$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96c6e273-5e7c-43ba-9eac-050e26507361.roa File: 96c6e273-5e7c-43ba-9eac-050e26507361.roa (raw, json) Hash identifier: Fa91MJjLY/tANMrm/KvrAFADe8S0scoo3KTcOCPxgh4= Subject key identifier: D4:41:C6:10:67:50:F0:86:25:09:8F:26:82:DF:C6:4D:13:6F:F2:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2528C23A8C2F45F41EE1B0014BF7653A9790C70D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96c6e273-5e7c-43ba-9eac-050e26507361.roa Signing time: Tue 21 Oct 2025 08:51:38 +0000 ROA not before: Tue 21 Oct 2025 08:51:38 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:c2:3a:8c:2f:45:f4:1e:e1:b0:01:4b:f7:65:3a:97:90:c7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 08:51:38 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=25a3abd3cfe786f094135a04d88e776039bec35003d92b90775a4d27febf6ad5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:8d:9c:2f:83:e3:0c:ce:c7:5b:0b:ab:f7: ad:73:a4:a7:a5:8d:3d:f3:82:72:d3:be:0d:b6:86: c7:b7:5b:cf:a1:cc:4b:4a:00:08:11:96:a5:ee:74: 18:dc:4e:e5:a6:ef:e8:59:7d:98:01:bb:ea:c7:6f: 5a:e0:cd:ea:1e:82:43:b3:ef:40:73:36:4b:1b:a4: 53:16:6f:d0:88:79:06:05:bb:36:f8:7a:61:bb:91: 68:0a:ba:be:f5:5f:f9:0a:97:ae:e7:0d:59:18:06: 50:64:51:86:32:53:2b:a2:c7:d1:3e:8d:d6:15:ce: cc:f3:64:c5:e6:56:5b:d7:d6:44:6e:a4:69:11:ad: 31:27:9e:b1:b9:be:30:a8:0c:ce:3e:1d:34:ae:cb: 06:f0:14:d5:07:e6:e7:c5:7f:70:06:ca:37:b5:bd: 2a:56:05:ca:b2:7c:f3:25:4f:e8:35:c8:33:9d:05: bf:bc:01:9d:93:ba:7a:05:63:b1:7d:79:e5:e1:8d: 22:76:12:d5:1b:b5:a8:88:4d:87:3a:e7:d3:1e:48: 03:42:16:01:00:8a:72:4a:68:5e:aa:0b:21:59:99: 5b:d2:63:d3:be:ad:02:17:0d:9b:4e:9b:5e:98:9f: 7f:d6:b7:06:5d:24:1d:58:41:c6:d6:c8:27:bc:9a: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:41:C6:10:67:50:F0:86:25:09:8F:26:82:DF:C6:4D:13:6F:F2:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96c6e273-5e7c-43ba-9eac-050e26507361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.66.120.0/21 Signature Algorithm: sha256WithRSAEncryption 86:11:90:c7:d1:6b:a7:57:60:b2:f5:06:20:48:7c:3e:15:e3: e0:ce:46:33:a6:af:bb:ab:d9:6a:96:a4:95:3b:25:e7:4d:a9: 18:46:8c:93:88:cc:be:f1:90:df:05:ba:e7:37:29:86:45:bd: 52:f5:41:fa:07:24:2f:91:20:18:50:ca:51:0a:18:f5:5c:3f: c8:68:32:c2:bb:03:70:ee:62:ac:96:fc:87:96:b6:19:b0:49: 0c:de:35:d7:8e:4a:7a:37:b7:7a:19:ea:5b:03:49:f5:8a:bd: 61:d5:dc:85:0f:e3:22:75:10:a3:02:6d:f2:f7:f3:c0:52:64: a2:56:47:ef:6b:de:29:01:39:8f:29:61:b7:d3:3e:a5:59:8a: 44:44:b2:03:b6:e4:c9:69:3c:f5:04:b2:ec:1c:6e:cd:a1:6f: b0:a7:39:1c:00:63:33:43:8a:68:2a:b9:62:f6:2a:ba:36:2f: 32:96:50:dd:aa:fb:b9:a0:ee:5d:dd:21:81:78:06:21:88:b1: 60:4a:09:81:b1:a1:44:ce:b1:db:c0:00:e2:97:ec:59:07:0e: a8:3e:b3:e1:63:39:ad:51:dd:bb:43:f5:37:d0:07:42:82:5b: 48:ae:bc:ec:96:db:9b:4c:c9:17:99:1b:2d:37:33:98:b0:c0: 0a:8d:7d:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJSjCOowvRfQe4bABS/dlOpeQxw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDg1MTM4WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWEzYWJkM2NmZTc4NmYwOTQxMzVhMDRkODhlNzc2MDM5 YmVjMzUwMDNkOTJiOTA3NzVhNGQyN2ZlYmY2YWQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCldo2cL4PjDM7HWwur961zpKeljT3zgnLTvg22hse3W8+h zEtKAAgRlqXudBjcTuWm7+hZfZgBu+rHb1rgzeoegkOz70BzNksbpFMWb9CIeQYF uzb4emG7kWgKur71X/kKl67nDVkYBlBkUYYyUyuix9E+jdYVzszzZMXmVlvX1kRu pGkRrTEnnrG5vjCoDM4+HTSuywbwFNUH5ufFf3AGyje1vSpWBcqyfPMlT+g1yDOd Bb+8AZ2TunoFY7F9eeXhjSJ2EtUbtaiITYc659MeSANCFgEAinJKaF6qCyFZmVvS Y9O+rQIXDZtOm16Yn3/WtwZdJB1YQcbWyCe8mpXnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1EHGEGdQ8IYlCY8mgt/GTRNv8uIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2YzZlMjczLTVlN2MtNDNiYS05ZWFjLTA1MGUyNjUwNzM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2QngwDQYJKoZIhvcNAQELBQADggEBAIYRkMfRa6dXYLL1BiBIfD4V4+DO RjOmr7ur2WqWpJU7JedNqRhGjJOIzL7xkN8Fuuc3KYZFvVL1QfoHJC+RIBhQylEK GPVcP8hoMsK7A3DuYqyW/IeWthmwSQzeNdeOSno3t3oZ6lsDSfWKvWHV3IUP4yJ1 EKMCbfL388BSZKJWR+9r3ikBOY8pYbfTPqVZikREsgO25MlpPPUEsuwcbs2hb7Cn ORwAYzNDimgquWL2Kro2LzKWUN2q+7mg7l3dIYF4BiGIsWBKCYGxoUTOsdvAAOKX 7FkHDqg+s+FjOa1R3btD9TfQB0KCW0iuvOyW25tMyReZGy03M5iwwAqNfXU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:52:02 2025 by rpki-client