$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f8b7aab-c8fa-4d52-8a5f-3a26c6b53862.roa File: 0f8b7aab-c8fa-4d52-8a5f-3a26c6b53862.roa (raw, json) Hash identifier: jEBTQg0JGNiG4LAMONI2M2/zSx6DKFeRpWlhhqzcbA0= Subject key identifier: EF:26:36:14:99:FB:FF:99:27:FB:35:B8:92:5C:96:AB:8D:AF:74:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FB47972F90DEB710F834D27996322F3BA6433FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f8b7aab-c8fa-4d52-8a5f-3a26c6b53862.roa Signing time: Tue 23 Sep 2025 00:27:35 +0000 ROA not before: Tue 23 Sep 2025 00:27:35 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b4:79:72:f9:0d:eb:71:0f:83:4d:27:99:63:22:f3:ba:64:33:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:27:35 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=9f43853d14fe57109855305f3487e0458a3ee645b2990e4ca6146ae7ea8c57e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:d8:56:ed:eb:44:9b:c2:3d:65:e2:46:57: 3e:75:10:bd:b8:b2:46:71:8d:b1:e8:c5:4e:bd:d4: bb:71:45:03:93:25:7e:11:08:cb:38:ab:3d:63:ca: bd:49:67:77:87:bc:28:68:a9:80:c8:e7:31:27:4c: c4:82:c3:c9:7a:1b:eb:30:e0:e4:f4:56:9a:c2:8c: 3e:fa:ab:d3:6d:41:58:1f:61:ab:29:8e:2a:12:6f: 4e:68:82:f3:0f:28:8c:e6:88:5a:6f:7d:50:06:e4: 8f:77:67:96:b6:94:15:a4:f8:ef:0f:12:e3:e1:5a: c7:13:b4:b8:8f:49:de:f7:35:53:f3:be:1a:7c:30: aa:d5:2f:ee:e3:46:f7:7d:04:36:21:9d:b3:5e:46: 6a:fa:3c:2d:3b:9f:97:90:4c:d7:0d:28:df:43:3d: 13:a0:b0:c6:d5:f0:43:09:86:0f:72:3f:26:8f:2f: dc:76:00:83:79:63:50:86:dd:55:49:0f:00:ca:19: b7:ca:09:e5:5f:4b:f3:77:ae:7d:64:61:23:f0:32: 0f:96:df:60:43:a3:5f:e6:9d:b3:b4:79:6c:47:aa: 75:36:48:a3:7d:80:23:d0:0a:90:ee:35:11:f8:7a: fc:ba:07:5d:b6:97:82:1c:a7:ae:d4:55:86:74:20: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:26:36:14:99:FB:FF:99:27:FB:35:B8:92:5C:96:AB:8D:AF:74:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f8b7aab-c8fa-4d52-8a5f-3a26c6b53862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.34.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:1f:1c:06:d8:fa:fa:6d:02:e4:c3:95:21:20:44:aa:21:4e: de:3d:57:c7:30:bc:e8:6b:70:ef:04:e0:a8:00:0c:e8:65:63: 99:c4:fb:a8:4b:20:3e:e3:df:38:63:e5:62:4c:d8:cf:b4:98: 68:0b:14:50:8d:f4:7a:3c:33:f5:97:80:ce:2e:2b:50:03:dc: f6:d1:ab:07:d6:09:2d:09:5d:06:8e:be:17:92:8e:68:ce:9d: ca:f7:78:ab:5a:00:30:58:d0:3f:0a:00:b5:7e:6d:db:27:b6: 54:3e:9d:f8:27:b9:65:a9:c0:00:f8:c0:ef:cd:03:11:c5:91: 5b:c1:6b:d8:e4:3d:1e:d6:4a:b8:1c:0e:c6:8c:91:12:95:ac: 5c:f7:de:3a:b2:a2:7c:a9:2d:89:67:7a:c8:b6:77:6b:86:49: af:c7:b7:01:05:30:25:4c:7e:7b:f0:f7:18:31:3b:28:77:95: 92:ba:1c:9b:14:15:be:15:27:e9:8d:af:15:38:23:7b:61:2e: 38:d2:29:05:39:f0:09:e8:f1:e0:ab:f9:14:84:76:d9:8c:df: 97:4f:6d:34:85:09:16:57:01:53:ff:6b:b0:54:87:1a:8f:88: 9a:21:37:2d:09:c3:78:98:f9:51:13:13:7b:cb:1c:c1:3a:2f: 9b:24:53:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb7R5cvkN63EPg00nmWMi87pkM/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAyNzM1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjQzODUzZDE0ZmU1NzEwOTg1NTMwNWYzNDg3ZTA0NThh M2VlNjQ1YjI5OTBlNGNhNjE0NmFlN2VhOGM1N2UyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQK9hW7etEm8I9ZeJGVz51EL24skZxjbHoxU691LtxRQOT JX4RCMs4qz1jyr1JZ3eHvChoqYDI5zEnTMSCw8l6G+sw4OT0VprCjD76q9NtQVgf YaspjioSb05ogvMPKIzmiFpvfVAG5I93Z5a2lBWk+O8PEuPhWscTtLiPSd73NVPz vhp8MKrVL+7jRvd9BDYhnbNeRmr6PC07n5eQTNcNKN9DPROgsMbV8EMJhg9yPyaP L9x2AIN5Y1CG3VVJDwDKGbfKCeVfS/N3rn1kYSPwMg+W32BDo1/mnbO0eWxHqnU2 SKN9gCPQCpDuNRH4evy6B122l4Icp67UVYZ0IHohAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7yY2FJn7/5kn+zW4klyWq42vdM4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmOGI3YWFiLWM4ZmEtNGQ1Mi04YTVmLTNhMjZjNmI1Mzg2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VSIwDQYJKoZIhvcNAQELBQADggEBAGsfHAbY+vptAuTDlSEgRKohTt49 V8cwvOhrcO8E4KgADOhlY5nE+6hLID7j3zhj5WJM2M+0mGgLFFCN9Ho8M/WXgM4u K1AD3PbRqwfWCS0JXQaOvheSjmjOncr3eKtaADBY0D8KALV+bdsntlQ+nfgnuWWp wAD4wO/NAxHFkVvBa9jkPR7WSrgcDsaMkRKVrFz33jqyonypLYlnesi2d2uGSa/H twEFMCVMfnvw9xgxOyh3lZK6HJsUFb4VJ+mNrxU4I3thLjjSKQU58Ano8eCr+RSE dtmM35dPbTSFCRZXAVP/a7BUhxqPiJohNy0Jw3iY+VETE3vLHME6L5skU1A= -----END CERTIFICATE-----Generated at Fri Oct 17 23:59:52 2025 by rpki-client