$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da0e08d3-2383-4396-88b9-350c35cd1bed.roa File: da0e08d3-2383-4396-88b9-350c35cd1bed.roa (raw, json) Hash identifier: w2F9uJbENgQ+DBUNwuYYq7fOiP8eRc6nPXom1sqZMV4= Subject key identifier: B2:4F:7A:CD:68:31:12:1B:ED:6F:F0:74:52:6E:DA:7C:F7:DB:ED:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 125657394C1C2B402908898E619D99D6C3ECFD65 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da0e08d3-2383-4396-88b9-350c35cd1bed.roa Signing time: Fri 19 Sep 2025 00:57:36 +0000 ROA not before: Fri 19 Sep 2025 00:57:36 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:56:57:39:4c:1c:2b:40:29:08:89:8e:61:9d:99:d6:c3:ec:fd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:57:36 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=d213d31fef8a70d1aa3d6f26a8c59cf75d5e37484b476a55423c68669dd8dc0f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:99:78:34:28:dd:92:3e:64:43:e2:20:44: 52:7f:bb:d2:36:aa:44:98:27:49:3d:4f:d7:aa:09: d9:d5:71:95:91:d8:2a:a1:67:1e:33:0c:e0:aa:bf: 71:6f:6e:46:5e:a1:5c:7c:90:ae:c7:58:f5:5d:83: 5f:86:ab:90:bf:4e:27:90:93:99:df:0e:32:40:31: eb:14:c6:5a:93:b0:95:04:c5:c3:38:a9:31:f8:01: a4:7a:b6:78:a0:23:a5:b0:c5:d7:3b:36:98:57:74: b2:7a:88:83:06:06:77:45:51:45:dc:bd:b0:f0:2d: 0b:d1:9a:86:43:93:c3:a7:50:09:13:c7:98:d0:d3: 66:e4:c6:29:5c:22:cf:98:4e:1f:1f:cc:ca:b6:b9: 51:6f:cb:a6:26:c1:bc:93:64:03:0c:bc:b5:89:30: 27:f3:a9:96:09:4b:8b:4e:64:55:77:f3:be:d0:ef: 60:b7:a6:70:dc:bf:ea:c1:7f:27:15:69:0c:61:3f: 21:4e:55:86:dc:9f:15:70:ca:e9:83:eb:f9:14:9d: 7d:45:5f:12:d8:99:aa:3a:0b:37:b6:71:d5:f8:3b: 34:78:06:a2:ef:d5:c0:58:93:fc:6b:3e:66:e6:3d: 00:39:82:3e:1e:b1:02:f3:b2:08:09:92:ed:b6:ab: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:7A:CD:68:31:12:1B:ED:6F:F0:74:52:6E:DA:7C:F7:DB:ED:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da0e08d3-2383-4396-88b9-350c35cd1bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.226.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:2f:f7:db:b3:b3:62:0b:46:10:0e:d6:39:8b:b9:0c:45:32: e8:50:2c:98:f8:70:8d:22:df:38:bd:52:00:c4:43:cd:9e:74: 05:5d:43:8c:52:09:f9:e8:ea:49:d7:d0:3c:34:a1:ed:1c:40: d3:29:2f:33:a7:d4:4c:08:5e:dc:61:c5:7b:14:36:08:8c:7a: e5:fc:e5:35:3a:10:a3:b3:32:7f:18:5f:27:4e:62:54:04:41: 89:af:ef:df:bb:88:2a:e2:76:02:67:05:b4:ef:6a:ad:5b:c9: ab:27:68:e4:4a:fa:ce:8e:6e:5f:5a:23:b6:58:2e:56:a6:b9: e3:b0:18:95:a2:c4:78:03:51:da:93:ba:b1:2b:eb:8a:d4:0d: e6:aa:86:12:f6:1b:43:f3:70:d6:60:6f:0e:7f:94:5c:40:db: ae:df:3c:f7:00:0d:4d:a6:08:dd:f3:e8:11:c3:bd:98:ab:57: 84:47:ce:48:cb:a8:ff:53:4b:6f:37:6d:0c:77:27:88:26:72: 00:1d:a8:69:ed:e6:20:b5:c4:5f:3f:f4:47:de:c9:38:39:19: 77:55:e4:2c:f3:5a:e9:c3:43:91:e0:d9:c5:60:79:84:3a:d5: c6:77:10:f9:ae:f6:c3:1a:5a:d6:08:29:8c:e4:33:5e:c9:eb: 9f:44:01:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUElZXOUwcK0ApCImOYZ2Z1sPs/WUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA1NzM2WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjEzZDMxZmVmOGE3MGQxYWEzZDZmMjZhOGM1OWNmNzVk NWUzNzQ4NGI0NzZhNTU0MjNjNjg2NjlkZDhkYzBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChm5l4NCjdkj5kQ+IgRFJ/u9I2qkSYJ0k9T9eqCdnVcZWR 2CqhZx4zDOCqv3FvbkZeoVx8kK7HWPVdg1+Gq5C/TieQk5nfDjJAMesUxlqTsJUE xcM4qTH4AaR6tnigI6Wwxdc7NphXdLJ6iIMGBndFUUXcvbDwLQvRmoZDk8OnUAkT x5jQ02bkxilcIs+YTh8fzMq2uVFvy6YmwbyTZAMMvLWJMCfzqZYJS4tOZFV3877Q 72C3pnDcv+rBfycVaQxhPyFOVYbcnxVwyumD6/kUnX1FXxLYmao6Cze2cdX4OzR4 BqLv1cBYk/xrPmbmPQA5gj4esQLzsggJku22q6V7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsk96zWgxEhvtb/B0Um7afPfb7Q8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhMGUwOGQzLTIzODMtNDM5Ni04OGI5LTM1MGMzNWNkMWJlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fOIwDQYJKoZIhvcNAQELBQADggEBAD0v99uzs2ILRhAO1jmLuQxFMuhQ LJj4cI0i3zi9UgDEQ82edAVdQ4xSCfno6knX0Dw0oe0cQNMpLzOn1EwIXtxhxXsU NgiMeuX85TU6EKOzMn8YXydOYlQEQYmv79+7iCridgJnBbTvaq1byasnaORK+s6O bl9aI7ZYLlamueOwGJWixHgDUdqTurEr64rUDeaqhhL2G0PzcNZgbw5/lFxA267f PPcADU2mCN3z6BHDvZirV4RHzkjLqP9TS283bQx3J4gmcgAdqGnt5iC1xF8/9Efe yTg5GXdV5CzzWunDQ5Hg2cVgeYQ61cZ3EPmu9sMaWtYIKYzkM17J659EAQs= -----END CERTIFICATE-----Generated at Fri Sep 19 04:38:24 2025 by rpki-client