$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa File: 249123d0-09f2-4884-9c7d-31b33b073069.roa (raw, json) Hash identifier: i/YBGLOnOWvvhZAkX74RlGgY8t395SORXfrdKISE4I8= Subject key identifier: 43:D9:A5:B3:CD:F6:C3:A0:4C:72:D8:36:B6:D6:A4:EB:13:19:12:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 384E7D29157610EC62312CB195A9B0491E8A829F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa Signing time: Fri 19 Sep 2025 17:11:15 +0000 ROA not before: Fri 19 Sep 2025 17:11:15 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.252.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4e:7d:29:15:76:10:ec:62:31:2c:b1:95:a9:b0:49:1e:8a:82:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 17:11:15 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=78d3655dfa3990b9e7cdc4e6add00945b63793eabc88f9524c170c688656cc17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:dc:1a:bc:ce:b4:c1:2b:a1:4b:d4:e6:1a: cd:e6:e5:bc:a0:de:f7:c1:39:71:3e:bd:a5:34:99: f4:a5:b5:4d:7e:d0:61:62:98:bc:85:c5:28:a2:2b: fe:82:16:8d:46:13:5b:6e:f1:b6:9c:e2:d7:54:62: 10:3a:f4:7c:7a:6a:4b:fb:ef:4a:1b:09:2a:bf:90: ae:11:21:7a:6e:72:f8:d2:43:c0:90:a9:80:26:4a: 0f:93:b5:d0:04:96:2c:0f:69:6d:32:a2:c4:5c:3f: f3:11:75:e9:09:d7:19:43:31:fd:d6:8a:f7:07:4a: dd:19:54:5d:34:ec:a6:4f:ae:32:55:cb:96:f6:e3: ce:78:0e:e5:39:ba:f0:7c:c4:9c:cb:3f:22:a3:f6: 7c:9e:a4:d8:0d:3d:df:af:61:01:26:95:4f:a6:9e: 66:f9:c8:90:7f:73:f8:54:db:34:ac:e1:44:c3:76: 85:a6:0b:f4:52:8f:93:63:dd:7d:08:f8:8d:4c:8a: 1b:0f:86:eb:a6:e4:2a:12:86:ca:b5:59:77:46:e8: b6:b0:c5:ce:2b:1a:bd:06:b6:15:4c:4c:78:94:8d: 5b:0f:14:ed:64:29:8d:cc:91:75:92:83:76:1b:b8: 6a:82:f0:95:ae:78:9f:14:cc:c6:74:2e:cf:06:ce: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:A5:B3:CD:F6:C3:A0:4C:72:D8:36:B6:D6:A4:EB:13:19:12:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.252.88.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:9f:53:06:93:41:a5:01:5b:78:96:c5:bc:6d:3d:17:53:68: a9:27:2a:ba:fc:7a:d5:99:fb:e3:f8:3d:f5:11:f3:d3:54:39: 04:0c:ca:3a:62:8b:ba:54:74:64:be:4f:19:79:dd:11:88:41: c4:1b:3a:46:6e:42:d5:1f:ad:bb:55:c5:c9:07:07:15:bb:a5: ae:7b:44:9a:2a:e3:b6:24:72:1b:8f:86:4c:5e:52:af:64:02: c6:d2:06:56:14:d9:79:64:22:32:55:eb:d8:3f:a7:39:46:95: ae:f3:87:00:51:1f:46:67:79:a2:a7:c0:0d:09:dc:3c:fa:4e: f5:8e:0a:9d:2c:1d:3c:8c:31:f6:fd:4d:00:8e:cb:2e:76:43: b2:9c:28:75:e8:15:bd:b4:ac:0c:b5:24:31:72:6d:f6:a9:eb: 5c:40:4d:6d:f6:ee:08:32:42:af:d6:42:a7:12:7f:41:32:b7: 42:e0:a1:91:39:02:dd:7b:85:cb:cd:fb:47:78:4c:aa:2e:ae: e8:47:01:42:55:a1:8f:76:50:25:df:b1:75:ae:99:93:84:24: 4e:03:eb:96:3a:ef:30:fd:2c:62:2d:6a:7a:38:e5:42:27:9f: bb:4e:c8:63:5c:34:6c:12:2d:15:0c:03:33:77:c7:7d:5d:6e: 65:46:d7:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOE59KRV2EOxiMSyxlamwSR6Kgp8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MTcxMTE1WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGQzNjU1ZGZhMzk5MGI5ZTdjZGM0ZTZhZGQwMDk0NWI2 Mzc5M2VhYmM4OGY5NTI0YzE3MGM2ODg2NTZjYzE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjQtwavM60wSuhS9TmGs3m5byg3vfBOXE+vaU0mfSltU1+ 0GFimLyFxSiiK/6CFo1GE1tu8bac4tdUYhA69Hx6akv770obCSq/kK4RIXpucvjS Q8CQqYAmSg+TtdAEliwPaW0yosRcP/MRdekJ1xlDMf3WivcHSt0ZVF007KZPrjJV y5b24854DuU5uvB8xJzLPyKj9nyepNgNPd+vYQEmlU+mnmb5yJB/c/hU2zSs4UTD doWmC/RSj5Nj3X0I+I1MihsPhuum5CoShsq1WXdG6Lawxc4rGr0GthVMTHiUjVsP FO1kKY3MkXWSg3YbuGqC8JWueJ8UzMZ0Ls8GzsA3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ9mls832w6BMctg2ttak6xMZEmUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0OTEyM2QwLTA5ZjItNDg4NC05YzdkLTMxYjMzYjA3MzA2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2/FgwDQYJKoZIhvcNAQELBQADggEBACufUwaTQaUBW3iWxbxtPRdTaKkn Krr8etWZ++P4PfUR89NUOQQMyjpii7pUdGS+Txl53RGIQcQbOkZuQtUfrbtVxckH BxW7pa57RJoq47YkchuPhkxeUq9kAsbSBlYU2XlkIjJV69g/pzlGla7zhwBRH0Zn eaKnwA0J3Dz6TvWOCp0sHTyMMfb9TQCOyy52Q7KcKHXoFb20rAy1JDFybfap61xA TW327ggyQq/WQqcSf0Eyt0LgoZE5At17hcvN+0d4TKouruhHAUJVoY92UCXfsXWu mZOEJE4D65Y67zD9LGItano45UInn7tOyGNcNGwSLRUMAzN3x31dbmVG16Y= -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:42 2025 by rpki-client