$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10226b64-8485-4c5c-9cee-9f202e772790.roa File: 10226b64-8485-4c5c-9cee-9f202e772790.roa (raw, json) Hash identifier: NpchLoAPAcDhSDH6XFZbp/tnuZFMm4FvW/2EvDO9YXs= Subject key identifier: FA:9C:D4:A6:EB:F8:C6:2E:14:E4:18:6B:62:96:80:89:AC:33:52:30 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 499691C0CBAE7847ABF1D7E53F237C3645DDE51C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10226b64-8485-4c5c-9cee-9f202e772790.roa Signing time: Fri 10 Oct 2025 15:58:57 +0000 ROA not before: Fri 10 Oct 2025 15:58:57 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:96:91:c0:cb:ae:78:47:ab:f1:d7:e5:3f:23:7c:36:45:dd:e5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:58:57 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=7d099915a8ff8e210ad4a21e69f90c5d0eb6a6bd28b628b7527891d6168b9bae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:98:65:ec:59:94:68:59:bf:9c:1f:0e:1e: 69:bf:16:03:c9:c1:f8:50:ee:2a:bc:8a:d5:0f:91: 94:ce:00:c0:f1:8d:81:60:d0:28:2e:88:43:42:91: 92:70:c7:37:f4:c8:0c:3e:22:b8:7a:67:a1:35:aa: a9:9c:34:ae:20:6e:e1:21:de:ee:6c:11:9f:b1:7f: ed:50:0e:33:89:42:b2:cf:20:b5:5c:be:3b:bc:81: 91:d8:16:88:58:ab:62:f5:ad:02:61:f7:b0:34:cf: e7:3e:8a:59:8a:63:e6:87:bb:ea:32:78:f0:1d:ac: 94:75:d3:c4:0b:c3:8a:e6:8e:6e:1e:c7:9c:f5:7c: dc:3b:79:62:d6:fe:87:f1:91:0b:1f:29:81:58:8d: a2:b3:3f:43:a8:c9:69:09:cb:c0:e4:f1:9d:4d:2f: 9d:cd:23:f4:a8:2e:e3:fd:a3:6f:0f:b4:e5:88:c6: c7:f2:78:1f:3b:ff:ef:c5:fe:c4:ea:5a:0c:83:65: 07:7d:99:b7:0e:b9:e3:c1:fc:93:c7:c9:f4:6b:fe: 02:d3:ee:3c:51:b1:53:6e:a9:64:45:f9:9d:c7:52: 0e:c5:02:b9:e3:9d:07:41:ae:d8:de:84:98:39:9f: c4:57:dc:af:10:72:1e:d1:75:81:d8:90:55:5b:8f: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:D4:A6:EB:F8:C6:2E:14:E4:18:6B:62:96:80:89:AC:33:52:30 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10226b64-8485-4c5c-9cee-9f202e772790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.0.0/17 Signature Algorithm: sha256WithRSAEncryption 97:85:07:02:5c:98:8b:23:1f:4e:c2:a8:84:48:72:50:9a:32: 9f:17:59:22:91:c1:89:88:14:40:45:b2:f4:e6:ab:15:0d:53: 50:1e:29:98:56:e9:6a:39:2b:28:70:15:21:f1:46:1d:f1:77: 87:4e:72:2a:15:9a:1a:38:92:cf:f8:2d:e3:6e:b1:c9:2c:0b: 5c:6c:78:3a:55:c3:60:ff:a7:d0:8c:44:6e:60:b6:22:e1:39: 7f:5a:7c:27:49:fb:cf:db:fd:8e:76:f9:90:e2:ed:0f:2e:37: ad:4f:4f:1e:1b:b2:d9:67:63:b8:51:4f:08:0c:d7:b6:35:f1: 84:d2:a8:c5:03:37:e2:85:c9:45:3f:2e:9a:6a:ea:5a:ed:01: 72:4c:99:0d:9d:08:d9:bb:9b:4f:5f:03:16:ca:af:27:54:f9: 96:ef:18:68:b9:38:44:08:20:1a:96:60:a9:d4:a3:5c:17:83: 8e:f3:64:47:97:e8:c2:7d:7f:72:c5:dc:f3:1b:45:7a:3a:d4: 65:1a:dd:7e:5b:49:87:04:01:05:58:b7:a3:36:4b:52:a6:26: 0b:f3:51:48:84:6e:6b:83:84:5b:94:dd:cc:46:f3:28:ac:93: 34:7b:53:ca:59:22:9a:ca:cc:f6:69:1c:63:d6:5d:ca:71:25: 84:76:21:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSZaRwMuueEer8dflPyN8NkXd5RwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTU1ODU3WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDA5OTkxNWE4ZmY4ZTIxMGFkNGEyMWU2OWY5MGM1ZDBl YjZhNmJkMjhiNjI4Yjc1Mjc4OTFkNjE2OGI5YmFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrYZhl7FmUaFm/nB8OHmm/FgPJwfhQ7iq8itUPkZTOAMDx jYFg0CguiENCkZJwxzf0yAw+Irh6Z6E1qqmcNK4gbuEh3u5sEZ+xf+1QDjOJQrLP ILVcvju8gZHYFohYq2L1rQJh97A0z+c+ilmKY+aHu+oyePAdrJR108QLw4rmjm4e x5z1fNw7eWLW/ofxkQsfKYFYjaKzP0OoyWkJy8Dk8Z1NL53NI/SoLuP9o28PtOWI xsfyeB87/+/F/sTqWgyDZQd9mbcOuePB/JPHyfRr/gLT7jxRsVNuqWRF+Z3HUg7F ArnjnQdBrtjehJg5n8RX3K8Qch7RdYHYkFVbjwF1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+pzUpuv4xi4U5BhrYpaAiawzUjAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwMjI2YjY0LTg0ODUtNGM1Yy05Y2VlLTlmMjAyZTc3Mjc5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc03gAwDQYJKoZIhvcNAQELBQADggEBAJeFBwJcmIsjH07CqIRIclCaMp8X WSKRwYmIFEBFsvTmqxUNU1AeKZhW6Wo5KyhwFSHxRh3xd4dOcioVmho4ks/4LeNu scksC1xseDpVw2D/p9CMRG5gtiLhOX9afCdJ+8/b/Y52+ZDi7Q8uN61PTx4bstln Y7hRTwgM17Y18YTSqMUDN+KFyUU/Lppq6lrtAXJMmQ2dCNm7m09fAxbKrydU+Zbv GGi5OEQIIBqWYKnUo1wXg47zZEeX6MJ9f3LF3PMbRXo61GUa3X5bSYcEAQVYt6M2 S1KmJgvzUUiEbmuDhFuU3cxG8yiskzR7U8pZIprKzPZpHGPWXcpxJYR2IVE= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:23 2025 by rpki-client