$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa File: 31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa (raw, json) Hash identifier: Ob427LFrLm/UFsHJQ/Qk1BtjG8SwzGduW1JPQnO8A5g= Subject key identifier: F0:90:10:CF:DB:D3:16:D1:7D:60:C9:1E:10:F5:64:AF:A2:31:1C:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26BE58E76E035E28FDB1A05F4AF1AA75D70D6B4A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa Signing time: Tue 23 Sep 2025 00:00:59 +0000 ROA not before: Tue 23 Sep 2025 00:00:59 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:be:58:e7:6e:03:5e:28:fd:b1:a0:5f:4a:f1:aa:75:d7:0d:6b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:00:59 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=e47dd130c35da7d1f85e7050fc3bc921d500ea565aceb3be2ef3c3299516c184, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:f0:f0:2e:5c:0b:49:2c:52:b6:24:92:69: c7:15:96:f8:02:c4:9d:11:52:ac:65:9e:7f:1d:d1: e4:08:7d:1a:58:a1:8c:f8:ee:95:a2:ad:b5:34:1a: bd:43:ee:5e:e9:94:34:c4:d6:d3:ee:b7:08:d4:4e: cb:fe:1f:26:0d:5d:d6:59:67:ac:48:e4:32:bb:a4: fa:63:3b:18:19:49:bf:9c:f3:3f:c9:ec:c9:b9:ac: eb:08:c5:c0:aa:e0:b2:ea:b7:21:e0:4f:c7:b5:26: 50:69:d9:e4:75:4d:5a:8b:92:eb:9e:71:e8:8c:d8: 50:07:54:85:3d:48:53:1d:07:94:75:47:92:da:6a: c7:de:ae:2c:a8:81:42:a4:4f:54:30:1b:d1:8f:16: c1:a3:03:c5:c7:c2:43:f7:80:19:7a:22:54:cc:3e: ad:53:b1:14:50:7f:a1:6f:44:d9:8e:24:fb:04:7d: 31:b8:e3:cb:bf:41:2a:4c:dd:0d:cf:df:dd:1d:f5: fd:99:93:a0:fd:d5:5a:69:ae:d2:c5:b7:f4:ab:24: 02:ee:2b:15:19:64:48:a6:5b:1f:02:04:b3:78:eb: fd:5f:fa:9a:73:b7:f4:26:cd:ed:2e:c1:59:ac:ca: 88:4e:c9:c2:96:0c:bf:6f:42:fd:44:59:95:63:69: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:90:10:CF:DB:D3:16:D1:7D:60:C9:1E:10:F5:64:AF:A2:31:1C:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.159.0/24 Signature Algorithm: sha256WithRSAEncryption 96:34:b3:ed:ed:f3:16:e1:51:bc:b6:a4:07:0d:f4:ac:85:fc: c7:94:c8:02:e4:25:14:68:b3:b5:9c:9d:39:e8:37:c6:fa:f6: 44:b8:13:80:c2:b2:2d:ef:29:29:2a:7c:36:28:41:26:b4:62: f1:3e:06:e7:5f:e9:4c:80:2e:77:2a:1f:dd:a4:81:4f:dd:e2: e1:9f:d7:a8:66:2a:ad:fc:c2:3f:b8:ba:e7:28:65:12:ec:48: a7:13:06:5a:4f:b7:33:c1:6c:8c:c7:e4:5d:35:06:64:53:3a: 79:84:1d:95:4c:55:f6:49:e9:c7:34:cd:ad:4e:10:18:9f:a1: 3e:62:bb:2b:4a:04:ab:5e:66:da:82:7a:4c:cb:8c:3c:82:3f: aa:78:ba:2b:2b:ec:82:4c:0d:cd:3e:3f:55:a0:d3:02:dd:83: 7b:e9:e4:75:95:e0:bc:e6:d0:bb:29:00:71:6b:d8:70:e3:45: bf:cd:54:54:e1:d4:37:88:24:56:71:ad:cc:b4:4f:25:4c:a9: 92:ae:80:86:39:6a:ee:8f:21:5f:3c:d7:9c:fb:09:62:1d:1e: ca:c0:f3:62:1b:86:64:0e:cc:14:e2:e7:6f:e5:28:c9:12:12: 33:15:c1:e3:d3:fb:53:98:b5:b0:a4:94:83:8c:e0:cb:5a:25: 2f:e2:46:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJr5Y524DXij9saBfSvGqddcNa0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAwMDU5WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDdkZDEzMGMzNWRhN2QxZjg1ZTcwNTBmYzNiYzkyMWQ1 MDBlYTU2NWFjZWIzYmUyZWYzYzMyOTk1MTZjMTg0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFw/DwLlwLSSxStiSSaccVlvgCxJ0RUqxlnn8d0eQIfRpY oYz47pWirbU0Gr1D7l7plDTE1tPutwjUTsv+HyYNXdZZZ6xI5DK7pPpjOxgZSb+c 8z/J7Mm5rOsIxcCq4LLqtyHgT8e1JlBp2eR1TVqLkuueceiM2FAHVIU9SFMdB5R1 R5LaasferiyogUKkT1QwG9GPFsGjA8XHwkP3gBl6IlTMPq1TsRRQf6FvRNmOJPsE fTG448u/QSpM3Q3P390d9f2Zk6D91VpprtLFt/SrJALuKxUZZEimWx8CBLN46/1f +ppzt/Qmze0uwVmsyohOycKWDL9vQv1EWZVjaa2bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8JAQz9vTFtF9YMkeEPVkr6IxHG4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxYWM0YTVkLTFmZDItNDk2NS1hM2M0LTgwYzE1MTU0OWE4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VZ8wDQYJKoZIhvcNAQELBQADggEBAJY0s+3t8xbhUby2pAcN9KyF/MeU yALkJRRos7WcnTnoN8b69kS4E4DCsi3vKSkqfDYoQSa0YvE+Budf6UyALncqH92k gU/d4uGf16hmKq38wj+4uucoZRLsSKcTBlpPtzPBbIzH5F01BmRTOnmEHZVMVfZJ 6cc0za1OEBifoT5iuytKBKteZtqCekzLjDyCP6p4uisr7IJMDc0+P1Wg0wLdg3vp 5HWV4Lzm0LspAHFr2HDjRb/NVFTh1DeIJFZxrcy0TyVMqZKugIY5au6PIV8815z7 CWIdHsrA82IbhmQOzBTi52/lKMkSEjMVwePT+1OYtbCklIOM4MtaJS/iRsk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:31 2025 by rpki-client