$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c97b97e-8666-4a49-9d5a-65580caab4ab.roa File: 1c97b97e-8666-4a49-9d5a-65580caab4ab.roa (raw, json) Hash identifier: fEQBlZ6v0nB1GFFW3IIhyj6BINbOyltg5659beZCI80= Subject key identifier: ED:93:9F:2A:FA:F1:4B:38:46:FD:EF:90:9B:AC:16:1F:7B:67:55:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10022F1169AF68794CEDD23FFB9D46C3E9DD127F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c97b97e-8666-4a49-9d5a-65580caab4ab.roa Signing time: Fri 19 Sep 2025 00:53:49 +0000 ROA not before: Fri 19 Sep 2025 00:53:49 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:02:2f:11:69:af:68:79:4c:ed:d2:3f:fb:9d:46:c3:e9:dd:12:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:53:49 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=c4877bbe4a34694fce66534579bd7223e448016d529aaaced53e7dd579cc53a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:e7:b2:a5:26:87:44:12:19:14:02:5a:0f: d6:f0:47:33:21:d3:92:eb:31:c2:ae:b8:be:52:dc: 90:96:14:0a:5c:1e:8f:35:f5:ae:4e:43:1b:0c:72: b3:f6:36:47:db:ee:07:5a:82:46:a8:a8:a0:28:f8: ac:0f:24:c9:89:e4:71:cd:ee:b9:c7:76:0c:a0:fd: 5d:0a:06:ed:bd:7b:f0:1a:91:de:aa:dc:54:0d:c4: a2:85:1a:7b:b4:da:0d:b9:63:89:51:ec:44:cc:ee: ef:66:7e:56:33:62:01:16:b0:0e:5d:b3:8e:47:bb: 97:8c:9d:47:3d:75:2f:da:8c:d9:c6:bd:14:78:95: c2:6f:94:a1:28:2c:69:26:c0:39:93:41:bc:83:15: 55:9c:5b:14:69:5b:a7:02:cc:06:ae:61:94:ad:e1: cb:a5:2b:38:f8:3d:4f:f2:22:f3:6c:56:9d:83:d4: 68:57:d0:d2:fd:62:0c:0a:59:e7:c7:62:dd:93:0e: 58:63:d5:39:39:da:88:cd:cf:2a:10:b7:a6:02:9b: 16:d0:ee:62:95:24:21:f4:25:19:58:6d:7b:69:4b: d3:46:af:29:36:9d:96:29:67:d3:aa:0e:dc:07:37: f9:2b:fa:d2:0f:ad:3b:45:87:af:6b:82:b1:37:7a: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:93:9F:2A:FA:F1:4B:38:46:FD:EF:90:9B:AC:16:1F:7B:67:55:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c97b97e-8666-4a49-9d5a-65580caab4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.161.0/24 Signature Algorithm: sha256WithRSAEncryption 55:6f:41:02:c0:0f:d7:68:29:b7:c3:39:bc:35:be:44:48:81: a4:e6:c2:69:43:5b:05:0a:2e:88:b6:fc:9c:21:47:1a:b4:5c: 68:86:3e:96:5f:b8:b4:d2:02:6f:cd:b2:be:3d:0e:35:ff:36: a0:39:9a:f0:58:ae:2c:17:51:35:41:99:ef:a5:a2:24:90:3e: 6a:36:eb:42:69:2b:68:f1:42:04:0e:1b:5e:c5:ed:58:a7:27: 17:35:53:e8:f1:44:2c:95:81:0f:cb:be:69:02:27:fd:21:f4: 0f:e8:ab:58:6f:40:73:9f:8b:6c:ea:6c:3f:80:17:b2:71:10: 45:b1:ea:58:f2:3f:3e:53:c7:8a:1e:a2:63:f7:9a:53:57:a7: 7e:9f:cf:f4:a8:ec:35:21:98:69:fa:40:9f:e6:27:8f:64:8c: 66:01:49:f6:ef:29:56:4e:7c:6a:4b:22:25:dc:d5:a2:92:80: e2:01:32:09:ca:ed:bf:d1:c2:4d:c7:14:ce:47:8d:57:00:db: e1:10:2d:9c:ca:72:16:a5:cb:a1:18:d0:8c:1b:0c:0d:3c:97: 04:70:8c:c6:ed:01:61:c2:c2:79:4d:77:7a:58:4a:35:2e:66: 40:5f:bd:ef:ac:f7:e5:49:92:2c:70:ea:ca:17:32:a0:d4:33: cd:6b:19:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEAIvEWmvaHlM7dI/+51Gw+ndEn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA1MzQ5WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDg3N2JiZTRhMzQ2OTRmY2U2NjUzNDU3OWJkNzIyM2U0 NDgwMTZkNTI5YWFhY2VkNTNlN2RkNTc5Y2M1M2EwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqCeeypSaHRBIZFAJaD9bwRzMh05LrMcKuuL5S3JCWFApc Ho819a5OQxsMcrP2Nkfb7gdagkaoqKAo+KwPJMmJ5HHN7rnHdgyg/V0KBu29e/Aa kd6q3FQNxKKFGnu02g25Y4lR7ETM7u9mflYzYgEWsA5ds45Hu5eMnUc9dS/ajNnG vRR4lcJvlKEoLGkmwDmTQbyDFVWcWxRpW6cCzAauYZSt4culKzj4PU/yIvNsVp2D 1GhX0NL9YgwKWefHYt2TDlhj1Tk52ojNzyoQt6YCmxbQ7mKVJCH0JRlYbXtpS9NG ryk2nZYpZ9OqDtwHN/kr+tIPrTtFh69rgrE3egUPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7ZOfKvrxSzhG/e+Qm6wWH3tnVagwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjOTdiOTdlLTg2NjYtNGE0OS05ZDVhLTY1NTgwY2FhYjRhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fKEwDQYJKoZIhvcNAQELBQADggEBAFVvQQLAD9doKbfDObw1vkRIgaTm wmlDWwUKLoi2/JwhRxq0XGiGPpZfuLTSAm/Nsr49DjX/NqA5mvBYriwXUTVBme+l oiSQPmo260JpK2jxQgQOG17F7VinJxc1U+jxRCyVgQ/LvmkCJ/0h9A/oq1hvQHOf i2zqbD+AF7JxEEWx6ljyPz5Tx4oeomP3mlNXp36fz/So7DUhmGn6QJ/mJ49kjGYB SfbvKVZOfGpLIiXc1aKSgOIBMgnK7b/Rwk3HFM5HjVcA2+EQLZzKchaly6EY0Iwb DA08lwRwjMbtAWHCwnlNd3pYSjUuZkBfve+s9+VJkixw6soXMqDUM81rGf4= -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:29 2025 by rpki-client