$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/961a64b8-1896-4e5d-bfcd-008bc94045fb.roa File: 961a64b8-1896-4e5d-bfcd-008bc94045fb.roa (raw, json) Hash identifier: Vx0wSjVU5dl7dm4Ytq7zw8Ml0kcO1fmY94nSKkzVn/s= Subject key identifier: F0:21:43:27:DE:69:E5:FA:BC:2D:E4:D7:1D:4D:BC:32:B5:30:21:B2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 364CC98FA7A8E31B16039A0FDE7596467F8A8640 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/961a64b8-1896-4e5d-bfcd-008bc94045fb.roa Signing time: Thu 16 Oct 2025 23:52:45 +0000 ROA not before: Thu 16 Oct 2025 23:52:45 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.197.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4c:c9:8f:a7:a8:e3:1b:16:03:9a:0f:de:75:96:46:7f:8a:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 23:52:45 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=25a0a4440e015426e54b182a6e22f1e2d7602176a8d096ac4364265b62b79270, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:82:09:c7:a6:e1:43:ef:dd:55:79:23:05: 87:2f:51:51:a7:42:fe:95:c6:71:36:09:b3:0a:b1: 18:54:55:7d:04:69:96:f0:53:1a:a6:85:bf:02:8f: 0d:86:e9:db:43:f3:13:ed:ac:43:45:16:1a:3c:ad: 5e:a0:f5:b6:c5:9a:df:a2:6d:8d:e8:97:d5:06:ee: d3:ce:9b:62:5c:0e:03:77:34:52:a9:09:3f:88:c2: 82:01:0f:0d:ad:00:35:80:a7:1c:54:16:c5:f0:1e: 49:4f:24:f1:84:04:2d:1d:11:53:d9:36:14:b9:2d: 3a:8e:27:bd:dc:a1:c1:55:65:17:e5:82:2d:99:c5: 6e:a3:b1:55:a5:e6:cb:48:bc:76:aa:45:61:29:1e: 8f:70:56:c0:71:00:a9:03:df:ec:2d:a2:0d:bc:9a: b4:5d:2b:8d:0f:3b:41:a5:a2:90:4a:96:26:60:a0: e0:f1:fd:08:b4:e2:ee:3c:3c:c5:d7:61:63:3a:fe: 33:36:83:d6:e5:24:55:e2:06:06:a8:ba:35:66:be: ed:b7:2e:e2:54:f1:c9:f5:45:e0:c8:19:bc:54:96: f9:6a:dd:ad:80:5e:1f:9f:6d:c4:9b:aa:b4:19:0f: 3a:62:9e:9e:b0:44:8b:7a:ca:a2:78:04:25:fe:6e: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:21:43:27:DE:69:E5:FA:BC:2D:E4:D7:1D:4D:BC:32:B5:30:21:B2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/961a64b8-1896-4e5d-bfcd-008bc94045fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.192.0/24 Signature Algorithm: sha256WithRSAEncryption 26:01:de:13:db:7e:87:09:71:db:8c:1b:44:d8:a9:35:73:45: 35:74:1b:96:3a:11:fb:45:d3:f9:16:ac:15:98:60:7a:0d:16: 03:10:7e:e2:ff:cf:58:c0:e6:dd:e5:4c:0e:e5:b1:86:9c:35: c8:b7:5c:76:9e:09:ad:92:3b:d2:8d:38:5c:3e:3d:b0:ac:97: 08:c3:c3:c7:1c:9d:ad:45:9a:93:45:b7:10:8c:03:c1:28:1a: ec:a3:30:9c:89:2d:64:a8:58:27:f9:f4:16:13:61:e8:57:c0: a1:7d:f7:fc:22:ab:19:3e:89:af:8a:32:57:fa:9f:e5:a4:06: 0e:14:ed:51:a6:e6:ae:b2:21:bc:95:4e:b6:6b:9c:56:fd:02: 48:5f:0a:a5:14:68:3b:da:5e:6d:a9:f7:24:4e:ac:ca:52:80: 45:e7:cf:2c:d5:08:52:99:c7:c1:57:c4:52:d7:e7:6c:d4:e0: ef:e6:4d:ae:c6:e5:2c:c8:9f:b7:5c:16:3e:2b:1e:3a:19:12: 8e:6a:06:6a:16:9e:95:6b:13:fd:7f:30:01:d1:41:1a:e4:cd: d3:23:22:00:6f:65:66:5a:f5:7d:33:f9:60:76:a9:36:cd:54: e0:6e:9e:b8:42:00:9f:78:ae:6c:d2:d3:de:a9:87:f5:bd:30: 9f:a1:dd:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNkzJj6eo4xsWA5oP3nWWRn+KhkAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjM1MjQ1WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWEwYTQ0NDBlMDE1NDI2ZTU0YjE4MmE2ZTIyZjFlMmQ3 NjAyMTc2YThkMDk2YWM0MzY0MjY1YjYyYjc5MjcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsYIIJx6bhQ+/dVXkjBYcvUVGnQv6VxnE2CbMKsRhUVX0E aZbwUxqmhb8Cjw2G6dtD8xPtrENFFho8rV6g9bbFmt+ibY3ol9UG7tPOm2JcDgN3 NFKpCT+IwoIBDw2tADWApxxUFsXwHklPJPGEBC0dEVPZNhS5LTqOJ73cocFVZRfl gi2ZxW6jsVWl5stIvHaqRWEpHo9wVsBxAKkD3+wtog28mrRdK40PO0GlopBKliZg oODx/Qi04u48PMXXYWM6/jM2g9blJFXiBgaoujVmvu23LuJU8cn1ReDIGbxUlvlq 3a2AXh+fbcSbqrQZDzpinp6wRIt6yqJ4BCX+bqABAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8CFDJ95p5fq8LeTXHU28MrUwIbIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2MWE2NGI4LTE4OTYtNGU1ZC1iZmNkLTAwOGJjOTQwNDVmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2xcAwDQYJKoZIhvcNAQELBQADggEBACYB3hPbfocJcduMG0TYqTVzRTV0 G5Y6EftF0/kWrBWYYHoNFgMQfuL/z1jA5t3lTA7lsYacNci3XHaeCa2SO9KNOFw+ PbCslwjDw8ccna1FmpNFtxCMA8EoGuyjMJyJLWSoWCf59BYTYehXwKF99/wiqxk+ ia+KMlf6n+WkBg4U7VGm5q6yIbyVTrZrnFb9AkhfCqUUaDvaXm2p9yROrMpSgEXn zyzVCFKZx8FXxFLX52zU4O/mTa7G5SzIn7dcFj4rHjoZEo5qBmoWnpVrE/1/MAHR QRrkzdMjIgBvZWZa9X0z+WB2qTbNVOBunrhCAJ94rmzS096ph/W9MJ+h3Wo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:48:16 2025 by rpki-client