$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0afaeb49-72ee-4282-a1c9-7627e3545892.roa File: 0afaeb49-72ee-4282-a1c9-7627e3545892.roa (raw, json) Hash identifier: 8YtZgxN0/4JrHcu0U+Af9KCVpz2ooe1HGCxZaHuMqSI= Subject key identifier: DA:4E:14:1B:11:FD:CD:A6:AF:C9:B0:9E:30:C8:94:0A:A3:F8:D8:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 531CA75BB1959C5143BAB26A34DF6E8F318B0F41 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0afaeb49-72ee-4282-a1c9-7627e3545892.roa Signing time: Mon 22 Sep 2025 23:44:05 +0000 ROA not before: Mon 22 Sep 2025 23:44:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1c:a7:5b:b1:95:9c:51:43:ba:b2:6a:34:df:6e:8f:31:8b:0f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:44:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=dd6ccbd354194de2e555edfb0386a6ba966db18acd50a96866ae8b91dddb616c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:89:e9:de:bb:f7:4f:6c:96:e2:f5:30:9f:f6: f9:a0:f0:5c:c1:ae:48:40:11:8b:a1:5f:48:d5:e0: 3c:9e:19:97:b0:ee:9b:e7:83:b9:c5:2b:b0:fc:36: e1:af:ab:db:41:45:65:1b:86:60:d1:30:4f:aa:d8: fa:ed:89:da:e1:36:7e:51:db:4d:db:79:fe:c2:aa: 94:a6:20:f2:c7:e9:6e:9c:5e:0a:bf:f0:75:f3:90: 20:7c:c6:c5:86:a6:aa:48:fc:bf:7e:c5:99:1c:22: f0:e9:40:fc:77:54:7a:21:41:55:ab:e2:f9:93:a2: 41:0e:0b:63:87:ef:c2:79:f9:1e:35:70:f1:87:98: 6e:18:f4:1c:5f:ba:48:bc:e8:53:d4:26:00:9f:0a: b1:b9:76:50:29:26:5a:8d:6d:49:0f:5c:19:7c:89: 46:cd:76:01:9c:1b:44:5f:12:1d:a0:28:eb:ed:e0: 8d:14:91:84:dc:47:83:62:3f:55:fa:61:db:38:0f: bd:3b:17:2c:eb:23:93:e1:16:40:fb:24:6c:74:62: d9:55:30:6d:c3:3b:3e:25:e1:b1:3d:56:c7:96:95: 73:3b:05:1c:99:0b:10:c6:48:10:5a:99:9d:bf:16: 28:6f:1b:ec:8f:ed:46:55:1c:d9:f4:9e:18:55:f6: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4E:14:1B:11:FD:CD:A6:AF:C9:B0:9E:30:C8:94:0A:A3:F8:D8:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0afaeb49-72ee-4282-a1c9-7627e3545892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.140.0/24 Signature Algorithm: sha256WithRSAEncryption aa:3d:54:c2:30:e5:19:82:41:7a:ea:6a:21:02:18:81:ea:d9: 48:0e:4f:e0:8a:46:1f:54:ec:2c:a2:44:86:b0:84:00:dd:7a: 14:98:00:bf:db:d9:2e:2d:30:de:a1:9e:9f:2f:58:97:51:14: 51:1b:e5:ef:ff:50:b1:85:51:fd:b1:f2:8c:f4:0e:28:74:04: 94:d0:91:98:eb:ef:1c:b0:de:72:35:21:95:fd:10:b5:95:b5: 2c:6d:20:66:70:b9:de:7e:23:77:fb:d0:6a:9a:5f:76:34:38: 7e:da:b5:f7:e9:f0:b4:b8:9c:61:22:6c:e2:d0:64:af:32:0a: e7:04:cd:29:f9:86:a5:d9:aa:95:2a:db:73:0c:a1:29:6f:7f: 9c:9c:f3:04:4f:21:60:75:ed:e8:82:03:47:c3:ae:be:84:81: 52:82:1d:c7:e9:fe:b3:77:7f:82:eb:09:70:fb:e4:b0:82:af: a0:82:26:f3:dd:ef:ee:fb:a4:75:9b:ec:11:8d:21:47:a8:42: 3b:2b:eb:19:1d:bf:be:ae:fb:06:25:47:2f:d7:6b:68:66:a9: da:af:f9:4e:6e:9b:b3:61:f5:c3:b8:e2:e5:af:0e:64:0d:12: 68:1a:16:a5:ed:d6:5b:a9:37:e6:06:3d:63:56:e3:c3:47:10: 2c:79:4f:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUxynW7GVnFFDurJqNN9ujzGLD0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM0NDA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDZjY2JkMzU0MTk0ZGUyZTU1NWVkZmIwMzg2YTZiYTk2 NmRiMThhY2Q1MGE5Njg2NmFlOGI5MWRkZGI2MTZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtieneu/dPbJbi9TCf9vmg8FzBrkhAEYuhX0jV4DyeGZew 7pvng7nFK7D8NuGvq9tBRWUbhmDRME+q2PrtidrhNn5R203bef7CqpSmIPLH6W6c Xgq/8HXzkCB8xsWGpqpI/L9+xZkcIvDpQPx3VHohQVWr4vmTokEOC2OH78J5+R41 cPGHmG4Y9Bxfuki86FPUJgCfCrG5dlApJlqNbUkPXBl8iUbNdgGcG0RfEh2gKOvt 4I0UkYTcR4NiP1X6Yds4D707FyzrI5PhFkD7JGx0YtlVMG3DOz4l4bE9VseWlXM7 BRyZCxDGSBBamZ2/FihvG+yP7UZVHNn0nhhV9lj1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2k4UGxH9zaavybCeMMiUCqP42OQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBhZmFlYjQ5LTcyZWUtNDI4Mi1hMWM5LTc2MjdlMzU0NTg5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VIwwDQYJKoZIhvcNAQELBQADggEBAKo9VMIw5RmCQXrqaiECGIHq2UgO T+CKRh9U7CyiRIawhADdehSYAL/b2S4tMN6hnp8vWJdRFFEb5e//ULGFUf2x8oz0 Dih0BJTQkZjr7xyw3nI1IZX9ELWVtSxtIGZwud5+I3f70GqaX3Y0OH7atffp8LS4 nGEibOLQZK8yCucEzSn5hqXZqpUq23MMoSlvf5yc8wRPIWB17eiCA0fDrr6EgVKC Hcfp/rN3f4LrCXD75LCCr6CCJvPd7+77pHWb7BGNIUeoQjsr6xkdv76u+wYlRy/X a2hmqdqv+U5um7Nh9cO44uWvDmQNEmgaFqXt1lupN+YGPWNW48NHECx5T2A= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:15 2025 by rpki-client