$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/029ab84d-50ea-4ff9-8651-db16a23ba923.roa File: 029ab84d-50ea-4ff9-8651-db16a23ba923.roa (raw, json) Hash identifier: bFJ56mFEYFve3Hl2AwEs9BnWuygghjsToNWb7IWLhmg= Subject key identifier: 8D:BF:C9:DF:9E:C6:CF:75:72:04:CA:86:5C:DB:3F:8F:E4:F3:42:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 403C4B35FD6B6055813002A263F4416A7AA550CF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/029ab84d-50ea-4ff9-8651-db16a23ba923.roa Signing time: Fri 19 Sep 2025 00:57:47 +0000 ROA not before: Fri 19 Sep 2025 00:57:47 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3c:4b:35:fd:6b:60:55:81:30:02:a2:63:f4:41:6a:7a:a5:50:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:57:47 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=bc3398abb801217729bb8e38a95e67e66894690ecc7a64397b6a81294eaf60b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:27:87:4c:2c:89:7e:51:d5:f5:86:7f:f8: 97:ef:31:1d:b0:25:2f:fc:b4:ff:80:6e:f0:5f:99: 4b:98:e7:98:c3:63:5a:46:dc:a0:63:b8:01:fa:35: e6:32:1e:5d:8d:98:6d:97:d8:31:1d:98:bb:c6:06: 80:a8:a3:20:41:6d:18:3a:d9:96:ad:9c:eb:90:2a: da:37:75:58:7f:b2:08:80:59:0c:9a:b1:b2:b9:ee: a3:65:30:0f:27:d8:b1:36:6d:5e:05:60:ce:55:c7: 53:3c:43:26:cc:2a:36:0e:e6:d6:77:ad:ef:62:b7: 05:7e:94:50:fc:1c:1e:c9:78:08:91:3a:37:cc:03: 51:d6:c4:f6:bf:f2:22:d2:bc:4a:8c:57:a7:26:63: e1:79:14:3e:36:bb:42:23:fb:a2:fe:cf:71:c0:5a: f2:95:26:ea:60:e0:2a:37:3d:aa:15:24:5d:38:fa: 5f:82:53:93:32:41:1a:1f:f3:67:6e:0d:d2:86:65: 2a:eb:27:83:3c:51:ac:4e:be:a1:29:70:cb:99:ba: 7e:40:3c:65:8a:13:cf:fd:ac:97:31:ad:e6:46:b5: c6:0a:9b:c8:fd:c6:c8:e2:8f:37:94:a9:09:60:a1: 83:e4:5d:3c:bb:c2:a9:0b:88:70:58:7d:76:29:6c: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:C9:DF:9E:C6:CF:75:72:04:CA:86:5C:DB:3F:8F:E4:F3:42:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/029ab84d-50ea-4ff9-8651-db16a23ba923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.238.0/24 Signature Algorithm: sha256WithRSAEncryption 06:d9:ea:62:cf:45:66:99:f8:e5:a4:8a:26:47:9d:b5:ad:50: ac:32:28:12:e3:5d:23:58:f8:99:71:2a:ab:57:51:3d:1a:5f: 8b:e4:b2:c1:d4:4f:40:4d:51:a8:50:e4:ec:63:bd:6c:a5:a0: 64:81:89:98:4d:b5:d7:da:9c:95:bd:17:ab:1d:b5:9a:5a:b1: aa:fc:8f:39:82:00:85:ca:cd:4b:04:73:95:36:2b:3a:e9:48: 60:ca:33:bf:df:df:e9:8d:c2:aa:69:8b:2f:ce:59:a5:c9:c2: c6:68:ba:07:18:33:52:b4:08:1f:9f:20:dd:7c:f3:a1:1f:ff: 94:80:ce:22:57:26:6d:3b:bd:c7:da:a8:3a:cf:f2:3f:cf:71: 0c:34:54:f7:47:65:6d:2e:68:c4:ea:41:af:10:d1:82:69:db: ea:a2:62:1f:53:b9:0f:9d:82:dc:3b:e5:89:f4:4c:e7:27:2b: ce:0a:aa:84:f1:09:f8:42:66:32:96:a6:7f:42:38:f1:9c:b0: 30:fc:d4:b8:95:06:c6:22:cb:96:08:f4:36:9e:9a:23:91:be: f5:ae:b3:97:95:d1:75:a5:37:b2:08:d6:d6:b4:52:03:a5:4c: 2b:57:7c:4e:9b:be:1d:08:0c:e2:39:5a:c5:e2:ce:31:ab:cb: 6b:b0:bb:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQDxLNf1rYFWBMAKiY/RBanqlUM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA1NzQ3WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzMzOThhYmI4MDEyMTc3MjliYjhlMzhhOTVlNjdlNjY4 OTQ2OTBlY2M3YTY0Mzk3YjZhODEyOTRlYWY2MGI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCojSeHTCyJflHV9YZ/+JfvMR2wJS/8tP+AbvBfmUuY55jD Y1pG3KBjuAH6NeYyHl2NmG2X2DEdmLvGBoCooyBBbRg62ZatnOuQKto3dVh/sgiA WQyasbK57qNlMA8n2LE2bV4FYM5Vx1M8QybMKjYO5tZ3re9itwV+lFD8HB7JeAiR OjfMA1HWxPa/8iLSvEqMV6cmY+F5FD42u0Ij+6L+z3HAWvKVJupg4Co3PaoVJF04 +l+CU5MyQRof82duDdKGZSrrJ4M8UaxOvqEpcMuZun5APGWKE8/9rJcxreZGtcYK m8j9xsjijzeUqQlgoYPkXTy7wqkLiHBYfXYpbGXpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjb/J357Gz3VyBMqGXNs/j+TzQigwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyOWFiODRkLTUwZWEtNGZmOS04NjUxLWRiMTZhMjNiYTkyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fO4wDQYJKoZIhvcNAQELBQADggEBAAbZ6mLPRWaZ+OWkiiZHnbWtUKwy KBLjXSNY+JlxKqtXUT0aX4vkssHUT0BNUahQ5OxjvWyloGSBiZhNtdfanJW9F6sd tZpasar8jzmCAIXKzUsEc5U2KzrpSGDKM7/f3+mNwqppiy/OWaXJwsZougcYM1K0 CB+fIN1886Ef/5SAziJXJm07vcfaqDrP8j/PcQw0VPdHZW0uaMTqQa8Q0YJp2+qi Yh9TuQ+dgtw75Yn0TOcnK84KqoTxCfhCZjKWpn9COPGcsDD81LiVBsYiy5YI9Dae miORvvWus5eV0XWlN7II1ta0UgOlTCtXfE6bvh0IDOI5WsXizjGry2uwu+g= -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:31 2025 by rpki-client