$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7653ddd2-8a86-4a79-aa52-fcd2a35e0441.roa File: 7653ddd2-8a86-4a79-aa52-fcd2a35e0441.roa (raw, json) Hash identifier: qJonR7Vy+sYbu7dxwldvNVUjgtQaippj4hjd5p1elec= Subject key identifier: FB:B8:FD:A7:80:4F:0D:6F:65:D0:45:17:2A:39:4A:86:F5:C9:97:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04823406737917059F9201B05BECD53396608F8F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7653ddd2-8a86-4a79-aa52-fcd2a35e0441.roa Signing time: Fri 19 Sep 2025 02:53:48 +0000 ROA not before: Fri 19 Sep 2025 02:53:48 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:82:34:06:73:79:17:05:9f:92:01:b0:5b:ec:d5:33:96:60:8f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 02:53:48 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=c4eaef51f4ef903c48c098f552d04d2e08ce976e437e1c5c911ce80d0f834c15, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:03:00:31:2d:45:95:df:dd:1c:17:a4:4f: 66:9f:a8:e4:b0:7b:8c:e1:12:02:35:b5:ef:18:e7: b5:ee:a5:76:54:8c:76:96:50:07:9e:ec:1b:cf:44: 29:1c:16:f2:14:8b:e8:e3:62:23:60:00:15:5a:da: 49:f6:4b:6c:88:0c:1d:b3:78:6a:56:2b:e8:a6:bf: 6e:c3:4a:2b:bc:11:3b:17:8c:24:9d:9a:79:86:eb: 9d:76:c9:7e:a5:3e:5a:49:9f:a0:2c:a6:51:76:b9: 6c:43:71:e2:f4:aa:5a:61:b7:0e:ab:de:fa:74:bc: ba:96:2d:c3:bc:8e:07:0d:1a:7e:d2:b0:e4:3d:c6: 9d:dc:ef:fd:6d:29:65:f6:e4:5a:17:d3:80:9f:5a: c3:ee:c4:ab:0d:d7:3b:b3:61:50:2a:ce:b4:57:18: 31:fb:22:b6:8c:eb:4d:88:fc:2c:70:2e:ce:15:23: c8:9b:4d:cf:b4:27:c5:eb:91:08:3f:81:ac:3f:2d: fe:cd:6e:db:d3:23:13:bb:53:af:a9:df:c1:d3:28: 1b:23:12:57:54:7a:94:ff:a7:21:93:ad:60:51:d2: d4:8c:dd:7f:4b:3f:b1:52:57:b6:41:f8:ec:e6:30: d4:ce:b6:62:1f:1d:21:c4:b2:36:3c:09:3a:39:3e: 72:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B8:FD:A7:80:4F:0D:6F:65:D0:45:17:2A:39:4A:86:F5:C9:97:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7653ddd2-8a86-4a79-aa52-fcd2a35e0441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.149.0/24 Signature Algorithm: sha256WithRSAEncryption 85:0c:50:3b:78:0d:e3:04:97:16:81:7a:3c:f3:d2:8d:b3:65: 0e:5e:56:b6:45:a7:d7:55:67:07:58:6d:55:d0:b0:8f:ab:08: e1:b9:b8:bf:4d:d7:be:a0:51:46:a6:0f:d7:c0:39:49:fd:09: 3b:89:be:85:2e:f3:bf:b8:e8:17:c1:dc:91:4f:e7:14:34:c7: d8:83:e3:77:69:49:27:0b:9c:22:0d:00:22:96:9c:76:73:74: 79:7e:28:90:d8:e9:26:36:a0:3a:c3:a9:66:5e:53:cf:00:10: 1e:ad:c4:91:06:68:4a:66:0e:ad:43:eb:c7:be:47:22:af:4e: 31:5a:3c:03:86:fd:9b:c9:98:7f:86:0c:b7:05:cb:f0:c2:50: bc:6c:7d:c9:25:e3:dd:fa:8c:c5:fa:c2:2b:ba:fa:8f:40:d0: e6:9f:dc:67:a9:28:c8:2b:4a:22:5e:71:6b:19:01:3a:16:22: 18:d9:c2:65:03:99:8b:81:e8:f5:ce:8f:bf:ea:76:f5:df:95: b6:be:01:5f:c6:e4:92:16:4d:15:fb:4e:f0:26:20:c8:df:f8: 3d:ad:1f:72:f3:64:45:6f:99:90:b0:09:cb:e1:e0:be:0f:10: f6:a7:23:13:6c:ca:c7:39:8e:45:9c:fa:dd:8b:65:21:8f:1d: 34:3a:8b:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBII0BnN5FwWfkgGwW+zVM5Zgj48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDI1MzQ4WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNGVhZWY1MWY0ZWY5MDNjNDhjMDk4ZjU1MmQwNGQyZTA4 Y2U5NzZlNDM3ZTFjNWM5MTFjZTgwZDBmODM0YzE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+RQMAMS1Fld/dHBekT2afqOSwe4zhEgI1te8Y57XupXZU jHaWUAee7BvPRCkcFvIUi+jjYiNgABVa2kn2S2yIDB2zeGpWK+imv27DSiu8ETsX jCSdmnmG6512yX6lPlpJn6AsplF2uWxDceL0qlphtw6r3vp0vLqWLcO8jgcNGn7S sOQ9xp3c7/1tKWX25FoX04CfWsPuxKsN1zuzYVAqzrRXGDH7IraM602I/CxwLs4V I8ibTc+0J8XrkQg/gaw/Lf7NbtvTIxO7U6+p38HTKBsjEldUepT/pyGTrWBR0tSM 3X9LP7FSV7ZB+OzmMNTOtmIfHSHEsjY8CTo5PnJxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+7j9p4BPDW9l0EUXKjlKhvXJlz8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2NTNkZGQyLThhODYtNGE3OS1hYTUyLWZjZDJhMzVlMDQ0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28JUwDQYJKoZIhvcNAQELBQADggEBAIUMUDt4DeMElxaBejzz0o2zZQ5e VrZFp9dVZwdYbVXQsI+rCOG5uL9N176gUUamD9fAOUn9CTuJvoUu87+46BfB3JFP 5xQ0x9iD43dpSScLnCINACKWnHZzdHl+KJDY6SY2oDrDqWZeU88AEB6txJEGaEpm Dq1D68e+RyKvTjFaPAOG/ZvJmH+GDLcFy/DCULxsfckl4936jMX6wiu6+o9A0Oaf 3GepKMgrSiJecWsZAToWIhjZwmUDmYuB6PXOj7/qdvXflba+AV/G5JIWTRX7TvAm IMjf+D2tH3LzZEVvmZCwCcvh4L4PEPanIxNsysc5jkWc+t2LZSGPHTQ6i5I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:02 2025 by rpki-client