$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/494852a0-ba6d-4deb-af15-83a6ff8519f1.roa File: 494852a0-ba6d-4deb-af15-83a6ff8519f1.roa (raw, json) Hash identifier: 21CJ5N+5MIakRyEjCT8vDFuslkDt/zOv65fXS3cwUgI= Subject key identifier: EB:9D:D4:42:2B:54:92:72:3B:1C:4F:98:14:CD:A1:96:10:EC:4D:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D7E9D9B8DC3D9F383B58334D164700E1D68CD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/494852a0-ba6d-4deb-af15-83a6ff8519f1.roa Signing time: Fri 19 Sep 2025 00:55:39 +0000 ROA not before: Fri 19 Sep 2025 00:55:39 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7e:9d:9b:8d:c3:d9:f3:83:b5:83:34:d1:64:70:0e:1d:68:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:55:39 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=b9836699f89e5a68c78fc31f669359db6bc232515c4cdcf4601deb1fd93fe707, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:f5:68:a9:af:4b:d1:76:84:40:20:3a:53: 67:28:69:2c:0f:e5:3a:00:6a:50:ce:9c:bb:ee:f5: c6:6a:f5:cd:d5:56:f4:fe:f6:c6:03:ed:6f:ee:8d: c9:13:46:66:d0:0c:f7:a9:2c:19:52:2d:7c:e0:c4: 2c:99:d1:21:1d:85:48:f2:36:d8:55:6c:c2:8b:f4: 54:a9:88:8a:a4:63:ed:76:3c:35:55:29:49:d3:1d: eb:98:d9:09:a1:e0:d0:95:5f:00:09:e9:a5:52:e2: 11:6b:89:57:3f:a5:c1:ea:42:56:54:7b:3e:96:80: 7c:9e:09:ac:69:58:6f:9b:0e:51:32:c8:97:23:0e: 2c:60:1f:e8:fb:e1:26:d7:e6:43:e0:e8:d5:8a:d3: 52:c3:0d:c7:d5:2c:0c:fa:22:56:4c:31:cb:15:df: b4:a6:0a:4a:a4:b1:2e:a1:8b:60:0a:56:ed:35:4e: a9:95:f3:6c:4e:76:58:fa:76:32:38:52:c9:a9:cc: 61:df:37:99:9d:ff:a6:f3:36:c7:2a:81:75:2d:5e: 53:f2:99:ad:8f:da:3d:60:61:03:df:77:dc:35:8e: cc:3f:73:cf:78:24:bb:b6:62:6f:c1:d8:bd:94:7d: bd:e3:02:9a:69:5b:8f:b7:81:c9:1e:02:69:02:da: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:D4:42:2B:54:92:72:3B:1C:4F:98:14:CD:A1:96:10:EC:4D:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/494852a0-ba6d-4deb-af15-83a6ff8519f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.197.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ab:57:36:fa:96:01:a7:6f:13:61:53:25:cb:a4:1c:0a:b1: f9:2a:ad:fd:7b:52:72:a8:91:1c:a1:ce:7c:b0:bb:49:7b:0f: cc:c4:a5:b3:a9:8b:b3:64:34:a4:99:25:7c:c2:72:5b:0a:e5: 8d:5d:92:46:c9:1c:5d:a2:53:75:ab:a0:08:48:6e:1d:54:d2: 6e:ea:26:01:5a:f4:e6:60:76:ef:9d:bd:94:e5:f0:45:f7:da: 0b:63:d3:11:4c:55:b7:16:5d:22:08:b5:8b:94:25:69:1d:a9: 34:76:c7:16:59:b3:1b:3a:18:1a:56:0a:05:89:8f:85:9b:19: 1a:f1:09:8f:78:89:26:08:7d:be:d0:25:ab:b8:3b:15:76:7e: 36:9b:bd:23:3d:97:95:c7:38:43:b7:a4:99:23:7d:65:c6:ab: fc:52:a6:83:08:7c:b9:80:18:43:42:19:dc:6c:e8:8c:4c:67: a8:74:a2:37:1f:c5:3b:bc:3f:fe:61:44:8b:02:76:11:f0:5e: 76:d6:04:c8:7c:64:d7:44:1f:32:18:9d:3e:98:c0:8a:81:32: 4f:75:af:c2:11:db:59:30:4e:3e:f2:99:fa:a9:05:98:1b:81: fc:91:25:68:d5:fc:0e:ee:92:69:cf:6c:b1:b0:6f:21:07:b2: 42:d6:39:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITPX6dm43D2fODtYM00WRwDh1ozTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MTkwMDU1MzlaFw0yNTEwMjQyMzU5NTla MHoxSTBHBgNVBAUTQGI5ODM2Njk5Zjg5ZTVhNjhjNzhmYzMxZjY2OTM1OWRiNmJj MjMyNTE1YzRjZGNmNDYwMWRlYjFmZDkzZmU3MDcxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMFg9Wipr0vRdoRAIDpTZyhpLA/lOgBqUM6cu+71xmr1zdVW 9P72xgPtb+6NyRNGZtAM96ksGVItfODELJnRIR2FSPI22FVswov0VKmIiqRj7XY8 NVUpSdMd65jZCaHg0JVfAAnppVLiEWuJVz+lwepCVlR7PpaAfJ4JrGlYb5sOUTLI lyMOLGAf6PvhJtfmQ+Do1YrTUsMNx9UsDPoiVkwxyxXftKYKSqSxLqGLYApW7TVO qZXzbE52WPp2MjhSyanMYd83mZ3/pvM2xyqBdS1eU/KZrY/aPWBhA9933DWOzD9z z3gku7Zib8HYvZR9veMCmmlbj7eByR4CaQLaDUMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTrndRCK1SScjscT5gUzaGWEOxNSTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNDk0ODUyYTAtYmE2ZC00ZGViLWFmMTUtODNhNmZmODUxOWYxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADR8xTANBgkqhkiG9w0BAQsFAAOCAQEAK6tXNvqWAadvE2FTJcukHAqx+Sqt /XtScqiRHKHOfLC7SXsPzMSls6mLs2Q0pJklfMJyWwrljV2SRskcXaJTdaugCEhu HVTSbuomAVr05mB27529lOXwRffaC2PTEUxVtxZdIgi1i5QlaR2pNHbHFlmzGzoY GlYKBYmPhZsZGvEJj3iJJgh9vtAlq7g7FXZ+Npu9Iz2Xlcc4Q7ekmSN9Zcar/FKm gwh8uYAYQ0IZ3GzojExnqHSiNx/FO7w//mFEiwJ2EfBedtYEyHxk10QfMhidPpjA ioEyT3WvwhHbWTBOPvKZ+qkFmBuB/JElaNX8Du6Sac9ssbBvIQeyQtY5HA== -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:36 2025 by rpki-client