$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29f9367f-3d00-4dfc-a9ee-7f6577b4f42a.roa File: 29f9367f-3d00-4dfc-a9ee-7f6577b4f42a.roa (raw, json) Hash identifier: Mv8a4ffDOzehcPdqdVZRwMreOkvzOfeeA577H0qRpAM= Subject key identifier: 9B:5B:02:78:84:23:9A:1A:A6:50:D3:BB:30:88:3F:78:E0:36:5E:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44CBD7651E8A41C36A835195807174C175A632DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29f9367f-3d00-4dfc-a9ee-7f6577b4f42a.roa Signing time: Tue 21 Oct 2025 08:50:05 +0000 ROA not before: Tue 21 Oct 2025 08:50:05 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.128.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cb:d7:65:1e:8a:41:c3:6a:83:51:95:80:71:74:c1:75:a6:32:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 08:50:05 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=b98f115969d8d4ccf2df66ea69e0cbc5de8ed4af968f397ee400c636d3e29344, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:ee:13:9e:a1:12:1f:42:96:9e:70:c4:02: d2:92:08:50:6d:d7:9f:4d:34:96:8f:fd:36:67:55: 23:e6:37:0d:fa:c6:13:ed:28:29:bf:d4:ff:9b:0a: 83:fa:24:ee:a2:0b:e3:5e:65:ea:56:c6:d3:69:e9: 1e:d8:e0:c7:d6:ce:45:f0:1a:5c:ab:35:29:39:c6: 01:d6:67:7c:66:bb:77:16:2b:e6:22:1b:e2:8c:3a: 60:9d:9c:aa:09:36:ca:5d:b1:11:c7:33:70:05:5c: 77:6c:e8:5a:56:40:93:90:c4:77:4a:fc:0a:59:45: c7:d7:fc:cc:a0:bd:04:37:24:28:40:a9:83:0a:77: 17:11:33:a4:b6:df:3d:c1:a5:8e:c4:1c:4a:4a:66: c7:e5:fd:6c:b0:97:01:a3:b6:ae:6b:d5:20:0d:93: 68:ab:7c:a8:ba:80:f6:c5:7c:c0:45:bf:c1:ac:f9: f9:f7:f6:8c:02:d0:f3:40:8e:ba:08:93:b6:22:81: 69:6b:44:ac:3d:70:3d:6c:27:8f:a2:de:6a:62:f1: b6:5e:49:9f:df:3b:61:16:f3:70:bc:20:c8:96:b7: 7c:d2:9d:9d:3e:6a:9c:fc:93:a3:b7:29:14:2e:6a: c8:8b:46:15:0e:b1:47:9d:60:8d:af:14:6d:27:3e: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5B:02:78:84:23:9A:1A:A6:50:D3:BB:30:88:3F:78:E0:36:5E:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29f9367f-3d00-4dfc-a9ee-7f6577b4f42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.128.0.0/15 Signature Algorithm: sha256WithRSAEncryption 64:d5:bd:dd:6f:bc:33:e3:45:a9:85:42:27:44:1f:94:bf:fd: b2:9a:4f:1f:81:37:f1:5c:04:1c:85:65:24:1f:af:11:fe:10: 06:b6:e8:64:3b:91:11:f3:2a:38:e0:1d:37:3e:7b:a9:24:b1: aa:a6:28:99:f5:62:0d:99:67:c7:ba:f2:5d:25:7a:7a:3e:52: 79:b0:48:0c:c6:40:64:a9:2b:2c:4a:3d:50:a1:4d:25:22:7f: 1d:ce:97:6e:9d:3b:1e:1d:6f:4e:15:6a:ec:f3:4f:60:4e:cc: fc:73:c7:71:c4:19:c2:81:27:aa:86:5c:d2:65:df:45:15:78: 09:9f:e6:60:38:2b:3d:25:5c:35:bf:10:2b:6a:ae:08:e1:59: 73:e0:af:40:33:a0:7f:32:6e:b2:a3:f7:c6:fb:a7:9e:1a:43: ae:e3:c2:eb:6c:11:7f:a0:fe:af:c0:80:06:fb:e5:96:d3:a0: ad:0c:f2:b4:87:10:50:4e:7d:17:9a:1b:bf:cf:15:73:4e:d2: 48:fc:94:d1:7f:d4:d4:a7:5d:39:62:ef:c4:b1:a5:df:38:41: 08:44:c3:e5:c6:84:13:c4:3c:87:ab:0d:34:39:a0:7c:aa:6c: 85:bd:34:d0:dc:e8:25:e3:d7:95:bc:5c:e4:cc:56:d9:4e:e5: 5e:68:f9:ea -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURMvXZR6KQcNqg1GVgHF0wXWmMt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDg1MDA1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOThmMTE1OTY5ZDhkNGNjZjJkZjY2ZWE2OWUwY2JjNWRl OGVkNGFmOTY4ZjM5N2VlNDAwYzYzNmQzZTI5MzQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBvO4TnqESH0KWnnDEAtKSCFBt159NNJaP/TZnVSPmNw36 xhPtKCm/1P+bCoP6JO6iC+NeZepWxtNp6R7Y4MfWzkXwGlyrNSk5xgHWZ3xmu3cW K+YiG+KMOmCdnKoJNspdsRHHM3AFXHds6FpWQJOQxHdK/ApZRcfX/MygvQQ3JChA qYMKdxcRM6S23z3BpY7EHEpKZsfl/WywlwGjtq5r1SANk2irfKi6gPbFfMBFv8Gs +fn39owC0PNAjroIk7YigWlrRKw9cD1sJ4+i3mpi8bZeSZ/fO2EW83C8IMiWt3zS nZ0+apz8k6O3KRQuasiLRhUOsUedYI2vFG0nPja9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm1sCeIQjmhqmUNO7MIg/eOA2XtAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5ZjkzNjdmLTNkMDAtNGRmYy1hOWVlLTdmNjU3N2I0ZjQyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGIgDANBgkqhkiG9w0BAQsFAAOCAQEAZNW93W+8M+NFqYVCJ0QflL/9sppP H4E38VwEHIVlJB+vEf4QBrboZDuREfMqOOAdNz57qSSxqqYomfViDZlnx7ryXSV6 ej5SebBIDMZAZKkrLEo9UKFNJSJ/Hc6Xbp07Hh1vThVq7PNPYE7M/HPHccQZwoEn qoZc0mXfRRV4CZ/mYDgrPSVcNb8QK2quCOFZc+CvQDOgfzJusqP3xvunnhpDruPC 62wRf6D+r8CABvvlltOgrQzytIcQUE59F5obv88Vc07SSPyU0X/U1KddOWLvxLGl 3zhBCETD5caEE8Q8h6sNNDmgfKpshb000NzoJePXlbxc5MxW2U7lXmj56g== -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:31 2025 by rpki-client