$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab9f2fe0-48a7-4e47-b511-2bcb9dc5d344.roa File: ab9f2fe0-48a7-4e47-b511-2bcb9dc5d344.roa (raw, json) Hash identifier: Gj04Aww8R6UHpzJCOOGY+yeRTXe3OI1oyLXFUwNHERU= Subject key identifier: 58:E5:D8:F4:72:4A:92:0F:E8:B1:29:C8:28:94:DA:47:C5:E1:A6:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 709BCE85EB197472D5945D40205016A416CE2741 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab9f2fe0-48a7-4e47-b511-2bcb9dc5d344.roa Signing time: Mon 13 Oct 2025 17:48:40 +0000 ROA not before: Mon 13 Oct 2025 17:48:40 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.157.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9b:ce:85:eb:19:74:72:d5:94:5d:40:20:50:16:a4:16:ce:27:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:48:40 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=292085dbc032b000c4a4ff2add7e1e6596e8ab09c73d99a77831a899793c0c9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:d3:40:a0:65:d1:0e:83:36:ce:5d:f6:6a: 91:69:89:17:59:af:68:b3:23:22:79:7a:e6:54:c4: 16:98:21:e2:7d:25:24:ac:e4:b9:0e:a2:c1:05:36: 4f:95:26:67:80:27:f0:df:25:32:1d:94:52:c8:a7: d3:ef:2e:85:d5:31:31:95:f5:97:c6:a5:f2:99:98: e6:76:f5:ef:43:90:9f:13:8e:75:24:2c:a9:51:d3: 38:28:67:d7:63:67:06:35:88:84:95:a6:e0:fd:17: 1d:87:af:e7:0f:f1:f3:a3:c5:3e:35:e1:d3:10:98: ce:a8:a9:20:59:01:77:63:26:33:48:eb:ba:73:58: 74:4f:70:98:d9:24:55:43:18:46:3d:f3:83:d9:8a: 9e:eb:af:be:69:13:ff:f9:20:d8:96:e1:84:2d:22: 5f:96:cb:d8:42:38:85:ed:1f:f2:ae:06:e8:27:90: aa:d7:65:d9:a0:07:28:ad:6e:8e:ac:fb:f4:37:55: 72:3e:7b:e0:db:87:a6:9d:09:cd:cc:85:f9:28:0f: 3c:2c:53:d4:da:a9:ae:31:ff:4c:d7:b8:09:7b:23: 1c:2f:ab:77:05:23:69:f4:e9:d2:d7:6c:0f:73:9f: 69:eb:f4:b6:11:11:a6:9e:86:c6:64:d2:c6:6e:b4: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:D8:F4:72:4A:92:0F:E8:B1:29:C8:28:94:DA:47:C5:E1:A6:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab9f2fe0-48a7-4e47-b511-2bcb9dc5d344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.88.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:9a:52:54:05:08:f9:6d:6b:99:49:ff:fe:e2:9e:1a:02:97: de:d3:b5:f3:98:35:6c:21:75:3f:2b:84:a2:e3:8d:fa:dc:b5: 49:e0:dd:b0:00:c5:fd:38:68:b1:be:f7:8b:2c:29:2c:29:75: 0c:79:ba:3f:06:1d:c0:6c:9b:10:8f:57:33:77:41:bb:e0:e9: 6d:1b:59:c9:33:2a:57:0d:87:dd:bc:1e:66:44:a7:81:9e:46: ce:cd:99:b2:c8:16:aa:5f:c9:35:2b:b6:91:bd:58:ac:ac:6f: 32:17:d3:4b:44:42:7e:ae:5a:f0:ae:d6:18:7a:88:64:ee:da: 69:0d:86:d0:52:37:4d:0d:75:31:81:00:c0:75:3a:63:24:70: 8c:8d:e0:d7:0e:33:81:2d:09:3b:d4:cd:21:27:dc:ef:7d:8c: e6:a5:8a:8e:da:b1:25:a6:e7:41:ff:46:99:cc:76:d9:70:d4: e6:c1:38:55:cf:9a:56:16:4b:53:03:cd:4f:f4:2e:57:48:c6: 9a:eb:ef:ae:9c:b3:7a:06:4c:3f:36:e9:f4:0d:a8:e2:bb:69: 4b:ba:e9:0e:03:b1:91:4b:49:50:44:a3:e9:1e:1c:f6:24:37: 12:51:90:bd:21:5a:45:7b:8d:40:a5:27:f1:e6:ab:1d:5d:65: 97:c0:21:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcJvOhesZdHLVlF1AIFAWpBbOJ0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTc0ODQwWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTIwODVkYmMwMzJiMDAwYzRhNGZmMmFkZDdlMWU2NTk2 ZThhYjA5YzczZDk5YTc3ODMxYTg5OTc5M2MwYzljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8UdNAoGXRDoM2zl32apFpiRdZr2izIyJ5euZUxBaYIeJ9 JSSs5LkOosEFNk+VJmeAJ/DfJTIdlFLIp9PvLoXVMTGV9ZfGpfKZmOZ29e9DkJ8T jnUkLKlR0zgoZ9djZwY1iISVpuD9Fx2Hr+cP8fOjxT414dMQmM6oqSBZAXdjJjNI 67pzWHRPcJjZJFVDGEY984PZip7rr75pE//5INiW4YQtIl+Wy9hCOIXtH/KuBugn kKrXZdmgByitbo6s+/Q3VXI+e+Dbh6adCc3MhfkoDzwsU9Taqa4x/0zXuAl7Ixwv q3cFI2n06dLXbA9zn2nr9LYREaaehsZk0sZutNk/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWOXY9HJKkg/osSnIKJTaR8XhpqMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiOWYyZmUwLTQ4YTctNGU0Ny1iNTExLTJiY2I5ZGM1ZDM0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2nVgwDQYJKoZIhvcNAQELBQADggEBAF+aUlQFCPlta5lJ//7inhoCl97T tfOYNWwhdT8rhKLjjfrctUng3bAAxf04aLG+94ssKSwpdQx5uj8GHcBsmxCPVzN3 Qbvg6W0bWckzKlcNh928HmZEp4GeRs7NmbLIFqpfyTUrtpG9WKysbzIX00tEQn6u WvCu1hh6iGTu2mkNhtBSN00NdTGBAMB1OmMkcIyN4NcOM4EtCTvUzSEn3O99jOal io7asSWm50H/RpnMdtlw1ObBOFXPmlYWS1MDzU/0LldIxprr766cs3oGTD826fQN qOK7aUu66Q4DsZFLSVBEo+keHPYkNxJRkL0hWkV7jUClJ/Hmqx1dZZfAIZs= -----END CERTIFICATE-----Generated at Wed Nov 5 06:25:35 2025 by rpki-client