$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16758e9b-c69b-45ed-bb87-43502a556d28.roa File: 16758e9b-c69b-45ed-bb87-43502a556d28.roa (raw, json) Hash identifier: AJdZSjNlDofFQsR9G0ar6Gx9naD+kuuk1gb2BbfgmAM= Subject key identifier: A8:76:C8:AB:20:FB:F6:93:83:AC:7E:77:A4:6C:7E:F5:1F:C6:CF:3B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B5A76D9BBF7AB1572CB1E926FBC4B2E34682851 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16758e9b-c69b-45ed-bb87-43502a556d28.roa Signing time: Mon 22 Sep 2025 23:42:17 +0000 ROA not before: Mon 22 Sep 2025 23:42:17 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5a:76:d9:bb:f7:ab:15:72:cb:1e:92:6f:bc:4b:2e:34:68:28:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:42:17 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=efa2a387fa8c323cc53af09f146cd8ae1092dc9c2f98f30db9adaf97c29b00be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:d6:33:84:c6:9a:7c:cf:52:aa:b5:dc:1e: 6f:20:e2:66:9b:27:ce:a1:dd:58:67:4d:a6:ff:69: d8:b9:6a:75:bf:3d:ea:73:84:76:92:87:77:3c:13: 3d:7f:84:5f:97:5a:9c:1c:84:65:5a:a4:01:17:0d: 07:ab:28:ab:3e:70:cc:cf:9d:9c:85:44:04:c0:d3: e7:c7:85:b5:89:99:2e:29:5f:64:7b:da:e7:a3:05: 68:62:6a:4a:38:d4:4b:94:2e:af:33:4e:37:68:55: a8:48:01:f2:3a:fa:37:12:73:eb:5c:74:fe:25:0a: ac:72:f6:4c:4e:8b:ab:ed:50:9c:1a:45:9a:4d:25: c9:9c:19:ef:1f:ee:dd:19:87:43:17:bf:45:0c:fb: 93:8e:11:fa:28:17:df:83:e3:b8:be:83:37:e4:bd: 15:09:74:7f:31:15:c9:b5:61:37:02:ad:d3:29:a3: a2:2e:f1:cd:d4:8e:24:bb:7f:2d:e8:3d:84:b6:2d: e7:68:5b:51:22:d8:de:3c:b7:b6:bf:a4:86:17:63: e0:a8:19:55:3e:b5:89:61:ba:ae:15:6b:98:1b:e1: 4b:da:8d:34:36:f0:21:aa:48:2a:6e:30:3a:e8:23: be:28:b4:c9:8e:b7:f0:e8:e6:44:83:e0:2a:77:e9: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:76:C8:AB:20:FB:F6:93:83:AC:7E:77:A4:6C:7E:F5:1F:C6:CF:3B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16758e9b-c69b-45ed-bb87-43502a556d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.120.0/24 Signature Algorithm: sha256WithRSAEncryption 33:1e:eb:bc:e1:3f:19:c0:6d:d8:98:69:c6:95:9f:27:7e:0c: 24:b3:49:8a:1c:6b:27:3e:6f:8a:b0:32:1a:83:9b:32:c5:76: 8d:81:a8:8c:db:75:f6:de:24:91:1c:28:ac:41:d7:00:b6:d6: bb:a3:8e:77:e7:ae:0c:be:d4:7e:e3:97:9c:ca:d9:85:b1:4b: 65:d2:b4:ff:1c:2e:d7:2d:49:0a:90:0e:44:73:9f:4d:f1:1c: ac:10:95:d2:95:d0:23:45:0b:da:6c:20:8e:b7:c8:91:5a:4a: 74:10:f7:f2:3c:44:99:86:f7:2b:53:60:5b:6f:18:05:c7:e7: c9:da:9a:3f:bc:74:5b:db:ec:3c:b8:0d:55:33:71:6c:29:82: c5:3f:d6:86:4d:84:47:c8:96:05:bb:b9:b6:af:8e:a1:29:36: df:c6:39:5a:f2:c9:83:21:ef:c9:fe:54:03:0a:b0:70:bf:af: 22:1c:ee:38:fe:38:97:d8:6d:ad:d0:18:15:ea:03:63:d1:35: 16:17:70:56:fb:7b:16:9e:74:08:ae:e7:c5:f3:96:26:31:bc: 98:0d:51:fa:3f:41:84:4c:fa:df:ca:21:4b:6f:f9:e4:1b:fe: 76:c1:e9:24:b8:0e:b4:ed:de:fe:e2:45:93:8a:06:b7:a8:06: 33:4f:85:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK1p22bv3qxVyyx6Sb7xLLjRoKFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM0MjE3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmEyYTM4N2ZhOGMzMjNjYzUzYWYwOWYxNDZjZDhhZTEw OTJkYzljMmY5OGYzMGRiOWFkYWY5N2MyOWIwMGJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqEdYzhMaafM9SqrXcHm8g4mabJ86h3VhnTab/adi5anW/ PepzhHaSh3c8Ez1/hF+XWpwchGVapAEXDQerKKs+cMzPnZyFRATA0+fHhbWJmS4p X2R72uejBWhiako41EuULq8zTjdoVahIAfI6+jcSc+tcdP4lCqxy9kxOi6vtUJwa RZpNJcmcGe8f7t0Zh0MXv0UM+5OOEfooF9+D47i+gzfkvRUJdH8xFcm1YTcCrdMp o6Iu8c3UjiS7fy3oPYS2LedoW1Ei2N48t7a/pIYXY+CoGVU+tYlhuq4Va5gb4Uva jTQ28CGqSCpuMDroI74otMmOt/Do5kSD4Cp36Z0DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqHbIqyD79pODrH53pGx+9R/GzzswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2NzU4ZTliLWM2OWItNDVlZC1iYjg3LTQzNTAyYTU1NmQyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VHgwDQYJKoZIhvcNAQELBQADggEBADMe67zhPxnAbdiYacaVnyd+DCSz SYocayc+b4qwMhqDmzLFdo2BqIzbdfbeJJEcKKxB1wC21rujjnfnrgy+1H7jl5zK 2YWxS2XStP8cLtctSQqQDkRzn03xHKwQldKV0CNFC9psII63yJFaSnQQ9/I8RJmG 9ytTYFtvGAXH58namj+8dFvb7Dy4DVUzcWwpgsU/1oZNhEfIlgW7ubavjqEpNt/G OVryyYMh78n+VAMKsHC/ryIc7jj+OJfYba3QGBXqA2PRNRYXcFb7exaedAiu58Xz liYxvJgNUfo/QYRM+t/KIUtv+eQb/nbB6SS4DrTt3v7iRZOKBreoBjNPhUg= -----END CERTIFICATE-----Generated at Sat Oct 18 05:07:07 2025 by rpki-client