$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa File: a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa (raw, json) Hash identifier: T23AV8u/ZFX895C9P/s6CYLnlj+L6SpmrkJZ+ZHCS5U= Subject key identifier: 55:9E:7A:E1:8E:81:48:11:F7:29:41:58:CF:29:2D:32:4F:33:27:AF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4CBC7EE64EDDB9750277B4F9077D377F2C3C5B0F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa Signing time: Tue 21 Oct 2025 03:41:17 +0000 ROA not before: Tue 21 Oct 2025 03:41:17 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.88.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bc:7e:e6:4e:dd:b9:75:02:77:b4:f9:07:7d:37:7f:2c:3c:5b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 03:41:17 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=b442bc6521032d4e266c152756b5820751cb476043346a82e02c24f3be769bae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:c0:a7:1e:71:52:4f:5c:c1:de:f6:8a:f5: 4a:e8:d1:a0:61:26:d0:e6:05:32:c1:5a:1a:8b:30: b7:ee:5f:9c:33:ec:6f:b8:eb:9b:77:d6:7a:da:63: 80:0b:7a:5f:86:92:7a:e8:f6:d1:49:09:63:bd:9e: 73:32:0b:d2:f5:32:59:88:cc:f8:0c:e1:d8:b4:e6: 0f:0a:09:93:e4:f6:18:c3:4f:f0:b6:5d:ba:aa:b8: 7d:34:1b:94:b5:b6:1b:d5:6e:2b:d8:f4:c3:6a:ca: 2b:6f:f5:00:8e:f9:21:e2:92:5a:1a:53:f7:3b:20: 92:64:6a:ef:25:04:78:bb:f4:a1:59:18:43:fe:72: d5:da:10:f9:f2:64:5a:f0:45:5f:8c:41:f3:2b:04: 42:45:d0:9a:96:13:53:79:cc:7b:e8:63:85:2a:ca: dd:a2:a0:e8:5f:2f:37:f1:02:55:96:b4:b8:e4:d8: f6:bc:6d:ca:4b:76:03:21:4a:51:88:2c:ae:1e:49: 30:c9:48:86:19:d1:3b:be:ab:89:d2:70:cd:38:7e: 3d:6d:fa:c1:44:92:c0:53:67:3b:77:a8:46:cb:f2: ba:97:ef:db:65:6c:5a:0d:91:94:eb:22:c1:ee:93: 31:72:fe:b1:bd:83:53:cd:2c:e8:1b:0f:9a:12:84: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:7A:E1:8E:81:48:11:F7:29:41:58:CF:29:2D:32:4F:33:27:AF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.88.0.0/14 Signature Algorithm: sha256WithRSAEncryption 15:a1:20:a2:35:db:29:22:11:7b:4b:78:b1:8b:d8:27:49:68: 2a:d2:64:d5:44:94:07:d8:7d:0c:b2:1a:88:a2:6b:d5:97:d2: 61:51:2b:27:2e:0d:24:97:d1:08:ad:48:00:53:93:d3:e5:30: 9a:00:66:b3:ce:8b:24:1a:d1:6a:73:5f:b7:53:70:ca:20:ed: e5:1d:5d:34:80:80:7b:55:a8:7a:61:f2:9f:95:87:c7:65:0e: 6c:1f:25:f4:d6:d0:a4:ee:a3:63:da:7b:60:2b:29:91:fc:5c: 70:2b:a2:ff:9c:eb:85:2e:03:a2:a4:39:0b:3d:67:12:73:f8: 40:e7:56:76:da:f6:b9:3e:e6:a4:7c:1b:a6:c2:e8:54:4f:e2: 35:fb:0c:ad:84:2d:17:8b:35:78:2b:f8:d7:9f:b0:cb:61:95: 46:e8:ca:48:c9:35:7d:81:2d:0e:a6:75:68:93:b5:76:45:f2: ec:03:6f:e1:f2:06:01:08:42:eb:59:bf:31:78:0a:89:30:d1: 39:b4:26:ba:2b:49:9b:36:f5:7b:14:c4:c9:b3:b3:49:2f:0d: 88:be:88:73:9a:5f:fa:a4:00:5c:14:e6:68:85:8e:5a:ca:91: 6a:56:c7:9e:91:8c:20:a8:5f:70:b2:b7:0e:31:b7:57:16:e6: 13:d6:3c:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTLx+5k7duXUCd7T5B303fyw8Ww8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDM0MTE3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDQyYmM2NTIxMDMyZDRlMjY2YzE1Mjc1NmI1ODIwNzUx Y2I0NzYwNDMzNDZhODJlMDJjMjRmM2JlNzY5YmFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBnMCnHnFST1zB3vaK9Uro0aBhJtDmBTLBWhqLMLfuX5wz 7G+465t31nraY4ALel+Gknro9tFJCWO9nnMyC9L1MlmIzPgM4di05g8KCZPk9hjD T/C2XbqquH00G5S1thvVbivY9MNqyitv9QCO+SHikloaU/c7IJJkau8lBHi79KFZ GEP+ctXaEPnyZFrwRV+MQfMrBEJF0JqWE1N5zHvoY4Uqyt2ioOhfLzfxAlWWtLjk 2Pa8bcpLdgMhSlGILK4eSTDJSIYZ0Tu+q4nScM04fj1t+sFEksBTZzt3qEbL8rqX 79tlbFoNkZTrIsHukzFy/rG9g1PNLOgbD5oShMlZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVZ564Y6BSBH3KUFYzyktMk8zJ68wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4ZjhiMTJhLThiNDktNGMxNS05Yzc0LWE2ZjY5ZTRkMDQ5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI2WDANBgkqhkiG9w0BAQsFAAOCAQEAFaEgojXbKSIRe0t4sYvYJ0loKtJk 1USUB9h9DLIaiKJr1ZfSYVErJy4NJJfRCK1IAFOT0+UwmgBms86LJBrRanNft1Nw yiDt5R1dNICAe1WoemHyn5WHx2UObB8l9NbQpO6jY9p7YCspkfxccCui/5zrhS4D oqQ5Cz1nEnP4QOdWdtr2uT7mpHwbpsLoVE/iNfsMrYQtF4s1eCv415+wy2GVRujK SMk1fYEtDqZ1aJO1dkXy7ANv4fIGAQhC61m/MXgKiTDRObQmuitJmzb1exTEybOz SS8NiL6Ic5pf+qQAXBTmaIWOWsqRalbHnpGMIKhfcLK3DjG3VxbmE9Y8mw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:09 2025 by rpki-client