$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09b5432e-3b4c-46a5-83ab-97f59312f09a.roa File: 09b5432e-3b4c-46a5-83ab-97f59312f09a.roa (raw, json) Hash identifier: hxAm3Rwit5EWqjPzFxPtIqkY0u4o/J62Kwjy4b9MEuw= Subject key identifier: 2E:EE:7B:42:8B:79:A8:8B:2A:0F:0F:A4:17:D0:E3:17:40:6A:03:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 609A63344E9895D5856320E8D7DAFBC8D6603523 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09b5432e-3b4c-46a5-83ab-97f59312f09a.roa Signing time: Fri 10 Oct 2025 15:48:29 +0000 ROA not before: Fri 10 Oct 2025 15:48:29 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.13.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9a:63:34:4e:98:95:d5:85:63:20:e8:d7:da:fb:c8:d6:60:35:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:48:29 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=99bfcc34ff90711fd1656bbb2e56f8075041bf8526539a629f25f37ae7f873a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:2b:7a:21:19:21:42:ac:b1:b7:d3:a7:9a: db:91:ef:6d:33:0d:62:bb:d9:4c:4a:8c:a4:1f:77: 2d:62:ba:cf:34:5d:ed:38:d7:4b:5c:a7:a7:95:8a: 0f:ca:56:de:73:b8:f8:16:e0:5d:54:c7:bd:c6:67: 44:22:ff:af:ae:5c:2f:e9:b8:49:4c:3d:2d:3a:02: 6b:37:88:8e:eb:2e:82:46:a6:65:7d:be:4c:3d:8e: 24:a3:0b:d8:23:48:d1:15:c4:18:c0:b3:79:5c:e0: 97:c9:b2:b3:06:47:cf:cf:d7:be:7c:c0:aa:ba:c9: ac:a4:59:e5:53:a7:7b:85:44:7b:f7:0c:6b:f0:39: d5:52:d6:7f:29:af:0f:0f:28:eb:4c:46:0c:93:fe: 0d:71:0a:25:7c:85:9a:28:93:3b:f4:d0:69:ee:f2: 3b:24:7c:5c:f0:90:e5:09:da:42:5d:8d:13:62:fb: 29:a3:c3:ff:f5:c9:a4:97:4a:2d:5a:9a:12:a6:a2: ae:0f:ce:b2:31:08:8f:0a:78:cd:1e:fc:07:d0:ad: ad:4f:96:29:a2:10:e6:c5:75:ca:14:55:60:b2:34: b4:94:81:70:8a:d8:c3:a5:00:bd:ed:ea:05:f7:0c: cb:2d:1d:cb:29:c0:66:1b:35:4c:41:b9:df:bf:52: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:7B:42:8B:79:A8:8B:2A:0F:0F:A4:17:D0:E3:17:40:6A:03:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09b5432e-3b4c-46a5-83ab-97f59312f09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.13.252.0/23 Signature Algorithm: sha256WithRSAEncryption 87:70:a5:bf:c1:13:bd:20:1a:7b:88:20:3b:b9:95:3c:7a:14: 11:85:0a:d8:bb:d7:3b:f7:0c:c3:71:87:1c:21:99:93:f1:81: 10:a7:e5:cc:dc:7e:bd:9e:f0:05:8b:de:ce:b7:11:b8:73:b0: e4:c7:b2:29:ed:fe:3c:5e:8b:14:13:b0:68:db:2d:58:7f:66: 7f:73:98:b2:80:b1:e9:12:ed:60:12:73:29:d8:d4:be:56:6c: 41:b9:56:f3:9e:39:92:08:1a:40:02:bf:1e:0b:c8:00:30:15: 05:89:a4:67:52:42:22:ac:c9:6c:d6:56:70:56:95:8d:ec:7a: dd:18:46:79:5c:ce:1b:87:1b:6d:68:74:cb:c9:bc:76:bc:0b: 92:05:cb:1b:72:0a:5d:33:55:4c:dc:ee:13:ef:a9:cd:b9:4e: 64:f4:5a:20:c0:27:27:bc:98:3c:9a:60:b6:c4:fc:e2:e0:90: f5:8b:94:ab:e8:26:92:61:7b:65:eb:db:23:5b:c5:c4:f7:c6: c7:fa:c6:bf:7d:ad:68:0a:e1:46:56:9b:ad:74:c7:8e:79:e3: 84:f0:84:83:77:78:70:84:4b:59:a6:e3:55:c8:e5:01:12:ad: 8d:a8:09:7c:6e:8c:f7:57:a9:97:35:98:61:3c:32:f1:dc:7e: 7a:45:3a:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYJpjNE6YldWFYyDo19r7yNZgNSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTU0ODI5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWJmY2MzNGZmOTA3MTFmZDE2NTZiYmIyZTU2ZjgwNzUw NDFiZjg1MjY1MzlhNjI5ZjI1ZjM3YWU3Zjg3M2E2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpYyt6IRkhQqyxt9OnmtuR720zDWK72UxKjKQfdy1ius80 Xe0410tcp6eVig/KVt5zuPgW4F1Ux73GZ0Qi/6+uXC/puElMPS06Ams3iI7rLoJG pmV9vkw9jiSjC9gjSNEVxBjAs3lc4JfJsrMGR8/P1758wKq6yaykWeVTp3uFRHv3 DGvwOdVS1n8prw8PKOtMRgyT/g1xCiV8hZookzv00Gnu8jskfFzwkOUJ2kJdjRNi +ymjw//1yaSXSi1amhKmoq4PzrIxCI8KeM0e/AfQra1PlimiEObFdcoUVWCyNLSU gXCK2MOlAL3t6gX3DMstHcspwGYbNUxBud+/UtfdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULu57Qot5qIsqDw+kF9DjF0BqA7MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5YjU0MzJlLTNiNGMtNDZhNS04M2FiLTk3ZjU5MzEyZjA5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0DfwwDQYJKoZIhvcNAQELBQADggEBAIdwpb/BE70gGnuIIDu5lTx6FBGF Cti71zv3DMNxhxwhmZPxgRCn5czcfr2e8AWL3s63EbhzsOTHsint/jxeixQTsGjb LVh/Zn9zmLKAsekS7WAScynY1L5WbEG5VvOeOZIIGkACvx4LyAAwFQWJpGdSQiKs yWzWVnBWlY3set0YRnlczhuHG21odMvJvHa8C5IFyxtyCl0zVUzc7hPvqc25TmT0 WiDAJye8mDyaYLbE/OLgkPWLlKvoJpJhe2Xr2yNbxcT3xsf6xr99rWgK4UZWm610 x45544TwhIN3eHCES1mm41XI5QESrY2oCXxujPdXqZc1mGE8MvHcfnpFOu0= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:38 2025 by rpki-client