$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1240a369-0428-45f9-8994-685157217ea0.roa File: 1240a369-0428-45f9-8994-685157217ea0.roa (raw, json) Hash identifier: vSSZj0/KvD0TlBCw1B8v2/iXHEDDeQlIUCP/xI4ufWU= Subject key identifier: C4:D7:1D:BE:67:EC:21:7B:49:AE:6F:32:5E:EB:7A:C3:4D:B8:0E:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 225C8057E6A74A58A2C8F2CE3141FB29ABA6FACC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1240a369-0428-45f9-8994-685157217ea0.roa Signing time: Thu 16 Oct 2025 17:21:03 +0000 ROA not before: Thu 16 Oct 2025 17:21:03 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5c:80:57:e6:a7:4a:58:a2:c8:f2:ce:31:41:fb:29:ab:a6:fa:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 17:21:03 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=afc10d5bbe378a4e353676ec29f32db6b07ae4b81c9eb6408e8c067c381effe1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:3e:a7:86:26:91:e1:e1:d6:1c:d5:fd:f8: a3:68:5f:37:e3:7a:cd:9c:b1:c9:70:9c:56:d2:49: 3a:95:47:ce:f9:9f:fd:a8:78:f4:db:67:71:da:12: 53:52:fa:de:f2:dc:e2:5c:90:a6:f4:7b:73:dc:03: b3:98:a0:80:05:ba:aa:25:c4:58:c2:aa:83:ee:e2: 3e:ad:a2:a6:1f:ab:22:9b:71:62:00:17:91:90:30: 22:c4:1a:c1:7c:8a:67:95:75:09:60:1f:a5:7f:d2: 58:7e:64:f7:55:40:fa:f8:e1:d2:94:15:95:c4:91: 3f:6e:44:5b:21:0f:78:6c:6b:2c:be:4a:92:2a:b9: b7:4e:42:b6:44:2d:43:22:5d:cb:25:b6:26:81:f1: b6:59:cc:3b:02:86:6d:70:0d:ca:05:29:0e:58:f2: 91:c2:48:2d:65:97:84:dc:79:01:fe:05:94:09:9f: 54:0f:70:d6:b0:4f:cc:4f:0d:39:92:62:b9:ab:95: 03:18:61:ee:ee:d4:49:59:aa:88:1d:b4:f3:2e:32: 3e:65:dc:3a:d8:1a:44:c5:e9:0c:a5:65:86:f8:18: 74:fa:44:58:4e:32:b4:4a:3d:51:e4:af:dd:5d:bd: 14:c6:91:9c:26:ef:c2:8f:11:62:f6:a9:aa:24:5d: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:1D:BE:67:EC:21:7B:49:AE:6F:32:5E:EB:7A:C3:4D:B8:0E:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1240a369-0428-45f9-8994-685157217ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.220.0/24 Signature Algorithm: sha256WithRSAEncryption 30:6f:7e:dd:cb:74:95:1f:49:4d:91:56:a0:0e:5d:b3:8c:9c: ec:b5:4b:a0:41:b5:ec:6b:2f:99:9e:88:68:62:29:51:a9:fe: f1:28:e8:53:dc:30:94:60:b5:87:2e:85:56:e5:c1:13:36:4d: 17:82:22:8f:8e:04:e6:71:68:87:96:a4:42:2d:24:c6:41:55: ea:47:e4:e0:2d:c1:3c:d6:ea:76:41:84:94:30:4c:86:43:27: e8:42:c8:eb:21:60:70:b1:bb:09:30:15:e0:3d:0a:90:7d:36: 5c:88:1a:c5:48:50:5f:9e:bf:15:24:97:6a:0c:3a:02:20:f8: 90:7b:82:f2:29:17:5c:a7:97:05:64:cc:0a:ab:26:69:9a:43: c6:e3:4f:af:ea:b9:8f:72:9b:dd:f2:57:f7:79:79:35:e9:b6: 8a:1f:a5:5f:48:ca:4b:82:2c:05:9f:60:60:20:51:00:30:83: 79:f0:ab:7f:a7:90:80:bc:16:d2:20:ae:91:51:50:6f:7b:55: 78:0e:a7:3b:d8:7f:13:ef:8b:63:d5:83:43:f6:7c:57:3b:be: 2a:a9:24:2e:d1:11:34:e9:b5:b6:0c:18:c9:4a:b9:36:53:87: 19:5b:da:2f:13:e3:0b:c0:76:84:11:0c:45:db:98:e0:6f:e4: 63:82:ac:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIlyAV+anSliiyPLOMUH7Kaum+swwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTcyMTAzWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmMxMGQ1YmJlMzc4YTRlMzUzNjc2ZWMyOWYzMmRiNmIw N2FlNGI4MWM5ZWI2NDA4ZThjMDY3YzM4MWVmZmUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCulz6nhiaR4eHWHNX9+KNoXzfjes2csclwnFbSSTqVR875 n/2oePTbZ3HaElNS+t7y3OJckKb0e3PcA7OYoIAFuqolxFjCqoPu4j6toqYfqyKb cWIAF5GQMCLEGsF8imeVdQlgH6V/0lh+ZPdVQPr44dKUFZXEkT9uRFshD3hsayy+ SpIqubdOQrZELUMiXcsltiaB8bZZzDsChm1wDcoFKQ5Y8pHCSC1ll4TceQH+BZQJ n1QPcNawT8xPDTmSYrmrlQMYYe7u1ElZqogdtPMuMj5l3DrYGkTF6QylZYb4GHT6 RFhOMrRKPVHkr91dvRTGkZwm78KPEWL2qaokXYufAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxNcdvmfsIXtJrm8yXut6w024DrkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNDBhMzY5LTA0MjgtNDVmOS04OTk0LTY4NTE1NzIxN2VhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA03twwDQYJKoZIhvcNAQELBQADggEBADBvft3LdJUfSU2RVqAOXbOMnOy1 S6BBtexrL5meiGhiKVGp/vEo6FPcMJRgtYcuhVblwRM2TReCIo+OBOZxaIeWpEIt JMZBVepH5OAtwTzW6nZBhJQwTIZDJ+hCyOshYHCxuwkwFeA9CpB9NlyIGsVIUF+e vxUkl2oMOgIg+JB7gvIpF1ynlwVkzAqrJmmaQ8bjT6/quY9ym93yV/d5eTXptoof pV9IykuCLAWfYGAgUQAwg3nwq3+nkIC8FtIgrpFRUG97VXgOpzvYfxPvi2PVg0P2 fFc7viqpJC7RETTptbYMGMlKuTZThxlb2i8T4wvAdoQRDEXbmOBv5GOCrCY= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:31 2025 by rpki-client