$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fcb1268-0d9f-4a26-8260-8999f59292d7.roa File: 1fcb1268-0d9f-4a26-8260-8999f59292d7.roa (raw, json) Hash identifier: 1iQSNpfvsoi6A+HTVtHN+93dm+apew4FQXOORWwKLLU= Subject key identifier: 8B:F3:23:F7:53:4C:23:3F:4E:5E:8E:C3:C2:75:70:7C:30:CF:8B:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E2D016E7D6FA46F94E5789A57D39AE1F942A332 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fcb1268-0d9f-4a26-8260-8999f59292d7.roa Signing time: Tue 23 Sep 2025 00:39:00 +0000 ROA not before: Tue 23 Sep 2025 00:39:00 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2d:01:6e:7d:6f:a4:6f:94:e5:78:9a:57:d3:9a:e1:f9:42:a3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:39:00 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=a2ad187b3f071b8e5914d1f897587bea3545b9b02d5db72c2b58ac65fb99bf96, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:6c:e7:9d:e6:9b:94:2e:58:46:ad:23:66: c9:bf:c1:ba:ef:f0:9a:51:61:e2:63:66:3a:00:d2: 5b:db:ee:4f:4a:70:19:d3:b7:2a:15:69:a0:49:d0: fa:0c:3d:0f:b2:1c:b0:9c:8f:3b:b9:24:ff:64:4c: 25:84:fc:fd:25:51:b5:a9:8c:c0:43:85:d0:b1:10: 56:31:d1:69:95:87:3b:e2:b8:fb:1d:bd:0c:90:86: 17:ea:73:2f:b1:8c:6e:3e:88:31:9a:82:1a:a1:d4: 7a:99:b8:0b:9f:e5:21:63:06:73:44:e5:5d:1a:d5: 61:bc:08:2a:c1:7e:a9:d8:eb:f3:73:74:7e:b5:0b: 46:92:5c:6a:c9:f9:8c:3d:8b:b0:3e:ac:eb:07:cb: 7a:99:44:b0:b3:f0:e6:cd:0a:0e:e3:78:e9:92:6a: c5:85:2c:ef:f1:b6:7a:20:88:3f:6c:3a:d6:e9:a0: e6:f5:e2:ff:2c:ed:9a:74:65:71:f0:60:d4:8b:29: dc:63:a1:4f:d9:6f:e5:61:21:95:d9:ad:1e:30:28: 39:bf:f4:3f:9c:92:4d:93:87:8b:25:1d:9a:9a:52: 21:9b:89:03:e9:d4:36:6b:df:9a:42:51:33:0a:75: d4:17:de:fa:61:6f:9d:da:8a:b7:ff:63:8f:75:34: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:23:F7:53:4C:23:3F:4E:5E:8E:C3:C2:75:70:7C:30:CF:8B:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fcb1268-0d9f-4a26-8260-8999f59292d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.88.0/21 Signature Algorithm: sha256WithRSAEncryption 99:f1:e3:cc:0e:6a:05:e3:48:9c:6a:79:93:5c:fb:9f:2a:59: eb:e2:3f:8a:11:5c:57:6f:42:c3:46:55:6c:34:1d:8c:7e:4b: aa:0d:d1:d8:db:d6:63:42:24:bc:cb:05:35:b1:35:22:a5:69: 69:a8:28:b0:fe:d3:16:cb:35:3d:62:0c:9a:33:86:de:54:98: 1c:4d:da:63:59:0e:9d:a5:df:fb:12:42:15:57:ef:68:94:1a: dd:d2:1f:1e:8f:fe:a6:c3:1d:62:b4:5c:35:74:0b:1b:f0:31: 3b:0e:60:dc:da:e6:d4:5f:17:22:34:ec:90:8c:56:b0:23:5b: 67:75:79:35:77:77:e3:c5:b1:71:db:31:84:83:28:40:5d:cf: 17:15:db:07:c6:4e:49:36:95:f1:a1:3d:55:8f:e6:1c:fc:d5: 32:e9:cf:5d:f1:cd:31:e0:fb:73:b5:c6:20:74:7b:d7:c3:21: 48:31:44:76:ad:e8:e3:f1:59:76:2b:b8:55:b0:bd:a8:e1:98: 7f:83:31:f1:27:f4:2b:3b:1b:87:91:10:9d:e0:ae:3a:73:7b: 87:18:65:e8:a4:1e:9a:1b:3b:f0:fe:41:25:b1:ed:3d:b2:ec: 55:d5:8d:1f:91:b6:39:15:8b:27:85:a0:76:cc:42:70:3a:84: 1a:02:80:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfi0Bbn1vpG+U5XiaV9Oa4flCozIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAzOTAwWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmFkMTg3YjNmMDcxYjhlNTkxNGQxZjg5NzU4N2JlYTM1 NDViOWIwMmQ1ZGI3MmMyYjU4YWM2NWZiOTliZjk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQIGznneablC5YRq0jZsm/wbrv8JpRYeJjZjoA0lvb7k9K cBnTtyoVaaBJ0PoMPQ+yHLCcjzu5JP9kTCWE/P0lUbWpjMBDhdCxEFYx0WmVhzvi uPsdvQyQhhfqcy+xjG4+iDGaghqh1HqZuAuf5SFjBnNE5V0a1WG8CCrBfqnY6/Nz dH61C0aSXGrJ+Yw9i7A+rOsHy3qZRLCz8ObNCg7jeOmSasWFLO/xtnogiD9sOtbp oOb14v8s7Zp0ZXHwYNSLKdxjoU/Zb+VhIZXZrR4wKDm/9D+ckk2Th4slHZqaUiGb iQPp1DZr35pCUTMKddQX3vphb53airf/Y491NKT1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi/Mj91NMIz9OXo7DwnVwfDDPi+8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmY2IxMjY4LTBkOWYtNGEyNi04MjYwLTg5OTlmNTkyOTJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0VFgwDQYJKoZIhvcNAQELBQADggEBAJnx48wOagXjSJxqeZNc+58qWevi P4oRXFdvQsNGVWw0HYx+S6oN0djb1mNCJLzLBTWxNSKlaWmoKLD+0xbLNT1iDJoz ht5UmBxN2mNZDp2l3/sSQhVX72iUGt3SHx6P/qbDHWK0XDV0CxvwMTsOYNza5tRf FyI07JCMVrAjW2d1eTV3d+PFsXHbMYSDKEBdzxcV2wfGTkk2lfGhPVWP5hz81TLp z13xzTHg+3O1xiB0e9fDIUgxRHat6OPxWXYruFWwvajhmH+DMfEn9Cs7G4eREJ3g rjpze4cYZeikHpobO/D+QSWx7T2y7FXVjR+RtjkViyeFoHbMQnA6hBoCgGo= -----END CERTIFICATE-----Generated at Sat Oct 18 00:11:27 2025 by rpki-client