$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1267e82a-7f12-45b7-a2e5-131a59a06c58.roa File: 1267e82a-7f12-45b7-a2e5-131a59a06c58.roa (raw, json) Hash identifier: fk4cfnRtebUfqY5h+yJwGdKWZ3KBhk53dPmDa/addgw= Subject key identifier: EA:C3:60:CD:FA:60:D1:B7:55:04:18:DB:A4:FC:C3:C7:88:50:C9:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 312A023FE221F42DE9AB226B65FF816B6653C528 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1267e82a-7f12-45b7-a2e5-131a59a06c58.roa Signing time: Fri 26 Sep 2025 16:57:54 +0000 ROA not before: Fri 26 Sep 2025 16:57:54 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2a:02:3f:e2:21:f4:2d:e9:ab:22:6b:65:ff:81:6b:66:53:c5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:57:54 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c7c94cd2befa2b88a80f77e49a4ae3878f9cca7c4a426e25ea425de79c3d61af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:0e:bc:05:42:8c:e8:ae:7d:e1:f0:34:94: b5:3a:9c:88:e9:ef:84:79:c3:a2:f6:0c:0e:17:e9: c4:f9:c3:0a:18:a0:64:0f:7f:21:df:a1:63:84:cb: 52:70:85:8b:76:c9:c7:08:74:35:48:c9:18:27:50: 60:5e:66:f0:10:3f:fb:b2:a8:88:44:37:91:0a:59: 2f:99:9b:ca:c5:db:b7:c8:23:1f:da:4f:81:b6:3e: 95:2c:67:39:2d:48:08:4b:21:83:a5:3a:11:a8:4b: dc:3d:fe:1c:c1:f4:8b:fd:3b:e7:a4:60:67:71:ad: df:c3:ec:ce:c0:21:76:e0:2a:67:12:a3:3c:ab:ed: 98:25:1e:74:23:68:7b:b0:3a:97:f0:5e:25:b5:a7: 7e:9b:2f:ad:7d:a9:2e:00:00:41:bf:8f:59:97:38: a7:d1:8e:4b:a3:d9:00:43:a8:7f:30:0a:85:81:6c: ba:36:90:3c:56:72:e2:3d:c2:84:07:b0:88:3d:51: 58:2c:d9:d8:36:1e:36:54:58:54:c3:fa:11:d6:ef: 29:42:24:22:2f:30:f9:c2:ec:13:7a:4e:98:b9:a1: 87:9d:59:ba:24:f2:b1:29:37:09:0b:c8:5e:af:3b: eb:d6:30:a1:57:28:f6:21:08:86:59:52:c8:dd:1a: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:60:CD:FA:60:D1:B7:55:04:18:DB:A4:FC:C3:C7:88:50:C9:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1267e82a-7f12-45b7-a2e5-131a59a06c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.41.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:06:66:f4:65:87:c5:02:be:e8:b7:a5:00:f2:fe:a0:95:f0: 2c:82:cf:2e:38:e0:e6:fc:7d:36:30:20:b5:fe:52:58:d9:e4: 4b:c2:dc:51:d7:3a:3b:c8:f4:7c:e4:8e:cf:42:4d:93:f7:d9: 95:2f:75:67:32:74:78:19:16:de:83:46:36:82:0f:f2:b2:1c: 28:4a:d3:49:4f:1e:59:c5:5a:67:30:5f:70:9b:9b:a6:ef:30: f9:69:53:0f:5e:78:bf:d9:dd:2b:98:75:77:c3:6b:5a:53:a2: e8:b2:18:58:30:ac:c3:23:89:25:93:5f:a2:62:41:03:cd:c0: 0c:6e:d8:c2:fc:9e:f0:cd:6e:69:28:d7:06:0d:f7:e8:a5:b8: bb:c0:6d:c4:ff:5b:6c:56:5b:e7:ca:3f:a3:f1:35:b6:07:e3: ea:d4:b2:d6:c4:40:bb:85:d4:a4:27:d7:56:54:8d:93:31:e4: c5:bd:77:b7:ab:96:ce:73:22:27:21:ce:e6:c5:05:a3:b8:b7: 85:f0:b2:ba:a3:9e:cd:3d:8b:2b:b9:f4:18:8b:3c:44:1f:bb: 7f:48:90:62:f6:1b:66:24:55:ac:31:de:10:dc:32:19:ed:1f: 0a:72:9a:ae:bb:4a:dc:bf:27:02:8f:71:b8:ac:86:92:59:5c: 59:dc:bf:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMSoCP+Ih9C3pqyJrZf+Ba2ZTxSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTY1NzU0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2M5NGNkMmJlZmEyYjg4YTgwZjc3ZTQ5YTRhZTM4Nzhm OWNjYTdjNGE0MjZlMjVlYTQyNWRlNzljM2Q2MWFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClCg68BUKM6K594fA0lLU6nIjp74R5w6L2DA4X6cT5wwoY oGQPfyHfoWOEy1JwhYt2yccIdDVIyRgnUGBeZvAQP/uyqIhEN5EKWS+Zm8rF27fI Ix/aT4G2PpUsZzktSAhLIYOlOhGoS9w9/hzB9Iv9O+ekYGdxrd/D7M7AIXbgKmcS ozyr7ZglHnQjaHuwOpfwXiW1p36bL619qS4AAEG/j1mXOKfRjkuj2QBDqH8wCoWB bLo2kDxWcuI9woQHsIg9UVgs2dg2HjZUWFTD+hHW7ylCJCIvMPnC7BN6Tpi5oYed Wbok8rEpNwkLyF6vO+vWMKFXKPYhCIZZUsjdGm/PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6sNgzfpg0bdVBBjbpPzDx4hQyRAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNjdlODJhLTdmMTItNDViNy1hMmU1LTEzMWE1OWEwNmM1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XykwDQYJKoZIhvcNAQELBQADggEBABsGZvRlh8UCvui3pQDy/qCV8CyC zy444Ob8fTYwILX+UljZ5EvC3FHXOjvI9Hzkjs9CTZP32ZUvdWcydHgZFt6DRjaC D/KyHChK00lPHlnFWmcwX3Cbm6bvMPlpUw9eeL/Z3SuYdXfDa1pTouiyGFgwrMMj iSWTX6JiQQPNwAxu2ML8nvDNbmko1wYN9+iluLvAbcT/W2xWW+fKP6PxNbYH4+rU stbEQLuF1KQn11ZUjZMx5MW9d7erls5zIichzubFBaO4t4Xwsrqjns09iyu59BiL PEQfu39IkGL2G2YkVawx3hDcMhntHwpymq67Sty/JwKPcbishpJZXFncv9M= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:28 2025 by rpki-client