$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b2634b0-99ce-4987-a8f3-d08714c11e82.roa File: 1b2634b0-99ce-4987-a8f3-d08714c11e82.roa (raw, json) Hash identifier: zIuVlYvu93GcteG9ACX7ExUiwfTzJxYotwLnqWF2pB4= Subject key identifier: 88:BB:34:00:AC:1C:87:E7:52:62:6E:B2:94:0D:35:C2:82:1D:2F:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 297ED9134290D5D284BC347D902C20541EBB56 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b2634b0-99ce-4987-a8f3-d08714c11e82.roa Signing time: Fri 26 Sep 2025 16:50:18 +0000 ROA not before: Fri 26 Sep 2025 16:50:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.119.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7e:d9:13:42:90:d5:d2:84:bc:34:7d:90:2c:20:54:1e:bb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:50:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=2e71266e301a001b6d645b48aff0a807cb9a4b5c6ad09291a4e39d69201f3226, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:1f:83:0e:fc:f1:4d:a1:d7:1b:fb:ab:22: 9b:4d:be:92:2c:e5:bc:11:fe:4f:af:63:b0:9a:5c: b5:51:ab:79:7b:27:59:11:0c:fa:bb:8d:27:67:38: dc:59:96:54:b4:3a:e5:83:f9:e4:37:91:2e:f5:b9: 0f:54:79:17:01:f8:0e:6f:53:c6:0d:af:64:20:d2: fa:14:2a:d1:c7:1d:8c:f5:da:ff:77:b8:68:ed:ee: 49:01:5c:20:b4:96:3a:1f:bb:7a:18:18:7e:20:0a: f1:41:f6:1d:6c:66:11:25:1d:6a:9f:bc:90:e4:9c: 84:7c:64:33:3e:25:8f:ea:12:c2:98:6c:d2:b8:2e: ea:8c:18:be:a1:32:b5:ec:6b:cf:3f:34:a0:4b:4b: b7:1e:ef:9a:5d:82:6a:9e:52:ed:32:88:9b:48:80: 4b:b4:ba:75:d7:4b:7b:25:c7:54:41:93:aa:10:1e: 89:ff:f5:fb:c7:dd:29:0b:ea:a5:f4:de:08:26:4c: 5d:7e:37:66:31:20:6a:7b:86:27:54:b4:04:69:7b: c7:71:fa:7a:ce:cc:3d:75:1d:6f:d4:83:b5:98:95: 64:4d:95:9b:f2:23:df:5a:89:13:79:d1:04:76:31: 17:07:e6:55:27:4a:c6:d2:f4:34:f3:11:38:9b:32: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BB:34:00:AC:1C:87:E7:52:62:6E:B2:94:0D:35:C2:82:1D:2F:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b2634b0-99ce-4987-a8f3-d08714c11e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.232.0/21 Signature Algorithm: sha256WithRSAEncryption 16:ee:5a:57:bb:44:89:ac:4d:4e:0a:84:88:41:d3:7e:df:e0: 83:46:71:78:3e:f4:e8:43:bd:b1:3d:c1:95:7f:95:39:30:92: 62:e0:83:11:98:6b:3f:63:02:0f:17:41:2c:6e:97:32:c5:03: e6:e6:a2:3d:1c:6f:8c:5b:4e:2f:b6:6c:27:46:ab:c8:b4:a3: fa:dd:6d:a6:fe:45:60:07:b1:27:25:de:85:4e:c6:5a:a8:66: 19:55:53:0f:fc:a4:9d:7d:32:d6:fa:ef:6d:43:dc:bf:98:1a: 38:35:c5:81:26:89:7c:2c:47:7d:bf:06:6d:d0:82:29:ae:f2: 6c:da:48:0c:d0:11:b3:6d:7b:ef:64:7f:5d:fc:c9:d0:1a:66: 32:04:0c:6c:f9:7f:3b:64:82:92:9f:d5:fd:81:75:80:5f:0b: a9:7d:81:fd:09:1d:78:55:cb:6a:44:94:f8:c9:71:d6:ed:e7: de:28:2f:09:af:2f:b8:b3:3d:e8:36:1a:38:b2:46:5e:b2:8a: a8:83:5d:20:1c:57:26:0f:1a:f1:c2:91:48:9e:dc:d2:a8:60: 31:a4:b8:8b:70:47:48:40:8a:75:30:e8:a6:dd:31:68:85:b3: 5b:b8:3e:9e:e9:09:ce:e2:54:72:38:df:ce:ab:e0:2d:31:91: fd:93:a1:86 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITKX7ZE0KQ1dKEvDR9kCwgVB67VjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjYxNjUwMThaFw0yNTEwMzEyMzU5NTla MHoxSTBHBgNVBAUTQDJlNzEyNjZlMzAxYTAwMWI2ZDY0NWI0OGFmZjBhODA3Y2I5 YTRiNWM2YWQwOTI5MWE0ZTM5ZDY5MjAxZjMyMjYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALBCH4MO/PFNodcb+6sim02+kizlvBH+T69jsJpctVGreXsn WREM+ruNJ2c43FmWVLQ65YP55DeRLvW5D1R5FwH4Dm9Txg2vZCDS+hQq0ccdjPXa /3e4aO3uSQFcILSWOh+7ehgYfiAK8UH2HWxmESUdap+8kOSchHxkMz4lj+oSwphs 0rgu6owYvqEytexrzz80oEtLtx7vml2Cap5S7TKIm0iAS7S6dddLeyXHVEGTqhAe if/1+8fdKQvqpfTeCCZMXX43ZjEganuGJ1S0BGl7x3H6es7MPXUdb9SDtZiVZE2V m/Ij31qJE3nRBHYxFwfmVSdKxtL0NPMROJsyHkMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSIuzQArByH51JibrKUDTXCgh0vGjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMWIyNjM0YjAtOTljZS00OTg3LWE4ZjMtZDA4NzE0YzExZTgyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAzR36DANBgkqhkiG9w0BAQsFAAOCAQEAFu5aV7tEiaxNTgqEiEHTft/gg0Zx eD706EO9sT3BlX+VOTCSYuCDEZhrP2MCDxdBLG6XMsUD5uaiPRxvjFtOL7ZsJ0ar yLSj+t1tpv5FYAexJyXehU7GWqhmGVVTD/yknX0y1vrvbUPcv5gaODXFgSaJfCxH fb8GbdCCKa7ybNpIDNARs21772R/XfzJ0BpmMgQMbPl/O2SCkp/V/YF1gF8LqX2B /QkdeFXLakSU+Mlx1u3n3igvCa8vuLM96DYaOLJGXrKKqINdIBxXJg8a8cKRSJ7c 0qhgMaS4i3BHSECKdTDopt0xaIWzW7g+nukJzuJUcjjfzqvgLTGR/ZOhhg== -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:24 2025 by rpki-client