$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93c7d591-35b3-4320-8b7f-ece4f98299d3.roa File: 93c7d591-35b3-4320-8b7f-ece4f98299d3.roa (raw, json) Hash identifier: bepj4e7X122WwPg+oYsETBGW/Flsfuow+igVCD0oHjA= Subject key identifier: 33:FF:B4:7A:E6:8E:67:65:F0:47:15:91:96:8F:A2:15:2F:21:E1:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17298E7BAFE9107200BA58CD103F9BA7BC549256 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93c7d591-35b3-4320-8b7f-ece4f98299d3.roa Signing time: Fri 17 Oct 2025 22:11:36 +0000 ROA not before: Fri 17 Oct 2025 22:11:36 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.227.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:29:8e:7b:af:e9:10:72:00:ba:58:cd:10:3f:9b:a7:bc:54:92:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:11:36 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=7996735782d6616260d446f114504cd6e6f7f5e4e199944b565fc55fe88cd647, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:07:d7:0e:c7:29:a7:93:67:db:8f:21:7a:41: 6d:d3:1a:65:21:2f:82:d8:1c:60:ee:51:04:b5:4a: d9:90:b6:be:92:1c:df:5c:d2:81:fd:d9:d5:44:b2: 25:b7:7a:0c:fe:aa:08:aa:6f:b0:d6:26:61:47:da: 0e:86:37:0e:6d:fa:fd:b4:13:9b:63:75:e5:0d:cf: f6:33:da:de:9e:d0:53:76:52:4b:1f:bc:24:66:1f: b6:12:02:f3:28:20:c7:86:b6:c3:76:ed:3f:f7:67: 83:33:c0:90:98:00:7b:7e:57:ee:be:fe:d4:42:0a: 40:4e:de:6e:aa:98:e3:d6:72:e3:55:14:4a:16:be: eb:37:c7:6f:d0:c3:c8:97:39:ef:0b:c5:3a:ff:47: b7:72:38:63:3e:d1:4e:8b:3a:79:9f:95:25:c8:f1: 38:e3:d6:09:46:f3:46:8f:7f:77:39:bb:1f:e0:24: e8:24:18:f6:fc:a0:81:80:8d:cc:00:64:5c:27:ae: d0:f0:be:65:1c:bd:0a:b6:a0:fb:3d:c6:ff:a5:22: f7:6c:51:7d:06:13:99:22:2e:d9:16:00:40:7e:eb: 37:86:f2:3c:cb:d1:b9:25:f3:4e:d7:14:e3:8b:a5: ec:f5:8d:76:69:79:25:09:a5:0c:07:79:65:7b:d3: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:B4:7A:E6:8E:67:65:F0:47:15:91:96:8F:A2:15:2F:21:E1:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93c7d591-35b3-4320-8b7f-ece4f98299d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.227.232.0/23 Signature Algorithm: sha256WithRSAEncryption 44:7f:c1:e3:9d:ba:a2:d1:04:89:b9:39:fd:d0:82:fb:de:f0: 89:96:6d:4f:af:00:ec:a9:98:53:ff:be:92:e9:82:a8:e5:09: 02:e8:52:98:4a:f3:05:98:92:ee:1f:9c:53:85:1e:67:84:47: e3:47:1f:70:d3:f5:cc:6d:f8:c6:23:fb:fa:53:df:61:c1:e9: 41:0d:62:e0:ea:50:c1:c3:2c:81:37:bc:94:0f:13:d0:e2:47: f9:1a:3a:97:df:07:01:a4:6f:9e:89:8f:44:2a:18:8c:10:ba: 29:dd:e6:84:c9:8f:06:10:a5:e0:93:a3:6b:a9:30:3b:da:ec: 26:d4:b1:e7:bd:c1:67:5a:42:f3:c7:5d:b4:7e:31:bc:07:6b: 4a:1b:e9:06:ea:6c:34:96:a2:42:84:32:73:3a:68:85:f9:79: 18:23:ad:87:d8:8c:05:4f:4f:93:5f:ce:7a:a1:b4:ea:85:1d: 61:08:51:47:43:08:e9:ac:5b:f8:0b:4a:22:a0:7d:a0:9d:1e: 01:33:e4:ec:d5:18:d4:f2:2a:c2:7d:bb:ff:c6:ac:f2:c2:2f: 66:03:fc:23:6f:05:e9:37:f9:67:ad:b8:8c:9c:ba:fc:53:49: b7:c9:79:09:6e:39:3f:8c:f2:70:c4:e1:db:e9:09:99:68:e9: 9c:39:78:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFymOe6/pEHIAuljNED+bp7xUklYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIxMTM2WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTk2NzM1NzgyZDY2MTYyNjBkNDQ2ZjExNDUwNGNkNmU2 ZjdmNWU0ZTE5OTk0NGI1NjVmYzU1ZmU4OGNkNjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXB9cOxymnk2fbjyF6QW3TGmUhL4LYHGDuUQS1StmQtr6S HN9c0oH92dVEsiW3egz+qgiqb7DWJmFH2g6GNw5t+v20E5tjdeUNz/Yz2t6e0FN2 UksfvCRmH7YSAvMoIMeGtsN27T/3Z4MzwJCYAHt+V+6+/tRCCkBO3m6qmOPWcuNV FEoWvus3x2/Qw8iXOe8LxTr/R7dyOGM+0U6LOnmflSXI8Tjj1glG80aPf3c5ux/g JOgkGPb8oIGAjcwAZFwnrtDwvmUcvQq2oPs9xv+lIvdsUX0GE5kiLtkWAEB+6zeG 8jzL0bkl807XFOOLpez1jXZpeSUJpQwHeWV701+hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM/+0euaOZ2XwRxWRlo+iFS8h4RYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzYzdkNTkxLTM1YjMtNDMyMC04YjdmLWVjZTRmOTgyOTlkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE24+gwDQYJKoZIhvcNAQELBQADggEBAER/weOduqLRBIm5Of3Qgvve8ImW bU+vAOypmFP/vpLpgqjlCQLoUphK8wWYku4fnFOFHmeER+NHH3DT9cxt+MYj+/pT 32HB6UENYuDqUMHDLIE3vJQPE9DiR/kaOpffBwGkb56Jj0QqGIwQuind5oTJjwYQ peCTo2upMDva7CbUsee9wWdaQvPHXbR+MbwHa0ob6QbqbDSWokKEMnM6aIX5eRgj rYfYjAVPT5NfznqhtOqFHWEIUUdDCOmsW/gLSiKgfaCdHgEz5OzVGNTyKsJ9u//G rPLCL2YD/CNvBek3+WetuIycuvxTSbfJeQluOT+M8nDE4dvpCZlo6Zw5eJA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:51 2025 by rpki-client