$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2917888b-9617-4cad-b507-b387f5f1724e.roa File: 2917888b-9617-4cad-b507-b387f5f1724e.roa (raw, json) Hash identifier: Fc8uBTMfHPNLYNMeKS6fhjk+3gruSoFmPtv6UNAS9Pc= Subject key identifier: B1:CF:6C:E0:6A:10:36:59:4A:6D:70:2B:23:8F:F0:1C:0E:F9:86:AF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 252AF8C917BF358F95BDFAE0758C0F7C16BE3E58 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2917888b-9617-4cad-b507-b387f5f1724e.roa Signing time: Tue 23 Sep 2025 00:17:37 +0000 ROA not before: Tue 23 Sep 2025 00:17:37 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2a:f8:c9:17:bf:35:8f:95:bd:fa:e0:75:8c:0f:7c:16:be:3e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:17:37 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=ebd45f773e9197e2da77cf06ef9b9d8d3bdfb95a0981adb270f4409ec3636060, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:84:da:77:c2:5f:44:00:af:04:d4:fc:ff: f8:58:81:68:b4:3d:0b:e6:04:28:41:0d:05:95:18: 51:b3:a3:69:17:be:b3:55:1b:13:89:59:e6:55:a3: 75:ef:a9:89:79:58:d3:e9:1f:07:1f:6b:e6:23:7c: 06:3a:fe:d2:73:83:44:5b:5c:84:b2:d4:d7:cf:b8: 98:28:c0:f1:69:83:c3:c0:71:be:bc:0d:cb:09:77: 37:87:9a:cf:3d:72:ca:f8:37:69:62:8e:58:91:5c: 5e:3a:c1:b3:0d:d6:d3:3c:b5:1a:f3:fc:2e:61:7c: 0a:a8:51:53:12:bb:da:ca:f1:91:e7:8a:23:b0:64: 61:0b:f4:80:96:02:cd:82:7a:70:50:f1:88:ae:25: f4:c1:ab:fb:54:cd:25:f2:84:42:9d:ff:ab:a1:88: ae:fe:f9:0b:99:b1:3c:db:95:a4:2f:36:e1:7e:01: 3f:e1:4f:bf:05:2a:0a:d4:35:a5:8b:46:83:1b:aa: 72:fb:be:c3:ef:cb:ad:5c:85:2a:98:56:da:a8:82: 05:db:df:13:68:3f:75:5d:9b:ae:e3:bb:e5:f8:c0: a7:28:3d:ab:bb:1b:14:03:34:dc:aa:60:5c:8c:1f: 17:a7:7a:11:e5:b5:6d:77:6f:3a:86:26:4b:6c:21: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:6C:E0:6A:10:36:59:4A:6D:70:2B:23:8F:F0:1C:0E:F9:86:AF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2917888b-9617-4cad-b507-b387f5f1724e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.30.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:0d:b3:47:c3:4c:24:47:9f:2a:79:1f:a2:0e:f5:20:e3:99: 79:ff:db:1c:bd:23:4e:25:9f:65:cb:2e:b4:19:e0:41:96:8c: bf:0b:4c:d3:60:31:76:ec:03:a1:80:25:8c:02:16:ca:13:26: 9b:c1:82:b7:51:8b:8d:25:6a:c7:a0:14:52:e5:87:18:2f:06: 76:cc:76:39:96:fa:6d:fa:9c:be:64:16:5f:6f:df:33:24:30: e7:33:bf:a8:79:8b:ad:11:15:d9:8a:89:16:c3:ec:88:e5:b5: 0f:f1:f4:4a:17:99:fe:42:4a:b7:40:3f:f8:c5:77:54:1c:fd: cb:9b:55:3d:1d:e3:3d:5b:a1:27:15:39:24:11:3c:5f:1e:a3: f6:75:fc:0c:2d:69:75:19:82:e0:f7:aa:ae:b5:ee:99:eb:95: 44:5e:c3:f3:73:2a:16:66:85:13:d0:05:a7:7e:77:8b:9b:4d: cb:df:1c:39:49:51:03:43:cd:b1:85:85:48:89:48:e6:b8:74: 05:c5:a4:9d:97:f2:72:bc:92:ed:a7:b1:b9:ca:68:e6:43:8a: 0b:e0:65:25:65:8b:35:2e:4e:0e:fd:6b:85:ef:fb:51:1a:11: ed:a0:1a:49:ba:90:d7:dc:fb:da:71:53:de:e7:e1:e8:92:56: d9:c9:f6:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJSr4yRe/NY+VvfrgdYwPfBa+PlgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxNzM3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmQ0NWY3NzNlOTE5N2UyZGE3N2NmMDZlZjliOWQ4ZDNi ZGZiOTVhMDk4MWFkYjI3MGY0NDA5ZWMzNjM2MDYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXKYTad8JfRACvBNT8//hYgWi0PQvmBChBDQWVGFGzo2kX vrNVGxOJWeZVo3XvqYl5WNPpHwcfa+YjfAY6/tJzg0RbXISy1NfPuJgowPFpg8PA cb68DcsJdzeHms89csr4N2lijliRXF46wbMN1tM8tRrz/C5hfAqoUVMSu9rK8ZHn iiOwZGEL9ICWAs2CenBQ8YiuJfTBq/tUzSXyhEKd/6uhiK7++QuZsTzblaQvNuF+ AT/hT78FKgrUNaWLRoMbqnL7vsPvy61chSqYVtqoggXb3xNoP3Vdm67ju+X4wKco Pau7GxQDNNyqYFyMHxenehHltW13bzqGJktsIbDvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsc9s4GoQNllKbXArI4/wHA75hq8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5MTc4ODhiLTk2MTctNGNhZC1iNTA3LWIzODdmNWYxNzI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VB4wDQYJKoZIhvcNAQELBQADggEBAGwNs0fDTCRHnyp5H6IO9SDjmXn/ 2xy9I04ln2XLLrQZ4EGWjL8LTNNgMXbsA6GAJYwCFsoTJpvBgrdRi40lasegFFLl hxgvBnbMdjmW+m36nL5kFl9v3zMkMOczv6h5i60RFdmKiRbD7IjltQ/x9EoXmf5C SrdAP/jFd1Qc/cubVT0d4z1boScVOSQRPF8eo/Z1/AwtaXUZguD3qq617pnrlURe w/NzKhZmhRPQBad+d4ubTcvfHDlJUQNDzbGFhUiJSOa4dAXFpJ2X8nK8ku2nsbnK aOZDigvgZSVlizUuTg79a4Xv+1EaEe2gGkm6kNfc+9pxU97n4eiSVtnJ9v0= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:31 2025 by rpki-client