$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dc5ae46-2116-4147-9607-aa763f75801f.roa File: 1dc5ae46-2116-4147-9607-aa763f75801f.roa (raw, json) Hash identifier: Fft8EtWnUjo8z8T4KyFgbjzu+VdTvFiLmapQ6/b847s= Subject key identifier: DB:8B:7D:F3:4F:7B:94:4B:BE:CA:EE:13:7E:F3:25:7F:D7:15:8C:8A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0114CDC5194C6DFB6B8CCFEE08C078E0D59320C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dc5ae46-2116-4147-9607-aa763f75801f.roa Signing time: Fri 10 Oct 2025 15:49:40 +0000 ROA not before: Fri 10 Oct 2025 15:49:40 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.13.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:14:cd:c5:19:4c:6d:fb:6b:8c:cf:ee:08:c0:78:e0:d5:93:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:49:40 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=718fd7878172347a22fa9255b74bde36bd8fef711df6968d5a142b9dd43c3952, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:43:7f:66:f3:35:b9:96:ef:78:0f:05:20: 98:19:f9:78:09:5f:42:00:7f:e5:8c:1b:04:e1:ed: 68:7b:71:bd:4f:4d:57:f1:81:66:f2:aa:f8:d0:f5: 65:00:44:c9:cc:84:76:1d:64:91:b2:3c:57:13:97: be:52:ec:03:af:16:0f:6b:fc:b4:be:9f:c2:7b:f9: e1:dd:85:a7:11:de:b1:e7:81:7d:72:f6:ef:ae:c8: 67:c3:33:a6:15:95:7c:c2:5d:e1:58:da:48:03:f2: 06:6d:d8:4d:0c:2d:61:5a:64:88:58:81:95:46:9d: d7:58:69:38:f8:bb:1d:6a:62:e0:4e:a7:39:49:c6: 9a:12:6d:8d:e1:ab:5c:e4:ba:d7:ad:6d:54:71:1a: 38:ef:10:c2:8c:f2:ca:38:21:27:df:a6:8f:c6:01: 0b:27:eb:98:dc:bb:89:cf:07:ad:61:a1:33:d1:8d: 21:e8:df:8e:07:f3:1a:01:02:15:3e:e8:92:11:40: 44:67:c6:be:04:c4:32:89:bd:a5:29:f5:df:2e:3a: 6a:e1:28:9d:b6:67:dc:a2:17:63:20:f5:de:cb:c9: 7d:63:e2:78:99:7a:21:97:34:ef:5f:79:98:c7:4c: 1f:db:e8:14:92:2e:b7:22:85:62:30:d2:db:cd:ab: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8B:7D:F3:4F:7B:94:4B:BE:CA:EE:13:7E:F3:25:7F:D7:15:8C:8A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dc5ae46-2116-4147-9607-aa763f75801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.13.64.0/19 Signature Algorithm: sha256WithRSAEncryption 02:67:79:a2:d9:ee:c6:e8:96:bb:fd:2f:11:62:0f:f3:5c:18: f0:bb:92:1b:7e:fd:e2:ba:40:ac:65:8c:ec:6c:ca:c5:56:33: 64:bf:6b:d4:c3:39:d6:2f:8d:b0:67:10:16:53:23:aa:0e:8f: 58:97:ed:25:6e:1a:18:5f:84:de:1c:3b:b4:8a:44:23:14:dc: b5:a5:85:0e:58:df:20:6e:d6:cf:f3:a7:0c:f4:98:68:f5:9a: a0:16:53:27:8e:e3:29:29:70:e3:b1:c1:e6:0b:60:0c:bd:67: 21:19:8a:60:ec:65:3a:7f:e5:9d:0e:ac:13:9c:75:5e:d4:76: 15:a8:33:7e:7c:50:28:b8:da:23:64:e5:3b:12:17:a7:23:15: ff:ca:ef:ce:cb:98:8e:ed:bb:18:63:76:72:50:38:80:33:f6: 45:6b:a3:07:cc:71:13:09:ce:f2:8d:09:fa:04:23:81:f9:a1: 52:54:8b:c4:ae:e4:0a:58:86:ab:50:28:37:bb:c3:b5:d4:2c: a2:ff:f4:e7:0c:5a:17:68:dc:ac:9b:71:fd:f5:a9:e7:7c:92: c7:5c:10:4b:cf:3f:f6:53:a0:e4:b7:f4:b5:51:49:c9:db:ba: 1c:9d:c8:d1:40:65:ac:e2:26:7a:79:c6:b6:66:15:c1:db:ab: 90:1b:5f:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUARTNxRlMbftrjM/uCMB44NWTIMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTU0OTQwWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MThmZDc4NzgxNzIzNDdhMjJmYTkyNTViNzRiZGUzNmJk OGZlZjcxMWRmNjk2OGQ1YTE0MmI5ZGQ0M2MzOTUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyRkN/ZvM1uZbveA8FIJgZ+XgJX0IAf+WMGwTh7Wh7cb1P TVfxgWbyqvjQ9WUARMnMhHYdZJGyPFcTl75S7AOvFg9r/LS+n8J7+eHdhacR3rHn gX1y9u+uyGfDM6YVlXzCXeFY2kgD8gZt2E0MLWFaZIhYgZVGnddYaTj4ux1qYuBO pzlJxpoSbY3hq1zkutetbVRxGjjvEMKM8so4ISffpo/GAQsn65jcu4nPB61hoTPR jSHo344H8xoBAhU+6JIRQERnxr4ExDKJvaUp9d8uOmrhKJ22Z9yiF2Mg9d7LyX1j 4niZeiGXNO9feZjHTB/b6BSSLrcihWIw0tvNq/rXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU24t98097lEu+yu4TfvMlf9cVjIowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkYzVhZTQ2LTIxMTYtNDE0Ny05NjA3LWFhNzYzZjc1ODAxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU0DUAwDQYJKoZIhvcNAQELBQADggEBAAJneaLZ7sbolrv9LxFiD/NcGPC7 kht+/eK6QKxljOxsysVWM2S/a9TDOdYvjbBnEBZTI6oOj1iX7SVuGhhfhN4cO7SK RCMU3LWlhQ5Y3yBu1s/zpwz0mGj1mqAWUyeO4ykpcOOxweYLYAy9ZyEZimDsZTp/ 5Z0OrBOcdV7UdhWoM358UCi42iNk5TsSF6cjFf/K787LmI7tuxhjdnJQOIAz9kVr owfMcRMJzvKNCfoEI4H5oVJUi8Su5ApYhqtQKDe7w7XULKL/9OcMWhdo3Kybcf31 qed8ksdcEEvPP/ZToOS39LVRScnbuhydyNFAZaziJnp5xrZmFcHbq5AbXwk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:42 2025 by rpki-client