$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53965798-8680-4c5d-a73f-7be557f65194.roa File: 53965798-8680-4c5d-a73f-7be557f65194.roa (raw, json) Hash identifier: hPefOTxsPyB8ZTWs6ntuZxbyL07nmz/lOwc0b/8WTgA= Subject key identifier: E6:76:F1:AF:22:4F:78:F6:72:55:50:06:99:49:37:9C:13:10:48:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3651F70AAA23249D0A5889156CD4F1B819A47FB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53965798-8680-4c5d-a73f-7be557f65194.roa Signing time: Sat 18 Oct 2025 06:03:17 +0000 ROA not before: Sat 18 Oct 2025 06:03:17 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:51:f7:0a:aa:23:24:9d:0a:58:89:15:6c:d4:f1:b8:19:a4:7f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:03:17 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=47447a9619e8c4740c19344e328b9a9206b445bec9858d9d3745e6a771c876c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:03:21:05:81:93:5a:a5:c8:7f:1d:e1:85: 0c:8c:bd:9d:92:50:02:26:88:08:1b:2b:77:12:5f: 22:3d:39:e0:a6:9f:40:85:14:49:76:e6:6b:6a:19: 90:16:2b:7b:c4:73:a5:2e:26:76:93:d6:49:9e:7c: 67:ac:99:50:30:31:68:e7:93:71:fd:7f:f8:0a:3b: ef:eb:a5:dc:6b:7e:59:49:9c:61:82:00:59:22:e2: 7c:b9:11:2f:01:e1:2e:14:a8:ff:e5:fc:f3:e3:27: 52:d4:d5:58:6b:69:5a:b9:d2:29:53:f2:f5:87:82: d1:55:60:bc:c3:10:ee:e1:6a:3f:f3:b2:30:e0:29: f6:74:96:c2:23:94:c7:ea:01:fa:07:1b:de:76:e1: eb:69:6e:41:c5:5c:d2:de:c5:a8:4f:67:d0:e0:14: 9f:76:94:f2:49:7d:a5:c8:f5:dc:90:97:d3:08:32: fe:bf:6f:81:02:ee:f0:d2:46:d8:00:4a:2e:32:d2: b0:34:1c:f4:9a:9e:77:f6:ea:99:40:cf:ae:c4:04: 14:4e:3f:0e:26:68:9f:90:d3:1c:d8:c1:06:d5:b5: 82:49:bd:bb:39:b3:0f:bb:26:05:e3:41:f2:ca:fb: b9:9e:34:c2:7e:d1:e5:cd:ae:89:33:99:36:3a:47: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:F1:AF:22:4F:78:F6:72:55:50:06:99:49:37:9C:13:10:48:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53965798-8680-4c5d-a73f-7be557f65194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.26.0/23 Signature Algorithm: sha256WithRSAEncryption ad:41:12:f9:10:55:ab:98:17:78:48:85:e7:16:12:26:38:8d: db:3a:d6:cf:89:6b:0c:ed:dc:d7:14:ab:c0:b5:27:de:77:af: d2:57:94:78:3e:b7:2a:a1:11:1b:d4:d0:2c:85:de:74:f7:4d: f2:56:62:34:81:5c:3d:20:be:f1:d6:ff:45:74:b8:c0:4d:5e: 02:c7:02:0e:1d:24:c3:09:7e:40:9b:76:87:b0:7f:43:b2:35: cf:b3:a0:13:d8:bb:2c:d4:55:df:60:a9:be:91:61:45:ff:48: 36:74:36:cc:ca:8e:87:1b:85:de:54:c7:e3:1a:7e:00:e7:64: 70:fc:30:e5:78:40:26:d3:0e:15:7f:13:8a:a8:48:58:02:c7: 18:33:1b:4d:cd:62:a2:a2:93:30:d8:bf:e8:6d:78:67:b4:02: 5b:27:ac:f9:4d:b2:a3:6a:7e:eb:f3:de:7d:ac:59:49:41:be: da:42:b8:89:3e:14:23:f5:df:16:be:92:8b:ff:fc:db:95:fa: 1f:2a:8e:6d:79:b0:dc:91:04:8a:a4:f6:f3:bc:35:29:8c:98: 0b:05:e9:d2:bb:aa:4f:03:2d:14:98:c5:05:f4:66:0d:21:aa: 34:5d:dd:50:a2:ac:ba:de:25:ec:1f:3d:ff:70:70:c7:77:fd: ea:a8:09:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNlH3CqojJJ0KWIkVbNTxuBmkf7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYwMzE3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzQ0N2E5NjE5ZThjNDc0MGMxOTM0NGUzMjhiOWE5MjA2 YjQ0NWJlYzk4NThkOWQzNzQ1ZTZhNzcxYzg3NmMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8awMhBYGTWqXIfx3hhQyMvZ2SUAImiAgbK3cSXyI9OeCm n0CFFEl25mtqGZAWK3vEc6UuJnaT1kmefGesmVAwMWjnk3H9f/gKO+/rpdxrfllJ nGGCAFki4ny5ES8B4S4UqP/l/PPjJ1LU1VhraVq50ilT8vWHgtFVYLzDEO7haj/z sjDgKfZ0lsIjlMfqAfoHG9524etpbkHFXNLexahPZ9DgFJ92lPJJfaXI9dyQl9MI Mv6/b4EC7vDSRtgASi4y0rA0HPSannf26plAz67EBBROPw4maJ+Q0xzYwQbVtYJJ vbs5sw+7JgXjQfLK+7meNMJ+0eXNrokzmTY6R67XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5nbxryJPePZyVVAGmUk3nBMQSFYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzOTY1Nzk4LTg2ODAtNGM1ZC1hNzNmLTdiZTU1N2Y2NTE5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wBowDQYJKoZIhvcNAQELBQADggEBAK1BEvkQVauYF3hIhecWEiY4jds6 1s+Jawzt3NcUq8C1J953r9JXlHg+tyqhERvU0CyF3nT3TfJWYjSBXD0gvvHW/0V0 uMBNXgLHAg4dJMMJfkCbdoewf0OyNc+zoBPYuyzUVd9gqb6RYUX/SDZ0NszKjocb hd5Ux+MafgDnZHD8MOV4QCbTDhV/E4qoSFgCxxgzG03NYqKikzDYv+hteGe0Alsn rPlNsqNqfuvz3n2sWUlBvtpCuIk+FCP13xa+kov//NuV+h8qjm15sNyRBIqk9vO8 NSmMmAsF6dK7qk8DLRSYxQX0Zg0hqjRd3VCirLreJewfPf9wcMd3/eqoCQY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:24 2025 by rpki-client