$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47f68c9c-bed8-4822-a02b-51a40157927d.roa File: 47f68c9c-bed8-4822-a02b-51a40157927d.roa (raw, json) Hash identifier: ndNln4onAR3mrEsJnBt0RXIQhyzliif8IZHLRHEsavM= Subject key identifier: 33:DD:5B:DC:24:CB:8C:BA:ED:49:8C:B7:93:4D:96:7C:E2:61:8F:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33C2A9750280397C875022936BEBC6DA8BF9EB47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47f68c9c-bed8-4822-a02b-51a40157927d.roa Signing time: Fri 17 Oct 2025 22:20:18 +0000 ROA not before: Fri 17 Oct 2025 22:20:18 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.253.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c2:a9:75:02:80:39:7c:87:50:22:93:6b:eb:c6:da:8b:f9:eb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:20:18 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=ba0b6c87f9d4aa2175586dc90b38c955fa4addc104caba4a5c730ea5762e2970, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:f9:f5:27:6d:9c:cf:ab:1e:8a:53:c9:5d: 4a:78:cf:25:99:26:7f:dc:ad:68:59:91:8b:0c:92: f0:c9:99:42:80:f2:4a:af:ef:b7:f8:ef:57:36:c1: 45:41:2f:25:29:a4:2a:0b:92:52:48:75:8c:02:c4: 72:9e:7a:56:a4:76:68:a9:b8:9d:df:24:66:08:2d: 29:1a:72:09:00:e7:ce:ad:34:99:a5:b3:db:e3:df: f6:ac:c4:b6:d7:92:7a:b5:55:8f:ac:a5:7e:13:f2: 2c:ea:f2:9a:04:8c:77:9c:bc:b7:52:2f:93:fc:fb: 64:9c:c2:53:0f:c4:51:3a:88:53:dc:d0:a8:dd:3c: 68:cd:c0:0f:c0:15:d5:9c:4a:83:58:bb:ae:1b:cd: 62:26:60:0c:8b:66:68:97:dd:9d:01:6e:16:8d:a0: e9:f1:d5:b0:dd:44:0a:ff:ac:53:22:8e:44:9b:85: 8d:12:c6:59:97:a6:9b:e6:bc:0d:cc:06:22:dc:17: 69:7b:f5:2f:cc:94:ab:1e:a6:88:a7:aa:f4:e3:bd: 91:c8:50:fe:45:51:ba:b4:2c:56:da:11:18:a6:52: 45:82:bf:a0:5e:9e:6d:21:1b:6c:62:82:6e:93:38: e8:ac:c9:52:ff:0b:13:98:9d:14:0a:6c:d6:9d:d8: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:5B:DC:24:CB:8C:BA:ED:49:8C:B7:93:4D:96:7C:E2:61:8F:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47f68c9c-bed8-4822-a02b-51a40157927d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.253.192.0/19 Signature Algorithm: sha256WithRSAEncryption 27:ea:53:4e:94:0a:19:50:0d:7c:57:01:71:a4:f3:8b:ef:85: 9a:3c:32:67:09:56:bf:23:4e:bd:43:15:9b:2d:8a:3e:d5:7c: 25:39:6f:1a:d6:15:da:7b:aa:95:50:07:95:f2:68:56:30:3c: d6:cf:e3:75:83:3c:bf:d2:9f:4d:3c:cf:e1:b1:e5:fb:dd:dd: a6:2c:e9:d6:8d:56:9b:52:d6:aa:55:b8:49:93:66:03:a1:0b: 05:66:f5:b2:94:c4:ef:40:da:d7:4e:bf:c3:b6:6b:5b:87:b2: bc:9d:67:a3:3e:34:d7:96:2c:20:53:ee:45:d4:95:81:e5:bb: ae:4a:04:90:8d:51:76:13:4e:bd:20:13:0e:69:1c:85:b5:a9: fe:d0:22:61:9d:d0:ac:e3:1a:52:85:b8:22:c4:52:66:b7:6a: 2a:fc:04:81:d0:04:d7:ce:96:16:05:c7:cd:b7:64:3d:27:f4: 5f:51:bd:18:09:9d:c4:e7:1a:cc:39:38:3e:86:c2:00:54:63: b2:97:41:0b:87:d3:9b:14:08:43:df:2b:5a:a2:fa:8e:2f:6e: 58:48:e1:ae:d1:a4:2b:12:ac:b8:f0:2e:a2:92:39:9f:de:d8: f9:bb:a6:c2:e6:b0:96:0a:cf:88:11:1b:1f:1f:ec:d3:69:36: c7:cc:86:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM8KpdQKAOXyHUCKTa+vG2ov560cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIyMDE4WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTBiNmM4N2Y5ZDRhYTIxNzU1ODZkYzkwYjM4Yzk1NWZh NGFkZGMxMDRjYWJhNGE1YzczMGVhNTc2MmUyOTcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXLvn1J22cz6seilPJXUp4zyWZJn/crWhZkYsMkvDJmUKA 8kqv77f471c2wUVBLyUppCoLklJIdYwCxHKeelakdmipuJ3fJGYILSkacgkA586t NJmls9vj3/asxLbXknq1VY+spX4T8izq8poEjHecvLdSL5P8+2ScwlMPxFE6iFPc 0KjdPGjNwA/AFdWcSoNYu64bzWImYAyLZmiX3Z0BbhaNoOnx1bDdRAr/rFMijkSb hY0SxlmXppvmvA3MBiLcF2l79S/MlKsepoinqvTjvZHIUP5FUbq0LFbaERimUkWC v6Benm0hG2xigm6TOOisyVL/CxOYnRQKbNad2C33AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM91b3CTLjLrtSYy3k02WfOJhj+cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3ZjY4YzljLWJlZDgtNDgyMi1hMDJiLTUxYTQwMTU3OTI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2/cAwDQYJKoZIhvcNAQELBQADggEBACfqU06UChlQDXxXAXGk84vvhZo8 MmcJVr8jTr1DFZstij7VfCU5bxrWFdp7qpVQB5XyaFYwPNbP43WDPL/Sn008z+Gx 5fvd3aYs6daNVptS1qpVuEmTZgOhCwVm9bKUxO9A2tdOv8O2a1uHsrydZ6M+NNeW LCBT7kXUlYHlu65KBJCNUXYTTr0gEw5pHIW1qf7QImGd0KzjGlKFuCLEUma3air8 BIHQBNfOlhYFx823ZD0n9F9RvRgJncTnGsw5OD6GwgBUY7KXQQuH05sUCEPfK1qi +o4vblhI4a7RpCsSrLjwLqKSOZ/e2Pm7psLmsJYKz4gRGx8f7NNpNsfMhnw= -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:16 2025 by rpki-client