$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29991001-528c-4d5d-8af4-7bbb0932f855.roa File: 29991001-528c-4d5d-8af4-7bbb0932f855.roa (raw, json) Hash identifier: IF9lzURNkUBCFYP/+LMyxqthYYEmRmgV9fucWBwQVJ4= Subject key identifier: E4:90:CE:F2:6A:7F:D4:66:F5:48:4C:B8:84:6F:79:A3:86:1C:88:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A54E65E6408FDA59F1921AA53B6C91657CF56AD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29991001-528c-4d5d-8af4-7bbb0932f855.roa Signing time: Wed 24 Sep 2025 22:52:03 +0000 ROA not before: Wed 24 Sep 2025 22:52:03 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:e6:5e:64:08:fd:a5:9f:19:21:aa:53:b6:c9:16:57:cf:56:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:52:03 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=bb22826668ee43ea7eef95c8f60636659f006aa67d07e29d00dd76d7e0e16864, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:e3:e9:2d:92:b2:e4:1d:02:7d:d6:16:bf: 99:fc:ad:ef:66:2e:bc:69:e7:3b:37:22:85:c6:69: 61:15:a4:d5:6b:7a:37:93:ae:8e:97:c9:85:ac:05: f0:39:ea:7d:8a:1a:3a:b9:85:6a:04:88:99:8a:8d: c7:41:c7:ea:79:3e:e5:99:30:b5:98:94:86:9b:6c: a0:fe:95:5b:f6:06:83:19:e5:cd:c1:ad:14:e3:54: ab:f7:ad:30:33:eb:35:9b:9e:94:8f:92:d8:c4:ea: 37:a0:0e:62:9b:8d:fc:dd:83:b0:82:73:25:d6:6e: 40:f9:db:c2:1d:a8:01:3d:22:1a:ed:f1:ff:47:71: 48:88:e5:43:27:a7:13:04:c0:05:b8:b1:de:81:56: 19:8d:77:fc:2b:95:e7:81:11:00:1f:84:23:28:11: 99:b9:6d:4c:ff:5d:56:13:ff:ae:d5:13:16:42:81: 64:5a:11:aa:70:44:7a:f3:5e:b9:cf:04:37:18:f2: d6:c5:8c:49:8b:cb:ee:84:ab:b5:b5:fe:ea:f2:ba: ae:21:25:86:3c:21:c3:ff:60:3b:23:70:93:35:45: 25:60:c2:cd:93:1b:bd:31:ab:ed:f1:88:7f:9b:ff: a8:d8:cd:b4:1a:41:70:c9:73:64:d0:99:e1:fa:ad: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:CE:F2:6A:7F:D4:66:F5:48:4C:B8:84:6F:79:A3:86:1C:88:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29991001-528c-4d5d-8af4-7bbb0932f855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.96.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:79:4c:60:90:09:04:bb:80:4f:ba:e9:6c:c4:bf:f3:02:c8: 7f:be:89:21:42:b4:79:5f:ea:54:95:b8:61:dc:a0:e1:34:90: 45:92:ac:3b:72:d4:5d:51:f8:d3:70:49:e4:f0:1a:8c:17:73: d0:fd:17:7b:eb:1e:7e:10:1c:8b:7e:4a:a3:c0:46:f1:a3:8c: 7e:63:b5:19:b5:a7:c2:c0:e4:ba:a6:7d:cf:14:fe:55:3d:48: ea:e1:05:d7:33:42:5f:ae:8a:ed:75:7e:9e:0c:20:01:82:39: 59:8f:28:a4:82:e8:5b:76:0a:19:e3:ef:0f:21:96:55:01:91: 63:74:23:64:c8:a1:df:a9:39:e2:d7:da:04:7f:8c:ae:1b:14: 7c:6f:23:50:d9:f7:6f:8a:e4:3d:33:2e:5c:19:41:1b:29:a3: 72:f7:eb:e6:9b:e1:45:48:57:7b:bc:f1:5b:10:a5:fa:5e:84: ec:3d:f7:44:4c:bd:ca:66:ec:f9:bc:9a:6b:c8:31:b1:41:e0: 8e:2f:47:dd:09:f5:4b:3a:11:b6:54:4c:f3:f7:93:c2:51:23: 05:fe:98:81:c8:2a:40:d9:e7:84:7c:6c:42:b4:73:d3:9f:47: 48:94:55:4d:6d:52:95:f1:84:65:7a:80:ff:57:57:ae:d4:f9: 8c:2c:fc:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKlTmXmQI/aWfGSGqU7bJFlfPVq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1MjAzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjIyODI2NjY4ZWU0M2VhN2VlZjk1YzhmNjA2MzY2NTlm MDA2YWE2N2QwN2UyOWQwMGRkNzZkN2UwZTE2ODY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtc+PpLZKy5B0CfdYWv5n8re9mLrxp5zs3IoXGaWEVpNVr ejeTro6XyYWsBfA56n2KGjq5hWoEiJmKjcdBx+p5PuWZMLWYlIabbKD+lVv2BoMZ 5c3BrRTjVKv3rTAz6zWbnpSPktjE6jegDmKbjfzdg7CCcyXWbkD528IdqAE9Ihrt 8f9HcUiI5UMnpxMEwAW4sd6BVhmNd/wrleeBEQAfhCMoEZm5bUz/XVYT/67VExZC gWRaEapwRHrzXrnPBDcY8tbFjEmLy+6Eq7W1/uryuq4hJYY8IcP/YDsjcJM1RSVg ws2TG70xq+3xiH+b/6jYzbQaQXDJc2TQmeH6rbMfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5JDO8mp/1Gb1SEy4hG95o4YciI8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5OTkxMDAxLTUyOGMtNGQ1ZC04YWY0LTdiYmIwOTMyZjg1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQWAwDQYJKoZIhvcNAQELBQADggEBABx5TGCQCQS7gE+66WzEv/MCyH++ iSFCtHlf6lSVuGHcoOE0kEWSrDty1F1R+NNwSeTwGowXc9D9F3vrHn4QHIt+SqPA RvGjjH5jtRm1p8LA5Lqmfc8U/lU9SOrhBdczQl+uiu11fp4MIAGCOVmPKKSC6Ft2 Chnj7w8hllUBkWN0I2TIod+pOeLX2gR/jK4bFHxvI1DZ92+K5D0zLlwZQRspo3L3 6+ab4UVIV3u88VsQpfpehOw990RMvcpm7Pm8mmvIMbFB4I4vR90J9Us6EbZUTPP3 k8JRIwX+mIHIKkDZ54R8bEK0c9OfR0iUVU1tUpXxhGV6gP9XV67U+Yws/C4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:44 2025 by rpki-client