$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa File: 753970ff-6395-428f-bb4f-1fc404ce49d5.roa (raw, json) Hash identifier: mAn1Zi5/eYqoPYzwZyVoYmy1LS9peG8J2AwZGXV9J8o= Subject key identifier: 2B:18:F4:43:D5:8F:15:B9:51:63:A5:08:22:EF:AB:E8:26:64:01:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4527F950A7DDFDE7FD51F60420004DD87DD05ABF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa Signing time: Tue 21 Oct 2025 02:51:32 +0000 ROA not before: Tue 21 Oct 2025 02:51:32 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.90.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:27:f9:50:a7:dd:fd:e7:fd:51:f6:04:20:00:4d:d8:7d:d0:5a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:51:32 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=30fc8f4e9174d3b8f6581f774d7aec86934d8e424b96e554c5a586b09e9f3745, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:00:bc:18:43:ef:99:96:b8:b5:1e:c7:0a: bf:54:20:f0:8d:fc:cc:10:9a:f4:41:82:16:70:6d: 95:14:7a:d9:a9:2f:e8:29:d9:e5:dd:fb:34:13:f7: e3:4c:55:52:03:fe:25:74:79:9d:6d:80:8d:ee:11: 72:7e:c0:76:68:bf:ae:b4:da:09:fd:2e:ce:d0:df: 30:04:ac:80:35:1b:ec:f0:65:d0:36:09:54:40:f1: d8:ca:aa:4a:26:91:b0:48:bd:ff:a6:2b:19:29:26: 36:01:28:cd:d1:d4:f7:89:99:d0:97:0e:cd:fc:87: 4c:82:4f:b0:3f:d3:83:4b:3a:7d:d5:03:44:9e:ab: c4:94:08:95:f9:0b:0a:c3:05:06:ab:4b:29:0d:89: 03:c3:0a:09:0f:e3:a9:5a:b3:7a:e1:90:0c:f6:a2: 6b:dd:df:a2:b4:4f:eb:76:43:2c:ce:0c:b3:72:55: f4:84:1a:47:e3:b5:c7:76:38:ef:5e:9d:ea:14:7b: ee:40:b3:cb:aa:fa:a0:be:43:a8:0a:d1:f9:01:82: 16:fc:dc:cd:a3:62:7a:a6:ee:b7:56:86:31:69:03: 3f:0d:85:16:65:be:03:30:0d:f5:8b:ea:28:81:47: 5c:5c:8b:37:d1:58:49:51:ba:3c:4a:ca:5b:37:4a: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:F4:43:D5:8F:15:B9:51:63:A5:08:22:EF:AB:E8:26:64:01:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.90.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7d:76:fe:a1:f4:3b:1c:4e:b5:7d:b6:67:cb:38:0e:3d:8a:0f: 09:63:fd:82:21:6c:cd:54:b0:de:ac:73:84:35:1f:c3:8e:5a: 8a:13:f0:5e:b8:10:e3:51:35:92:60:ed:47:00:d5:e2:35:c1: 15:5f:f7:d9:0f:23:e1:1e:67:18:4d:29:3a:05:28:47:70:16: 7a:21:c1:4c:e1:2d:7f:6b:fc:5f:de:1e:f0:72:20:64:e0:ce: 21:4c:40:bc:75:3c:23:a8:db:22:cf:a1:f2:73:4f:94:e6:9a: d5:8d:e4:fe:3d:2f:04:4c:a3:9a:41:f6:e6:36:34:fa:9b:81: 93:bf:3d:00:4e:c0:bd:1b:44:ae:04:87:54:c0:58:27:4b:36: 55:50:c2:e4:42:2f:cf:0e:8e:29:48:e6:b1:6e:b0:e9:3d:3c: fc:87:f4:24:10:99:e0:d7:15:69:b3:48:1a:9c:05:05:2e:6c: 97:c6:21:16:fb:98:2f:1b:8a:81:e7:5a:8a:60:6c:24:81:ea: 4f:90:e9:88:9c:bf:c8:f8:09:c1:b2:c2:b7:e1:ff:27:7e:74: a2:31:9e:6f:7f:94:57:8b:8e:93:a8:0a:16:75:d7:b3:fb:90: c3:de:e5:4d:05:2a:d1:69:a6:16:83:a1:2b:4a:e2:10:be:87: 00:a7:9f:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURSf5UKfd/ef9UfYEIABN2H3QWr8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDI1MTMyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGZjOGY0ZTkxNzRkM2I4ZjY1ODFmNzc0ZDdhZWM4Njkz NGQ4ZTQyNGI5NmU1NTRjNWE1ODZiMDllOWYzNzQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP8gC8GEPvmZa4tR7HCr9UIPCN/MwQmvRBghZwbZUUetmp L+gp2eXd+zQT9+NMVVID/iV0eZ1tgI3uEXJ+wHZov6602gn9Ls7Q3zAErIA1G+zw ZdA2CVRA8djKqkomkbBIvf+mKxkpJjYBKM3R1PeJmdCXDs38h0yCT7A/04NLOn3V A0Seq8SUCJX5CwrDBQarSykNiQPDCgkP46las3rhkAz2omvd36K0T+t2QyzODLNy VfSEGkfjtcd2OO9eneoUe+5As8uq+qC+Q6gK0fkBghb83M2jYnqm7rdWhjFpAz8N hRZlvgMwDfWL6iiBR1xcizfRWElRujxKyls3Ss+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKxj0Q9WPFblRY6UIIu+r6CZkAT0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1Mzk3MGZmLTYzOTUtNDI4Zi1iYjRmLTFmYzQwNGNlNDlkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2WkAwDQYJKoZIhvcNAQELBQADggEBAH12/qH0OxxOtX22Z8s4Dj2KDwlj /YIhbM1UsN6sc4Q1H8OOWooT8F64EONRNZJg7UcA1eI1wRVf99kPI+EeZxhNKToF KEdwFnohwUzhLX9r/F/eHvByIGTgziFMQLx1PCOo2yLPofJzT5TmmtWN5P49LwRM o5pB9uY2NPqbgZO/PQBOwL0bRK4Eh1TAWCdLNlVQwuRCL88OjilI5rFusOk9PPyH 9CQQmeDXFWmzSBqcBQUubJfGIRb7mC8bioHnWopgbCSB6k+Q6Yicv8j4CcGywrfh /yd+dKIxnm9/lFeLjpOoChZ117P7kMPe5U0FKtFpphaDoStK4hC+hwCnn0o= -----END CERTIFICATE-----Generated at Wed Nov 5 03:34:07 2025 by rpki-client