$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a08e8fe1-beed-4ee2-aa19-c34f791dfd19.roa File: a08e8fe1-beed-4ee2-aa19-c34f791dfd19.roa (raw, json) Hash identifier: uBIxwFeVVdZWTP3dSig5oTp+8kSzsLjPs/5qVSO3K4I= Subject key identifier: 84:1C:CF:8A:4F:3D:A0:FA:29:22:C9:26:8A:36:A0:99:3A:01:BE:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 599B6865C8FCF3A18B35DEACA0251B553875B2BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a08e8fe1-beed-4ee2-aa19-c34f791dfd19.roa Signing time: Fri 31 Oct 2025 20:43:10 +0000 ROA not before: Fri 31 Oct 2025 20:43:10 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9b:68:65:c8:fc:f3:a1:8b:35:de:ac:a0:25:1b:55:38:75:b2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:43:10 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=06cdb25c3cb7e53a033da3bb82f7009721c19854e9a3916caeab7bfad4cb17a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:5a:e1:f8:e9:b0:eb:6c:50:b6:24:bc:26: 47:f1:4b:d3:0f:95:f4:97:bf:55:8e:2a:94:b4:69: c4:94:23:e2:9f:64:4b:7e:ae:48:cf:bd:e2:72:b9: 44:6e:af:f9:f9:69:f7:7a:23:b2:ce:9f:b6:a1:af: 99:9a:29:8b:9e:35:c9:f5:05:cd:8d:22:23:ed:0e: f6:ec:dd:60:42:cb:c5:03:9c:c8:7a:a6:e5:ba:2e: 9e:59:aa:cb:e3:c5:5b:fd:5d:3e:77:5e:a7:bc:82: fe:97:ec:2a:e4:e9:7c:2f:f1:5a:48:1c:e6:60:29: 5e:09:19:61:32:00:b7:b2:17:25:6f:18:b1:51:1c: 4d:f2:6c:12:96:4c:3d:47:9f:08:5f:9b:a2:2c:cb: 0c:37:30:fe:f1:a2:a2:fd:72:8c:e4:cb:91:40:19: 75:f9:b1:09:4d:4f:49:39:ff:52:79:21:42:32:8b: 61:70:d7:8a:d9:6a:8b:11:38:14:1c:20:e0:15:01: e2:cb:f8:e8:c0:cf:c4:dd:72:3f:f3:48:ef:14:34: b5:77:ab:17:27:f8:19:3c:33:9c:13:8f:f5:b6:72: 0a:fc:2c:66:e7:7a:5a:4c:0c:72:a0:42:57:43:e3: e1:f4:81:7e:b0:66:aa:af:e9:33:44:a2:48:83:12: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:CF:8A:4F:3D:A0:FA:29:22:C9:26:8A:36:A0:99:3A:01:BE:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a08e8fe1-beed-4ee2-aa19-c34f791dfd19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.195.0/24 Signature Algorithm: sha256WithRSAEncryption 30:db:32:61:4b:44:48:e0:90:7c:96:ab:b9:c8:d2:1c:50:75: 68:6d:29:d0:9a:8d:3d:c5:df:a3:15:8a:49:f0:ae:f8:b3:fb: 5b:50:6d:72:1e:1a:04:34:a1:85:1f:1c:58:6d:60:30:e3:a6: 6c:fe:b8:f9:b4:94:ef:79:d0:9f:b9:62:25:1f:c9:0a:8a:bd: a7:20:1e:fb:04:9c:c9:01:c4:30:84:64:a3:59:b8:9f:ca:16: e5:83:18:dd:51:12:7d:89:76:df:0d:89:03:c9:cf:e4:04:bf: 7f:8d:b4:36:48:d1:ed:e2:e2:fd:39:ac:e8:01:8d:3e:cd:d2: 57:88:01:34:00:89:11:31:15:4b:c7:9d:5c:ad:52:1a:d9:1a: 85:80:51:2d:b9:b3:96:ee:7a:4c:51:81:8b:47:92:81:e5:53: bd:37:58:93:45:3b:1d:e3:de:42:f9:a8:1f:9a:b6:a0:1b:23: aa:fb:df:4a:db:71:cc:25:5b:f1:e1:2c:e2:61:23:d1:db:8f: a8:00:f9:b4:34:bb:c4:3c:5e:f7:85:d7:a3:b8:f9:69:d8:0d: be:64:80:89:98:f8:63:ff:2c:37:0c:13:d2:bd:29:70:48:8e: 52:ce:28:c1:0f:b9:74:cd:92:4f:fa:d3:14:f0:18:22:b2:d8: cc:d6:dc:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWZtoZcj886GLNd6soCUbVTh1srswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjA0MzEwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmNkYjI1YzNjYjdlNTNhMDMzZGEzYmI4MmY3MDA5NzIx YzE5ODU0ZTlhMzkxNmNhZWFiN2JmYWQ0Y2IxN2EyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI2lrh+Omw62xQtiS8JkfxS9MPlfSXv1WOKpS0acSUI+Kf ZEt+rkjPveJyuURur/n5afd6I7LOn7ahr5maKYueNcn1Bc2NIiPtDvbs3WBCy8UD nMh6puW6Lp5ZqsvjxVv9XT53Xqe8gv6X7Crk6Xwv8VpIHOZgKV4JGWEyALeyFyVv GLFRHE3ybBKWTD1Hnwhfm6Isyww3MP7xoqL9cozky5FAGXX5sQlNT0k5/1J5IUIy i2Fw14rZaosROBQcIOAVAeLL+OjAz8Tdcj/zSO8UNLV3qxcn+Bk8M5wTj/W2cgr8 LGbnelpMDHKgQldD4+H0gX6wZqqv6TNEokiDEsprAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhBzPik89oPopIskmijagmToBvmkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwOGU4ZmUxLWJlZWQtNGVlMi1hYTE5LWMzNGY3OTFkZmQxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25sMwDQYJKoZIhvcNAQELBQADggEBADDbMmFLREjgkHyWq7nI0hxQdWht KdCajT3F36MViknwrviz+1tQbXIeGgQ0oYUfHFhtYDDjpmz+uPm0lO950J+5YiUf yQqKvacgHvsEnMkBxDCEZKNZuJ/KFuWDGN1REn2Jdt8NiQPJz+QEv3+NtDZI0e3i 4v05rOgBjT7N0leIATQAiRExFUvHnVytUhrZGoWAUS25s5buekxRgYtHkoHlU703 WJNFOx3j3kL5qB+atqAbI6r730rbccwlW/HhLOJhI9Hbj6gA+bQ0u8Q8XveF16O4 +WnYDb5kgImY+GP/LDcME9K9KXBIjlLOKMEPuXTNkk/60xTwGCKy2MzW3KI= -----END CERTIFICATE-----Generated at Thu Nov 6 05:55:00 2025 by rpki-client