:d4:3d:d6:7d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:40:10 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=7e688dd81c47de01d97f12d6134b6ff488fee7649bbb8e900af87d3123023c08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:59:98:6e:89:4b:51:81:5a:7b:1b:e6:f8: 2e:43:36:93:ba:2f:bb:8e:23:23:15:e5:31:09:b3: 91:2c:72:6c:1a:be:d0:85:3d:5e:1e:c4:48:70:ce: 05:50:9a:4d:07:2b:2d:71:5b:50:3e:88:09:32:8a: 36:a5:f6:3b:61:1b:db:29:8f:be:37:e7:7d:92:f7: 46:cf:e0:eb:cf:de:91:62:db:f9:c0:00:67:a0:52: c4:bf:84:14:3d:10:d5:46:de:7e:93:8e:86:93:fb: 52:e5:d1:e1:9f:36:b5:4e:1d:98:e0:da:e2:97:50: 27:b8:c8:b4:86:e2:57:3a:85:7b:67:53:49:74:5d: 0a:5e:34:35:de:96:cc:48:14:f8:d4:79:27:c6:51: 93:97:45:b8:0d:af:66:f6:60:23:f7:9b:41:61:80: a4:e8:80:04:fd:99:3e:cd:e8:3b:f4:d1:43:4d:63: 09:48:3a:69:9b:8e:53:4b:cf:ae:6b:1a:a0:40:cf: a5:f4:64:09:56:0e:5b:2e:66:f7:f2:68:b5:01:ac: e6:26:c8:6f:65:53:77:5e:ed:a0:48:3f:d0:77:b7: c7:e4:73:72:96:0a:97:4e:72:bf:7c:67:c4:99:3b: 59:8f:1e:1d:c3:3c:dc:70:6d:93:90:56:80:15:67: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CF:76:87:B5:13:80:66:50:15:F5:D2:3D:24:1A:AC:A0:B8:1A:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65cbf137-f814-4afd-a8bf-39999e212824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.132.0/24 Signature Algorithm: sha256WithRSAEncryption 51:0a:f6:07:ae:04:05:f0:04:6c:77:7b:60:87:e2:8d:94:2a: f0:6d:50:b6:b1:58:42:cd:26:45:56:1b:bf:29:44:e7:d1:d5: e7:6b:8e:94:fd:44:af:0d:71:89:d5:89:4b:11:e5:58:e1:f7: ad:38:39:61:2c:06:75:c1:28:bb:7b:32:48:27:c8:d4:4b:a7: 30:22:6b:31:af:b4:8b:12:0a:96:3a:53:de:fb:c5:6e:ab:f9: e7:cf:f2:96:32:8b:93:e8:c1:be:ce:25:40:ff:cb:7a:cf:f0: cc:dc:00:5c:9e:ea:b7:91:6b:fe:82:5a:45:a4:2c:bf:f0:99: ea:6f:fb:3a:1b:f3:7b:78:eb:67:9c:91:1b:b9:a6:96:20:48: c4:df:45:7c:c4:d3:60:9f:73:06:b0:88:22:f9:87:f6:99:3d: 73:cf:0b:1b:44:9d:0a:87:88:f4:ef:09:db:7a:c1:3a:f6:47: c6:21:e5:d4:8f:36:a7:f1:45:39:99:eb:7a:42:0f:87:eb:b0: 26:d9:55:af:cf:31:bf:2e:f7:64:6d:8b:76:d6:d8:a9:0d:84: f9:e6:02:05:7d:e8:45:4b:2e:02:24:d6:5e:00:4d:c4:49:3c: 76:ca:ea:26:d8:09:64:94:15:bc:f5:18:30:2c:b1:bf:9e:a1: a4:fe:46:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdDQzmk0Cj0k1MWbU6jZ21D3Wfd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjI0MDEwWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTY4OGRkODFjNDdkZTAxZDk3ZjEyZDYxMzRiNmZmNDg4 ZmVlNzY0OWJiYjhlOTAwYWY4N2QzMTIzMDIzYzA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+JFmYbolLUYFaexvm+C5DNpO6L7uOIyMV5TEJs5Escmwa vtCFPV4exEhwzgVQmk0HKy1xW1A+iAkyijal9jthG9spj743532S90bP4OvP3pFi 2/nAAGegUsS/hBQ9ENVG3n6TjoaT+1Ll0eGfNrVOHZjg2uKXUCe4yLSG4lc6hXtn U0l0XQpeNDXelsxIFPjUeSfGUZOXRbgNr2b2YCP3m0FhgKTogAT9mT7N6Dv00UNN YwlIOmmbjlNLz65rGqBAz6X0ZAlWDlsuZvfyaLUBrOYmyG9lU3de7aBIP9B3t8fk c3KWCpdOcr98Z8SZO1mPHh3DPNxwbZOQVoAVZynVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUls92h7UTgGZQFfXSPSQarKC4GhQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1Y2JmMTM3LWY4MTQtNGFmZC1hOGJmLTM5OTk5ZTIxMjgyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28IQwDQYJKoZIhvcNAQELBQADggEBAFEK9geuBAXwBGx3e2CH4o2UKvBt ULaxWELNJkVWG78pROfR1edrjpT9RK8NcYnViUsR5Vjh9604OWEsBnXBKLt7Mkgn yNRLpzAiazGvtIsSCpY6U977xW6r+efP8pYyi5Powb7OJUD/y3rP8MzcAFye6reR a/6CWkWkLL/wmepv+zob83t462eckRu5ppYgSMTfRXzE02CfcwawiCL5h/aZPXPP CxtEnQqHiPTvCdt6wTr2R8Yh5dSPNqfxRTmZ63pCD4frsCbZVa/PMb8u92Rti3bW 2KkNhPnmAgV96EVLLgIk1l4ATcRJPHbK6ibYCWSUFbz1GDAssb+eoaT+RlU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:45:16 2025 by rpki-client