$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29418227-338d-46fb-80a6-859b028a49ba.roa File: 29418227-338d-46fb-80a6-859b028a49ba.roa (raw, json) Hash identifier: qS/iJaTNfL3UFb8LPY/aP0DWCblueD5wUw5zaQ3ZT20= Subject key identifier: 8A:C9:AD:19:82:03:D4:3D:93:23:90:49:F9:56:F9:59:18:91:80:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 07802E7DADAA7496A34CD2CC5F077A4CAB3F4AF0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29418227-338d-46fb-80a6-859b028a49ba.roa Signing time: Fri 17 Oct 2025 23:51:23 +0000 ROA not before: Fri 17 Oct 2025 23:51:23 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:80:2e:7d:ad:aa:74:96:a3:4c:d2:cc:5f:07:7a:4c:ab:3f:4a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:51:23 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=6742490fbc9c2e9320a910b56854238445e7ddad818e637d2c7568a2a26ce71c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:7b:92:68:62:6c:cb:09:b7:68:52:0c:b1: d5:b5:9d:2d:89:48:ca:db:3b:2f:71:07:bc:48:8c: ce:4a:fb:c4:6a:1a:c4:59:84:08:bd:70:ec:08:d2: 1b:5e:c1:74:dc:02:ec:c9:b5:61:a3:ef:29:85:33: eb:77:3a:52:85:0e:6d:6f:90:28:3e:6d:6b:e6:df: 2c:4b:a3:bf:58:87:57:02:5b:cf:64:d4:4f:b2:ba: 94:7d:84:48:25:78:9a:17:52:f5:c4:db:fa:ee:94: c4:ef:8e:06:70:4b:a1:22:39:fc:11:75:cf:af:e8: 8c:25:99:f9:4e:0d:4d:f0:69:21:65:6f:bc:69:b4: 67:4e:f8:64:66:32:26:9b:96:93:8d:04:8d:e1:72: 07:93:5d:20:4b:c9:cb:7f:20:df:ec:d8:83:49:59: c2:84:cf:81:a8:98:9a:25:56:13:ab:b1:e8:db:52: 89:b0:c3:43:82:35:34:cc:f9:d0:ee:d3:84:8a:59: 4d:ee:7e:4f:ba:1a:dd:2c:22:50:4f:39:c2:36:63: 8d:df:c9:d8:73:23:c4:24:29:6c:85:f1:28:e4:50: d9:58:66:07:e1:9c:6f:13:44:eb:74:93:aa:28:c7: 2e:25:41:76:fa:15:c8:d0:9a:35:e4:86:1d:ed:44: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:AD:19:82:03:D4:3D:93:23:90:49:F9:56:F9:59:18:91:80:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29418227-338d-46fb-80a6-859b028a49ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.157.0/24 Signature Algorithm: sha256WithRSAEncryption 98:2c:86:a4:0e:97:61:e1:dc:1d:ec:39:fe:f0:64:95:8b:a0: 12:11:81:61:25:e2:38:b8:f4:2c:e8:6d:d5:32:35:86:36:26: ac:0e:30:01:c3:98:f7:d9:23:3b:9f:ce:cf:d0:0a:ed:fa:aa: 6e:18:ad:78:a5:35:1a:72:a7:11:5f:77:ca:43:8e:35:71:16: 13:01:f1:c0:95:48:0f:d1:ff:a7:a2:f0:db:d5:2a:50:f3:cd: b6:ab:70:e5:65:db:62:cf:74:49:2a:31:1b:b8:34:a0:f2:8a: c6:84:e1:73:04:c1:4c:78:00:7b:1f:90:8a:e8:f3:bd:1f:81: 4e:e1:e0:a9:df:2c:20:fd:51:f7:73:6e:c7:49:09:7f:f0:80: b4:a8:82:ce:ae:ee:02:b3:d6:ce:a0:cf:90:f8:bf:14:53:d9: f5:20:7d:84:9d:18:0a:b7:8e:f3:ea:76:85:91:b8:b9:1e:56: 7f:71:96:81:dc:99:52:d4:c8:0c:71:ad:f4:9e:53:41:ed:cc: fe:f0:17:c7:3c:b8:b3:7c:b9:57:3e:96:73:bd:5a:7c:a1:91: 61:23:5d:bf:cb:b4:89:34:76:27:64:da:4d:c5:0d:3f:03:55: 13:2a:0e:bd:89:18:b3:aa:d0:ed:d4:00:23:86:af:ae:86:f6: 7e:f2:3f:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB4Aufa2qdJajTNLMXwd6TKs/SvAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM1MTIzWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzQyNDkwZmJjOWMyZTkzMjBhOTEwYjU2ODU0MjM4NDQ1 ZTdkZGFkODE4ZTYzN2QyYzc1NjhhMmEyNmNlNzFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/E3uSaGJsywm3aFIMsdW1nS2JSMrbOy9xB7xIjM5K+8Rq GsRZhAi9cOwI0htewXTcAuzJtWGj7ymFM+t3OlKFDm1vkCg+bWvm3yxLo79Yh1cC W89k1E+yupR9hEgleJoXUvXE2/rulMTvjgZwS6EiOfwRdc+v6IwlmflODU3waSFl b7xptGdO+GRmMiablpONBI3hcgeTXSBLyct/IN/s2INJWcKEz4GomJolVhOrsejb Uomww0OCNTTM+dDu04SKWU3ufk+6Gt0sIlBPOcI2Y43fydhzI8QkKWyF8SjkUNlY ZgfhnG8TROt0k6ooxy4lQXb6FcjQmjXkhh3tRBkDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUismtGYID1D2TI5BJ+Vb5WRiRgLkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5NDE4MjI3LTMzOGQtNDZmYi04MGE2LTg1OWIwMjhhNDliYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wJ0wDQYJKoZIhvcNAQELBQADggEBAJgshqQOl2Hh3B3sOf7wZJWLoBIR gWEl4ji49CzobdUyNYY2JqwOMAHDmPfZIzufzs/QCu36qm4YrXilNRpypxFfd8pD jjVxFhMB8cCVSA/R/6ei8NvVKlDzzbarcOVl22LPdEkqMRu4NKDyisaE4XMEwUx4 AHsfkIro870fgU7h4KnfLCD9UfdzbsdJCX/wgLSogs6u7gKz1s6gz5D4vxRT2fUg fYSdGAq3jvPqdoWRuLkeVn9xloHcmVLUyAxxrfSeU0HtzP7wF8c8uLN8uVc+lnO9 WnyhkWEjXb/LtIk0didk2k3FDT8DVRMqDr2JGLOq0O3UACOGr66G9n7yPyE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:23 2025 by rpki-client