$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d35a3feb-1207-427f-a7c2-955bed994553.roa File: d35a3feb-1207-427f-a7c2-955bed994553.roa (raw, json) Hash identifier: HpPjT3Q3+44NvboTRSwfQ/AvggeGk/16hTz0qtpIICc= Subject key identifier: FF:57:35:EA:B0:66:AA:D9:B8:E1:12:6A:B9:DF:6F:70:8E:11:8B:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0BD822ECE7528A2898606BBA09F9B67C945FE708 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d35a3feb-1207-427f-a7c2-955bed994553.roa Signing time: Thu 16 Oct 2025 19:56:57 +0000 ROA not before: Thu 16 Oct 2025 19:56:57 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.150.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d8:22:ec:e7:52:8a:28:98:60:6b:ba:09:f9:b6:7c:94:5f:e7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:56:57 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=452ebcb8a8e2ed362789f8b96ff9443c9dae3fe8895de6dd463e0843307d2a0e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:c0:66:ef:68:44:47:f4:13:76:21:45:1e: 4f:82:30:c7:68:ac:43:bf:6f:5b:12:19:d4:57:36: 4a:75:68:84:66:d6:a3:ab:33:b1:ce:46:99:7c:46: 8e:4e:a1:56:46:32:2f:30:c8:ea:28:10:46:7a:3c: 8d:38:f1:a5:54:19:ef:ab:eb:32:71:1a:79:68:b6: 10:f0:66:db:d3:2c:86:23:6a:1b:6a:77:22:2e:7e: 8d:39:6b:f6:a2:33:d8:b3:52:3f:b3:af:b3:83:d1: b4:91:7c:af:63:21:1f:66:5d:34:50:b7:48:ec:43: 85:1c:a7:7c:f9:de:29:aa:89:03:26:ed:98:b5:76: 28:02:22:93:b2:a8:bc:22:2f:8a:bb:17:69:6e:a4: 2a:5d:d9:9a:99:48:a1:26:05:50:b8:9a:79:8a:a4: 93:df:fd:95:83:48:cc:03:79:3f:5e:d6:7e:65:c2: 6a:7d:1d:8d:d6:ae:d8:1b:b7:1f:fb:41:c7:2d:ee: 2c:75:0b:b3:5d:c9:1f:71:40:0e:d3:35:17:de:15: ea:16:28:73:13:71:da:8e:7a:1f:ad:87:c0:a1:62: 47:ae:81:61:19:61:be:22:cb:29:c9:30:84:4e:30: 59:7c:6c:4c:99:12:05:c7:77:9f:75:bd:88:3e:28: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:57:35:EA:B0:66:AA:D9:B8:E1:12:6A:B9:DF:6F:70:8E:11:8B:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d35a3feb-1207-427f-a7c2-955bed994553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:4b:82:c5:1e:18:a8:a1:4b:67:2e:da:96:d1:4a:a3:2b:85: be:da:23:a6:fe:51:5e:72:bc:27:66:3b:65:b8:5e:82:21:76: db:c3:58:6c:74:09:be:9c:de:71:01:5e:c4:7b:9e:7f:0a:0c: 57:b8:f2:ac:e3:b7:b7:1e:c3:cd:fb:b4:9d:25:47:1f:b5:15: 46:a1:ae:31:8b:f9:78:26:44:4c:58:7c:16:b6:7a:a3:df:8c: 8f:d8:7b:c8:86:d2:96:e1:78:1f:40:f5:67:48:bb:fe:5e:f0: c3:24:1a:ac:d3:31:9e:ad:8b:0b:69:33:af:44:09:5d:68:fa: 9e:03:20:43:fa:1b:36:03:d6:b6:06:55:05:40:74:f5:b1:e8: 86:c6:f6:62:f4:82:04:44:c8:ed:8f:05:c5:ce:70:f1:5f:02: 13:77:10:2b:43:3d:33:5b:76:19:4e:06:5d:de:db:46:57:ba: 06:30:1a:33:87:da:ea:85:cd:9b:a6:7f:c9:dd:49:fb:d7:f8: 5e:c6:ce:e1:45:47:b5:b2:6c:3c:bb:99:02:0b:1a:5f:c2:1f: 96:e9:13:c2:66:87:dd:04:a4:b6:90:03:10:a6:59:a0:2e:b9: 91:e2:f5:4d:17:85:d2:8f:fb:72:75:a7:35:6d:1e:95:7e:8a: 22:16:24:c8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUC9gi7OdSiiiYYGu6Cfm2fJRf5wgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTk1NjU3WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTJlYmNiOGE4ZTJlZDM2Mjc4OWY4Yjk2ZmY5NDQzYzlk YWUzZmU4ODk1ZGU2ZGQ0NjNlMDg0MzMwN2QyYTBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsA8Bm72hER/QTdiFFHk+CMMdorEO/b1sSGdRXNkp1aIRm 1qOrM7HORpl8Ro5OoVZGMi8wyOooEEZ6PI048aVUGe+r6zJxGnlothDwZtvTLIYj ahtqdyIufo05a/aiM9izUj+zr7OD0bSRfK9jIR9mXTRQt0jsQ4Ucp3z53imqiQMm 7Zi1digCIpOyqLwiL4q7F2lupCpd2ZqZSKEmBVC4mnmKpJPf/ZWDSMwDeT9e1n5l wmp9HY3Wrtgbtx/7Qcct7ix1C7NdyR9xQA7TNRfeFeoWKHMTcdqOeh+th8ChYkeu gWEZYb4iyynJMIROMFl8bEyZEgXHd591vYg+KEFdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/1c16rBmqtm44RJqud9vcI4RiyEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzNWEzZmViLTEyMDctNDI3Zi1hN2MyLTk1NWJlZDk5NDU1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2ljANBgkqhkiG9w0BAQsFAAOCAQEAIUuCxR4YqKFLZy7altFKoyuFvtoj pv5RXnK8J2Y7ZbhegiF228NYbHQJvpzecQFexHuefwoMV7jyrOO3tx7Dzfu0nSVH H7UVRqGuMYv5eCZETFh8FrZ6o9+Mj9h7yIbSluF4H0D1Z0i7/l7wwyQarNMxnq2L C2kzr0QJXWj6ngMgQ/obNgPWtgZVBUB09bHohsb2YvSCBETI7Y8Fxc5w8V8CE3cQ K0M9M1t2GU4GXd7bRle6BjAaM4fa6oXNm6Z/yd1J+9f4XsbO4UVHtbJsPLuZAgsa X8IflukTwmaH3QSktpADEKZZoC65keL1TReF0o/7cnWnNW0elX6KIhYkyA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:25:49 2025 by rpki-client