$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa File: 29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa (raw, json) Hash identifier: GPn0cWImJl+LAGYdS7w5mPNlLTCCpS7F/v7UY2lg1Vc= Subject key identifier: 8E:D0:AB:70:5A:97:06:D2:53:7A:6A:CD:6E:2A:2F:5C:BA:45:46:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 05828EF76DCFAF444DFC134F06B90AEF75BAAE47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa Signing time: Fri 03 Oct 2025 15:09:07 +0000 ROA not before: Fri 03 Oct 2025 15:09:07 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:82:8e:f7:6d:cf:af:44:4d:fc:13:4f:06:b9:0a:ef:75:ba:ae:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 3 15:09:07 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=19d85e344af0b909525f30d47a4fa92bf98bd6e9bb11efc332330230465e0597, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:09:c9:f4:b9:72:94:81:25:2b:75:08:8c: 91:21:7e:22:f5:07:c3:63:8c:ec:8e:2f:a6:39:ca: fa:62:02:c2:d4:d2:d0:70:95:3a:c4:7d:1a:04:39: 24:08:66:d6:35:ee:8f:96:f4:14:37:f9:ad:73:21: e1:c6:68:4a:7a:b7:6c:b6:12:db:b8:e4:51:8a:64: fc:f0:19:fa:8e:d3:94:18:83:c2:10:f9:60:ee:a7: 36:a9:d3:bb:e6:f4:5f:e5:1c:75:fe:6a:cc:f5:86: b7:d3:b1:88:1b:81:07:b5:a8:09:0b:b3:7c:65:2c: 72:f9:10:53:20:18:49:af:88:ad:78:b1:06:12:97: a1:b2:e0:67:6b:fb:9b:79:9a:1c:20:fc:1b:8c:b7: 3b:32:61:c8:8a:20:f4:b5:97:68:48:39:7e:96:e7: ea:7e:be:0e:f7:57:5e:cf:2a:7b:0c:44:6a:60:8d: 47:53:53:63:5c:0b:99:d0:18:a9:50:ca:03:75:ad: ea:6a:6d:1d:5f:75:fb:ab:ba:72:78:f3:88:99:88: 9d:d0:ca:71:12:62:84:e0:af:76:f4:c3:e1:e8:27: b8:dd:d2:c0:ab:61:22:44:66:ec:ed:05:46:d6:e3: 99:e9:db:52:38:0a:76:a6:2b:30:4b:e1:bf:46:9a: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D0:AB:70:5A:97:06:D2:53:7A:6A:CD:6E:2A:2F:5C:BA:45:46:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.65.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c2:76:cf:c1:83:f1:9b:b1:ac:36:06:6a:c6:56:0b:49:66: 37:a7:35:1f:a5:19:ee:84:16:55:0b:71:04:d6:d3:9c:ae:84: 29:25:e7:e5:5b:b1:b9:a3:16:41:ff:93:be:b4:73:f3:aa:d4: 13:e7:73:ff:bf:01:5c:b6:dd:38:55:e8:d0:d4:35:eb:67:55: a4:be:4b:96:06:9a:0d:44:67:ec:cf:3a:45:ac:e3:57:02:63: a0:5c:5f:60:47:92:a6:01:5e:b9:f8:0a:0c:48:8a:a9:55:9e: 0d:aa:1e:2e:69:fe:0e:97:83:a7:70:7d:d4:a7:2e:40:9a:6a: 54:52:e6:12:b7:85:56:ce:c5:3b:bf:6a:50:e8:74:a0:91:83: cf:48:5c:1a:0d:4b:36:e1:aa:8b:92:3f:50:eb:33:f9:05:bf: 6c:b6:f9:33:68:8a:5e:6e:f2:63:38:d4:38:73:52:8f:0e:af: f8:5e:47:63:23:4b:38:28:d4:89:00:71:d5:76:be:98:7a:1b: 8a:d6:ff:d9:f0:da:c8:01:58:35:06:be:1a:a8:35:e6:18:3d: f2:4d:f6:4d:bb:ed:7a:a5:13:05:05:6e:6e:58:f9:8e:c8:c7: e0:38:3a:d4:13:62:1a:96:00:df:fd:26:e5:ae:b6:40:d3:f0: 93:30:51:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBYKO923Pr0RN/BNPBrkK73W6rkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDAzMTUwOTA3WhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWQ4NWUzNDRhZjBiOTA5NTI1ZjMwZDQ3YTRmYTkyYmY5 OGJkNmU5YmIxMWVmYzMzMjMzMDIzMDQ2NWUwNTk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1dQnJ9LlylIElK3UIjJEhfiL1B8NjjOyOL6Y5yvpiAsLU 0tBwlTrEfRoEOSQIZtY17o+W9BQ3+a1zIeHGaEp6t2y2Etu45FGKZPzwGfqO05QY g8IQ+WDupzap07vm9F/lHHX+asz1hrfTsYgbgQe1qAkLs3xlLHL5EFMgGEmviK14 sQYSl6Gy4Gdr+5t5mhwg/BuMtzsyYciKIPS1l2hIOX6W5+p+vg73V17PKnsMRGpg jUdTU2NcC5nQGKlQygN1repqbR1fdfurunJ484iZiJ3QynESYoTgr3b0w+HoJ7jd 0sCrYSJEZuztBUbW45np21I4CnamKzBL4b9GmnDHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjtCrcFqXBtJTemrNbiovXLpFRh4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5ZTRiNWY1LTI3ZDYtNGM4YS1hM2MzLTQwNDA4MTVhYzliNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAkEwDQYJKoZIhvcNAQELBQADggEBAG/Cds/Bg/Gbsaw2BmrGVgtJZjen NR+lGe6EFlULcQTW05yuhCkl5+VbsbmjFkH/k760c/Oq1BPnc/+/AVy23ThV6NDU NetnVaS+S5YGmg1EZ+zPOkWs41cCY6BcX2BHkqYBXrn4CgxIiqlVng2qHi5p/g6X g6dwfdSnLkCaalRS5hK3hVbOxTu/alDodKCRg89IXBoNSzbhqouSP1DrM/kFv2y2 +TNoil5u8mM41DhzUo8Or/heR2MjSzgo1IkAcdV2vph6G4rW/9nw2sgBWDUGvhqo NeYYPfJN9k277XqlEwUFbm5Y+Y7Ix+A4OtQTYhqWAN/9JuWutkDT8JMwUTw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:24 2025 by rpki-client